agent-afk 5.322.18 → 5.322.19

package/dist/config/env.d.ts

@@ -883,6 +883,14 @@ export declare const ENV_REGISTRY: readonly [{
     readonly type: "boolean";
     readonly required: false;
     readonly category: "daemon";
+}, {
+    readonly name: "AFK_EVENTS_GITHUB_POLL_MS";
+    readonly description: string;
+    readonly type: "number";
+    readonly required: false;
+    readonly default: "60000";
+    readonly example: "30000";
+    readonly category: "daemon";
 }, {
     readonly name: "AFK_WEB_PORT";
     readonly description: "Port for the `afk web` browser surface. Defaults to 4141; falls back to an ephemeral port when taken. Overridden by --port.";
@@ -1452,7 +1460,7 @@ export declare const ENV_REGISTRY: readonly [{
     readonly category: "misc";
 }, {
     readonly name: "AFK_READ_DENYLIST";
-    readonly description: "Colon-separated list of additional absolute paths the read_file/grep/glob/list_directory tools refuse to read, and that the bash-restriction hook refuses to let a shell command reference on interactive surfaces (REPL, Telegram) — on headless surfaces (afk chat, daemon) bash fails open regardless of this list. A leading ~/ is expanded (~user/ is not — spell those absolutely). Built-in credential entries (~/.ssh, ~/.aws, ~/.afk/config, …) always apply on top and cannot be removed. One built-in exception exists: ~/.afk/config/mcp.json (the MCP registry) IS readable — paths listed here outrank that carve-out, so set this to ~/.afk/config/mcp.json if your registry holds inline secrets rather than ${VAR} placeholders.";
+    readonly description: "Colon-separated list of additional absolute paths the read_file/grep/glob/list_directory tools refuse to read, and that the bash-restriction hook refuses to let a shell command reference on interactive surfaces (REPL, Telegram) — on headless surfaces (afk chat, daemon) bash fails open regardless of this list. A leading ~/ is expanded (~user/ is not — spell those absolutely). Built-in credential entries (~/.ssh, ~/.aws, ~/.afk/config, …) always apply on top and cannot be removed. Built-in READ-only exceptions: ~/.afk/config/mcp.json (the MCP registry), ~/.afk/config/schedules.json, ~/.ssh/config, ~/.ssh/known_hosts, and SSH public keys (direct *.pub children of ~/.ssh, symlink-resolved). Paths listed here outrank every exception — e.g. set this to ~/.afk/config/mcp.json if your registry holds inline secrets rather than ${VAR} placeholders, or to ~/.ssh to re-deny all of ~/.ssh. Bash honors the exceptions only for provably read-only commands (cat/grep/head/… pipelines with no redirection); writes stay blocked on every surface.";
     readonly type: "string";
     readonly required: false;
     readonly example: "/Users/me/project/.env:/Users/me/secrets";

package/dist/config/env.daemon.d.ts

@@ -56,6 +56,14 @@ export declare const DAEMON_ENV_REGISTRY: readonly [{
     readonly type: "boolean";
     readonly required: false;
     readonly category: "daemon";
+}, {
+    readonly name: "AFK_EVENTS_GITHUB_POLL_MS";
+    readonly description: string;
+    readonly type: "number";
+    readonly required: false;
+    readonly default: "60000";
+    readonly example: "30000";
+    readonly category: "daemon";
 }, {
     readonly name: "AFK_WEB_PORT";
     readonly description: "Port for the `afk web` browser surface. Defaults to 4141; falls back to an ephemeral port when taken. Overridden by --port.";

package/dist/config/env.misc.d.ts

@@ -7,7 +7,7 @@ export declare const MISC_ENV_REGISTRY: readonly [{
     readonly category: "misc";
 }, {
     readonly name: "AFK_READ_DENYLIST";
-    readonly description: "Colon-separated list of additional absolute paths the read_file/grep/glob/list_directory tools refuse to read, and that the bash-restriction hook refuses to let a shell command reference on interactive surfaces (REPL, Telegram) — on headless surfaces (afk chat, daemon) bash fails open regardless of this list. A leading ~/ is expanded (~user/ is not — spell those absolutely). Built-in credential entries (~/.ssh, ~/.aws, ~/.afk/config, …) always apply on top and cannot be removed. One built-in exception exists: ~/.afk/config/mcp.json (the MCP registry) IS readable — paths listed here outrank that carve-out, so set this to ~/.afk/config/mcp.json if your registry holds inline secrets rather than ${VAR} placeholders.";
+    readonly description: "Colon-separated list of additional absolute paths the read_file/grep/glob/list_directory tools refuse to read, and that the bash-restriction hook refuses to let a shell command reference on interactive surfaces (REPL, Telegram) — on headless surfaces (afk chat, daemon) bash fails open regardless of this list. A leading ~/ is expanded (~user/ is not — spell those absolutely). Built-in credential entries (~/.ssh, ~/.aws, ~/.afk/config, …) always apply on top and cannot be removed. Built-in READ-only exceptions: ~/.afk/config/mcp.json (the MCP registry), ~/.afk/config/schedules.json, ~/.ssh/config, ~/.ssh/known_hosts, and SSH public keys (direct *.pub children of ~/.ssh, symlink-resolved). Paths listed here outrank every exception — e.g. set this to ~/.afk/config/mcp.json if your registry holds inline secrets rather than ${VAR} placeholders, or to ~/.ssh to re-deny all of ~/.ssh. Bash honors the exceptions only for provably read-only commands (cat/grep/head/… pipelines with no redirection); writes stay blocked on every surface.";
     readonly type: "string";
     readonly required: false;
     readonly example: "/Users/me/project/.env:/Users/me/secrets";