agent-afk 5.322.18 → 5.322.19

package/dist/agent/daemon/github-event-poller.d.ts

@@ -0,0 +1,30 @@
+export type GithubEventType = 'pr_comment' | 'check_failure' | 'issue_opened';
+export declare const SUPPORTED_EVENT_TYPES: readonly GithubEventType[];
+export interface GithubPollerOptions {
+    repo: string;
+    events: GithubEventType[];
+    commandTemplate: string;
+    pollIntervalMs?: number;
+    queueDir?: string;
+    stateDir?: string;
+    ghRunner?: GhRunner;
+}
+export type GhRunner = (path: string, extraArgs?: string[]) => Promise<unknown>;
+export declare function renderCommand(template: string, eventType: GithubEventType, repo: string, eventId: string, payloadSummary: string): string;
+export declare class GithubEventPoller {
+    private readonly repo;
+    private readonly events;
+    private readonly commandTemplate;
+    private readonly pollIntervalMs;
+    private readonly queueDir;
+    private readonly stateDir;
+    private readonly run;
+    private timer;
+    private polling;
+    constructor(opts: GithubPollerOptions);
+    start(): void;
+    stop(): void;
+    tick(): Promise<void>;
+    private _poll;
+    private _fetch;
+}

package/dist/agent/tools/handlers/path-policy.d.ts

@@ -0,0 +1,7 @@
+export type PathAccessDecision = {
+    kind: 'allow';
+} | {
+    kind: 'deny';
+    matched: string;
+};
+export declare function decidePathAccess(rawPath: string, op: 'read' | 'write'): PathAccessDecision;

package/dist/agent/tools/handlers/read-denylist-carveout.d.ts

@@ -6,3 +6,8 @@ export declare function gateStaticCarveOuts(entries: readonly {
     source: string;
     root: string;
 }[]): string[];
+export declare function gateSshPubKeyDir(resolvedBuiltinEntries: readonly {
+    source: string;
+    root: string;
+}[], derivedRoots: readonly string[], piercedSource: string): string | undefined;
+export declare function isSshPubKeyChild(real: string, sshDir: string): boolean;

package/dist/agent/tools/handlers/read-denylist.d.ts

@@ -1,5 +1,6 @@
 export declare const BUILTIN_READ_DENYLIST: readonly string[];
 export declare const READ_ALLOWLIST_REL: readonly string[];
+export declare const SSH_PUBKEY_SUFFIX = ".pub";
 export declare const BUILTIN_READ_ALLOWLIST: readonly string[];
 export declare function resolveExceptionEntry(entry: string): string;
 export declare function parseReadDenylistEntries(raw: string | undefined): string[];

package/dist/agent/tools/hooks/bash-restriction-hook.pubkey-scrub.d.ts

@@ -0,0 +1,2 @@
+export declare const EXACT_REF_TAIL = "(?![\\w./\\\\*?\\[\\]{}-])(?!['\"`][\\w./\\\\*?\\[\\]{}-])";
+export declare function scrubSshPubKeyRefs(text: string, home: string): string;

package/dist/agent/tools/hooks/bash-restriction-hook.readonly-gate.d.ts

@@ -0,0 +1,2 @@
+export declare const READ_ONLY_COMMANDS: ReadonlySet<string>;
+export declare function isProvablyReadOnly(command: string): boolean;

package/dist/cli/commands/events.d.ts

@@ -0,0 +1,2 @@
+import { Command } from 'commander';
+export declare function registerEventsCommand(program: Command): void;