Fix nil cfg panic when setup flows into auth configure

setup built newCfg locally but never assigned to package-level cfg.
When user answered "y" to configure prompt, runAuthConfigure called
configureGhHosts which dereferenced nil cfg.

Author: rmorse

internal/cmd/cmd_test.go

@@ -200,6 +200,40 @@ func TestSetupCmd(t *testing.T) {
 	assert.Equal(t, int64(456), loaded.InstallationID)
 }
 
+func TestSetupCmd_SetsCfgBeforeAuthConfigure(t *testing.T) {
+	saveRestore(t)
+
+	keyPath := testPEMPath(t)
+	cfgDir := t.TempDir()
+	cfgFile := filepath.Join(cfgDir, "config.yaml")
+	cfgPath = cfgFile
+
+	mock := &mockTokenGenerator{
+		result: &auth.TokenResult{
+			Token:     "ghs_setup_token",
+			ExpiresAt: time.Now().Add(time.Hour),
+		},
+	}
+	tokenGenerator = mock
+
+	// Answer "n" to configure prompt — we just verify cfg is set
+	// after setup completes (the bug was cfg remaining nil)
+	input := "123\n456\n" + keyPath + "\nn\n"
+
+	buf := new(bytes.Buffer)
+	rootCmd.SetOut(buf)
+	rootCmd.SetIn(strings.NewReader(input))
+	rootCmd.SetArgs([]string{"setup"})
+	require.NoError(t, rootCmd.Execute())
+
+	// Regression: cfg must be set from setup's newCfg so that
+	// runAuthConfigure (if called) doesn't hit nil pointer panic
+	require.NotNil(t, cfg, "cfg must be set after setup")
+	assert.Equal(t, int64(123), cfg.AppID)
+	assert.Equal(t, int64(456), cfg.InstallationID)
+	assert.Equal(t, keyPath, cfg.PrivateKeyPath)
+}
+
 func TestSetupCmd_InvalidPEM(t *testing.T) {
 	saveRestore(t)
 

internal/cmd/setup.go

@@ -97,6 +97,8 @@ func runSetup(cmd *cobra.Command, args []string) error {
 
 	fmt.Fprintf(out, "\nConfig saved to %s\n", savePath)
 
+	cfg = newCfg
+
 	fmt.Fprintln(out)
 	if confirm(cmd, "Configure git + gh auth now?") {
 		fmt.Fprintln(out)