@spunto/build 0.6.0 → 0.6.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spunto/build",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Spunto's shared Build engine — the devcontainer image protocol and VS Code extension registry clients, with no database, no HTTP framework and no UI.",
   "type": "module",
   "license": "MIT",

package/src/script/setup-script.ts

@@ -295,9 +295,16 @@ function credentialsBlock(params: {
   const { homeDir, username, userInfo, userSshPrivateKey, projectDeployKey } = params
   const lines: string[] = []
 
+  // Through `asUser`, not plain `git config --global`. The setup script is the container's CMD,
+  // so it runs as root, and `--global` follows $HOME — every one of these settings landed in
+  // /root/.gitconfig while git, in the user's terminal, reads ${homeDir}/.gitconfig. The identity
+  // was silently absent, and so was the credential helper below: git fell back to prompting for a
+  // password on a repository it had just cloned.
   if (userInfo) {
-    lines.push(`git config --global user.name ${JSON.stringify(userInfo.name)}`)
-    if (userInfo.email) lines.push(`git config --global user.email ${JSON.stringify(userInfo.email)}`)
+    lines.push(asUser(username, `git config --global user.name ${JSON.stringify(userInfo.name)}`))
+    if (userInfo.email) {
+      lines.push(asUser(username, `git config --global user.email ${JSON.stringify(userInfo.email)}`))
+    }
   }
 
   if (userSshPrivateKey) {
@@ -330,8 +337,9 @@ function credentialsBlock(params: {
     GIT_CREDENTIAL_HELPER,
     "SPUNTO_HELPER",
     `  chmod +x ${homeDir}/.spunto/git-credential-spunto`,
-    `  git config --global credential.helper ${homeDir}/.spunto/git-credential-spunto`,
-    "  git config --global credential.useHttpPath true",
+    `  chown ${username} ${homeDir}/.spunto/git-credential-spunto`,
+    `  ${asUser(username, `git config --global credential.helper ${homeDir}/.spunto/git-credential-spunto`)}`,
+    `  ${asUser(username, "git config --global credential.useHttpPath true")}`,
     '  echo "Git credential helper configured"',
     "fi",
   )