jules-orchestrator-kit 0.52.6 → 0.52.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jules-orchestrator-kit",
-  "version": "0.52.6",
+  "version": "0.52.8",
   "description": "Zero-dependency safety gatekeeper, test oracle generator, and multi-agent coordination protocol for Google Jules (jules) autonomous agents.",
   "repository": {
     "type": "git",

package/src/security.mjs

@@ -844,14 +844,19 @@ export function hasHighEntropyToken(text = "", file = null) {
             const plain = Buffer.from(token, "base64").toString("utf-8");
             const pr = printableRatio(plain);
             if (pr < 0.9) {
-              // Ordinary binary asset (e.g. icon/font/wasm) - do not trip on binary entropy
+              // Ordinary binary asset (e.g. icon/font/wasm) - do not trip on binary entropy.
+              // Only treat as binary asset if sufficiently large (>= 256 chars);
+              // shorter tokens (24-255 chars) are keys/secrets/hashes, not embedded assets.
+              if (token.length >= 256) {
+                continue;
+              }
+            } else {
+              // If it decodes to text, check decoded plain text entropy
+              if (shannonEntropy(plain) > 4.5) {
+                return true;
+              }
               continue;
             }
-            // If it decodes to text, check decoded plain text entropy
-            if (shannonEntropy(plain) > 4.5) {
-              return true;
-            }
-            continue;
           } catch (_) {}
         }