Honor configured protocol for automatic repository clones

[MisterJimson]

Summary

• keep the default Create & Clone flow protocol-aware instead of hardcoding a concrete clone URL
• honor GitHub CLI's per-host git_protocol setting for automatic clones
• preserve explicit HTTPS and SSH behavior, using HTTPS as the safe fallback when a provider cannot report a preference
• add focused web, GitHub CLI, and repository-service regression coverage

Why

The Create & Clone UI passed repository.sshUrl directly to the clone operation, bypassing the existing auto protocol path. Remote servers authenticated with gh over HTTPS but without a GitHub SSH key therefore failed to clone private repositories even though HTTPS access was valid.

The UI now submits the provider and repository identity with protocol: "auto". For GitHub, repository lookup reads gh config get git_protocol --host <host> and carries that preference into clone selection. A reported SSH preference still uses SSH, a reported HTTPS preference uses HTTPS, and an unavailable preference falls back to HTTPS instead of recreating the original authentication failure.

Explicit URL clones remain unchanged.

Fixes #4203.

Testing

• vp test run apps/server/src/sourceControl/GitHubCli.test.ts apps/server/src/sourceControl/SourceControlRepositoryService.test.ts apps/web/src/components/CommandPalette.logic.test.ts (22 tests passed)
• pnpm --filter @t3tools/contracts typecheck
• pnpm --filter t3 typecheck
• pnpm --filter @t3tools/web typecheck

An isolated UI smoke-test startup was attempted, but this nightly checkout's Vite+ dev server is independently blocked by Tsconfig not found @tsconfig/node24/tsconfig.json.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: e3ec3965-bb4b-4c08-afe3-3e7a02204a3f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR changes runtime behavior for repository clone protocol selection across multiple system layers. A high-severity unresolved comment identifies a potential issue where clones may default to SSH unexpectedly, causing authentication failures.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 2dc2225. Configure here.}

[cursor]

Auto clone falls back to SSH

High Severity

The selectRemoteUrl's auto protocol choice now defaults to SSH if preferredProtocol is not HTTPS or is missing. This preferredProtocol is frequently unset (e.g., for non-GitHub repos, gh config get failures, or createRepository output). Since getCloneSourceInput always sends protocol: "auto" for looked-up repos, clones often default to SSH despite an HTTPS preference or displayed URL, causing authentication failures.

Additional Locations (2)

• apps/server/src/sourceControl/GitHubCli.ts#L443-L452
• apps/web/src/components/CommandPalette.logic.ts#L65-L71

 

^{Reviewed by Cursor Bugbot for commit 2dc2225. Configure here.}