postCreateCommand.sh

#!/usr/bin/env bash

# This post-create command script is designed for GitHub Codespaces that uses TakT
# It sets up git configuration, logs into GitHub CLI using a provided token,
# You should generate the GitHub OAuth token in a shell like this:
#
# $ gh auth login --web --hostname github.com --git-protocol https
#
# hereafter you can get the toke with:
#
# $ gh auth token
#
# Copy the token and got to https://github.com/settings/codespaces and store it as a secret named TAKT_GHO

set -e

PREFIX="🍰  "
echo "$PREFIX Running $(basename $0)"


if [ -n "$GH_TOKEN" ]; then
  echo "$PREFIX  \$GH_TOKEN defined. It takes precedens over \$GITHUB_TOKEN and /home/vscode/.config/gh/hosts.yml"
elif [ -n "$_GH_TOKEN" ]; then
  echo "$PREFIX  \$_GH_TOKEN defined - decoding with base64 and storing it in /home/vscode/.config/gh/hosts.yml, can be overridden by \$GITHUB_TOKEN or \$GH_TOKEN."
  echo $_GH_TOKEN | base64 --decode | gh auth login --with-token
else
  if [[ "$CODESPACES" == "true" ]]; then
      echo "$PREFIX No \$GH_TOKEN or \$_GH_TOKEN defined - using the standard ghu_*** token injected by the codespace into \$GITHUB_TOKEN"
      echo "$PREFIX ⚠️ The TakT GitHub CLI extension may need write access to projects. If that is tha case:"
      echo "$PREFIX    1) Run 'unset GITHUB_TOKEN && gh auth login -s project -h github.com -p https' to login with OAuth and sufficient permissions"
      echo "$PREFIX    2) Grab the token with 'gh auth token' and store it as a secret named GH_TOKEN in https://github.com/settings/codespaces"
      echo "$PREFIX    3) Rebuild the codespace"
  else
      echo "$PREFIX ⚠️ No \$GH_TOKEN or \$_GH_TOKEN defined - skipping GitHub CLI login."
      echo "$PREFIX    1) Run 'gh auth login -s project -h github.com -p https' to login with OAuth and sufficient permissions"
      echo "$PREFIX    2) Grab the token with 'gh auth token' and make sure your ~/.profile or ~/.zprofile defines it raw as \$GH_TOKEN:"
      echo "$PREFIX.      or base64 encoded as \$_GH_TOKEN:"
      echo "$PREFIX         export GH_TOKEN=gho_********************" # replace with your token, the next option is better
      echo "$PREFIX       Or even better
      echo "$PREFIX         echo -e "\nexport _GH_TOKEN=$(gh auth token | base64)" >> ~/.zprofile # or ~/.profile"
      echo "$PREFIX    3) Rebuild the devcontainer"      
  fi
fi

set +e
gh auth status >/dev/null 2>&1
AUTH_OK=$?
set -e
if [ $AUTH_OK -ne 0 ]; then
  echo "$PREFIX ⚠️ Not logged into GitHub CLI"
  echo "$PREFIX    This is not going to work — we need GitHub CLI to work!"
  echo "$PREFIX ❌ FAILURE"
  exit 1
else
  echo "$PREFIX Installing the TakT gh cli extension from devx-cafe/gh-tt "
  gh extension install devx-cafe/gh-tt --pin experimental
  echo "$PREFIX Installing the gh shorthand aliases"    
  gh alias import .devcontainer/.gh_alias.yml --clobber
fi

echo "$PREFIX Setting up safe git repository to prevent dubious ownership errors"
git config --global --add safe.directory /workspace

echo "$PREFIX Setting up git configuration to support .gitconfig in repo-root"
git config --local --get include.path | grep -e ../.gitconfig >/dev/null 2>&1 || git config --local --add include.path ../.gitconfig

echo "$PREFIX Setting up the uv environment"
curl -LsSf https://astral.sh/uv/install.sh | sh
uv venv --python 3.11
. .venv/bin/activate
uv sync --extra dev


echo "$PREFIX SUCCESS"
exit 0