From 74da6f9c64fc054afce4c8fa2a65759c564e4d0a Mon Sep 17 00:00:00 2001
From: kj <webmaster@outcontrol.net>
Date: Tue, 6 Oct 2026 14:59:16 -0300
Subject: [PATCH] feat(config): default read URLs use anonymous HTTPS; keep env
 overrides; pin scheme with offline test

---
 README.org                               |  2 +-
 packages/commands/src/Toolbox/Config.php |  4 ++--
 tests/group12_config_test.php            | 18 ++++++++++++++++++
 3 files changed, 21 insertions(+), 3 deletions(-)
 create mode 100644 tests/group12_config_test.php

diff --git a/README.org b/README.org
index f3a0c40..e2b1e1b 100644
--- a/README.org
+++ b/README.org
@@ -65,7 +65,7 @@ por el componente que pides; los metadatos del paquete no se instalan.
 El instalador global arranca un proyecto desde cero y no necesita nada previo:
 
 #+BEGIN_SRC sh
-git clone git@git.kj2.me:kj/duckbrain-toolbox.git
+git clone https://git.kj2.me/kj/duckbrain-toolbox.git
 ln -s "$PWD/duckbrain-toolbox/bin/duckbrain" ~/.local/bin/duckbrain
 
 duckbrain install mi-proyecto     # descarga el núcleo Duckbrain
diff --git a/packages/commands/src/Toolbox/Config.php b/packages/commands/src/Toolbox/Config.php
index 0646305..3a1dcd8 100644
--- a/packages/commands/src/Toolbox/Config.php
+++ b/packages/commands/src/Toolbox/Config.php
@@ -13,13 +13,13 @@ final class Config
     public static function toolboxUrl(): string
     {
         return self::env('DUCKBRAIN_TOOLBOX_URL')
-            ?: 'git@git.kj2.me:kj/duckbrain-toolbox.git';
+            ?: 'https://git.kj2.me/kj/duckbrain-toolbox.git';
     }
 
     public static function coreUrl(): string
     {
         return self::env('DUCKBRAIN_CORE_URL')
-            ?: 'git@git.kj2.me:kj/duckbrain.git';
+            ?: 'https://git.kj2.me/kj/duckbrain.git';
     }
 
     /**
diff --git a/tests/group12_config_test.php b/tests/group12_config_test.php
new file mode 100644
index 0000000..4c348c1
--- /dev/null
+++ b/tests/group12_config_test.php
@@ -0,0 +1,18 @@
+<?php
+
+use Toolbox\Config;
+
+Harness::suite('group12');
+
+Harness::it('los defaults de lectura son HTTPS anónimos y los env ganan', function () {
+    putenv('DUCKBRAIN_TOOLBOX_URL');
+    putenv('DUCKBRAIN_CORE_URL');
+
+    ok(str_starts_with(Config::toolboxUrl(), 'https://'), 'toolboxUrl por defecto en https');
+    ok(str_starts_with(Config::coreUrl(), 'https://'), 'coreUrl por defecto en https');
+
+    putenv('DUCKBRAIN_CORE_URL=ssh://git@example.test/kj/duckbrain.git');
+    eq('ssh://git@example.test/kj/duckbrain.git', Config::coreUrl(), 'el override gana sobre el default');
+
+    putenv('DUCKBRAIN_CORE_URL');
+});