foldrun 3.0.1 → 4.0.1

package/docs/agents.md

@@ -506,6 +506,15 @@ and snapshots as `runtime: system:`, so a package anyone in the account
 installed before is back in about a second. pip and npm packages need no root
 and are installed as the agent, into a directory of the step's own.
 
+A pip or npm package runs none of its own code on the way in. npm installs
+with `--ignore-scripts` — no `preinstall` or `postinstall` — and pip takes
+built wheels only (`--only-binary :all:`), because building a source package
+runs its `setup.py`. Debian packages are different: apt runs their
+maintainer scripts as root, which is why only the start-up's helper installs
+them, and only by a checked package name from Debian's own archive. A package that exists only as source is refused with the line
+to add instead: `runtime: packages:` builds it before the step, where the
+build is declared and cached.
+
 Each install is in the run log with the line that would have it ready before
 the step starts — `install: apt ffmpeg — ready (snapshot, 1s). To have it
 before the step starts: runtime: system: [ffmpeg]`. Moving it into `runtime:`

package/docs/team-and-access.md

@@ -50,6 +50,13 @@ because a key names an account and never a who — and exceed its role.
 A scoped admin sees and revokes only keys inside its own scope; a key wider
 than that, the owner's included, is not in its list.
 
+A key stays no wider than its maker **after** it is made, too. Remove a
+member and every key they minted in the account stops working at once —
+the one `foldrun login` made included. Lower their role, or narrow their
+workspaces, and each of their keys that would now reach more than they can
+stops; they mint a new one at their new standing. Each such revocation is
+in the audit log (`apikey.revoked`, and `keysRevoked` on `member.removed`).
+
 A CI job or a contractor should hold a key that opens one workspace —
 `foldrun keys create ci --workspaces leads`, or Settings → API keys. (Deploy
 keys, for the platform's own git, went with it on 17 October 2026; one

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "foldrun",
-  "version": "3.0.1",
+  "version": "4.0.1",
   "description": "Agents are just folders. Write them, check them, run them — on your machine.",
   "license": "FSL-1.1-ALv2",
   "type": "module",
@@ -11,7 +11,7 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@foldrun/core": "^2.14.3"
+    "@foldrun/core": "^3.0.0"
   },
   "files": [
     "bin",