Add WASI SSH CLI and in-process Git SSH transport

userland/git/src/network.rs

@@ -1,9 +1,10 @@
-//! Anonymous HTTP and HTTPS clone/fetch through standard wasi:http.
+//! Clone and fetch over standard WASI HTTP or in-process SSH exec channels.
 use crate::{
     Result,
-    http::{WasiHttp, clean_url},
+    http::WasiHttp,
     remotes,
     repo::{self, error},
+    ssh::clean_url,
 };
 use gix::bstr::ByteSlice;
 use std::{collections::BTreeSet, sync::atomic::AtomicBool};
@@ -82,18 +83,24 @@ fn perform(
             ));
         }
     }
-    let transport: Box<dyn gix_transport::client::blocking_io::Transport> = {
-        let transport_url = gix::url::parse(url.as_bytes().as_bstr())
-            .map_err(|_| error("fetch", "invalid HTTPS URL"))?;
-        Box::new(
-            gix_transport::client::blocking_io::http::Transport::new_http(
-                WasiHttp::default(),
-                transport_url,
-                gix_transport::Protocol::V2,
-                false,
-            ),
-        )
-    };
+    let transport: Box<dyn gix_transport::client::blocking_io::Transport> =
+        if crate::ssh::is_ssh(&url) {
+            Box::new(crate::ssh::connection(
+                &url,
+                gix_transport::Service::UploadPack,
+            )?)
+        } else {
+            let transport_url = gix::url::parse(url.as_bytes().as_bstr())
+                .map_err(|_| error("fetch", "invalid HTTPS URL"))?;
+            Box::new(
+                gix_transport::client::blocking_io::http::Transport::new_http(
+                    WasiHttp::default(),
+                    transport_url,
+                    gix_transport::Protocol::V2,
+                    false,
+                ),
+            )
+        };
     let mut options = gix::remote::ref_map::Options::default();
     options.extra_refspecs.push(
         gix::refspec::parse("HEAD".into(), gix::refspec::parse::Operation::Fetch)