feat: browser login, org/repo picker, Copilot AI, arm64 Docker fix

- Add devopster login via gh/az/glab CLI delegation with auto browser open,
  OSC 8 clickable links, and device-code flow that works inside containers
- Add login status, login all, login logout subcommands
- Add src/auth/mod.rs: persistent token store in ~/.config/devopster/tokens.json
- Add src/ai/mod.rs: GitHub Copilot integration for topic/description suggestions
- Rewrite devopster init: live org/repo picker from gh/az/glab, scoped_repos
  selection, copilot_enabled prompt, generates full config
- Add scoped_repos + copilot_enabled to AppConfig with scope_to_config filter
- Fix Dockerfile: --platform linux/arm64 and dynamic ARCH for glab install
- Fix make setup: single build then run to prevent double-compile OOM
- Add scripts/setup.sh and scripts/setup.ps1
- Rewrite Makefile with OS detection, tab indentation, help target
- Update README to single make setup getting-started flow

Author: Timna Brown

Cargo.toml

@@ -16,6 +16,7 @@ anyhow = "1.0"
 async-trait = "0.1"
 base64 = "0.22"
 clap = { version = "4.5", features = ["derive", "env"] }
+dirs = "5.0"
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"

Dockerfile

@@ -1,22 +1,56 @@
-FROM rust:1.85-bookworm AS base
+FROM --platform=linux/arm64 rust:1.85-bookworm AS base
 
 RUN rustup component add clippy rustfmt
 
+# ── System packages ──────────────────────────────────────────────────────────
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
         build-essential \
         ca-certificates \
+        curl \
         git \
+        gnupg \
+        lsb-release \
         make \
         pkg-config \
     && rm -rf /var/lib/apt/lists/*
 
+# ── GitHub CLI (gh) ──────────────────────────────────────────────────────────
+RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+        -o /usr/share/keyrings/githubcli-archive-keyring.gpg \
+    && chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+        > /etc/apt/sources.list.d/github-cli.list \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends gh \
+    && rm -rf /var/lib/apt/lists/*
+
+# ── Azure CLI (az) ────────────────────────────────────────────────────────────
+RUN curl -sL https://aka.ms/InstallAzureCLIDeb | bash \
+    && rm -rf /var/lib/apt/lists/*
+
+# ── GitLab CLI (glab) ─────────────────────────────────────────────────────────
+RUN ARCH=$(dpkg --print-architecture) \
+    && GLAB_VERSION=$(curl -fsSL https://gitlab.com/api/v4/projects/34675721/releases \
+        | grep -o '"tag_name":"[^"]*"' | head -1 | cut -d'"' -f4 | sed 's/^v//') \
+    && curl -fsSL "https://gitlab.com/gitlab-org/cli/-/releases/v${GLAB_VERSION}/downloads/glab_${GLAB_VERSION}_linux_${ARCH}.deb" \
+        -o /tmp/glab.deb \
+    && dpkg -i /tmp/glab.deb \
+    && rm /tmp/glab.deb
+
 WORKDIR /app
 COPY . .
 RUN cargo fetch
 
+# ── Build & install the binary ────────────────────────────────────────────────
+# `cargo install` places `devopster` in ~/.cargo/bin which is on PATH in the
+# official Rust image, so `devopster <cmd>` works directly after `make setup`.
+RUN cargo install --path . --locked
+
 FROM base AS test
 RUN cargo test
 
 FROM base AS dev
-CMD ["sleep", "infinity"]
+# Binary is already installed from base — start a shell so the user can run
+# `devopster login github` and any other command right away.
+CMD ["bash"]

Makefile

@@ -1,26 +1,74 @@
-.PHONY: setup build test lint fmt run container-build container-test
+.PHONY: setup build test lint fmt \
+        container-build container-test container-run \
+        login-github login-azure login-gitlab auth-status \
+        help
 
+OS := $(shell uname -s 2>/dev/null || echo Windows)
+
+## setup: Full automated setup -- installs Docker if needed, builds the image, opens a shell
 setup:
-	cargo fetch
+ifeq ($(OS),Darwin)
+	@echo "==> Detected macOS"
+	@chmod +x ./scripts/setup.sh && ./scripts/setup.sh
+else ifeq ($(OS),Linux)
+	@echo "==> Detected Linux"
+	@chmod +x ./scripts/setup.sh && ./scripts/setup.sh
+else
+	@echo "==> Detected Windows"
+	@powershell -ExecutionPolicy Bypass -File scripts\\setup.ps1
+endif
 
+## build: Compile the devopster binary
 build:
 	cargo build
 
+## test: Run all tests
 test:
 	cargo test
 
+## lint: Run clippy
 lint:
 	cargo clippy --all-targets --all-features -- -D warnings
 
+## fmt: Format all Rust source files
 fmt:
 	cargo fmt --all
 
-run:
-	cargo run -- $(ARGS)
+## login-github: Sign in to GitHub via browser
+login-github:
+	cargo run -- login github
+
+## login-azure: Sign in to Azure DevOps via browser
+login-azure:
+	cargo run -- login azure-devops
+
+## login-gitlab: Sign in to GitLab via browser
+login-gitlab:
+	cargo run -- login gitlab
 
+## auth-status: Show authentication status for all providers
+auth-status:
+	cargo run -- login status
+
+## container-build: Build the dev container image
 container-build:
-	docker build -t devopster-cli-dev -f .devcontainer/Dockerfile .
+	docker build --platform linux/arm64 --target dev -t devopster-cli-dev .
 
+## container-test: Run tests inside the container
 container-test:
-	docker build -t devopster-cli-ci .
-	docker run --rm devopster-cli-ci make test
+	docker build --platform linux/arm64 -t devopster-cli-ci .
+	docker run --rm --platform linux/arm64 devopster-cli-ci cargo test
+
+## container-run: Open a shell inside the container with host credentials mounted
+container-run:
+	docker build --platform linux/arm64 --target dev -t devopster-cli-dev .
+	docker run --rm -it --platform linux/arm64 \
+		-v "$(HOME)/.config/devopster:/root/.config/devopster" \
+		-v "$(PWD):/app" \
+		-w /app \
+		devopster-cli-dev \
+		$(if $(ARGS),$(ARGS),bash)
+
+## help: Show available make targets
+help:
+	@grep -E '^##' Makefile | sed 's/## /  /'

README.md

@@ -31,7 +31,18 @@ The repository now includes:
 
 ## Container-First Workflow
 
-This project is designed to be developed inside a container.
+This project is designed to run inside a container. **The only required tool on your host machine is `make`**, everything else including Docker is installed automatically by `make setup`.
+
+### What `make setup` installs
+
+| Tool | Where | How |
+|---|---|---|
+| Homebrew | macOS only, if missing | Official install script |
+| Docker Desktop | macOS | `brew install --cask docker` |
+| Docker Engine | Debian/Ubuntu | Official apt repository |
+| `gh`, `az`, `glab`, Rust, `devopster` | Inside the container | Dockerfile |
+
+> On macOS, after Docker Desktop is installed for the first time you need to start it from Applications, then re-run `make setup`.
 
 ### VS Code Dev Container
 
@@ -43,18 +54,48 @@ This project is designed to be developed inside a container.
 ### Local Commands
 
 ```bash
+# First time on a new machine -- installs Docker if needed, builds the image,
+# and drops you into the container shell where devopster is ready to use:
 make setup
-make build
-make test
-make run ARGS="stats"
-make container-build
-make container-test
+
+# Inside the container:
+devopster init
+devopster repo list
 ```
 
+> To reopen the container shell after exiting, run `make setup` again or `make container-run`.
+
 ## Example Commands
 
+After `make setup` the `devopster` binary is on your `$PATH` and these commands work directly:
+
+| Command | Purpose |
+|---|---|
+| `devopster init` | Create `devopster-config.yaml` and interactively sign in to a provider |
+| `devopster init --no-login` | Create `devopster-config.yaml` only, skip the sign-in prompt |
+| `devopster login <github\|azure-devops\|gitlab>` | Sign in to that provider via browser, uses `gh`, `az`, or `glab` CLI |
+| `devopster login all` | Sign in to all three providers sequentially |
+| `devopster login status` | Show authentication status for all providers |
+| `devopster login logout <provider>` | Remove stored credentials for a provider |
+| `devopster repo list` | List all repositories in the configured organization |
+| `devopster repo list --topic rust` | Filter repositories by topic |
+| `devopster repo audit` | Audit repos for missing description, topics, license, and default branch |
+| `devopster repo scaffold --name <name> --template <template>` | Create a new repository from a template defined in config |
+| `devopster repo sync` | Push files from `.github/` to all repositories |
+| `devopster catalog generate` | Export a JSON catalog of all repositories |
+| `devopster topics align` | Add missing template topics to every matching repository |
+| `devopster stats` | Print a summary: provider, org, and total repository count |
+
+### Quick start inside the container
+
 ```bash
+# 1. build the image and install devopster
+make setup
+
+# 2. init: creates devopster-config.yaml and asks which provider to sign in to
 devopster init
+
+# 3. run any command
 devopster repo list
 devopster repo audit
 devopster repo scaffold --name sample-repo --template azure-overview
@@ -63,6 +104,8 @@ devopster topics align
 devopster stats
 ```
 
+> To skip the sign-in prompt: `devopster init --no-login`
+
 ## Configuration
 
 Start from the example file:

devopster-config.example.yaml

@@ -1,6 +1,16 @@
 provider: github
 organization: MicrosoftCloudEssentials-LearningHub
 
+# Limit devopster commands to specific repositories.
+# Remove or leave empty to target all repositories in the organization.
+# scoped_repos:
+#   - my-service-repo
+#   - platform-infra
+
+# Enable GitHub Copilot-assisted suggestions for repos missing topics or descriptions.
+# Requires a Copilot subscription. Set during `devopster init` or add manually.
+# copilot_enabled: true
+
 github:
   api_url: https://api.github.com
   token_env: GITHUB_TOKEN

scripts/setup.ps1

@@ -0,0 +1,32 @@
+# devopster setup for Windows
+# Requires PowerShell 5+ and an internet connection.
+
+Write-Host "==> devopster setup (Windows)"
+
+# ── Install Docker Desktop if missing ────────────────────────────────────────
+if (Get-Command docker -ErrorAction SilentlyContinue) {
+    Write-Host "==> Docker already installed: $(docker --version)"
+} else {
+    Write-Host "==> Installing Docker Desktop via winget..."
+    if (Get-Command winget -ErrorAction SilentlyContinue) {
+        winget install -e --id Docker.DockerDesktop
+    } else {
+        Write-Host "==> winget not found. Please install Docker Desktop manually:"
+        Write-Host "    https://docs.docker.com/desktop/install/windows-install/"
+        exit 1
+    }
+    Write-Host ""
+    Write-Host "==> Docker Desktop installed."
+    Write-Host "    Please start Docker Desktop, then re-run: make setup"
+    exit 0
+}
+
+# ── Build image and open shell ────────────────────────────────────────────────
+Write-Host "==> Building devopster container image..."
+docker build --target dev -t devopster-cli-dev .
+docker run --rm -it `
+    -v "${env:USERPROFILE}\.config\devopster:/root/.config/devopster" `
+    -v "${PWD}:/app" `
+    -w /app `
+    devopster-cli-dev `
+    bash

scripts/setup.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+echo "==> devopster setup"
+
+# ── Install Docker if missing ─────────────────────────────────────────────────
+if command -v docker > /dev/null 2>&1; then
+    echo "==> Docker already installed: $(docker --version)"
+else
+    if [[ "$(uname -s)" == "Darwin" ]]; then
+        echo "==> Installing Docker Desktop via Homebrew..."
+        if ! command -v brew > /dev/null 2>&1; then
+            echo "==> Installing Homebrew first..."
+            /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
+        fi
+        brew install --cask docker
+        echo ""
+        echo "==> Docker Desktop installed."
+        echo "    Please start Docker Desktop from Applications, then re-run: make setup"
+        exit 0
+    elif [[ -f /etc/debian_version ]]; then
+        echo "==> Installing Docker Engine via apt..."
+        sudo apt-get update -qq
+        sudo apt-get install -y ca-certificates curl gnupg lsb-release
+        sudo install -m 0755 -d /etc/apt/keyrings
+        curl -fsSL https://download.docker.com/linux/debian/gpg \
+            | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+        echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
+https://download.docker.com/linux/debian $(lsb_release -cs) stable" \
+            | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+        sudo apt-get update -qq
+        sudo apt-get install -y docker-ce docker-ce-cli containerd.io \
+            docker-buildx-plugin docker-compose-plugin
+        sudo usermod -aG docker "$USER"
+        echo "==> Docker installed. You may need to log out and back in for group changes."
+    else
+        echo "==> Unsupported OS. Install Docker manually: https://docs.docker.com/get-docker/"
+        exit 1
+    fi
+fi
+
+# ── Build image then open shell ───────────────────────────────────────────────
+echo "==> Building devopster container image..."
+make container-build
+
+echo ""
+echo "==> Image ready. Opening container shell..."
+docker run --rm -it --platform linux/arm64 \
+    -v "$HOME/.config/devopster:/root/.config/devopster" \
+    -v "$(pwd):/app" \
+    -w /app \
+    devopster-cli-dev \
+    bash