@bstopp/git-who 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,239 @@
-# Temporary Holding Version
+# git-who
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Manage git profiles for per-project SSH account configuration.
+
+If you use more than one git account (work, personal, a client), `git who` keeps each one as a named **profile** and
+applies it to a repo in one step: the SSH host, `user.name`, `user.email`, and commit signing. No more commits under the
+wrong email.
+
+```
+$ git who use work
+Now using profile 'work'.
+```
+
+## Requirements
+
+- **macOS or Linux.** Windows works through WSL. Native Windows is untested.
+- **Node.js 24 or later**
+- **git**
+- **ssh**: required. Profiles point at host aliases from your `~/.ssh/config`, and `git who` resolves them with `ssh -G`.
+- **gpg**: optional. Only needed if a profile signs commits with GPG.
+
+## Installation
+
+```
+npm install --global @bstopp/git-who
+```
+
+This puts a `git-who` executable on your `PATH`. Git runs any `git-<name>` executable on your `PATH` as `git <name>`,
+so the tool is then available as `git who`.
+
+## Quick start
+
+1. Make sure each account has a host alias in `~/.ssh/config`:
+
+   ```
+   Host github-work
+       HostName github.com
+       User git
+       IdentityFile ~/.ssh/id_work
+
+   Host github-personal
+       HostName github.com
+       User git
+       IdentityFile ~/.ssh/id_personal
+   ```
+
+2. Create a profile for each account. You are prompted for everything:
+
+   ```
+   git who add
+   ```
+
+3. Use a profile in a repo, or clone with one:
+
+   ```
+   cd ~/code/some-work-repo
+   git who use work
+
+   git who clone my-org/my-repo work
+   ```
+
+## Commands
+
+Any command that takes `[name]` prompts you to pick a profile when the name is left out. If the name you give doesn't
+exist, you get a warning and the same prompt.
+
+| Command | What it does |
+| --- | --- |
+| `git who add` | Create a profile interactively. Shows it for review and asks before saving. |
+| `git who list` | List all profiles with their SSH hosts. The profile active in the current repo is in bold. |
+| `git who show [name]` | Show a profile. With no name, show the profile for the current repo. |
+| `git who use [name]` | Apply a profile to the current repo. |
+| `git who clone <repo> [name]` | Clone a repo using a profile, then apply the profile to the clone. |
+| `git who edit [name]` | Edit a profile. The prompts are pre-filled with the current values. |
+| `git who remove [name]` | Remove a profile, after confirmation. |
+
+Run `git who --help` for usage and `git who --version` for the version.
+
+### `add`
+
+Prompts for, in order:
+
+1. **Profile name**: letters, numbers, dash, dot, or underscore. Must be unique.
+2. **SSH host**: chosen from the aliases in your `~/.ssh/config`.
+3. **Sign commits?**: SSH, GPG, or no.
+   - **SSH**: pick one of the public keys (`*.pub`) in `~/.ssh`.
+   - **GPG**: pick a secret key, and then an identity on that key. If the key has only one identity it is used
+     directly. The identity's name and email become the defaults for the next two prompts.
+4. **Git `user.name`** and **`user.email`**.
+
+### `use`
+
+Applies a profile to the current repo by writing to its **local** git config:
+
+| Config key | Value |
+| --- | --- |
+| `gitwho.profile` | The profile name. This is how `git who` knows which profile a repo uses. |
+| `user.name`, `user.email` | From the profile. |
+| `user.signingKey`, `commit.gpgsign` | Set when the profile signs commits, otherwise removed. |
+| `gpg.format` | `ssh` for SSH signing, removed otherwise. |
+
+Notes:
+
+- It must be run inside a git repo.
+- If the repo's `origin` doesn't use the profile's SSH host, you are asked whether to rewrite it to
+  `git@<host>:<org>/<repo>`. This works whether the current origin is an SSH or an `http(s)` URL. If there is no origin,
+  nothing is changed.
+- The profile's signing key is checked first. If it can't be found, or can't be looked up (for example, `gpg` isn't
+  installed), the command fails **before** anything is written.
+- Any failure while writing the config may leave it partly updated. Run the command again to retry.
+
+### `clone`
+
+```
+git who clone <repo> [name]
+```
+
+`<repo>` can be:
+
+- an `org/repo` shorthand, for example `my-org/my-repo`
+- an SSH URL: `git@host:org/repo.git` or `ssh://git@host/org/repo.git`
+
+Whatever host the URL has is **replaced with the profile's host**, so a URL copied from GitHub works with any profile.
+`http(s)` URLs are not supported. The repo is cloned into a directory named after it, in the current directory, and the
+profile is applied to the clone.
+
+The profile's signing key is checked **before** cloning, so a missing key fails without cloning anything. If the clone
+succeeds but writing the profile to its git config then fails, the repo is left cloned. The error tells you to run
+`git who use <name>` inside it.
+
+### `show`
+
+```
+$ git who show work
+Profile:      work
+Host:         github-work
+Name:         Bryan Work
+Email:        bryan@work.com
+Sign Commits: Using ssh
+Signing Key:  /Users/bryan/.ssh/id_work.pub
+```
+
+With a name, it shows that profile. With no name, it works out the profile for the current repo:
+
+1. The profile named by the repo's `gitwho.profile`.
+2. Otherwise, the single profile whose `user.name` and `user.email` match the repo's git config. This is flagged as *derived*, with a
+   warning that it isn't explicitly set via `gitwho.profile`. Run `git who use` to set it.
+
+When showing the current repo's profile, any value in the repo's git config that differs from the profile is marked with
+`*` and listed in a warning, so you can see that a repo has drifted. A signing key that can't be found is marked
+`(not found)`.
+
+### `edit`
+
+Pre-fills every prompt with the profile's current values. If you change nothing, you are offered another pass. Otherwise
+the changes are shown next to the original values (`(was: …)`) and you confirm before saving.
+
+Editing a profile does **not** update the repos that already use it. Their git config keeps the old values, and `show`
+marks the differences. Run `git who use` in a repo to refresh it.
+
+> **Renaming a profile:** the name is what links a repo to its profile. After a rename, repos still using the old name
+> need `git who use <new-name>` to pick up the new one. `edit` reminds you when you rename a profile.
+
+### `remove`
+
+Shows the profile and asks for confirmation. If the profile is the active one in the current repo, you are asked a second
+time and its `gitwho.profile` is cleared from that repo afterwards. Other repos that still name the removed profile are
+not touched.
+
+## Where profiles are stored
+
+Profiles live in `~/.git-who.cfg.json`, as a JSON array. You can edit it by hand, but `git who` validates it on every
+load and reports the position of any invalid entry.
+
+```json
+[
+  {
+    "name": "work",
+    "host": "github-work",
+    "username": "Bryan Work",
+    "email": "bryan@work.com",
+    "signingMethod": "ssh",
+    "signingKey": "/Users/bryan/.ssh/id_work.pub"
+  },
+  {
+    "name": "personal",
+    "host": "github-personal",
+    "username": "Bryan Personal",
+    "email": "bryan@personal.com"
+  }
+]
+```
+
+`signingMethod` (`"ssh"` or `"gpg"`) and `signingKey` are either both present or both absent. For GPG, `signingKey` is
+the key ID.
+
+## Limitations
+
+- **`Include` directives in `~/.ssh/config` are not followed.** Hosts defined in an included file won't appear in the
+  host list.
+- **Only SSH remotes.** `clone` rejects `http(s)` URLs, and `use` rewrites `origin` to an SSH URL.
+- **Host aliases with wildcards or negation** (`*`, `?`, `!`) are skipped when listing hosts.
+- **Signing keys are looked up on this machine.** SSH keys must be `*.pub` files in `~/.ssh`, and GPG keys must be in
+  your local GPG keyring.
+
+## Development
+
+| Command | What it does |
+| --- | --- |
+| `npm test` | Unit tests, with a 100% coverage threshold. |
+| `npm run test:e2e` | End-to-end test of the profile lifecycle (add, list, show, edit, use, remove). |
+| `npm run lint` | ESLint. |
+| `npm run typecheck` | TypeScript, with no emit. |
+
+Tests may not start a process. `test/hooks.ts` replaces every `child_process` spawner with one that throws, so a test
+that forgets to mock a dependency such as git, ssh or gpg fails instead of running it.
+
+The end-to-end test runs the real prompts and config file, with git, ssh, gpg and logging faked. It runs in its own
+process because it uses Node's `mock.module`, which needs the `--experimental-test-module-mocks` flag (set by the
+script) and can only replace modules that nothing else has loaded yet.
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for how to contribute.
+
+## Troubleshooting
+
+Errors are printed to stderr and the exit code is `1`. When one error wraps another, each cause is printed underneath as
+`Caused by: …`.
+
+| Message | Meaning |
+| --- | --- |
+| `No profiles found. Use `git who add` to create one.` | `~/.git-who.cfg.json` doesn't exist or is empty. |
+| `No SSH host aliases found in ~/.ssh/config.` | There are no usable `Host` entries, or the file doesn't exist. |
+| `gpg is required but was not found on PATH.` | A GPG profile or GPG key lookup needs `gpg` installed. |
+| `Config file has an invalid profile at position N` | Entry N of `~/.git-who.cfg.json` is malformed. The message, or the `Caused by:` line under it, says what's wrong. |
+| `Active profile '…' not found — it may have been deleted.` | The repo's `gitwho.profile` names a profile that no longer exists (deleted or renamed). Run `git who use`. |
+
+## License
+
+Copyright 2026 Bryan Stopp. Licensed under the [Apache License, Version 2.0](LICENSE).

package/dist/bin/git-who.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { run } from "../src/cli.js";
+await run(process.argv);

package/dist/package.json

@@ -0,0 +1,57 @@
+{
+    "name": "@bstopp/git-who",
+    "version": "0.2.0",
+    "type": "module",
+    "description": "Manage git profiles for per-project SSH account configuration.",
+    "license": "Apache-2.0",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/bstopp/git-who.git"
+    },
+    "homepage": "https://github.com/bstopp/git-who#readme",
+    "bugs": {
+        "url": "https://github.com/bstopp/git-who/issues"
+    },
+    "bin": {
+        "git-who": "dist/bin/git-who.js"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "files": [
+        "dist"
+    ],
+    "scripts": {
+        "build": "rm -rf dist && tsc -p tsconfig.build.json",
+        "prepack": "npm run build",
+        "lint": "eslint",
+        "test": "c8 mocha 'test/**/*.test.ts'",
+        "test:e2e": "mocha --node-option experimental-test-module-mocks 'test/e2e/**/*.e2e.ts'",
+        "typecheck": "tsc"
+    },
+    "engines": {
+        "node": ">=24"
+    },
+    "devDependencies": {
+        "@eslint/js": "^10.0.1",
+        "@inquirer/testing": "^3.3.10",
+        "@stylistic/eslint-plugin": "^5.10.0",
+        "@types/mocha": "^10.0.10",
+        "@types/node": "^24.19.2",
+        "c8": "^12.0.0",
+        "esmock": "^3.0.0",
+        "mocha": "^12.0.3",
+        "semantic-release": "^25.0.9",
+        "typescript": "^6.0.3",
+        "typescript-eslint": "^8.65.0"
+    },
+    "dependencies": {
+        "@inquirer/confirm": "^6.3.5",
+        "@inquirer/core": "^12.0.6",
+        "@inquirer/input": "^5.1.2",
+        "@inquirer/select": "^5.2.1",
+        "chalk": "^6.0.0",
+        "commander": "^15.0.0",
+        "simple-git": "^4.0.2"
+    }
+}

package/dist/src/cli.js

@@ -0,0 +1,88 @@
+import { Command } from 'commander';
+import { ExitPromptError } from '@inquirer/core';
+import pkg from '../package.json' with { type: 'json' };
+import show from "./commands/show.js";
+import list from "./commands/list.js";
+import use from "./commands/use.js";
+import add from "./commands/add.js";
+import edit from "./commands/edit.js";
+import remove from "./commands/remove.js";
+import clone from "./commands/clone.js";
+import log from "./utils/log.js";
+const SIGINT_EXIT_CODE = 130; // 128 + SIGINT, the shell convention for an interrupted command
+export const program = new Command();
+program
+    .name('git who')
+    .usage('[options] <command>')
+    .description('Manage git profiles for per-project SSH account configuration')
+    .version(pkg.version);
+program
+    .command('show [name]')
+    .description('Show the current git profile for this repo')
+    .option('--json', 'Print the result as JSON')
+    .action(show);
+program
+    .command('list')
+    .description('List all available profiles')
+    .option('--json', 'Print the result as JSON')
+    .action(list);
+program
+    .command('use [name]')
+    .description('Set the profile for this repo.')
+    .option('--json', 'Print the result as JSON, without prompting (a profile name is required)')
+    .option('--update-origin', 'Update the origin remote to match the profile, without asking')
+    .action(use);
+program
+    .command('add')
+    .description('Add a new profile.')
+    .action(add);
+program
+    .command('edit [name]')
+    .description('Edit an existing profile.')
+    .action(edit);
+program
+    .command('remove [name]')
+    .description('Remove a profile.')
+    .action(remove);
+program
+    .command('clone <repo> [name]')
+    .description('Clone a remote repo using a specific profile.')
+    .action(clone);
+/**
+ * The message of an error followed by those of its `cause` chain, so wrapped failures show the real reason.
+ */
+function errorMessages(err) {
+    const messages = [];
+    let current = err;
+    while (current instanceof Error) {
+        messages.push(current.message);
+        current = current.cause;
+    }
+    return messages.length > 0 ? messages : [String(err)];
+}
+function describeError(err) {
+    return errorMessages(err).map((message, i) => i === 0 ? message : `Caused by: ${message}`).join('\n');
+}
+/**
+ * Run the cli, printing any failure (with its cause chain) and setting a non-zero exit code. A cancelled prompt
+ * (Ctrl+C) is not a failure, so it exits with the SIGINT code and prints nothing.
+ */
+export async function run(argv) {
+    try {
+        await program.parseAsync(argv);
+    }
+    catch (err) {
+        if (err instanceof ExitPromptError) {
+            process.exitCode = SIGINT_EXIT_CODE;
+            return;
+        }
+        if (argv.includes('--json')) {
+            const [error, ...causes] = errorMessages(err);
+            log.json({ error, causes });
+        }
+        else {
+            log.error(describeError(err));
+        }
+        process.exitCode = 1;
+    }
+}

package/dist/src/commands/add.js

@@ -0,0 +1,17 @@
+import chalk from 'chalk';
+import confirm from '@inquirer/confirm';
+import log from "../utils/log.js";
+import { addProfile } from "../utils/profiles.js";
+import { promptForProfile } from "../utils/prompts.js";
+import { printProfile } from "../utils/display.js";
+export default async function add() {
+    const profile = await promptForProfile();
+    printProfile(profile);
+    if (await confirm({ message: 'Save this profile?', default: true })) {
+        await addProfile(profile);
+        log.info(`Profile ${chalk.bold(profile.name)} added.`);
+    }
+    else {
+        log.warn('Profile not added.');
+    }
+}

package/dist/src/commands/clone.js

@@ -0,0 +1,46 @@
+import chalk from 'chalk';
+import { simpleGit } from 'simple-git';
+import { applyProfile, loadProfiles, verifySigningKey } from "../utils/profiles.js";
+import { selectProfile } from "../utils/prompts.js";
+import { parseSshUrl } from "../utils/git-url.js";
+import log from "../utils/log.js";
+const SHORTHAND_PATTERN = /^[^/@.][^/]*\/(?!\.{1,2}$)[^/]+$/;
+/**
+ * Build the url to clone, using the profile's ssh host, and the directory to clone it into. The directory is passed to
+ * git explicitly so the profile is always applied to the directory that was cloned.
+ *
+ * @throws {Error} If the repo is neither an ssh url nor an `org/repo` shorthand, or has no repo name to clone into.
+ */
+function getCloneInfo(host, repo) {
+    const rawPath = parseSshUrl(repo)?.path ?? (SHORTHAND_PATTERN.test(repo) ? repo : undefined);
+    const path = rawPath?.replace(/\/+$/, '');
+    const dir = path?.split('/').pop().replace(/\.git$/, '');
+    if (!path || !dir) {
+        throw new Error(`Unsupported repo format: ${repo}`);
+    }
+    return { url: `git@${host}:${path}`, dir };
+}
+/**
+ * Clone a repo using a profile's ssh host, then apply the profile to the clone. The profile is the one given by name or
+ * one picked from a prompt.
+ *
+ * @param repo - An ssh url (`git@host:org/repo.git` or `ssh://git@host/org/repo.git`) or an `org/repo` shorthand. The
+ * host is always replaced with the profile's.
+ * @throws {Error} If the repo format is not supported, the profile's signing key is missing or cannot be looked up, or
+ * the clone fails. The signing key is checked before cloning, so its failure leaves nothing behind. A failure to apply
+ * the profile after a successful clone is wrapped with its `cause`, as the repo is left cloned without the profile.
+ */
+export default async function clone(repo, name) {
+    const profiles = await loadProfiles();
+    const profile = await selectProfile(profiles, name);
+    const { url, dir } = getCloneInfo(profile.host, repo);
+    await verifySigningKey(profile);
+    await simpleGit().clone(url, dir);
+    try {
+        await applyProfile(simpleGit(dir), profile);
+    }
+    catch (error) {
+        throw new Error(`Cloned '${dir}', but profile '${profile.name}' could not be applied. Run \`git who use ${profile.name}\` inside it to retry.`, { cause: error });
+    }
+    log.info(`Cloned ${chalk.bold(url)} to ${dir} using profile ${chalk.bold(profile.name)}.`);
+}