@foldrun/core 1.4.0 → 1.4.1

package/dist/src/scan.js

@@ -646,6 +646,13 @@ function ignored(ig, rule, line) {
 /** Installed and built code: someone else's files, and a crypto library's
  *  constants are not this workspace's keys. */
 const VENDORED = /(?:^|\/)(?:node_modules|\.venv|venv|site-packages|__pycache__|vendor|dist|build|\.next)\//;
+/** What a run leaves in an agent's folder — the Claude CLI's `.cache/` logs,
+ *  package caches — and copies back with it. Nobody wrote these, so they are
+ *  not checked as prompts or code; they are still searched for credentials,
+ *  since a key in a log here is a key in the workspace (seen live on
+ *  17 Oct 2026: zero-width characters in a CLI MCP log, reported as hidden
+ *  text). */
+const RUNTIME_WRITTEN = /(?:^|\/)(?:\.cache|\.npm|\.local|\.pnpm-store|\.yarn|\.foldrun)\//;
 /** Text files only — a PNG read as UTF-8 is noise to every rule here. */
 function isText(f) {
     return !VENDORED.test(f.path) && !f.content.slice(0, 8000).includes("\u0000") && !/\.(?:png|jpe?g|gif|webp|ico|pdf|zip|gz|woff2?|ttf|mp[34]|mov|wasm)$/i.test(f.path);
@@ -679,6 +686,8 @@ export function scanFiles(files, options = {}) {
         const lines = f.content.split(/\r?\n/);
         ignoresByFile.set(f.path, readIgnores(f, lines, push));
         scanSecrets(f, lines, push);
+        if (RUNTIME_WRITTEN.test(f.path))
+            continue;
         scanContent(f, lines, push);
         scanSupplyChain(f, lines, push);
         const schema = schemaKindOf(f.path);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foldrun/core",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Agents are just folders. The format, the runner, the checks.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/src/scan.ts

@@ -729,6 +729,14 @@ type Push = (rule: string, file: string, line: number | undefined, text: string,
  *  constants are not this workspace's keys. */
 const VENDORED = /(?:^|\/)(?:node_modules|\.venv|venv|site-packages|__pycache__|vendor|dist|build|\.next)\//;
 
+/** What a run leaves in an agent's folder — the Claude CLI's `.cache/` logs,
+ *  package caches — and copies back with it. Nobody wrote these, so they are
+ *  not checked as prompts or code; they are still searched for credentials,
+ *  since a key in a log here is a key in the workspace (seen live on
+ *  17 Oct 2026: zero-width characters in a CLI MCP log, reported as hidden
+ *  text). */
+const RUNTIME_WRITTEN = /(?:^|\/)(?:\.cache|\.npm|\.local|\.pnpm-store|\.yarn|\.foldrun)\//;
+
 /** Text files only — a PNG read as UTF-8 is noise to every rule here. */
 function isText(f: ScanFile): boolean {
   return !VENDORED.test(f.path) && !f.content.slice(0, 8000).includes("\u0000") && !/\.(?:png|jpe?g|gif|webp|ico|pdf|zip|gz|woff2?|ttf|mp[34]|mov|wasm)$/i.test(f.path);
@@ -763,6 +771,7 @@ export function scanFiles(files: ScanFile[], options: ScanOptions = {}): ScanFin
     const lines = f.content.split(/\r?\n/);
     ignoresByFile.set(f.path, readIgnores(f, lines, push));
     scanSecrets(f, lines, push);
+    if (RUNTIME_WRITTEN.test(f.path)) continue;
     scanContent(f, lines, push);
     scanSupplyChain(f, lines, push);