@tokenoftrust/cli 2.0.6 → 2.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/cli",
-  "version": "2.0.6",
+  "version": "2.0.7",
   "description": "Token of Trust developer CLI — clone a tenant store, run it locally with save→reload, and submit it for preview. Installs the `tot` command.",
   "license": "Apache-2.0",
   "author": "Token of Trust",

package/src/git-credential.mjs

@@ -159,7 +159,15 @@ export function forgeShimPath(env = process.env) {
 /** The shim's contents: pin the ABSOLUTE node + CLI entry active at write time, with a
  *  PATH-search fallback for node, and FAIL LOUD to stderr (never silently) when no node
  *  is found — so a broken helper says how to fix itself instead of yielding an opaque
- *  "Repository not found". Pure — unit-tested. */
+ *  "Repository not found". Pure — unit-tested.
+ *
+ *  The pinned ENTRY gets the same fail-loud treatment as NODE, because the path pinned at
+ *  write time can stop existing: running the CLI from a dev checkout or a git worktree pins
+ *  the shim to THAT tree, and reaping it breaks forge git auth for every checkout on the
+ *  machine — including ones created by the globally-installed `tot`. Unguarded, the failure
+ *  surfaces three layers away as a raw node MODULE_NOT_FOUND followed by git's
+ *  "could not read Username" / "Repository not found", which names neither the stale path
+ *  nor the fix. */
 export function renderForgeShim(nodePath, entryPath) {
   return [
     "#!/bin/sh",
@@ -171,7 +179,18 @@ export function renderForgeShim(nodePath, entryPath) {
     '  echo "tot: no node runtime for the git credential helper — reinstall: npm i -g @tokenoftrust/cli@latest" >&2',
     "  exit 1",
     "fi",
-    `exec "$NODE" ${shq(entryPath)} git-credential "$@"`,
+    `ENTRY=${shq(entryPath)}`,
+    'if [ ! -f "$ENTRY" ]; then',
+    '  echo "tot: the git credential helper points at a CLI that no longer exists:" >&2',
+    '  echo "       $ENTRY" >&2',
+    '  echo "     This shim was pinned by whichever tot ran last — if that was a dev" >&2',
+    '  echo "     checkout or a git worktree that has since been removed, forge git auth" >&2',
+    '  echo "     is broken for EVERY checkout on this machine until it is re-pinned." >&2',
+    '  echo "     Fix: run any tot command that touches git (e.g. \\`tot clone <tenant>\\`)" >&2',
+    '  echo "     from an installed tot, or reinstall: npm i -g @tokenoftrust/cli@latest" >&2',
+    "  exit 1",
+    "fi",
+    'exec "$NODE" "$ENTRY" git-credential "$@"',
     "",
   ].join("\n");
 }