agent-afk 5.322.18 → 5.323.0

package/dist/agent/daemon/github-event-poller.d.ts

@@ -0,0 +1,30 @@
+export type GithubEventType = 'pr_comment' | 'check_failure' | 'issue_opened';
+export declare const SUPPORTED_EVENT_TYPES: readonly GithubEventType[];
+export interface GithubPollerOptions {
+    repo: string;
+    events: GithubEventType[];
+    commandTemplate: string;
+    pollIntervalMs?: number;
+    queueDir?: string;
+    stateDir?: string;
+    ghRunner?: GhRunner;
+}
+export type GhRunner = (path: string, extraArgs?: string[]) => Promise<unknown>;
+export declare function renderCommand(template: string, eventType: GithubEventType, repo: string, eventId: string, payloadSummary: string): string;
+export declare class GithubEventPoller {
+    private readonly repo;
+    private readonly events;
+    private readonly commandTemplate;
+    private readonly pollIntervalMs;
+    private readonly queueDir;
+    private readonly stateDir;
+    private readonly run;
+    private timer;
+    private polling;
+    constructor(opts: GithubPollerOptions);
+    start(): void;
+    stop(): void;
+    tick(): Promise<void>;
+    private _poll;
+    private _fetch;
+}

package/dist/agent/outcomes/schema.d.ts

@@ -54,8 +54,8 @@ export declare const VerifiedOutcomeSchema: z.ZodObject<{
         mutating: "mutating";
     }>;
     self_report: z.ZodEnum<{
-        done: "done";
         blocked: "blocked";
+        done: "done";
         none: "none";
         asking: "asking";
         interrupted: "interrupted";

package/dist/agent/risk-classifier.d.ts

@@ -1,7 +1,10 @@
 export type RiskLevel = 'safe' | 'medium' | 'high';
+export declare const RISK_CATEGORIES: readonly ["read-only", "bash-destructive", "bash-mutating", "bash-background", "workspace-write", "credential-path", "workspace-escape", "network-mutation", "schedule-mutation", "mcp-destructive", "mcp-unknown", "worktree-mutation", "browser-action", "remote-exec", "outbound-message", "unknown"];
+export type RiskCategory = (typeof RISK_CATEGORIES)[number];
 export interface RiskVerdict {
     level: RiskLevel;
     reason?: string;
+    category: RiskCategory;
 }
 export interface RiskContext {
     cwd: string;

package/dist/agent/tools/handlers/path-policy.d.ts

@@ -0,0 +1,7 @@
+export type PathAccessDecision = {
+    kind: 'allow';
+} | {
+    kind: 'deny';
+    matched: string;
+};
+export declare function decidePathAccess(rawPath: string, op: 'read' | 'write'): PathAccessDecision;

package/dist/agent/tools/handlers/read-denylist-carveout.d.ts

@@ -6,3 +6,8 @@ export declare function gateStaticCarveOuts(entries: readonly {
     source: string;
     root: string;
 }[]): string[];
+export declare function gateSshPubKeyDir(resolvedBuiltinEntries: readonly {
+    source: string;
+    root: string;
+}[], derivedRoots: readonly string[], piercedSource: string): string | undefined;
+export declare function isSshPubKeyChild(real: string, sshDir: string): boolean;

package/dist/agent/tools/handlers/read-denylist.d.ts

@@ -1,5 +1,6 @@
 export declare const BUILTIN_READ_DENYLIST: readonly string[];
 export declare const READ_ALLOWLIST_REL: readonly string[];
+export declare const SSH_PUBKEY_SUFFIX = ".pub";
 export declare const BUILTIN_READ_ALLOWLIST: readonly string[];
 export declare function resolveExceptionEntry(entry: string): string;
 export declare function parseReadDenylistEntries(raw: string | undefined): string[];

package/dist/agent/tools/hooks/bash-restriction-hook.pubkey-scrub.d.ts

@@ -0,0 +1,2 @@
+export declare const EXACT_REF_TAIL = "(?![\\w./\\\\*?\\[\\]{}-])(?!['\"`][\\w./\\\\*?\\[\\]{}-])";
+export declare function scrubSshPubKeyRefs(text: string, home: string): string;

package/dist/agent/tools/hooks/bash-restriction-hook.readonly-gate.d.ts

@@ -0,0 +1,2 @@
+export declare const READ_ONLY_COMMANDS: ReadonlySet<string>;
+export declare function isProvablyReadOnly(command: string): boolean;

package/dist/agent/trace/events.d.ts

@@ -26,9 +26,9 @@ export declare const ToolCallCompletedPayloadSchema: z.ZodObject<{
     circuitBreaker: z.ZodOptional<z.ZodBoolean>;
     failureClass: z.ZodOptional<z.ZodEnum<{
         abort: "abort";
-        budget: "budget";
         "policy-refusal": "policy-refusal";
         timeout: "timeout";
+        budget: "budget";
         "permission-denied": "permission-denied";
         "hook-block": "hook-block";
         "elicitation-declined": "elicitation-declined";
@@ -64,9 +64,9 @@ export declare const ToolCallPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     circuitBreaker: z.ZodOptional<z.ZodBoolean>;
     failureClass: z.ZodOptional<z.ZodEnum<{
         abort: "abort";
-        budget: "budget";
         "policy-refusal": "policy-refusal";
         timeout: "timeout";
+        budget: "budget";
         "permission-denied": "permission-denied";
         "hook-block": "hook-block";
         "elicitation-declined": "elicitation-declined";
@@ -118,6 +118,24 @@ export declare const HookDecisionPayloadSchema: z.ZodObject<{
         unrecognised: "unrecognised";
         "hard-block": "hard-block";
     }>>;
+    riskCategory: z.ZodOptional<z.ZodEnum<{
+        unknown: "unknown";
+        "read-only": "read-only";
+        "bash-destructive": "bash-destructive";
+        "bash-mutating": "bash-mutating";
+        "bash-background": "bash-background";
+        "workspace-write": "workspace-write";
+        "credential-path": "credential-path";
+        "workspace-escape": "workspace-escape";
+        "network-mutation": "network-mutation";
+        "schedule-mutation": "schedule-mutation";
+        "mcp-destructive": "mcp-destructive";
+        "mcp-unknown": "mcp-unknown";
+        "worktree-mutation": "worktree-mutation";
+        "browser-action": "browser-action";
+        "remote-exec": "remote-exec";
+        "outbound-message": "outbound-message";
+    }>>;
 }, z.core.$strip>;
 export declare const HookSummaryPayloadSchema: z.ZodObject<{
     scope: z.ZodLiteral<"root-session-including-subagents">;
@@ -181,16 +199,16 @@ export declare const BudgetPayloadSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const AbortOriginSchema: z.ZodEnum<{
     cascade: "cascade";
-    budget: "budget";
     timeout: "timeout";
+    budget: "budget";
     user_signal: "user_signal";
     hook_block: "hook_block";
 }>;
 export declare const AbortPayloadSchema: z.ZodObject<{
     origin: z.ZodEnum<{
         cascade: "cascade";
-        budget: "budget";
         timeout: "timeout";
+        budget: "budget";
         user_signal: "user_signal";
         hook_block: "hook_block";
     }>;
@@ -200,8 +218,8 @@ export declare const AbortPayloadSchema: z.ZodObject<{
 export declare const ClosureReasonSchema: z.ZodEnum<{
     abort: "abort";
     timeout: "timeout";
-    model_end_turn: "model_end_turn";
     truncated: "truncated";
+    model_end_turn: "model_end_turn";
     iteration_cap: "iteration_cap";
     budget_exceeded: "budget_exceeded";
     hook_blocked: "hook_blocked";
@@ -211,8 +229,8 @@ export declare const ClosurePayloadSchema: z.ZodObject<{
     reason: z.ZodEnum<{
         abort: "abort";
         timeout: "timeout";
-        model_end_turn: "model_end_turn";
         truncated: "truncated";
+        model_end_turn: "model_end_turn";
         iteration_cap: "iteration_cap";
         budget_exceeded: "budget_exceeded";
         hook_blocked: "hook_blocked";
@@ -331,9 +349,9 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         circuitBreaker: z.ZodOptional<z.ZodBoolean>;
         failureClass: z.ZodOptional<z.ZodEnum<{
             abort: "abort";
-            budget: "budget";
             "policy-refusal": "policy-refusal";
             timeout: "timeout";
+            budget: "budget";
             "permission-denied": "permission-denied";
             "hook-block": "hook-block";
             "elicitation-declined": "elicitation-declined";
@@ -377,6 +395,24 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
             unrecognised: "unrecognised";
             "hard-block": "hard-block";
         }>>;
+        riskCategory: z.ZodOptional<z.ZodEnum<{
+            unknown: "unknown";
+            "read-only": "read-only";
+            "bash-destructive": "bash-destructive";
+            "bash-mutating": "bash-mutating";
+            "bash-background": "bash-background";
+            "workspace-write": "workspace-write";
+            "credential-path": "credential-path";
+            "workspace-escape": "workspace-escape";
+            "network-mutation": "network-mutation";
+            "schedule-mutation": "schedule-mutation";
+            "mcp-destructive": "mcp-destructive";
+            "mcp-unknown": "mcp-unknown";
+            "worktree-mutation": "worktree-mutation";
+            "browser-action": "browser-action";
+            "remote-exec": "remote-exec";
+            "outbound-message": "outbound-message";
+        }>>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"hook_summary">;
@@ -429,9 +465,9 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         partialOutputBytes: z.ZodNumber;
         failureClass: z.ZodOptional<z.ZodEnum<{
             abort: "abort";
-            budget: "budget";
             "policy-refusal": "policy-refusal";
             timeout: "timeout";
+            budget: "budget";
             "permission-denied": "permission-denied";
             "hook-block": "hook-block";
             "elicitation-declined": "elicitation-declined";
@@ -520,8 +556,8 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     payload: z.ZodObject<{
         origin: z.ZodEnum<{
             cascade: "cascade";
-            budget: "budget";
             timeout: "timeout";
+            budget: "budget";
             user_signal: "user_signal";
             hook_block: "hook_block";
         }>;
@@ -554,8 +590,8 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         reason: z.ZodEnum<{
             abort: "abort";
             timeout: "timeout";
-            model_end_turn: "model_end_turn";
             truncated: "truncated";
+            model_end_turn: "model_end_turn";
             iteration_cap: "iteration_cap";
             budget_exceeded: "budget_exceeded";
             hook_blocked: "hook_blocked";
@@ -761,9 +797,9 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         circuitBreaker: z.ZodOptional<z.ZodBoolean>;
         failureClass: z.ZodOptional<z.ZodEnum<{
             abort: "abort";
-            budget: "budget";
             "policy-refusal": "policy-refusal";
             timeout: "timeout";
+            budget: "budget";
             "permission-denied": "permission-denied";
             "hook-block": "hook-block";
             "elicitation-declined": "elicitation-declined";
@@ -809,6 +845,24 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             unrecognised: "unrecognised";
             "hard-block": "hard-block";
         }>>;
+        riskCategory: z.ZodOptional<z.ZodEnum<{
+            unknown: "unknown";
+            "read-only": "read-only";
+            "bash-destructive": "bash-destructive";
+            "bash-mutating": "bash-mutating";
+            "bash-background": "bash-background";
+            "workspace-write": "workspace-write";
+            "credential-path": "credential-path";
+            "workspace-escape": "workspace-escape";
+            "network-mutation": "network-mutation";
+            "schedule-mutation": "schedule-mutation";
+            "mcp-destructive": "mcp-destructive";
+            "mcp-unknown": "mcp-unknown";
+            "worktree-mutation": "worktree-mutation";
+            "browser-action": "browser-action";
+            "remote-exec": "remote-exec";
+            "outbound-message": "outbound-message";
+        }>>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
     ts: z.ZodString;
@@ -865,9 +919,9 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         partialOutputBytes: z.ZodNumber;
         failureClass: z.ZodOptional<z.ZodEnum<{
             abort: "abort";
-            budget: "budget";
             "policy-refusal": "policy-refusal";
             timeout: "timeout";
+            budget: "budget";
             "permission-denied": "permission-denied";
             "hook-block": "hook-block";
             "elicitation-declined": "elicitation-declined";
@@ -962,8 +1016,8 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     payload: z.ZodObject<{
         origin: z.ZodEnum<{
             cascade: "cascade";
-            budget: "budget";
             timeout: "timeout";
+            budget: "budget";
             user_signal: "user_signal";
             hook_block: "hook_block";
         }>;
@@ -1004,8 +1058,8 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         reason: z.ZodEnum<{
             abort: "abort";
             timeout: "timeout";
-            model_end_turn: "model_end_turn";
             truncated: "truncated";
+            model_end_turn: "model_end_turn";
             iteration_cap: "iteration_cap";
             budget_exceeded: "budget_exceeded";
             hook_blocked: "hook_blocked";

package/dist/agent/trace/events.subagent-lifecycle.d.ts

@@ -1,9 +1,9 @@
 import { z } from 'zod';
 export declare const ToolFailureClassSchema: z.ZodEnum<{
     abort: "abort";
-    budget: "budget";
     "policy-refusal": "policy-refusal";
     timeout: "timeout";
+    budget: "budget";
     "permission-denied": "permission-denied";
     "hook-block": "hook-block";
     "elicitation-declined": "elicitation-declined";
@@ -56,9 +56,9 @@ export declare const SubagentFailedPayloadSchema: z.ZodObject<{
     partialOutputBytes: z.ZodNumber;
     failureClass: z.ZodOptional<z.ZodEnum<{
         abort: "abort";
-        budget: "budget";
         "policy-refusal": "policy-refusal";
         timeout: "timeout";
+        budget: "budget";
         "permission-denied": "permission-denied";
         "hook-block": "hook-block";
         "elicitation-declined": "elicitation-declined";
@@ -126,9 +126,9 @@ export declare const SubagentLifecyclePayloadSchema: z.ZodDiscriminatedUnion<[z.
     partialOutputBytes: z.ZodNumber;
     failureClass: z.ZodOptional<z.ZodEnum<{
         abort: "abort";
-        budget: "budget";
         "policy-refusal": "policy-refusal";
         timeout: "timeout";
+        budget: "budget";
         "permission-denied": "permission-denied";
         "hook-block": "hook-block";
         "elicitation-declined": "elicitation-declined";

package/dist/agent/trace/types.d.ts

@@ -41,6 +41,7 @@ export interface HookDecisionPayload {
     injectedContextBytes?: number;
     durationMs?: number;
     approvalOutcome?: AfkApprovalOutcome;
+    riskCategory?: import('../risk-classifier.js').RiskCategory;
 }
 export interface HookSummaryPayload {
     scope: 'root-session-including-subagents';

package/dist/cli/commands/events.d.ts

@@ -0,0 +1,2 @@
+import { Command } from 'commander';
+export declare function registerEventsCommand(program: Command): void;