@foldrun/core 7.0.1 → 7.0.2

package/dist/src/store.js

@@ -2351,13 +2351,10 @@ function realLanding(full, followLast = true) {
  *  /etc/passwd, or a folder → / — passed them, and reads, writes and the run
  *  archive followed it out. */
 function landsInside(dir, full, followLast = true) {
-    let root;
-    try {
-        root = fs.realpathSync(dir);
-    }
-    catch {
-        root = path.resolve(dir);
-    }
+    // Canonical the same way as the path: a workspace not made yet under a
+    // linked ancestor (macOS /tmp → /private/tmp) is its nearest real
+    // ancestor plus the rest, or a first write into it would read as leaving.
+    const root = realLanding(dir) ?? path.resolve(dir);
     const at = realLanding(full, followLast);
     return at !== null && (at === root || at.startsWith(root + path.sep));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foldrun/core",
-  "version": "7.0.1",
+  "version": "7.0.2",
   "description": "Agents are just folders. The format, the runner, the checks.",
   "license": "FSL-1.1-ALv2",
   "type": "module",

package/src/store.ts

@@ -2818,12 +2818,10 @@ function realLanding(full: string, followLast = true): string | null {
  *  /etc/passwd, or a folder → / — passed them, and reads, writes and the run
  *  archive followed it out. */
 function landsInside(dir: string, full: string, followLast = true): boolean {
-  let root: string;
-  try {
-    root = fs.realpathSync(dir);
-  } catch {
-    root = path.resolve(dir);
-  }
+  // Canonical the same way as the path: a workspace not made yet under a
+  // linked ancestor (macOS /tmp → /private/tmp) is its nearest real
+  // ancestor plus the rest, or a first write into it would read as leaving.
+  const root = realLanding(dir) ?? path.resolve(dir);
   const at = realLanding(full, followLast);
   return at !== null && (at === root || at.startsWith(root + path.sep));
 }