feat(GitClone): select an existing local checkout instead of cloning - #193

What

<GitClone> gets a repository-source picker: Clone from remote (unchanged) or Use local checkout.

┌─ Clone Repository ──────────────── [git_clone] ─┐
│ ( ) Clone from remote   (•) Use local checkout  │
│                                                 │
│ Repository directory                            │
│ [ /Users/me/dev/infra-live      ] [ Browse… ]   │
│ ✓ Git repository                                │
│   Root: /Users/me/dev/infra-live                │
│   Remote: https://github.com/acme/infra-live    │
│   On branch main · 428 tracked files            │
│                                                 │
│ [ Use This Repo ]                               │
└─────────────────────────────────────────────────┘

Why

Users often already have the repo — a long-lived infrastructure-live checkout, a work in progress branch, a monorepo nobody wants to re-download. Today the only way into a runbook is a fresh clone.

How it works

Picking a directory reads it only. The block resolves the work tree root with git rev-parse --show-toplevel (so any subdirectory of the checkout works), reads the origin remote and current branch, and counts tracked files. That runs as you type or browse, so a wrong directory says so immediately — nothing is fetched, pulled, or modified, and no credentials are needed.

Confirming with Use This Repo registers the checkout as a session worktree and emits the same outputs a clone does, so nothing downstream can tell the two apart: same clone_path / repo_owner / repo_name, same $REPO_FILES, same workspace file tree, same <GitPullRequest> flow — a PR opens against the checkout's own remote and current branch.

New props: source ('clone' | 'local'), hideSourceSelect, prefilledRepoDir (setting it starts the block on the local source).

Notable implementation points

• git:local-repo has a register flag. The live preview passes register: false; only the user confirming registers the worktree and resolves the GitHub numeric IDs. A half-typed path never grants anything.
• resolveValidatedWorktree now accepts already-registered worktrees (electron/main/ipc/workspace.ts). Without this, workspace:register / workspace:set-active silently rejected any checkout outside the session working directory — which is exactly where local checkouts live — so the active-worktree selection didn't stick and REPO_FILES could point at the wrong repo. This does not widen the grant: an unregistered path outside the session still fails. The user's explicit selection is what grants access.
• Auth is only required for cloning. Selecting files already on disk waits on nothing; the clone form still gates on a linked auth block as before.
• A checkout with no origin is still selectable, with an inline warning that PR blocks need a remote. A repo with no commits works too.
• Instruction mode renders cd <path> rather than a git clone command.
• Test framework support: the runbook test CLI adopts a checkout for source="local" instead of cloning, counting tracked files rather than walking .git.

Testing

• 11 domain tests for inspectLocalRepo — subdirectory → root resolution, relative vs absolute display paths, no remote, no commits, and each failure mode (missing dir, a file, not a work tree, empty input).
• 12 component tests driving the real useGitClone against a mocked IPC boundary: source switching, prefill behaviour, the preview not registering, the confirm registering the worktree with the right owner/ref, the native folder picker, and the no-remote warning.
• 2 instruction-mode tests, 2 CLI executor tests against a real git init fixture.

992 backend + 604 web tests pass; typecheck, lint, and just test-docs clean.

Not verified in the desktop app — the UI is covered by component tests only, no live Electron run.

🤖 Generated with Claude Code