claude-agent-sdk 0.37.0 → 1.1.0

data/sig/claude_agent_sdk/types/option_values.rbs

@@ -0,0 +1,245 @@
+module ClaudeAgentSDK
+  # Valid `display` values of the thinking configs.
+  THINKING_DISPLAY_VALUES: Array[String]
+
+  # The value types below are built by the caller and passed IN (inside
+  # ClaudeAgentOptions). Each constructor takes the attributes as keywords;
+  # the Hash form (String or camelCase keys, e.g. `klass.new(value.to_h)`)
+  # is accepted too. An unknown key raises ArgumentError. Discriminators
+  # (`type`) are fixed by the class and read-only.
+
+  # Adaptive thinking: the model decides when and how much to think.
+  class ThinkingConfigAdaptive < Type
+    def initialize: (?display: String?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # "adaptive".
+    attr_reader type: String
+
+    attr_reader display: String?
+
+    # Raises ArgumentError unless nil or one of THINKING_DISPLAY_VALUES.
+    def display=: (String? value) -> String?
+  end
+
+  # Thinking with an explicit token budget.
+  class ThinkingConfigEnabled < Type
+    def initialize: (?budget_tokens: Integer?, ?display: String?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor budget_tokens: Integer?
+
+    # "enabled".
+    attr_reader type: String
+
+    attr_reader display: String?
+
+    # Raises ArgumentError unless nil or one of THINKING_DISPLAY_VALUES.
+    def display=: (String? value) -> String?
+  end
+
+  class ThinkingConfigDisabled < Type
+    def initialize: () -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # "disabled".
+    attr_reader type: String
+  end
+
+  # A subagent definition (ClaudeAgentOptions#agents values).
+  class AgentDefinition < Type
+    def initialize: (?description: String?, ?prompt: String?, ?tools: Array[String]?, ?disallowed_tools: Array[String]?, ?model: String?, ?skills: Array[String]?, ?memory: String?, ?mcp_servers: Array[String | Hash[Symbol | String, untyped]]?, ?initial_prompt: String?, ?max_turns: Integer?, ?background: bool?, ?effort: (String | Integer)?, ?permission_mode: String?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor description: String?
+
+    attr_accessor prompt: String?
+
+    attr_accessor tools: Array[String]?
+
+    attr_accessor disallowed_tools: Array[String]?
+
+    attr_accessor model: String?
+
+    attr_accessor skills: Array[String]?
+
+    attr_accessor memory: String?
+
+    # MCP server names, or inline server config Hashes.
+    attr_accessor mcp_servers: Array[String | Hash[Symbol | String, untyped]]?
+
+    attr_accessor initial_prompt: String?
+
+    attr_accessor max_turns: Integer?
+
+    attr_accessor background: bool?
+
+    attr_accessor effort: (String | Integer)?
+
+    attr_accessor permission_mode: String?
+  end
+
+  # A local plugin directory (ClaudeAgentOptions#plugins entries).
+  class SdkPluginConfig < Type
+    def initialize: (?path: String?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor path: String?
+
+    # "local".
+    attr_reader type: String
+
+    def to_h: () -> { type: String, path: String? }
+  end
+
+  class SandboxNetworkConfig < Type
+    def initialize: (?allowed_domains: Array[String]?, ?denied_domains: Array[String]?, ?allow_managed_domains_only: bool?, ?allow_unix_sockets: (bool | Array[String])?, ?allow_all_unix_sockets: bool?, ?allow_local_binding: bool?, ?allow_mach_lookup: Array[String]?, ?http_proxy_port: Integer?, ?socks_proxy_port: Integer?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor allowed_domains: Array[String]?
+
+    attr_accessor denied_domains: Array[String]?
+
+    attr_accessor allow_managed_domains_only: bool?
+
+    attr_accessor allow_unix_sockets: (bool | Array[String])?
+
+    attr_accessor allow_all_unix_sockets: bool?
+
+    attr_accessor allow_local_binding: bool?
+
+    attr_accessor allow_mach_lookup: Array[String]?
+
+    attr_accessor http_proxy_port: Integer?
+
+    attr_accessor socks_proxy_port: Integer?
+
+    # The camelCase settings form.
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
+  class SandboxFilesystemConfig < Type
+    def initialize: (?allow_write: Array[String]?, ?deny_write: Array[String]?, ?deny_read: Array[String]?, ?allow_read: Array[String]?, ?allow_managed_read_paths_only: bool?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor allow_write: Array[String]?
+
+    attr_accessor deny_write: Array[String]?
+
+    attr_accessor deny_read: Array[String]?
+
+    attr_accessor allow_read: Array[String]?
+
+    attr_accessor allow_managed_read_paths_only: bool?
+
+    # The camelCase settings form.
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
+  # Sandbox settings for isolated command execution
+  # (ClaudeAgentOptions#sandbox).
+  class SandboxSettings < Type
+    def initialize: (?enabled: bool?, ?fail_if_unavailable: bool?, ?auto_allow_bash_if_sandboxed: bool?, ?excluded_commands: Array[String]?, ?allow_unsandboxed_commands: bool?, ?network: (SandboxNetworkConfig | Hash[Symbol | String, untyped])?, ?filesystem: (SandboxFilesystemConfig | Hash[Symbol | String, untyped])?, ?ignore_violations: Hash[Symbol | String, Array[String]]?, ?enable_weaker_nested_sandbox: bool?, ?enable_weaker_network_isolation: bool?, ?ripgrep: Hash[Symbol | String, untyped]?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor enabled: bool?
+
+    attr_accessor fail_if_unavailable: bool?
+
+    attr_accessor auto_allow_bash_if_sandboxed: bool?
+
+    attr_accessor excluded_commands: Array[String]?
+
+    attr_accessor allow_unsandboxed_commands: bool?
+
+    attr_accessor network: (SandboxNetworkConfig | Hash[Symbol | String, untyped])?
+
+    attr_accessor filesystem: (SandboxFilesystemConfig | Hash[Symbol | String, untyped])?
+
+    # e.g. { file: [...paths], network: [...hosts] }.
+    attr_accessor ignore_violations: Hash[Symbol | String, Array[String]]?
+
+    attr_accessor enable_weaker_nested_sandbox: bool?
+
+    attr_accessor enable_weaker_network_isolation: bool?
+
+    attr_accessor ripgrep: Hash[Symbol | String, untyped]?
+
+    # The camelCase settings form.
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
+  # API-side task budget in tokens (ClaudeAgentOptions#task_budget).
+  class TaskBudget < Type
+    def initialize: (?total: Integer?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor total: Integer?
+
+    def to_h: () -> { total: Integer? }
+  end
+
+  # A system prompt loaded from a file.
+  class SystemPromptFile < Type
+    def initialize: (?path: String?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor path: String?
+
+    # "file".
+    attr_reader type: String
+
+    def to_h: () -> { type: String, path: String? }
+  end
+
+  # The Claude Code preset system prompt, optionally extended.
+  class SystemPromptPreset < Type
+    def initialize: (?preset: String?, ?append: String?, ?exclude_dynamic_sections: bool?, ?snapshot: bool?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # "preset".
+    attr_reader type: String
+
+    # e.g. "claude_code".
+    attr_accessor preset: String?
+
+    attr_accessor append: String?
+
+    attr_accessor exclude_dynamic_sections: bool?
+
+    # Whether the session keeps the system prompt recorded on its first
+    # request (nil: the CLI default).
+    attr_accessor snapshot: bool?
+
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
+  # The object form of a String system prompt, so snapshot can be set.
+  class SystemPromptCustom < Type
+    def initialize: (?prompt: String?, ?snapshot: bool?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # "custom".
+    attr_reader type: String
+
+    attr_accessor prompt: String?
+
+    attr_accessor snapshot: bool?
+
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
+  # A tools preset (ClaudeAgentOptions#tools).
+  class ToolsPreset < Type
+    def initialize: (?preset: String?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # "preset".
+    attr_reader type: String
+
+    # e.g. "claude_code".
+    attr_accessor preset: String?
+
+    def to_h: () -> { type: String, preset: String? }
+  end
+end

data/sig/claude_agent_sdk/types/options.rbs

@@ -0,0 +1,297 @@
+module ClaudeAgentSDK
+  SETTING_SOURCES: Array[String]
+
+  # Named ClaudeAgentOptions#effort levels (an Integer is accepted too).
+  EFFORT_LEVELS: Array[String]
+
+  SDK_BETAS: Array[String]
+
+  # ClaudeAgentOptions#system_prompt: a String, a typed config, or the
+  # equivalent Hash ({ type: 'preset' | 'custom' | 'file', ... }).
+  type system_prompt_config = String | SystemPromptPreset | SystemPromptCustom | SystemPromptFile | Hash[Symbol | String, untyped]
+
+  # ClaudeAgentOptions#thinking.
+  type thinking_config = ThinkingConfigAdaptive | ThinkingConfigEnabled | ThinkingConfigDisabled | Hash[Symbol | String, untyped]
+
+  # ClaudeAgentOptions#stderr: called with each stderr line of the CLI.
+  interface _StderrCallback
+    def call: (String line) -> void
+  end
+
+  # ClaudeAgentOptions#debug_stderr as an IO-like object.
+  interface _Puts
+    def puts: (*untyped) -> untyped
+  end
+
+  # Configuration for query / Client. Unknown option names raise
+  # ArgumentError (in .new, #[]= and #dup_with). Values set with
+  # ClaudeAgentSDK.configure are merged in as defaults.
+  #
+  # The container options (allowed_tools, env, mcp_servers, ...) and
+  # session_store_flush / load_timeout_ms are filled with their defaults by
+  # the constructor, so they are nil only when set to nil afterwards.
+  class ClaudeAgentOptions < Type
+    CALLBACK_SCHEDULING_MODES: Array[Symbol]
+
+    def initialize: (
+                      ?allowed_tools: Array[String]?,
+                      ?system_prompt: system_prompt_config?,
+                      ?mcp_servers: (Hash[String | Symbol, mcp_server_config] | String)?,
+                      ?permission_mode: String?,
+                      ?resume: String?,
+                      ?resume_session_at: String?,
+                      ?resume_drops_turn: String?,
+                      ?session_id: String?,
+                      ?max_turns: Integer?,
+                      ?disallowed_tools: Array[String]?,
+                      ?model: String?,
+                      ?permission_prompt_tool_name: String?,
+                      ?cwd: (String | Pathname)?,
+                      ?cli_path: (String | Pathname)?,
+                      ?settings: (String | Hash[Symbol | String, untyped])?,
+                      ?add_dirs: Array[String | Pathname]?,
+                      ?env: Hash[String | Symbol, String?]?,
+                      ?extra_args: Hash[String | Symbol, untyped]?,
+                      ?max_buffer_size: Integer?,
+                      ?stderr: _StderrCallback?,
+                      ?can_use_tool: _CanUseTool?,
+                      ?hooks: Hash[String | Symbol, Array[HookMatcher]?]?,
+                      ?user: (String | Integer)?,
+                      ?agents: Hash[String | Symbol, AgentDefinition | Hash[Symbol | String, untyped]]?,
+                      ?setting_sources: Array[String]?,
+                      ?skills: (String | Array[String])?,
+                      ?output_format: (Hash[Symbol | String, untyped] | String)?,
+                      ?max_budget_usd: Numeric?,
+                      ?max_thinking_tokens: Integer?,
+                      ?fallback_model: String?,
+                      ?advisor_model: String?,
+                      ?plugins: Array[SdkPluginConfig | Hash[Symbol | String, untyped]]?,
+                      ?debug_stderr: (_Puts | String)?,
+                      ?betas: Array[String]?,
+                      ?tools: (Array[String] | ToolsPreset | Hash[Symbol | String, untyped])?,
+                      ?sandbox: (SandboxSettings | Hash[Symbol | String, untyped] | bool)?,
+                      ?thinking: thinking_config?,
+                      ?effort: (String | Symbol | Integer)?,
+                      ?observers: Array[untyped]?,
+                      ?task_budget: (TaskBudget | Hash[Symbol | String, untyped])?,
+                      ?session_store: _SessionStore?,
+                      ?session_store_flush: (String | Symbol)?,
+                      ?load_timeout_ms: Numeric?,
+                      ?bare: bool?,
+                      ?fork_session: bool?,
+                      ?enable_file_checkpointing: bool?,
+                      ?include_partial_messages: bool?,
+                      ?continue_conversation: bool?,
+                      ?include_hook_events: bool?,
+                      ?strict_mcp_config: bool?,
+                      ?forward_subagent_text: bool?,
+                      ?verbatim_prompts: bool?,
+                      ?agent_progress_summaries: bool?,
+                      ?callback_scheduling: (:thread | :inline | "thread" | "inline")?,
+                      ?callback_wrapper: _CallbackWrapper?
+                    ) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # A deep copy with changes applied (unknown names raise ArgumentError).
+    # Containers and option value types are copied; callables, SDK MCP server
+    # instances and store adapters keep their identity.
+    def dup_with: (**untyped changes) -> ClaudeAgentOptions
+
+    # Tool names always allowed ([] by default).
+    attr_accessor allowed_tools: Array[String]?
+
+    attr_accessor system_prompt: system_prompt_config?
+
+    # Server name => config ({} by default), or a path / JSON String passed
+    # to --mcp-config.
+    attr_accessor mcp_servers: (Hash[String | Symbol, mcp_server_config] | String)?
+
+    # One of PERMISSION_MODES.
+    attr_accessor permission_mode: String?
+
+    # Session id to resume.
+    attr_accessor resume: String?
+
+    # With #resume: truncate the resumed session after this message UUID.
+    attr_accessor resume_session_at: String?
+
+    # With #resume_session_at: the prompt UUID of the turn being discarded.
+    attr_accessor resume_drops_turn: String?
+
+    attr_accessor session_id: String?
+
+    attr_accessor max_turns: Integer?
+
+    # Tool names always denied ([] by default).
+    attr_accessor disallowed_tools: Array[String]?
+
+    attr_accessor model: String?
+
+    attr_accessor permission_prompt_tool_name: String?
+
+    attr_accessor cwd: (String | Pathname)?
+
+    attr_accessor cli_path: (String | Pathname)?
+
+    # A settings JSON String, a path to a settings file, or a Hash.
+    attr_accessor settings: (String | Hash[Symbol | String, untyped])?
+
+    attr_accessor add_dirs: Array[String | Pathname]?
+
+    # Extra environment for the CLI process ({} by default).
+    attr_accessor env: Hash[String | Symbol, String?]?
+
+    # Extra CLI flags: flag name (kebab-case, no leading --) => value, nil
+    # for a boolean flag ({} by default).
+    attr_accessor extra_args: Hash[String | Symbol, untyped]?
+
+    attr_accessor max_buffer_size: Integer?
+
+    attr_accessor stderr: _StderrCallback?
+
+    attr_accessor can_use_tool: _CanUseTool?
+
+    # Hook event name (see HOOK_EVENTS) => matchers.
+    attr_accessor hooks: Hash[String | Symbol, Array[HookMatcher]?]?
+
+    # User (name or uid) to run the CLI process as.
+    attr_accessor user: (String | Integer)?
+
+    attr_accessor agents: Hash[String | Symbol, AgentDefinition | Hash[Symbol | String, untyped]]?
+
+    # Entries of SETTING_SOURCES.
+    attr_accessor setting_sources: Array[String]?
+
+    # 'all', or the names of the skills to enable.
+    attr_accessor skills: (String | Array[String])?
+
+    # { type: 'json_schema', schema: {...} }, a bare schema Hash, or a JSON
+    # String.
+    attr_accessor output_format: (Hash[Symbol | String, untyped] | String)?
+
+    attr_accessor max_budget_usd: Numeric?
+
+    attr_accessor max_thinking_tokens: Integer?
+
+    attr_accessor fallback_model: String?
+
+    attr_accessor advisor_model: String?
+
+    attr_accessor plugins: Array[SdkPluginConfig | Hash[Symbol | String, untyped]]?
+
+    # An IO-like object (#puts) or a file path to append CLI stderr to.
+    attr_accessor debug_stderr: (_Puts | String)?
+
+    # Entries of SDK_BETAS.
+    attr_accessor betas: Array[String]?
+
+    # The base tool set: tool names, or a preset.
+    attr_accessor tools: (Array[String] | ToolsPreset | Hash[Symbol | String, untyped])?
+
+    # true / false are forwarded as-is (a bare toggle).
+    attr_accessor sandbox: (SandboxSettings | Hash[Symbol | String, untyped] | bool)?
+
+    attr_accessor thinking: thinking_config?
+
+    # One of EFFORT_LEVELS, or an Integer.
+    attr_accessor effort: (String | Symbol | Integer)?
+
+    # Observer instances, or factories (callables returning a fresh observer
+    # per query/session). Anything implementing none of the Observer methods
+    # is warned about and skipped, so the element type is left open.
+    attr_accessor observers: Array[untyped]?
+
+    attr_accessor task_budget: (TaskBudget | Hash[Symbol | String, untyped])?
+
+    # Mirrors transcripts to this store and enables resume from it.
+    attr_accessor session_store: _SessionStore?
+
+    # One of SESSION_STORE_FLUSH_MODES ('batched' by default).
+    attr_accessor session_store_flush: (String | Symbol)?
+
+    # Resume-materialization timeout (60_000 by default; 0 = immediate).
+    attr_accessor load_timeout_ms: Numeric?
+
+    # The boolean flags coerce any assigned value (nil stays nil where
+    # noted; "false", "0", "off", ... read as false). The predicate form
+    # (#bare?, ...) is a strict Boolean.
+
+    attr_reader bare: bool?
+
+    def bare=: (untyped value) -> bool?
+
+    def bare?: () -> bool
+
+    attr_reader fork_session: bool?
+
+    def fork_session=: (untyped value) -> bool?
+
+    def fork_session?: () -> bool
+
+    attr_reader enable_file_checkpointing: bool?
+
+    def enable_file_checkpointing=: (untyped value) -> bool?
+
+    def enable_file_checkpointing?: () -> bool
+
+    attr_reader include_partial_messages: bool?
+
+    def include_partial_messages=: (untyped value) -> bool?
+
+    def include_partial_messages?: () -> bool
+
+    attr_reader continue_conversation: bool?
+
+    def continue_conversation=: (untyped value) -> bool?
+
+    def continue_conversation?: () -> bool
+
+    attr_reader include_hook_events: bool?
+
+    def include_hook_events=: (untyped value) -> bool?
+
+    def include_hook_events?: () -> bool
+
+    attr_reader strict_mcp_config: bool?
+
+    def strict_mcp_config=: (untyped value) -> bool?
+
+    def strict_mcp_config?: () -> bool
+
+    # Forward subagent text and thinking blocks (false by default).
+    attr_reader forward_subagent_text: bool?
+
+    def forward_subagent_text=: (untyped value) -> bool?
+
+    def forward_subagent_text?: () -> bool
+
+    # Mark every outgoing user message client_composed, so the CLI delivers
+    # it as written (false by default).
+    attr_reader verbatim_prompts: bool?
+
+    def verbatim_prompts=: (untyped value) -> bool?
+
+    def verbatim_prompts?: () -> bool
+
+    # Request model-generated progress summaries for subagent tasks (nil:
+    # unset, not sent).
+    attr_reader agent_progress_summaries: bool?
+
+    def agent_progress_summaries=: (untyped value) -> bool?
+
+    # Where user callbacks run (:thread by default). See the README's
+    # "Callback scheduling".
+    attr_reader callback_scheduling: (:thread | :inline)?
+
+    # A String is coerced to a Symbol; anything but :thread / :inline / nil
+    # raises ArgumentError.
+    def callback_scheduling=: ((:thread | :inline | "thread" | "inline")? value) -> (:thread | :inline | "thread" | "inline")?
+
+    # Middleware around every user-callback dispatch (nil: none). Rails:
+    # ClaudeAgentSDK::Railtie.callback_wrapper.
+    attr_reader callback_wrapper: _CallbackWrapper?
+
+    # Raises ArgumentError unless value is callable or nil.
+    def callback_wrapper=: (_CallbackWrapper? value) -> _CallbackWrapper?
+  end
+end

data/sig/claude_agent_sdk/types/permissions.rbs

@@ -0,0 +1,108 @@
+module ClaudeAgentSDK
+  PERMISSION_MODES: Array[String]
+
+  PERMISSION_UPDATE_DESTINATIONS: Array[String]
+
+  PERMISSION_BEHAVIORS: Array[String]
+
+  # What a can_use_tool callback returns.
+  type permission_result = PermissionResultAllow | PermissionResultDeny
+
+  # ClaudeAgentOptions#can_use_tool: decides whether a tool call may run.
+  # input is the tool input (wire_hash).
+  interface _CanUseTool
+    def call: (String tool_name, wire_hash input, ToolPermissionContext context) -> permission_result
+  end
+
+  class PermissionRuleValue < Type
+    def initialize: (?tool_name: String?, ?rule_content: String?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    attr_accessor tool_name: String?
+
+    attr_accessor rule_content: String?
+  end
+
+  # A permission change: a suggestion in ToolPermissionContext#suggestions,
+  # or an entry of PermissionResultAllow#updated_permissions.
+  class PermissionUpdate < Type
+    def initialize: (?type: String?, ?behavior: String?, ?mode: String?, ?directories: Array[String]?, ?destination: String?, ?rules: Array[PermissionRuleValue | Hash[Symbol | String, untyped]]?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # "addRules", "replaceRules", "removeRules", "setMode",
+    # "addDirectories" or "removeDirectories".
+    attr_accessor type: String?
+
+    # One of PERMISSION_BEHAVIORS.
+    attr_accessor behavior: String?
+
+    # One of PERMISSION_MODES (for "setMode").
+    attr_accessor mode: String?
+
+    attr_accessor directories: Array[String]?
+
+    # One of PERMISSION_UPDATE_DESTINATIONS.
+    attr_accessor destination: String?
+
+    attr_reader rules: Array[PermissionRuleValue]?
+
+    # Hash entries (camelCase or snake_case keys) become PermissionRuleValue.
+    def rules=: (Array[PermissionRuleValue | Hash[Symbol | String, untyped]]? value) -> Array[PermissionRuleValue | Hash[Symbol | String, untyped]]?
+
+    # The wire form (camelCase keys).
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
+  # The context passed to a can_use_tool callback.
+  class ToolPermissionContext < Type
+    attr_accessor signal: CancellationSignal?
+
+    # Identifies this permission request (not the tool invocation).
+    attr_accessor request_id: String?
+
+    # Never nil after construction ([] by default).
+    attr_accessor suggestions: Array[PermissionUpdate]?
+
+    attr_accessor tool_use_id: String?
+
+    attr_accessor agent_id: String?
+
+    attr_accessor title: String?
+
+    attr_accessor display_name: String?
+
+    attr_accessor description: String?
+
+    attr_accessor blocked_path: String?
+
+    attr_accessor decision_reason: String?
+  end
+
+  class PermissionResultAllow < Type
+    def initialize: (?updated_input: Hash[Symbol | String, untyped]?, ?updated_permissions: Array[PermissionUpdate | Hash[Symbol | String, untyped]]?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # Replaces the tool input when set.
+    attr_accessor updated_input: Hash[Symbol | String, untyped]?
+
+    # PermissionUpdates, or the equivalent wire Hashes (sent via #to_h).
+    attr_accessor updated_permissions: Array[PermissionUpdate | Hash[Symbol | String, untyped]]?
+
+    # "allow".
+    attr_reader behavior: String
+  end
+
+  class PermissionResultDeny < Type
+    def initialize: (?message: String?, ?interrupt: bool?) -> void
+                  | (Hash[Symbol | String, untyped]? attributes) -> void
+
+    # "" by default.
+    attr_accessor message: String?
+
+    # false by default; true also interrupts the turn.
+    attr_accessor interrupt: bool?
+
+    # "deny".
+    attr_reader behavior: String
+  end
+end