Summary

• Add new azd ai agent code download [name] command to download deployed source code of a code-based hosted agent from Azure AI Foundry
• Completes the round-trip: azd deploy pushes code, code download pulls it back

Details

New API method (operations.go):

• DownloadAgentCode() — streaming GET to /agents/{name}/code:download?agent_version=N
• Feature header: CodeAgents=V1Preview,HostedAgents=V1Preview (same gate as zip upload)
• Returns body stream + SHA-256 hash + version from response headers

New command (code.go):

• azd ai agent code download [name] — downloads and extracts source code
• --version, -v — specific version (default: latest)
• --dest, -d — destination path (default: ./<agent-name>/ or ./<agent-name>.zip)
• --zip — save raw zip instead of extracting
• SHA-256 verification against x-ms-code-zip-sha256 response header
• Zip-slip protection on extraction
• Error if output path already exists (suggests --dest)

Command registration (root.go):

• New code subcommand group registered alongside files, sessions, eval, etc.

Note: Renamed --output/-o to --dest/-d because --output/-o is a reserved azd global flag.

Testing

Build & Unit Tests

• go build ./... passes
• All existing tests pass (go test ./internal/...)
• No breaking changes to existing commands

Live Testing (against real deployed agents)

All tests run against agent hello-world-python-invocations (v1) and hello-world-voice (v7) in project wujia-aifproject-260601 (North Central US).

Test 1: Download latest version (auto-extract) ✅

$ azd ai agent code download
Downloaded agent "hello-world-python-invocations" (version 1) -> hello-world-python-invocations
SHA-256: d057042b12ec4daf54079da2779fe6a66d8078e2b914a095bad576415c8456f5

Extracted files: main.py (7415B), README.md (11594B), requirements.txt (106B)

Test 2: Download as zip (--zip) ✅

$ azd ai agent code download --zip
Downloaded agent "hello-world-python-invocations" (version 1) -> hello-world-python-invocations.zip
SHA-256: d057042b12ec4daf54079da2779fe6a66d8078e2b914a095bad576415c8456f5

Zip file size: 7718 bytes. SHA-256 verified independently via Get-FileHash — matches.

Test 3: Download with --dest ✅

$ azd ai agent code download --dest custom-output-dir
Downloaded agent "hello-world-python-invocations" (version 1) -> custom-output-dir
SHA-256: d057042b12ec4daf54079da2779fe6a66d8078e2b914a095bad576415c8456f5

Test 4: Download specific version (--version 1) ✅

$ azd ai agent code download --version 1 --dest v1-test
Downloaded agent "hello-world-python-invocations" (version 1) -> v1-test
SHA-256: d057042b12ec4daf54079da2779fe6a66d8078e2b914a095bad576415c8456f5

Test 5: Error — output path already exists ✅

$ azd ai agent code download
ERROR: output path "hello-world-python-invocations" already exists

Use --dest (-d) to specify a different path

Test 6: Error — non-existent version (404) ✅

$ azd ai agent code download --version 999 --dest v999-test
ERROR: failed to download agent code: GET .../agents/hello-world-python-invocations/code:download
RESPONSE 404: 404 Not Found
ERROR CODE: not_found
{
  "error": {
    "message": "Agent hello-world-python-invocations with version 999 not found [Request ID: ...]"
  }
}

Test 7: Download different code agent (hello-world-voice) ✅

$ azd ai agent code download voice
Downloaded agent "hello-world-voice" (version 7) -> hello-world-voice
SHA-256: cff9776c21bade65067503f18bc62381df635aec223c5e52d90271ceb8192835

Extracted 9 files including main.py, proxy.py, index.html, requirements.txt.

Closes #8575