Function fetchAuthHeader

src/clone.ts:293–307

* Resolve an `http.extraHeader` auth value for a follow-up `git fetch`, so the * token stays out of the remote URL and out of `.git/config` (it is passed * per-invocation via `-c`). Mirrors the token providers handled in shallowClone * that inject via extraHeader rather than embedding creds in th

(provider?: string)

 * Git credentials.
 */
function fetchAuthHeader(provider?: string): string | null {
    if (provider === 'github') {
        const token = getGitHubToken();
        return token ? buildAuthHeader(token) : null;
    }
    if (provider === 'gitlab') {
        const token = getGitLabToken();
        return token ? buildAuthHeader(token, 'oauth2') : null;
    }
    if (provider === 'gitcode') {
        const token = getGitCodeToken();
        return token ? buildAuthHeader(token, 'oauth2') : null;
    }
    return null;
}

/**
 * 在已有 clone 目录上执行 git fetch 并 reset 到最新 HEAD（用于 P5.3 增量；P5.1 暂不调用）。