@methiu/raigal 1.0.2 → 1.0.3

package/dist/adapters/astro.js

@@ -1,4 +1,4 @@
-import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-o3KNKhg2.js";
+import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-kJtASBYe.js";
 //#region src/framework-adapters/astro.ts
 const createAstroRaigalScripts = () => createRaigalPackageScripts("astro");
 const createAstroAislopScripts = createAstroRaigalScripts;

package/dist/adapters/expo.js

@@ -1,4 +1,4 @@
-import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-o3KNKhg2.js";
+import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-kJtASBYe.js";
 //#region src/framework-adapters/expo.ts
 const createExpoRaigalScripts = () => createRaigalPackageScripts("expo");
 const createExpoAislopScripts = createExpoRaigalScripts;

package/dist/adapters/nuxt.js

@@ -1,4 +1,4 @@
-import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-o3KNKhg2.js";
+import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-kJtASBYe.js";
 //#region src/framework-adapters/nuxt.ts
 const DEFAULTS = {
 	command: "ci",

package/dist/adapters/sveltekit.js

@@ -1,4 +1,4 @@
-import { n as createRaigalPackageScripts, t as createRaigalCiWorkflow } from "../core-o3KNKhg2.js";
+import { n as createRaigalPackageScripts, t as createRaigalCiWorkflow } from "../core-kJtASBYe.js";
 import raigalVite, { runRaigalVite } from "./vite.js";
 //#region src/framework-adapters/sveltekit.ts
 const createSvelteKitRaigalScripts = () => createRaigalPackageScripts("sveltekit");

package/dist/adapters/vite.js

@@ -1,4 +1,4 @@
-import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-o3KNKhg2.js";
+import { n as createRaigalPackageScripts, r as maybeRunRaigal, t as createRaigalCiWorkflow } from "../core-kJtASBYe.js";
 //#region src/framework-adapters/vite.ts
 const createViteRaigalScripts = (framework = "vite") => {
 	const scripts = createRaigalPackageScripts(framework);

package/dist/cli.js

@@ -884,7 +884,7 @@ const createLogger = (deps = {}) => {
 const log = createLogger();
 //#endregion
 //#region src/version.ts
-const APP_VERSION = "1.0.2";
+const APP_VERSION = "1.0.3";
 //#endregion
 //#region src/commands/agent-connect.ts
 const commandText = (status) => [status.provider.loginCommand.command, ...status.provider.loginCommand.args].join(" ");
@@ -1383,7 +1383,7 @@ const verifyEntitlementJwt = (jwt, options = {}) => {
 	const claims = parsed.data;
 	const expectedIssuer = process.env.RAIGAL_ISSUER?.trim() || "https://app.raigal.dev";
 	if (claims.iss !== expectedIssuer) throw new JwtVerificationError(`Untrusted issuer: ${claims.iss}`, "invalid_issuer");
-	if (!isVersionAtLeast("1.0.2", claims.min_cli_version)) throw new JwtVerificationError(`CLI version ${APP_VERSION} is below required minimum ${claims.min_cli_version}. Run "raigal update" or "npm install -g @methiu/raigal@latest".`, "cli_version_unsupported");
+	if (!isVersionAtLeast("1.0.3", claims.min_cli_version)) throw new JwtVerificationError(`CLI version ${APP_VERSION} is below required minimum ${claims.min_cli_version}. Run "raigal update" or "npm install -g @methiu/raigal@latest".`, "cli_version_unsupported");
 	const now = options.nowSeconds ?? Math.floor(Date.now() / 1e3);
 	const grace = options.allowGraceSeconds ?? 0;
 	if (now > claims.exp + grace) {
@@ -1550,7 +1550,7 @@ const getEntitlement = async () => {
 };
 //#endregion
 //#region src/cloud/owner.ts
-const GITHUB_REMOTE_RE$1 = /^(?:git@github\.com:|https:\/\/(?:[^@]+@)?github\.com\/)([^/]+)\/([^/.\s]+?)(?:\.git)?\s*$/;
+const GITHUB_REMOTE_RE$1 = /^(?:(?:git@|ssh:\/\/(?:git@)?)github\.com(?::(?:\d+\/)?|[:/])|https:\/\/(?:[^@]+@)?github\.com\/)([^/]+)\/([^/.\s]+?)(?:\.git)?\s*$/;
 const parseGitRemote = (rawUrl) => {
 	if (!rawUrl) return {
 		owner: null,
@@ -2744,8 +2744,15 @@ const detectGitContext = (directory) => {
 	let prNumber;
 	if (typeof pr?.number === "number") prNumber = pr.number;
 	else if (typeof eventPayload?.number === "number") prNumber = eventPayload.number;
-	else if (process.env.GITHUB_REF) {
-		const match = process.env.GITHUB_REF.match(/^refs\/pull\/(\d+)\//);
+	else if (process.env.RAIGAL_PR_NUMBER || process.env.PR_NUMBER) {
+		const parsed = Number.parseInt(process.env.RAIGAL_PR_NUMBER || process.env.PR_NUMBER || "", 10);
+		if (!Number.isNaN(parsed) && parsed > 0) prNumber = parsed;
+	} else if (process.env.GITHUB_REF) {
+		const match = process.env.GITHUB_REF.match(/refs\/pull\/(\d+)(?:\/|$)/);
+		if (match && match[1]) prNumber = Number.parseInt(match[1], 10);
+	}
+	if (!prNumber && branch) {
+		const match = branch.match(/pull\/(\d+)/i) || branch.match(/^pr-(\d+)/i);
 		if (match && match[1]) prNumber = Number.parseInt(match[1], 10);
 	}
 	const result = {};
@@ -21504,7 +21511,17 @@ const atomicWrite = (targetPath, content) => {
 	const rand = Math.random().toString(36).slice(2, 10);
 	const tmp = path.join(dir, `.aislop-tmp-${process.pid}-${rand}`);
 	fs.writeFileSync(tmp, content, "utf-8");
-	fs.renameSync(tmp, targetPath);
+	try {
+		fs.renameSync(tmp, targetPath);
+	} catch (err) {
+		const code = err?.code;
+		if (code === "EPERM" || code === "EBUSY") {
+			fs.copyFileSync(tmp, targetPath);
+			try {
+				fs.unlinkSync(tmp);
+			} catch {}
+		} else throw err;
+	}
 };
 const readIfExists = (targetPath) => {
 	try {
@@ -24342,7 +24359,7 @@ const maybeNotifyUpdate = async (now = Date.now()) => {
 	if (!process.stderr.isTTY) return;
 	const cachePath = resolveUpdateCachePath();
 	const cache = readCache(cachePath);
-	if (cache && isOutdated("1.0.2", cache.latest)) process.stderr.write(formatUpdateNotice(APP_VERSION, cache.latest));
+	if (cache && isOutdated("1.0.3", cache.latest)) process.stderr.write(formatUpdateNotice(APP_VERSION, cache.latest));
 	if (!cache || now - cache.checkedAt > CHECK_INTERVAL_MS) {
 		const latest = await fetchLatestVersion$1();
 		if (latest) writeCache(cachePath, {
@@ -24862,7 +24879,7 @@ const renderCommandGroup = (group, commandWidth) => {
 	return lines;
 };
 const renderCommandReference = (input = {}) => {
-	const version = input.version ?? "1.0.2";
+	const version = input.version ?? "1.0.3";
 	const commandWidth = Math.max(...COMMAND_REFERENCE.map((item) => item.command.length));
 	const lines = [renderHeader({
 		version,
@@ -25085,7 +25102,7 @@ const renderHelpDetails = () => [
 ].map((line) => highlightRaigal(line, theme)).join("\n");
 const renderHome = (input = {}) => {
 	let out = renderHeader({
-		version: input.version ?? "1.0.2",
+		version: input.version ?? "1.0.3",
 		command: "--bare",
 		context: []
 	});
@@ -29542,13 +29559,18 @@ const safeTelemetryConfig = (dir) => {
 		return;
 	}
 };
-const handleTerminationSignal = async () => {
+const handleTerminationSignal = async (signal) => {
 	killActiveChildren();
-	await finishActiveRecorder(130);
-	process.exit(0);
+	const exitCode = signal === "SIGINT" ? 130 : 143;
+	await finishActiveRecorder(exitCode);
+	process.exit(exitCode);
 };
-process.on("SIGINT", handleTerminationSignal);
-process.on("SIGTERM", handleTerminationSignal);
+process.on("SIGINT", () => {
+	handleTerminationSignal("SIGINT");
+});
+process.on("SIGTERM", () => {
+	handleTerminationSignal("SIGTERM");
+});
 const fireInstalledOnce = () => {
 	if (isTelemetryDisabled(safeTelemetryConfig(process.cwd()))) return;
 	if (ensureInstallId(resolveInstallIdPath()).created) track({

package/dist/{core-o3KNKhg2.js → core-kJtASBYe.js}

@@ -20,11 +20,21 @@ const resolveRaigalRunRequest = (framework, options = {}) => {
 	};
 };
 const runRaigal = async (request) => new Promise((resolve) => {
-	spawn(request.bin, request.args, {
+	const child = spawn(request.bin, request.args, {
 		cwd: request.cwd,
 		env: request.env,
 		stdio: "inherit"
-	}).on("close", (exitCode, signal) => {
+	});
+	child.on("error", () => {
+		resolve({
+			command: request.bin,
+			args: request.args,
+			exitCode: 1,
+			signal: null,
+			skipped: false
+		});
+	});
+	child.on("close", (exitCode, signal) => {
 		resolve({
 			command: request.bin,
 			args: request.args,

package/dist/index.js

@@ -1,4 +1,4 @@
-import { t as APP_VERSION } from "./version-DW_ZBtce.js";
+import { t as APP_VERSION } from "./version-gBpAhuDc.js";
 import { a as getEngineLabel, i as ENGINE_INFO, r as scoreImpactForRule, t as summarizeFindingAssessments } from "./finding-assessment-M5fUTE-C.js";
 import { n as isSecretClassRule, r as maskSecrets, t as FIXED_SECRET_DIAGNOSTIC_MESSAGE } from "./mask-secrets-BXn-ZSEh.js";
 import { createRequire, isBuiltin } from "node:module";
@@ -16068,7 +16068,7 @@ const verifyEntitlementJwt = (jwt, options = {}) => {
 	const claims = parsed.data;
 	const expectedIssuer = process.env.RAIGAL_ISSUER?.trim() || "https://app.raigal.dev";
 	if (claims.iss !== expectedIssuer) throw new JwtVerificationError(`Untrusted issuer: ${claims.iss}`, "invalid_issuer");
-	if (!isVersionAtLeast("1.0.2", claims.min_cli_version)) throw new JwtVerificationError(`CLI version ${APP_VERSION} is below required minimum ${claims.min_cli_version}. Run "raigal update" or "npm install -g @methiu/raigal@latest".`, "cli_version_unsupported");
+	if (!isVersionAtLeast("1.0.3", claims.min_cli_version)) throw new JwtVerificationError(`CLI version ${APP_VERSION} is below required minimum ${claims.min_cli_version}. Run "raigal update" or "npm install -g @methiu/raigal@latest".`, "cli_version_unsupported");
 	const now = options.nowSeconds ?? Math.floor(Date.now() / 1e3);
 	const grace = options.allowGraceSeconds ?? 0;
 	if (now > claims.exp + grace) {
@@ -16235,7 +16235,7 @@ const getEntitlement = async () => {
 };
 //#endregion
 //#region src/cloud/owner.ts
-const GITHUB_REMOTE_RE = /^(?:git@github\.com:|https:\/\/(?:[^@]+@)?github\.com\/)([^/]+)\/([^/.\s]+?)(?:\.git)?\s*$/;
+const GITHUB_REMOTE_RE = /^(?:(?:git@|ssh:\/\/(?:git@)?)github\.com(?::(?:\d+\/)?|[:/])|https:\/\/(?:[^@]+@)?github\.com\/)([^/]+)\/([^/.\s]+?)(?:\.git)?\s*$/;
 const parseGitRemote = (rawUrl) => {
 	if (!rawUrl) return {
 		owner: null,
@@ -19200,12 +19200,12 @@ const runScanBody = async (resolvedDir, config, options, projectInfo, scanScope,
 		scoreFileCount
 	});
 	if (options.sarif) {
-		const { buildSarifLog } = await import("./sarif-BHrT2Drf.js");
+		const { buildSarifLog } = await import("./sarif-CuuawcSp.js");
 		console.log(JSON.stringify(buildSarifLog(results), null, 2));
 		return completion;
 	}
 	if (options.json) {
-		const { buildJsonOutput } = await import("./json-CjTR6e4V.js");
+		const { buildJsonOutput } = await import("./json-BpPaIvrn.js");
 		const jsonOut = buildJsonOutput(results, scoreResult, scoreFileCount, elapsedMs, scanCoverage);
 		console.log(JSON.stringify(jsonOut, null, 2));
 		return completion;

package/dist/{json-CjTR6e4V.js → json-BpPaIvrn.js}

@@ -1,4 +1,4 @@
-import { t as APP_VERSION } from "./version-DW_ZBtce.js";
+import { t as APP_VERSION } from "./version-gBpAhuDc.js";
 import { i as ENGINE_INFO, n as withFindingAssessments, t as summarizeFindingAssessments } from "./finding-assessment-M5fUTE-C.js";
 //#region src/output/json.ts
 const buildJsonOutput = (results, scoreResult, fileCount, elapsedMs, coverage) => {

package/dist/mcp.js

@@ -84,7 +84,7 @@ const getActiveToken = () => {
 };
 //#endregion
 //#region src/version.ts
-const APP_VERSION = "1.0.2";
+const APP_VERSION = "1.0.3";
 //#endregion
 //#region src/cloud/contract.ts
 const Severity = z.enum(["error", "warning"]);
@@ -359,7 +359,7 @@ const verifyEntitlementJwt = (jwt, options = {}) => {
 	const claims = parsed.data;
 	const expectedIssuer = process.env.RAIGAL_ISSUER?.trim() || "https://app.raigal.dev";
 	if (claims.iss !== expectedIssuer) throw new JwtVerificationError(`Untrusted issuer: ${claims.iss}`, "invalid_issuer");
-	if (!isVersionAtLeast("1.0.2", claims.min_cli_version)) throw new JwtVerificationError(`CLI version ${APP_VERSION} is below required minimum ${claims.min_cli_version}. Run "raigal update" or "npm install -g @methiu/raigal@latest".`, "cli_version_unsupported");
+	if (!isVersionAtLeast("1.0.3", claims.min_cli_version)) throw new JwtVerificationError(`CLI version ${APP_VERSION} is below required minimum ${claims.min_cli_version}. Run "raigal update" or "npm install -g @methiu/raigal@latest".`, "cli_version_unsupported");
 	const now = options.nowSeconds ?? Math.floor(Date.now() / 1e3);
 	const grace = options.allowGraceSeconds ?? 0;
 	if (now > claims.exp + grace) {
@@ -526,7 +526,7 @@ const getEntitlement = async () => {
 };
 //#endregion
 //#region src/cloud/owner.ts
-const GITHUB_REMOTE_RE = /^(?:git@github\.com:|https:\/\/(?:[^@]+@)?github\.com\/)([^/]+)\/([^/.\s]+?)(?:\.git)?\s*$/;
+const GITHUB_REMOTE_RE = /^(?:(?:git@|ssh:\/\/(?:git@)?)github\.com(?::(?:\d+\/)?|[:/])|https:\/\/(?:[^@]+@)?github\.com\/)([^/]+)\/([^/.\s]+?)(?:\.git)?\s*$/;
 const parseGitRemote = (rawUrl) => {
 	if (!rawUrl) return {
 		owner: null,

package/dist/{sarif-BHrT2Drf.js → sarif-CuuawcSp.js}

@@ -1,4 +1,4 @@
-import { t as APP_VERSION } from "./version-DW_ZBtce.js";
+import { t as APP_VERSION } from "./version-gBpAhuDc.js";
 import { n as isSecretClassRule, t as FIXED_SECRET_DIAGNOSTIC_MESSAGE } from "./mask-secrets-BXn-ZSEh.js";
 import path from "node:path";
 //#region src/output/sarif.ts

package/dist/{version-DW_ZBtce.js → version-gBpAhuDc.js}

@@ -1,6 +1,6 @@
 import "node:fs";
 import "node:url";
 //#region src/version.ts
-const APP_VERSION = "1.0.2";
+const APP_VERSION = "1.0.3";
 //#endregion
 export { APP_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@methiu/raigal",
-	"version": "1.0.2",
+	"version": "1.0.3",
 	"publishConfig": {
 		"access": "public"
 	},