Support not cloning into repo subfolder, using env var for cred helper

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@github/copilot-engine-sdk",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "SDK for building engines on the GitHub Copilot agent platform",
   "type": "module",
   "main": "dist/index.js",

src/git.ts

@@ -55,6 +55,10 @@ export interface CloneRepoOptions {
     commitEmail: string;
     /** Base directory for cloning (default: /tmp/workspace) */
     cloneDir?: string;
+    /** Whether to exclude the repository subfolder (owner/repo) when cloning (default: false) */
+    excludeRepoSubfolder?: boolean;
+    /** If set, use an environment variable name for Git credential helper rather than embedding the token in the config (default: undefined) */
+    credentialHelperEnvVar?: string;
 }
 
 /**
@@ -84,9 +88,14 @@ export interface CommitAndPushResult {
  * @returns The local path where the repository was cloned
  */
 export function cloneRepo(options: CloneRepoOptions): string {
-    const { serverUrl, repository, gitToken, branchName, commitLogin, commitEmail } = options;
+    const { serverUrl, repository, gitToken, credentialHelperEnvVar, excludeRepoSubfolder, branchName, commitLogin, commitEmail } = options;
+
+    if (credentialHelperEnvVar && !/^[A-Za-z_][A-Za-z0-9_]*$/.test(credentialHelperEnvVar)) {
+        throw new Error(`Invalid credentialHelperEnvVar: must be a valid environment variable name (letters, digits, underscores; cannot start with a digit)`);
+    }
+
     const cloneDir = options.cloneDir ?? DEFAULT_CLONE_DIR;
-    const repoLocation = `${cloneDir}/${repository}`;
+    const repoLocation = excludeRepoSubfolder ? cloneDir : `${cloneDir}/${repository}`;
 
     const cloneUrl = `${serverUrl.replace(/\/$/, "")}/${repository}.git`;
 
@@ -95,7 +104,7 @@ export function cloneRepo(options: CloneRepoOptions): string {
         execFileSync("git", ["config", "user.email", commitEmail], { cwd: repoLocation });
         execFileSync("git", ["config", "credential.username", "x-access-token"], { cwd: repoLocation });
         execFileSync("git", ["config", "credential.helper",
-            `!f() { test "$1" = get && echo "password=${gitToken}"; }; f`], { cwd: repoLocation });
+            `!f() { test "$1" = get && echo "password=${credentialHelperEnvVar ? '${' + credentialHelperEnvVar + '}' : gitToken}"; }; f`], { cwd: repoLocation });
         execFileSync("git", ["remote", "set-url", "origin", cloneUrl], { cwd: repoLocation });
     };