Create ~/Work directory and clone devsetup there via gh

After gh is installed and authenticated, setup.sh now creates ~/Work
and clones the devsetup repo there as the canonical location. On
subsequent runs it pulls updates.

CI workflow now provides GH_TOKEN via github.token so gh auth and
the clone step work in the GitHub Actions environment.

Added bats tests to verify ~/Work exists and devsetup is cloned.

Author: mhfs

.github/workflows/ci.yml

@@ -26,6 +26,7 @@ jobs:
         run: bash setup.sh
         env:
           CI: "true"
+          GH_TOKEN: ${{ github.token }}
 
       - name: Install bats
         run: sudo apt-get install -y -qq bats
@@ -35,3 +36,5 @@ jobs:
           export PATH="$HOME/.local/bin:$PATH"
           eval "$(mise activate bash)"
           bats test/setup_test.bats
+        env:
+          GH_TOKEN: ${{ github.token }}

setup.sh

@@ -256,6 +256,37 @@ else
   gh auth login --web --git-protocol https
 fi
 
+# ---------------------------------------------------------------------------
+# Work directory and devsetup clone
+# ---------------------------------------------------------------------------
+
+WORK_DIR="$HOME/Work"
+DEVSETUP_DIR="$WORK_DIR/devsetup"
+DEVSETUP_REPO="${DEVSETUP_REPO:-trusted/devsetup}"
+
+fmt_header "Work Directory"
+
+if [ -d "$WORK_DIR" ]; then
+  fmt_ok "$WORK_DIR already exists"
+else
+  fmt_install "Creating $WORK_DIR"
+  mkdir -p "$WORK_DIR"
+fi
+
+fmt_header "Clone devsetup"
+
+if [ -d "$DEVSETUP_DIR/.git" ]; then
+  fmt_ok "devsetup already cloned at $DEVSETUP_DIR"
+  git -C "$DEVSETUP_DIR" pull --quiet 2>/dev/null || true
+else
+  fmt_install "Cloning $DEVSETUP_REPO to $DEVSETUP_DIR"
+  gh repo clone "$DEVSETUP_REPO" "$DEVSETUP_DIR" -- --quiet
+fi
+
+# If we were running from the temp bootstrap location, switch SCRIPT_DIR
+# to the canonical ~/Work/devsetup so migrations use the right path.
+SCRIPT_DIR="$DEVSETUP_DIR"
+
 # ---------------------------------------------------------------------------
 # mise (version manager)
 # ---------------------------------------------------------------------------
@@ -419,6 +450,9 @@ echo "= Trusted Dev Setup Complete ="
 echo ""
 echo "Next steps:"
 echo "  1. Open a new terminal (or run: source ~/.zshrc)"
-echo "  2. Clone a project:  gh repo clone trusted/<repo-name>"
+echo "  2. Clone a project:  cd ~/Work && gh repo clone trusted/<repo-name>"
 echo "  3. Run project setup: cd <repo-name> && bin/setup"
 echo ""
+echo "To re-run this setup later:"
+echo "  ~/Work/devsetup/setup.sh"
+echo ""

test/setup_test.bats

@@ -91,3 +91,19 @@
 @test "migration state directory exists" {
   [ -d "$HOME/.local/state/trusted/devsetup/migrations" ]
 }
+
+# ---------------------------------------------------------------------------
+# Work directory and devsetup clone
+# ---------------------------------------------------------------------------
+
+@test "~/Work directory exists" {
+  [ -d "$HOME/Work" ]
+}
+
+@test "devsetup is cloned to ~/Work/devsetup" {
+  [ -d "$HOME/Work/devsetup/.git" ]
+}
+
+@test "~/Work/devsetup contains setup.sh" {
+  [ -f "$HOME/Work/devsetup/setup.sh" ]
+}