Skip to content

feat(init): clone over HTTPS+PAT for the bound forge; installer puts mise on PATH

Akram GASSEM requested to merge feat/init-pat-clone into main

Make labdev init succeed on a fresh Labsoft machine without an SSH key, using the PAT that labdev setup already stored in the OS keychain.

  • internal/git/clone_url.go: Host / ToHTTPS / IsHTTPS helpers to inspect and rewrite SCP-style and ssh:// remotes to https://.
  • internal/initflow/clone.go: when the machine is bound (setup.yaml) to the same forge host the workspace declares, rewrite SSH repo URLs to HTTPS so git's credential helper supplies the PAT (labdev injects no secret — matches the credential strategy). An env token (GITLAB_TOKEN, CI/headless) is embedded only on HTTPS. Opt out with LABDEV_CLONE_SSH=1 to keep declared SSH URLs.
  • install.ps1 / install.sh: after labdev, add mise's dir to the user PATH when mise is present; never auto-install it (print the install command instead).
  • README: installer note for mise + a clone-auth note for LABDEV_CLONE_SSH.

Tests cover Host/ToHTTPS, the resolveClone URL/token decision table, and preferHTTPSHost (bound==workspace forge, mismatch, no setup, opt-out).

Merge request reports