From 2b129ecaaa2693514622da66547697059972483f Mon Sep 17 00:00:00 2001 From: L <6723574+louisgv@users.noreply.github.com> Date: Sat, 7 Feb 2026 08:53:16 -0800 Subject: [PATCH] Add DigitalOcean as third cloud provider (#7) New cloud provider with full agent coverage: - digitalocean/lib/common.sh: DO API wrapper, token management, droplet lifecycle - digitalocean/claude.sh, openclaw.sh, nanoclaw.sh: all 3 agents Matrix is now 3 agents x 3 clouds = 9/9 implemented. Co-authored-by: Sprite Co-authored-by: Claude Opus 4.6 (1M context) --- README.md | 42 +++ digitalocean/claude.sh | 111 ++++++++ digitalocean/lib/common.sh | 562 +++++++++++++++++++++++++++++++++++++ digitalocean/nanoclaw.sh | 81 ++++++ digitalocean/openclaw.sh | 106 +++++++ manifest.json | 20 +- 6 files changed, 921 insertions(+), 1 deletion(-) create mode 100755 digitalocean/claude.sh create mode 100755 digitalocean/lib/common.sh create mode 100755 digitalocean/nanoclaw.sh create mode 100755 digitalocean/openclaw.sh diff --git a/README.md b/README.md index 586d4ce1..15063ed1 100644 --- a/README.md +++ b/README.md @@ -102,3 +102,45 @@ OPENROUTER_API_KEY=sk-or-v1-xxxxx \ - `OPENROUTER_API_KEY` - Skip OAuth and use this API key directly - `HETZNER_SERVER_TYPE` - Server type (default: `cx22`) - `HETZNER_LOCATION` - Datacenter location (default: `fsn1`) + +--- + +## DigitalOcean + +Spawn agents on [DigitalOcean](https://www.digitalocean.com/) Droplets via REST API. + +### Usage + +#### Claude Code + +```bash +bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/claude.sh) +``` + +#### OpenClaw + +```bash +bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/openclaw.sh) +``` + +#### NanoClaw + +```bash +bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/nanoclaw.sh) +``` + +### Non-Interactive Mode + +```bash +DO_DROPLET_NAME=dev-mk1 \ +DO_API_TOKEN=your-digitalocean-api-token \ +OPENROUTER_API_KEY=sk-or-v1-xxxxx \ + bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/claude.sh) +``` + +**Environment Variables:** +- `DO_DROPLET_NAME` - Name for the droplet (skips prompt) +- `DO_API_TOKEN` - DigitalOcean API token (skips prompt, saved to `~/.config/spawn/digitalocean.json`) +- `OPENROUTER_API_KEY` - Skip OAuth and use this API key directly +- `DO_DROPLET_SIZE` - Droplet size (default: `s-2vcpu-2gb`) +- `DO_REGION` - Datacenter region (default: `nyc3`) diff --git a/digitalocean/claude.sh b/digitalocean/claude.sh new file mode 100755 index 00000000..027b87e0 --- /dev/null +++ b/digitalocean/claude.sh @@ -0,0 +1,111 @@ +#!/bin/bash +set -e + +# Source common functions - try local file first, fall back to remote +SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)" +if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then + source "$SCRIPT_DIR/lib/common.sh" +else + source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/digitalocean/lib/common.sh) +fi + +log_info "Claude Code on DigitalOcean" +echo "" + +# 1. Resolve DigitalOcean API token +ensure_do_token + +# 2. Generate + register SSH key +ensure_ssh_key + +# 3. Get droplet name and create droplet +DROPLET_NAME=$(get_server_name) +create_server "$DROPLET_NAME" + +# 4. Wait for SSH and cloud-init +verify_server_connectivity "$DO_SERVER_IP" +wait_for_cloud_init "$DO_SERVER_IP" + +# 5. Verify Claude Code is installed (fallback to manual install) +log_warn "Verifying Claude Code installation..." +if ! run_server "$DO_SERVER_IP" "command -v claude" >/dev/null 2>&1; then + log_warn "Claude Code not found, installing manually..." + run_server "$DO_SERVER_IP" "curl -fsSL https://claude.ai/install.sh | bash" +fi +log_info "Claude Code is installed" + +# 6. Get OpenRouter API key +echo "" +if [[ -n "$OPENROUTER_API_KEY" ]]; then + log_info "Using OpenRouter API key from environment" +else + OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180) +fi + +# 7. Inject environment variables into ~/.zshrc +log_warn "Setting up environment variables..." + +ENV_TEMP=$(mktemp) +cat > "$ENV_TEMP" << EOF + +# [spawn:env] +export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}" +export ANTHROPIC_BASE_URL="https://openrouter.ai/api" +export ANTHROPIC_AUTH_TOKEN="${OPENROUTER_API_KEY}" +export ANTHROPIC_API_KEY="" +export CLAUDE_CODE_SKIP_ONBOARDING="1" +export CLAUDE_CODE_ENABLE_TELEMETRY="0" +EOF + +upload_file "$DO_SERVER_IP" "$ENV_TEMP" "/tmp/env_config" +run_server "$DO_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config" +rm "$ENV_TEMP" + +# 8. Configure Claude Code settings +log_warn "Configuring Claude Code..." + +run_server "$DO_SERVER_IP" "mkdir -p ~/.claude" + +SETTINGS_TEMP=$(mktemp) +cat > "$SETTINGS_TEMP" << EOF +{ + "theme": "dark", + "editor": "vim", + "env": { + "CLAUDE_CODE_ENABLE_TELEMETRY": "0", + "ANTHROPIC_BASE_URL": "https://openrouter.ai/api", + "ANTHROPIC_AUTH_TOKEN": "${OPENROUTER_API_KEY}" + }, + "permissions": { + "defaultMode": "bypassPermissions", + "dangerouslySkipPermissions": true + } +} +EOF + +upload_file "$DO_SERVER_IP" "$SETTINGS_TEMP" "/root/.claude/settings.json" +rm "$SETTINGS_TEMP" + +GLOBAL_STATE_TEMP=$(mktemp) +cat > "$GLOBAL_STATE_TEMP" << EOF +{ + "hasCompletedOnboarding": true, + "bypassPermissionsModeAccepted": true +} +EOF + +upload_file "$DO_SERVER_IP" "$GLOBAL_STATE_TEMP" "/root/.claude.json" +rm "$GLOBAL_STATE_TEMP" + +run_server "$DO_SERVER_IP" "touch ~/.claude/CLAUDE.md" + +echo "" +log_info "DigitalOcean droplet setup completed successfully!" +log_info "Droplet: $DROPLET_NAME (ID: $DO_DROPLET_ID, IP: $DO_SERVER_IP)" +echo "" + +# 9. Start Claude Code interactively +log_warn "Starting Claude Code..." +sleep 1 +clear +interactive_session "$DO_SERVER_IP" "source ~/.zshrc && claude" diff --git a/digitalocean/lib/common.sh b/digitalocean/lib/common.sh new file mode 100755 index 00000000..f017ea01 --- /dev/null +++ b/digitalocean/lib/common.sh @@ -0,0 +1,562 @@ +#!/bin/bash +# Common bash functions for DigitalOcean spawn scripts + +# ============================================================ +# Provider-agnostic functions (shared with sprite/lib/common.sh) +# ============================================================ + +# Colors for output +RED='\033[0;31m' +GREEN='\033[0;32m' +YELLOW='\033[1;33m' +NC='\033[0m' # No Color + +# Print colored message (to stderr so they don't pollute command substitution output) +log_info() { + echo -e "${GREEN}$1${NC}" >&2 +} + +log_warn() { + echo -e "${YELLOW}$1${NC}" >&2 +} + +log_error() { + echo -e "${RED}$1${NC}" >&2 +} + +# Safe read function that works in both interactive and non-interactive modes +safe_read() { + local prompt="$1" + local result="" + + if [[ -t 0 ]]; then + read -p "$prompt" result + elif echo -n "" > /dev/tty 2>/dev/null; then + read -p "$prompt" result < /dev/tty + else + log_error "Cannot read input: no TTY available" + return 1 + fi + + echo "$result" +} + +# Listen on a port with netcat (handles busybox/Termux nc requiring -p flag) +nc_listen() { + local port=$1 + shift + if nc --help 2>&1 | grep -q "BusyBox\|busybox" || nc --help 2>&1 | grep -q "\-p "; then + nc -l -p "$port" "$@" + else + nc -l "$port" "$@" + fi +} + +# Open browser to URL (supports macOS, Linux, Termux) +open_browser() { + local url=$1 + if command -v termux-open-url &> /dev/null; then + termux-open-url "$url" /dev/null; then + open "$url" /dev/null; then + xdg-open "$url" /dev/null; then + log_warn "netcat (nc) not found - OAuth server unavailable" + return 1 + fi + + local callback_url="http://localhost:${callback_port}/callback" + local auth_url="https://openrouter.ai/auth?callback_url=${callback_url}" + + local oauth_dir=$(mktemp -d) + local code_file="$oauth_dir/code" + + log_warn "Starting local OAuth server on port ${callback_port}..." + + ( + local success_response='HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n

Authentication Successful!

Redirecting back to terminal...

This tab will close automatically

' + + while true; do + local response_file=$(mktemp) + echo -e "$success_response" > "$response_file" + + local request=$(nc_listen "$callback_port" < "$response_file" 2>/dev/null | head -1) + local nc_status=$? + rm -f "$response_file" + + if [[ $nc_status -ne 0 ]]; then + break + fi + + if [[ "$request" == *"/callback?code="* ]]; then + local code=$(echo "$request" | sed -n 's/.*code=\([^ &]*\).*/\1/p') + echo "$code" > "$code_file" + break + fi + done + ) /dev/null; then + log_warn "Failed to start OAuth server (port may be in use)" + rm -rf "$oauth_dir" + return 1 + fi + + log_warn "Opening browser to authenticate with OpenRouter..." + open_browser "$auth_url" + + local timeout=120 + local elapsed=0 + while [[ ! -f "$code_file" ]] && [[ $elapsed -lt $timeout ]]; do + sleep 1 + ((elapsed++)) + done + + kill $server_pid 2>/dev/null || true + wait $server_pid 2>/dev/null || true + + if [[ ! -f "$code_file" ]]; then + log_warn "OAuth timeout - no response received" + rm -rf "$oauth_dir" + return 1 + fi + + local oauth_code=$(cat "$code_file") + rm -rf "$oauth_dir" + + log_warn "Exchanging OAuth code for API key..." + local key_response=$(curl -s -X POST "https://openrouter.ai/api/v1/auth/keys" \ + -H "Content-Type: application/json" \ + -d "{\"code\": \"$oauth_code\"}") + + local api_key=$(echo "$key_response" | grep -o '"key":"[^"]*"' | sed 's/"key":"//;s/"$//') + + if [[ -z "$api_key" ]]; then + log_error "Failed to exchange OAuth code: ${key_response}" + return 1 + fi + + log_info "Successfully obtained OpenRouter API key via OAuth!" + echo "$api_key" +} + +# Main function: Try OAuth, fallback to manual entry +get_openrouter_api_key_oauth() { + local callback_port=${1:-5180} + + local api_key=$(try_oauth_flow "$callback_port") + + if [[ -n "$api_key" ]]; then + echo "$api_key" + return 0 + fi + + echo "" + log_warn "OAuth authentication failed or unavailable" + log_warn "You can enter your API key manually instead" + echo "" + local manual_choice=$(safe_read "Would you like to enter your API key manually? (Y/n): ") || { + log_error "Cannot prompt for manual entry in non-interactive mode" + log_warn "Set OPENROUTER_API_KEY environment variable for non-interactive usage" + return 1 + } + + if [[ ! "$manual_choice" =~ ^[Nn]$ ]]; then + api_key=$(get_openrouter_api_key_manual) + echo "$api_key" + return 0 + else + log_error "Authentication cancelled by user" + return 1 + fi +} + +# ============================================================ +# DigitalOcean specific functions +# ============================================================ + +DO_API_BASE="https://api.digitalocean.com/v2" +SSH_OPTS="-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR -i $HOME/.ssh/id_ed25519" + +# Centralized curl wrapper for DigitalOcean API +do_api() { + local method="$1" + local endpoint="$2" + local body="$3" + + local args=( + -s + -X "$method" + -H "Authorization: Bearer ${DO_API_TOKEN}" + -H "Content-Type: application/json" + ) + + if [[ -n "$body" ]]; then + args+=(-d "$body") + fi + + curl "${args[@]}" "${DO_API_BASE}${endpoint}" +} + +# Ensure DO_API_TOKEN is available (env var -> config file -> prompt+save) +ensure_do_token() { + # 1. Check environment variable + if [[ -n "$DO_API_TOKEN" ]]; then + log_info "Using DigitalOcean API token from environment" + return 0 + fi + + # 2. Check config file + local config_dir="$HOME/.config/spawn" + local config_file="$config_dir/digitalocean.json" + if [[ -f "$config_file" ]]; then + local saved_token=$(python3 -c "import json; print(json.load(open('$config_file')).get('token',''))" 2>/dev/null) + if [[ -n "$saved_token" ]]; then + export DO_API_TOKEN="$saved_token" + log_info "Using DigitalOcean API token from $config_file" + return 0 + fi + fi + + # 3. Prompt and save + echo "" + log_warn "DigitalOcean API Token Required" + echo -e "${YELLOW}Get your token from: https://cloud.digitalocean.com/account/api/tokens${NC}" + echo "" + + local token=$(safe_read "Enter your DigitalOcean API token: ") || return 1 + if [[ -z "$token" ]]; then + log_error "API token is required" + return 1 + fi + + # Validate token + export DO_API_TOKEN="$token" + local test_response=$(do_api GET "/account") + if echo "$test_response" | grep -q '"id"'; then + log_info "API token validated" + else + log_error "Invalid API token" + unset DO_API_TOKEN + return 1 + fi + + # Save to config file + mkdir -p "$config_dir" + cat > "$config_file" << EOF +{ + "token": "$token" +} +EOF + chmod 600 "$config_file" + log_info "API token saved to $config_file" +} + +# Ensure SSH key exists locally and is registered with DigitalOcean +ensure_ssh_key() { + local key_path="$HOME/.ssh/id_ed25519" + local pub_path="${key_path}.pub" + + # Generate SSH key if it doesn't exist + if [[ ! -f "$key_path" ]]; then + log_warn "Generating SSH key..." + mkdir -p "$HOME/.ssh" + ssh-keygen -t ed25519 -f "$key_path" -N "" -q + log_info "SSH key generated at $key_path" + fi + + local pub_key=$(cat "$pub_path") + local key_name="spawn-$(hostname)-$(date +%s)" + + # Check if this key is already registered + local existing_fingerprint=$(ssh-keygen -lf "$pub_path" -E md5 2>/dev/null | awk '{print $2}' | sed 's/MD5://') + local existing_keys=$(do_api GET "/account/keys") + + if echo "$existing_keys" | grep -q "$existing_fingerprint"; then + log_info "SSH key already registered with DigitalOcean" + return 0 + fi + + # Register the key + log_warn "Registering SSH key with DigitalOcean..." + local json_pub_key=$(python3 -c "import json; print(json.dumps('$pub_key'))" 2>/dev/null || echo "\"$pub_key\"") + local register_body="{\"name\":\"$key_name\",\"public_key\":$json_pub_key}" + local register_response=$(do_api POST "/account/keys" "$register_body") + + if echo "$register_response" | grep -q '"id"'; then + log_info "SSH key registered with DigitalOcean" + else + log_error "Failed to register SSH key: $register_response" + return 1 + fi +} + +# Get server name from env var or prompt +get_server_name() { + if [[ -n "$DO_DROPLET_NAME" ]]; then + log_info "Using droplet name from environment: $DO_DROPLET_NAME" + echo "$DO_DROPLET_NAME" + return 0 + fi + + local server_name=$(safe_read "Enter droplet name: ") + if [[ -z "$server_name" ]]; then + log_error "Droplet name is required" + log_warn "Set DO_DROPLET_NAME environment variable for non-interactive usage:" + log_warn " DO_DROPLET_NAME=dev-mk1 curl ... | bash" + return 1 + fi + + echo "$server_name" +} + +# Generate cloud-init userdata YAML +get_cloud_init_userdata() { + cat << 'CLOUD_INIT_EOF' +#cloud-config +package_update: true +packages: + - curl + - unzip + - git + - zsh + +runcmd: + # Install Bun + - su - root -c 'curl -fsSL https://bun.sh/install | bash' + # Install Claude Code + - su - root -c 'curl -fsSL https://claude.ai/install.sh | bash' + # Configure PATH in .bashrc + - echo 'export PATH="$HOME/.claude/local/bin:$HOME/.bun/bin:$PATH"' >> /root/.bashrc + # Configure PATH in .zshrc + - echo 'export PATH="$HOME/.claude/local/bin:$HOME/.bun/bin:$PATH"' >> /root/.zshrc + # Signal completion + - touch /root/.cloud-init-complete +CLOUD_INIT_EOF +} + +# Create a DigitalOcean droplet with cloud-init +create_server() { + local name="$1" + local size="${DO_DROPLET_SIZE:-s-2vcpu-2gb}" + local region="${DO_REGION:-nyc3}" + local image="ubuntu-24-04-x64" + + log_warn "Creating DigitalOcean droplet '$name' (size: $size, region: $region)..." + + # Get all SSH key IDs + local ssh_keys_response=$(do_api GET "/account/keys") + local ssh_key_ids=$(python3 -c " +import json, sys +data = json.loads(sys.stdin.read()) +ids = [k['id'] for k in data.get('ssh_keys', [])] +print(json.dumps(ids)) +" <<< "$ssh_keys_response") + + # JSON-escape the cloud-init userdata + local userdata=$(get_cloud_init_userdata) + local userdata_json=$(python3 -c "import json,sys; print(json.dumps(sys.stdin.read()))" <<< "$userdata") + + local body=$(python3 -c " +import json +body = { + 'name': '$name', + 'region': '$region', + 'size': '$size', + 'image': '$image', + 'ssh_keys': $ssh_key_ids, + 'user_data': json.loads($userdata_json), + 'backups': False, + 'monitoring': False +} +print(json.dumps(body)) +") + + local response=$(do_api POST "/droplets" "$body") + + # Check for errors + if echo "$response" | grep -q '"id"' && echo "$response" | grep -q '"droplet"'; then + DO_DROPLET_ID=$(echo "$response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read())['droplet']['id'])") + export DO_DROPLET_ID + log_info "Droplet created: ID=$DO_DROPLET_ID" + else + local error_msg=$(echo "$response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read()).get('message','Unknown error'))" 2>/dev/null || echo "$response") + log_error "Failed to create droplet: $error_msg" + return 1 + fi + + # Wait for droplet to get an IP (poll until active) + log_warn "Waiting for droplet to become active..." + local max_attempts=60 + local attempt=1 + while [[ $attempt -le $max_attempts ]]; do + local status_response=$(do_api GET "/droplets/$DO_DROPLET_ID") + local status=$(echo "$status_response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read())['droplet']['status'])") + + if [[ "$status" == "active" ]]; then + DO_SERVER_IP=$(echo "$status_response" | python3 -c " +import json, sys +data = json.loads(sys.stdin.read()) +for net in data['droplet']['networks']['v4']: + if net['type'] == 'public': + print(net['ip_address']) + break +") + export DO_SERVER_IP + log_info "Droplet active: IP=$DO_SERVER_IP" + return 0 + fi + + log_warn "Droplet status: $status ($attempt/$max_attempts)" + sleep 5 + ((attempt++)) + done + + log_error "Droplet did not become active in time" + return 1 +} + +# Wait for SSH connectivity +verify_server_connectivity() { + local ip="$1" + local max_attempts=${2:-30} + local attempt=1 + + log_warn "Waiting for SSH connectivity to $ip..." + while [[ $attempt -le $max_attempts ]]; do + if ssh $SSH_OPTS -o ConnectTimeout=5 "root@$ip" "echo ok" >/dev/null 2>&1; then + log_info "SSH connection established" + return 0 + fi + log_warn "Waiting for SSH... ($attempt/$max_attempts)" + sleep 5 + ((attempt++)) + done + + log_error "Server failed to respond via SSH after $max_attempts attempts" + return 1 +} + +# Wait for cloud-init to complete +wait_for_cloud_init() { + local ip="$1" + local max_attempts=${2:-60} + local attempt=1 + + log_warn "Waiting for cloud-init to complete..." + while [[ $attempt -le $max_attempts ]]; do + if ssh $SSH_OPTS "root@$ip" "test -f /root/.cloud-init-complete" >/dev/null 2>&1; then + log_info "Cloud-init completed" + return 0 + fi + log_warn "Cloud-init in progress... ($attempt/$max_attempts)" + sleep 5 + ((attempt++)) + done + + log_error "Cloud-init did not complete after $max_attempts attempts" + return 1 +} + +# Run a command on the server +run_server() { + local ip="$1" + local cmd="$2" + ssh $SSH_OPTS "root@$ip" "$cmd" +} + +# Upload a file to the server +upload_file() { + local ip="$1" + local local_path="$2" + local remote_path="$3" + scp $SSH_OPTS "$local_path" "root@$ip:$remote_path" +} + +# Start an interactive SSH session +interactive_session() { + local ip="$1" + local cmd="$2" + ssh -t $SSH_OPTS "root@$ip" "$cmd" +} + +# Destroy a DigitalOcean droplet +destroy_server() { + local droplet_id="$1" + + log_warn "Destroying droplet $droplet_id..." + local response=$(do_api DELETE "/droplets/$droplet_id") + + # DELETE returns 204 No Content on success (empty body) + log_info "Droplet $droplet_id destroyed" +} + +# List all DigitalOcean droplets +list_servers() { + local response=$(do_api GET "/droplets") + + python3 -c " +import json, sys +data = json.loads(sys.stdin.read()) +droplets = data.get('droplets', []) +if not droplets: + print('No droplets found') + sys.exit(0) +print(f\"{'NAME':<25} {'ID':<12} {'STATUS':<12} {'IP':<16} {'SIZE':<15}\") +print('-' * 80) +for d in droplets: + name = d['name'] + did = str(d['id']) + status = d['status'] + ip = 'N/A' + for net in d.get('networks', {}).get('v4', []): + if net['type'] == 'public': + ip = net['ip_address'] + break + size = d['size_slug'] + print(f'{name:<25} {did:<12} {status:<12} {ip:<16} {size:<15}') +" <<< "$response" +} diff --git a/digitalocean/nanoclaw.sh b/digitalocean/nanoclaw.sh new file mode 100755 index 00000000..88e15972 --- /dev/null +++ b/digitalocean/nanoclaw.sh @@ -0,0 +1,81 @@ +#!/bin/bash +set -e + +# Source common functions - try local file first, fall back to remote +SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)" +if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then + source "$SCRIPT_DIR/lib/common.sh" +else + source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/digitalocean/lib/common.sh) +fi + +log_info "NanoClaw on DigitalOcean" +echo "" + +# 1. Resolve DigitalOcean API token +ensure_do_token + +# 2. Generate + register SSH key +ensure_ssh_key + +# 3. Get droplet name and create droplet +DROPLET_NAME=$(get_server_name) +create_server "$DROPLET_NAME" + +# 4. Wait for SSH and cloud-init +verify_server_connectivity "$DO_SERVER_IP" +wait_for_cloud_init "$DO_SERVER_IP" + +# 5. Install Node.js deps and clone nanoclaw +log_warn "Installing tsx..." +run_server "$DO_SERVER_IP" "source ~/.bashrc && bun install -g tsx" + +log_warn "Cloning and building nanoclaw..." +run_server "$DO_SERVER_IP" "git clone https://github.com/gavrielc/nanoclaw.git ~/nanoclaw && cd ~/nanoclaw && npm install && npm run build" +log_info "NanoClaw installed" + +# 6. Get OpenRouter API key +echo "" +if [[ -n "$OPENROUTER_API_KEY" ]]; then + log_info "Using OpenRouter API key from environment" +else + OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180) +fi + +# 7. Inject environment variables into ~/.zshrc +log_warn "Setting up environment variables..." + +ENV_TEMP=$(mktemp) +cat > "$ENV_TEMP" << EOF + +# [spawn:env] +export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}" +export ANTHROPIC_API_KEY="${OPENROUTER_API_KEY}" +export ANTHROPIC_BASE_URL="https://openrouter.ai/api" +EOF + +upload_file "$DO_SERVER_IP" "$ENV_TEMP" "/tmp/env_config" +run_server "$DO_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config" +rm "$ENV_TEMP" + +# 8. Create nanoclaw .env file +log_warn "Configuring nanoclaw..." + +DOTENV_TEMP=$(mktemp) +cat > "$DOTENV_TEMP" << EOF +ANTHROPIC_API_KEY=${OPENROUTER_API_KEY} +EOF + +upload_file "$DO_SERVER_IP" "$DOTENV_TEMP" "/root/nanoclaw/.env" +rm "$DOTENV_TEMP" + +echo "" +log_info "DigitalOcean droplet setup completed successfully!" +log_info "Droplet: $DROPLET_NAME (ID: $DO_DROPLET_ID, IP: $DO_SERVER_IP)" +echo "" + +# 9. Start nanoclaw +log_warn "Starting nanoclaw..." +log_warn "You will need to scan a WhatsApp QR code to authenticate." +echo "" +interactive_session "$DO_SERVER_IP" "cd ~/nanoclaw && source ~/.zshrc && npm run dev" diff --git a/digitalocean/openclaw.sh b/digitalocean/openclaw.sh new file mode 100755 index 00000000..69cef79f --- /dev/null +++ b/digitalocean/openclaw.sh @@ -0,0 +1,106 @@ +#!/bin/bash +set -e + +# Source common functions - try local file first, fall back to remote +SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)" +if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then + source "$SCRIPT_DIR/lib/common.sh" +else + source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/digitalocean/lib/common.sh) +fi + +log_info "OpenClaw on DigitalOcean" +echo "" + +# 1. Resolve DigitalOcean API token +ensure_do_token + +# 2. Generate + register SSH key +ensure_ssh_key + +# 3. Get droplet name and create droplet +DROPLET_NAME=$(get_server_name) +create_server "$DROPLET_NAME" + +# 4. Wait for SSH and cloud-init +verify_server_connectivity "$DO_SERVER_IP" +wait_for_cloud_init "$DO_SERVER_IP" + +# 5. Install openclaw via bun +log_warn "Installing openclaw..." +run_server "$DO_SERVER_IP" "source ~/.bashrc && bun install -g openclaw" +log_info "OpenClaw installed" + +# 6. Get OpenRouter API key +echo "" +if [[ -n "$OPENROUTER_API_KEY" ]]; then + log_info "Using OpenRouter API key from environment" +else + OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180) +fi + +# 7. Get model preference +echo "" +log_warn "Browse models at: https://openrouter.ai/models" +log_warn "Which model would you like to use?" +MODEL_ID=$(safe_read "Enter model ID [openrouter/auto]: ") || MODEL_ID="" +MODEL_ID="${MODEL_ID:-openrouter/auto}" + +# 8. Inject environment variables into ~/.zshrc +log_warn "Setting up environment variables..." + +ENV_TEMP=$(mktemp) +cat > "$ENV_TEMP" << EOF + +# [spawn:env] +export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}" +export ANTHROPIC_API_KEY="${OPENROUTER_API_KEY}" +export ANTHROPIC_BASE_URL="https://openrouter.ai/api" +EOF + +upload_file "$DO_SERVER_IP" "$ENV_TEMP" "/tmp/env_config" +run_server "$DO_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config" +rm "$ENV_TEMP" + +# 9. Configure openclaw +log_warn "Configuring openclaw..." + +run_server "$DO_SERVER_IP" "rm -rf ~/.openclaw && mkdir -p ~/.openclaw" + +GATEWAY_TOKEN=$(openssl rand -hex 16) + +OPENCLAW_CONFIG_TEMP=$(mktemp) +cat > "$OPENCLAW_CONFIG_TEMP" << EOF +{ + "env": { + "OPENROUTER_API_KEY": "${OPENROUTER_API_KEY}" + }, + "gateway": { + "mode": "local", + "auth": { + "token": "${GATEWAY_TOKEN}" + } + }, + "agents": { + "defaults": { + "model": { + "primary": "openrouter/${MODEL_ID}" + } + } + } +} +EOF + +upload_file "$DO_SERVER_IP" "$OPENCLAW_CONFIG_TEMP" "/root/.openclaw/openclaw.json" +rm "$OPENCLAW_CONFIG_TEMP" + +echo "" +log_info "DigitalOcean droplet setup completed successfully!" +log_info "Droplet: $DROPLET_NAME (ID: $DO_DROPLET_ID, IP: $DO_SERVER_IP)" +echo "" + +# 10. Start openclaw gateway in background and launch TUI +log_warn "Starting openclaw..." +run_server "$DO_SERVER_IP" "source ~/.zshrc && nohup openclaw gateway > /tmp/openclaw-gateway.log 2>&1 &" +sleep 2 +interactive_session "$DO_SERVER_IP" "source ~/.zshrc && openclaw tui" diff --git a/manifest.json b/manifest.json index d293dc81..55bb5f2a 100644 --- a/manifest.json +++ b/manifest.json @@ -92,6 +92,21 @@ "location": "fsn1", "image": "ubuntu-24.04" } + }, + "digitalocean": { + "name": "DigitalOcean", + "description": "DigitalOcean Droplets via REST API", + "url": "https://www.digitalocean.com/", + "type": "api", + "auth": "DO_API_TOKEN", + "provision_method": "POST /v2/droplets with user_data", + "exec_method": "ssh root@IP", + "interactive_method": "ssh -t root@IP", + "defaults": { + "size": "s-2vcpu-2gb", + "region": "nyc3", + "image": "ubuntu-24-04-x64" + } } }, "matrix": { @@ -100,6 +115,9 @@ "sprite/nanoclaw": "implemented", "hetzner/claude": "implemented", "hetzner/openclaw": "implemented", - "hetzner/nanoclaw": "implemented" + "hetzner/nanoclaw": "implemented", + "digitalocean/claude": "implemented", + "digitalocean/openclaw": "implemented", + "digitalocean/nanoclaw": "implemented" } }