@rightkit/release 0.6.30 → 0.6.31

package/deterministic-scans.mjs

@@ -2432,7 +2432,10 @@ export function cargoReadTargetDir({ tmpRoot, roots }) {
 export async function runScans(plan, options = {}) {
   const deps = {
     // Concurrent runs need a spawn that does not block the event loop.
-    spawn: Number(options.jobs ?? 1) > 1 || options.signal ? defaultSpawnAsync : defaultSpawn,
+    // Always asynchronous (A9): a synchronous spawn holds the event loop, so no scan's time limit can fire while it runs. The 2026-11-02 runs
+    // show it: every scan that finished at the same moment reported the same inflated time (shellcheck and actionlint 1,655 s, against a
+    // 5 min limit), held by a synchronous broker call. One lane used the synchronous spawn, so a single-lane run had no working limit.
+    spawn: defaultSpawnAsync,
     // Locating a tool (rustfmt's `which`/`where` fallback) is synchronous whatever `spawn` is.
     lookupSpawn: defaultSpawn, exists: fs.existsSync, readFile: (f) => fs.readFileSync(f, "utf8"), readdir: fs.readdirSync,
     env: process.env, platform: process.platform, execPath: process.execPath,
@@ -2558,7 +2561,8 @@ export async function runScans(plan, options = {}) {
     let row = await scanRow(s, extraEnv);
     // rightkit#1459: a class A scan that timed out is run once more before it fails Class A (a hung tool, e.g. actionlint on 2026-11-02, ran
     // 27 min and failed a run whose rerun passed in 1 s). Class B and carried scans are not retried: a compile that times out is a real failure.
-    if (row.status === "fail" && row.code === "TIMEOUT" && s.class === SCAN_CLASS.A && !signal?.aborted) {
+    // Test suites are not retried either: a slow test is a finding, not a hung tool.
+    if (row.status === "fail" && row.code === "TIMEOUT" && s.class === SCAN_CLASS.A && s.kind !== "test" && !signal?.aborted) {
       const first = row;
       row = await scanRow(s, extraEnv);
       row = { ...row, retried: { code: first.code, detail: first.detail } };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/release",
-  "version": "0.6.30",
+  "version": "0.6.31",
   "description": "Portable release CLI/SDK with fail-closed public GitHub Releases and private R2 + RightApps distribution.",
   "license": "MIT OR Apache-2.0",
   "type": "module",

package/rightkit-versions.json

@@ -49,7 +49,7 @@
     "@rightkit/qa": "0.6.2",
     "@rightkit/qa-chrome": "0.1.12",
     "@rightkit/react-shell": "0.7.2",
-    "@rightkit/release": "0.6.30",
+    "@rightkit/release": "0.6.31",
     "@rightkit/settings-ui": "0.7.0",
     "@rightkit/social-ui": "0.1.0",
     "@rightkit/system-ui": "0.1.0",

package/snapshot-git.mjs

@@ -133,9 +133,18 @@ function discoveryHome() {
 }
 
 /** git run in `cwd` against the checkout's own repository (found from `cwd`), under the sealed environment (no GIT_DIR, no index) plus GIT_NO_REPLACE_OBJECTS. Returns the spawn result. */
+// The sealed environment hides the user's global git config, so the user's `safe.directory` never reaches git: a checkout owned by
+// another account (on the Dell, D:\Claude\viewright and postright belong to BUILTIN\Administrators) was refused as "dubious ownership"
+// from 0.6.9 on. The checkout itself is named on the command line (command-line config is protected configuration, which git accepts for
+// safe.directory), forward slashes as git compares them, and fsmonitor stays off so the checkout's own config can start no program.
+export function discoverySafeArgs(cwd, platform = process.platform) {
+  const dir = (platform === "win32" ? path.win32 : path).resolve(cwd);
+  return ["-c", `safe.directory=${platform === "win32" ? dir.replaceAll("\\", "/") : dir}`, "-c", "core.fsmonitor=false"];
+}
+
 export function discoveryRun(cwd, args, { platform = process.platform, input } = {}) {
   const env = sealedEnv(discoveryHome(), { platform, gitDir: null, index: false });
-  return spawnSync("git", args, { cwd, env, input, encoding: "utf8", maxBuffer: MAX_BUFFER });
+  return spawnSync("git", [...discoverySafeArgs(cwd, platform), ...args], { cwd, env, input, encoding: "utf8", maxBuffer: MAX_BUFFER });
 }
 /** As discoveryRun, returning trimmed-by-caller stdout or throwing an Error naming the command. */
 export function discoveryGit(cwd, args, options) {