agent-afk 5.308.12 → 5.309.0

package/README.md

@@ -55,7 +55,7 @@ Codex imports use `CODEX_HOME` when set (otherwise `~/.codex`) and also discover
 
 ## What only afk does
 
-**`/whatif` behavioural impact predictor.** Before changing a prompt, model, skill, or memory rule, predict how the agent's behaviour will shift without touching your real config. Run `afk whatif --append "Always ask first." --verify` and the engine diffs the system prompts, predicts labelled behaviour shifts, then optionally verifies empirically by running sandboxed episodes and measuring rates. No real writes happen during the run. Source: `src/whatif/`, `docs/whatif.md`.
+**`afk whatif` behavioural impact predictor.** Before changing a prompt, model, skill, or memory rule, predict how the agent's behaviour will shift without touching your real config. Run `afk whatif --append "Always ask a clarifying question before using tools." --verify` and the engine diffs the system prompts, predicts labelled behaviour shifts, then optionally verifies empirically by running sandboxed episodes and measuring rates. No real writes happen during the run. Source: `src/whatif/`, `docs/whatif.md`.
 
 **Jev calibrated judgment.** Jev is an external cross-family judge you configure as an MCP server in `~/.afk/config/mcp.json`. When present, `afk whatif --judge auto` selects Jev to grade verification episodes; it returns calibrated probabilities and removes Anthropic self-preference bias in verdicts. Falls back to Claude when Jev is not configured. Use `--judge claude` to keep all episode data within Anthropic. Source: `src/whatif/judge/jev-connect.ts`, `docs/whatif.md`.
 

package/dist/agent/preexisting-ledger/reader.d.ts

@@ -1,4 +1,5 @@
 import type { LedgerRecord } from './session-end-hook.js';
+export declare const LEDGER_READ_LIMIT = 1048576;
 export interface LedgerReadResult {
     records: LedgerRecord[];
     ledgerTruncated: boolean;

package/dist/agent/risk-classifier.d.ts

@@ -1,7 +1,12 @@
 export type RiskLevel = 'safe' | 'medium' | 'high';
+export interface RiskVerdict {
+    level: RiskLevel;
+    reason?: string;
+}
 export interface RiskContext {
     cwd: string;
     workspaceRoot?: string;
     daemonTaskId?: string;
 }
 export declare function classifyRisk(toolName: string, input: unknown, ctx: RiskContext): RiskLevel;
+export declare function classifyRiskDetailed(toolName: string, input: unknown, ctx: RiskContext): RiskVerdict;

package/dist/agent/risk-classifier.paths.d.ts

@@ -0,0 +1,12 @@
+import path from 'path';
+import type { RiskContext, RiskVerdict } from './risk-classifier.js';
+export declare function isPrivateTempRoot(st: {
+    isDirectory(): boolean;
+    isSymbolicLink(): boolean;
+    uid: number;
+    mode: number;
+}, uid: number | undefined, platform: NodeJS.Platform): boolean;
+export declare function getTempRoots(): readonly string[];
+export declare function isOutsideRoot(root: string, target: string, pathImpl?: Pick<typeof path, 'relative' | 'isAbsolute'>): boolean;
+export declare function classifyFilePath(filePath: string, ctx: RiskContext): RiskVerdict;
+export declare function classifyPatchApply(input: unknown, ctx: RiskContext): RiskVerdict;