claude_agent 0.7.5 → 0.7.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7243ce9755ad2adeca4eee580a6011ba3a35f51f1bfe7d00a2df1f4b5313bc52
-  data.tar.gz: 9331f577e970716bd9c3573eaa44e6e96b8ef5c3f3798673d4ff20eef0ca23f3
+  metadata.gz: 4d3e15e24cc94819c7790d628776f0f04aee71592ae3b2eff9daa40b47941302
+  data.tar.gz: 9b60ffaf27391f41168549ac9bb878a9d184f4edf0144916b268e79855dddc65
 SHA512:
-  metadata.gz: b452df3dde194a5c092f2c1cae97c5b51fea119dce3aa8fe6bfadd2607ceb27e5d1fc9ded9206ed49f92db309acb6714e7fa38365150a373ea0fb3c77c5baa66
-  data.tar.gz: b2016921e13e9a3c811d126f78ea545b121bc8480ecb064c23b55807a444d3db361f42e205128302d4c303de598bf5d30754fcf3169cfedaeeb2e4dfc550ca22
+  metadata.gz: '084b53215d8f9f9d95f2084d6c7b0e10a845bd028ad5e466ce7c822e245351b59916782f36591ab0f0088f996d27c127221843a603217bc2eb7adf569708aa85'
+  data.tar.gz: 1b30bec791d154c017daee5aa6ca93df25da998a19382554aae3610962c447294cce76bbdb96737614f7334bdc73cd3be148a3a8138bfa50bf9ef8d130a05f3d

data/.worktreeinclude

@@ -0,0 +1,13 @@
+# Files to copy to new worktrees (must also be in .gitignore)
+
+# Claude Configs
+.claude/settings.local.json
+.claude/**/local-*
+.claude/**/local/
+
+# MCP server configuration
+.mcp.json
+
+# Local dependencies and temp files
+/tmp/**
+/vendor/**

data/CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.7] - 2026-02-20
+
+### Added
+- `TaskStartedMessage` for background task start notifications (TypeScript SDK v0.2.43 parity)
+- `RateLimitEvent` message type for rate limit visibility (TypeScript SDK v0.2.44 parity)
+- `PromptSuggestionMessage` type and `prompt_suggestions` option for suggested follow-up prompts (TypeScript SDK v0.2.46 parity)
+- `ConfigChange` hook event with `ConfigChangeInput` class (TypeScript SDK v0.2.47 parity)
+- `SandboxFilesystemConfig` with `allow_write`, `deny_write`, `deny_read` fields (TypeScript SDK v0.2.49 parity)
+- RBS signatures for all new types
+
+## [0.7.6] - 2026-02-13
+
+### Added
+- `stop_task` control request and `Client#stop_task` method for stopping running background tasks (TypeScript SDK parity)
+
 ## [0.7.5] - 2026-02-10
 
 ### Added

data/SPEC.md

@@ -3,11 +3,11 @@
 This document provides a comprehensive specification of the Claude Agent SDK, comparing feature parity across the official TypeScript and Python SDKs with this Ruby implementation.
 
 **Reference Versions:**
-- TypeScript SDK: v0.2.38 (npm package)
-- Python SDK: v0.1.34 from GitHub (commit a969042)
+- TypeScript SDK: v0.2.49 (npm package)
+- Python SDK: v0.1.39 from GitHub (commit 146e3d6)
 - Ruby SDK: This repository
 
-**Last Updated:** 2026-02-09
+**Last Updated:** 2026-02-20
 
 ---
 
@@ -41,14 +41,14 @@ Configuration options for SDK queries and clients.
 | `tools`                           |     ✅      |   ✅    |  ✅   | Array or preset                                              |
 | `allowedTools`                    |     ✅      |   ✅    |  ✅   | Auto-allowed tools                                           |
 | `disallowedTools`                 |     ✅      |   ✅    |  ✅   | Blocked tools                                                |
-| `permissionMode`                  |     ✅      |   ✅    |  ✅   | default/acceptEdits/plan/bypassPermissions/delegate/dontAsk  |
+| `permissionMode`                  |     ✅      |   ✅    |  ✅   | default/acceptEdits/plan/bypassPermissions/dontAsk           |
 | `allowDangerouslySkipPermissions` |     ✅      |   ❌    |  ✅   | Required for bypassPermissions                               |
 | `canUseTool`                      |     ✅      |   ✅    |  ✅   | Permission callback                                          |
 | `permissionPromptToolName`        |     ✅      |   ✅    |  ✅   | MCP tool for permission prompts                              |
 | `maxTurns`                        |     ✅      |   ✅    |  ✅   | Max conversation turns                                       |
 | `maxBudgetUsd`                    |     ✅      |   ✅    |  ✅   | Max USD budget                                               |
-| `thinking`                        |     ✅      |   ❌    |  ✅   | Thinking mode config (adaptive/enabled/disabled) (v0.2.35+)  |
-| `effort`                          |     ✅      |   ❌    |  ✅   | Response effort level (low/medium/high/max) (v0.2.35+)       |
+| `thinking`                        |     ✅      |   ✅    |  ✅   | Thinking mode config (adaptive/enabled/disabled) (v0.2.35+)  |
+| `effort`                          |     ✅      |   ✅    |  ✅   | Response effort level (low/medium/high/max) (v0.2.35+)       |
 | `maxThinkingTokens`               |     ✅      |   ✅    |  ✅   | Max thinking tokens (deprecated in TS, use `thinking`)       |
 | `continue`                        |     ✅      |   ✅    |  ✅   | Continue most recent conversation                            |
 | `resume`                          |     ✅      |   ✅    |  ✅   | Resume session by ID                                         |
@@ -83,6 +83,7 @@ Configuration options for SDK queries and clients.
 | `init`                            |     ✅      |   ❌    |  ✅   | Run Setup hooks (init trigger), then continue (hidden CLI)   |
 | `initOnly`                        |     ✅      |   ❌    |  ✅   | Run Setup hooks (init trigger), then exit (hidden CLI)       |
 | `maintenance`                     |     ✅      |   ❌    |  ✅   | Run Setup hooks (maintenance trigger), continue (hidden CLI) |
+| `promptSuggestions`               |     ✅      |   ❌    |  ✅   | Enable prompt suggestion after each turn (v0.2.47)           |
 | `debug`                           |     ✅      |   ❌    |  ✅   | Enable verbose debug logging                                 |
 | `debugFile`                       |     ✅      |   ❌    |  ✅   | Write debug logs to specific file path                       |
 
@@ -109,6 +110,9 @@ Messages exchanged between SDK and CLI.
 | `AuthStatusMessage`       |     ✅      |   ❌    |  ✅   | Authentication status              |
 | `TaskNotificationMessage` |     ✅      |   ❌    |  ✅   | Background task completion         |
 | `ToolUseSummaryMessage`   |     ✅      |   ❌    |  ✅   | Summary of tool use (collapsed)    |
+| `TaskStartedMessage`      |     ✅      |   ❌    |  ✅   | Subagent task registered (v0.2.45) |
+| `RateLimitEvent`          |     ✅      |   ❌    |  ✅   | Rate limit status changes          |
+| `PromptSuggestionMessage` |     ✅      |   ❌    |  ✅   | Suggested next prompt (v0.2.47)    |
 | `FilesPersistedEvent`     |     ✅      |   ❌    |  ✅   | File persistence confirmation      |
 
 ### Message Fields
@@ -227,6 +231,7 @@ Bidirectional control protocol for SDK-CLI communication.
 | `mcp_status`              |     ✅      |   ✅    |  ✅   | Get MCP server status             |
 | `mcp_reconnect`           |     ✅      |   ❌    |  ✅   | Reconnect to MCP server           |
 | `mcp_toggle`              |     ✅      |   ❌    |  ✅   | Enable/disable MCP server         |
+| `stop_task`               |     ✅      |   ❌    |  ✅   | Stop a running background task    |
 | `supported_commands`      |     ✅      |   ❌    |  ✅   | Get available slash commands      |
 | `supported_models`        |     ✅      |   ❌    |  ✅   | Get available models              |
 | `account_info`            |     ✅      |   ❌    |  ✅   | Get account information           |
@@ -268,6 +273,7 @@ Event hooks for intercepting and modifying SDK behavior.
 | `Setup`              |     ✅      |   ❌    |  ✅   | Initial setup/maintenance         |
 | `TeammateIdle`       |     ✅      |   ❌    |  ✅   | Teammate idle (v0.2.33)           |
 | `TaskCompleted`      |     ✅      |   ❌    |  ✅   | Task completed (v0.2.33)          |
+| `ConfigChange`       |     ✅      |   ❌    |  ✅   | Config file changed (v0.2.49)     |
 
 ### Hook Input Types
 
@@ -288,6 +294,7 @@ Event hooks for intercepting and modifying SDK behavior.
 | `SetupHookInput`              |     ✅      |   ❌    |  ✅   |
 | `TeammateIdleHookInput`       |     ✅      |   ❌    |  ✅   |
 | `TaskCompletedHookInput`      |     ✅      |   ❌    |  ✅   |
+| `ConfigChangeHookInput`       |     ✅      |   ❌    |  ✅   |
 
 ### Hook Output Types
 
@@ -387,7 +394,6 @@ Permission handling and updates.
 | `acceptEdits`       |     ✅      |   ✅    |  ✅   | Auto-accept edits  |
 | `plan`              |     ✅      |   ✅    |  ✅   | Planning mode      |
 | `bypassPermissions` |     ✅      |   ✅    |  ✅   | Skip all checks    |
-| `delegate`          |     ✅      |   ❌    |  ✅   | Delegate mode      |
 | `dontAsk`           |     ✅      |   ❌    |  ✅   | Never prompt       |
 
 ### Permission Result Types
@@ -555,6 +561,15 @@ Sandbox configuration for command execution isolation.
 | `ignoreViolations`          |     ✅      |   ✅    |  ✅   |
 | `enableWeakerNestedSandbox` |     ✅      |   ✅    |  ✅   |
 | `ripgrep`                   |     ✅      |   ❌    |  ✅   |
+| `filesystem`                |     ✅      |   ❌    |  ✅   |
+
+### SandboxFilesystemConfig
+
+| Field        | TypeScript | Python | Ruby |
+|--------------|:----------:|:------:|:----:|
+| `allowWrite` |     ✅      |   ❌    |  ✅   |
+| `denyWrite`  |     ✅      |   ❌    |  ✅   |
+| `denyRead`   |     ✅      |   ❌    |  ✅   |
 
 ### SandboxNetworkConfig
 
@@ -628,6 +643,7 @@ Public API surface for SDK clients.
 | `setMcpServers()`        |     ✅      |   ❌    |  ✅   | Dynamic MCP servers    |
 | `reconnectMcpServer()`   |     ✅      |   ❌    |  ✅   | Reconnect MCP server   |
 | `toggleMcpServer()`      |     ✅      |   ❌    |  ✅   | Enable/disable MCP     |
+| `stopTask()`             |     ✅      |   ❌    |  ✅   | Stop running task      |
 | `streamInput()`          |     ✅      |   ✅    |  ✅   | Stream user input      |
 | `initializationResult()` |     ✅      |   ❌    |  ✅   | Full init response     |
 | `close()`                |     ✅      |   ✅    |  ✅   | Close query/session    |
@@ -671,19 +687,25 @@ Public API surface for SDK clients.
 - Source is bundled/minified, but `sdk.d.ts` provides complete type definitions
 - Includes unstable V2 session API
 - `executable`/`executableArgs` are JS-specific (`node`/`bun`/`deno`)
+- v0.2.45: Added `TaskStartedMessage`, `RateLimitEvent` message types
+- v0.2.47: Added `promptSuggestions` option and `PromptSuggestionMessage`
+- v0.2.49: Added `ConfigChange` hook event, `SandboxFilesystemConfig`
 
 ### Python SDK
 - Full source available with `Transport` abstract class
 - Partial control protocol: query and client support interrupt, setPermissionMode, setModel, rewindFiles, mcpStatus
-- Missing hooks: SessionStart, SessionEnd, Setup, TeammateIdle, TaskCompleted
-- Missing permission modes: `delegate`, `dontAsk`
-- Missing options: `thinking`, `effort`, `allowDangerouslySkipPermissions`, `persistSession`, `resumeSessionAt`, `sessionId`, `strictMcpConfig`, `init`/`initOnly`/`maintenance`, `debug`/`debugFile`
+- Missing hooks: SessionStart, SessionEnd, Setup, TeammateIdle, TaskCompleted, ConfigChange
+- Missing permission modes: `dontAsk`
+- Missing options: `allowDangerouslySkipPermissions`, `persistSession`, `resumeSessionAt`, `sessionId`, `strictMcpConfig`, `init`/`initOnly`/`maintenance`, `debug`/`debugFile`, `promptSuggestions`
 - `ToolPermissionContext` missing `blockedPath`, `decisionReason`, `toolUseID`, `agentID`, `description`
 - Has SDK MCP server support with `tool()` helper and annotations
+- Added `thinking` config and `effort` option in v0.1.36
+- Handles `rate_limit_event` and unknown message types gracefully (v0.1.39)
 
 ### Ruby SDK (This Repository)
-- Feature parity with TypeScript SDK v0.2.38
+- Feature parity with TypeScript SDK v0.2.42
 - Ruby-idiomatic patterns (Data.define, snake_case)
 - Complete control protocol, hook, and V2 Session API support
 - Dedicated Client class for multi-turn conversations
 - `executable`/`executableArgs` marked N/A (JS runtime options)
+- Gaps from TS v0.2.43-v0.2.49: `promptSuggestions`, `TaskStartedMessage`, `RateLimitEvent`, `PromptSuggestionMessage`, `ConfigChange` hook, `SandboxFilesystemConfig`

data/lib/claude_agent/client.rb

@@ -281,6 +281,23 @@ module ClaudeAgent
       @protocol.initialization_result
     end
 
+    # Stop a running background task (TypeScript SDK parity)
+    #
+    # Sends a stop signal to a running task. A task_notification message
+    # with status 'stopped' will be emitted when the task stops.
+    #
+    # @param task_id [String] The task ID from task_notification events
+    # @return [void]
+    #
+    # @example
+    #   client.stop_task("task-123")
+    #
+    def stop_task(task_id)
+      require_connection!
+
+      @protocol.stop_task(task_id)
+    end
+
     # Dynamically set MCP servers for this session (TypeScript SDK parity)
     #
     # This replaces the current set of dynamically-added MCP servers.

data/lib/claude_agent/control_protocol.rb

@@ -443,6 +443,21 @@ module ClaudeAgent
       send_control_request(subtype: "mcp_toggle", serverName: server_name, enabled: enabled)
     end
 
+    # Stop a running background task (TypeScript SDK parity)
+    #
+    # Sends a stop signal to a running task. A task_notification message
+    # with status 'stopped' will be emitted when the task stops.
+    #
+    # @param task_id [String] The task ID from task_notification events
+    # @return [void]
+    #
+    # @example
+    #   protocol.stop_task("task-123")
+    #
+    def stop_task(task_id)
+      send_control_request(subtype: "stop_task", task_id: task_id)
+    end
+
     # Dynamically set MCP servers for this session (TypeScript SDK parity)
     #
     # This replaces the current set of dynamically-added MCP servers.
@@ -517,6 +532,7 @@ module ClaudeAgent
 
       request = { subtype: "initialize" }
       request[:hooks] = hooks_config if hooks_config
+      request[:promptSuggestions] = true if options.prompt_suggestions
 
       send_control_request(**request)
     end

data/lib/claude_agent/hooks.rb

@@ -18,6 +18,7 @@ module ClaudeAgent
     Setup
     TeammateIdle
     TaskCompleted
+    ConfigChange
   ].freeze
 
   # Matcher configuration for hooks
@@ -278,6 +279,31 @@ module ClaudeAgent
     end
   end
 
+  # Input for ConfigChange hook (TypeScript SDK v0.2.49 parity)
+  #
+  # Fired when a configuration file changes.
+  #
+  # @example
+  #   input = ConfigChangeInput.new(
+  #     source: "user_settings",
+  #     file_path: "~/.claude/settings.json",
+  #     session_id: "sess-123"
+  #   )
+  #
+  class ConfigChangeInput < BaseHookInput
+    attr_reader :source, :file_path
+
+    SOURCES = %w[user_settings project_settings local_settings policy_settings skills].freeze
+
+    # @param source [String] One of SOURCES
+    # @param file_path [String, nil] Path to the changed file
+    def initialize(source:, file_path: nil, **kwargs)
+      super(hook_event_name: "ConfigChange", **kwargs)
+      @source = source
+      @file_path = file_path
+    end
+  end
+
   # Input for TaskCompleted hook (TypeScript SDK v0.2.33 parity)
   #
   # Fired when a task completes.

data/lib/claude_agent/message_parser.rb

@@ -16,7 +16,7 @@ module ClaudeAgent
     # Parse a raw message hash into a typed message object
     #
     # @param raw [Hash] Raw message from CLI
-    # @return [UserMessage, UserMessageReplay, AssistantMessage, SystemMessage, ResultMessage, StreamEvent, CompactBoundaryMessage, StatusMessage, ToolProgressMessage, HookResponseMessage, AuthStatusMessage, TaskNotificationMessage, HookStartedMessage, HookProgressMessage, ToolUseSummaryMessage, FilesPersistedEvent]
+    # @return [UserMessage, UserMessageReplay, AssistantMessage, SystemMessage, ResultMessage, StreamEvent, CompactBoundaryMessage, StatusMessage, ToolProgressMessage, HookResponseMessage, AuthStatusMessage, TaskNotificationMessage, HookStartedMessage, HookProgressMessage, ToolUseSummaryMessage, FilesPersistedEvent, TaskStartedMessage, RateLimitEvent, PromptSuggestionMessage]
     # @raise [MessageParseError] If message cannot be parsed
     def parse(raw)
       type = raw["type"]
@@ -44,6 +44,8 @@ module ClaudeAgent
           parse_hook_progress_message(raw)
         when "files_persisted"
           parse_files_persisted_event(raw)
+        when "task_started"
+          parse_task_started_message(raw)
         else
           parse_system_message(raw)
         end
@@ -57,6 +59,10 @@ module ClaudeAgent
         parse_auth_status_message(raw)
       when "tool_use_summary"
         parse_tool_use_summary_message(raw)
+      when "rate_limit_event"
+        parse_rate_limit_event(raw)
+      when "prompt_suggestion"
+        parse_prompt_suggestion_message(raw)
       else
         logger.error("parser") { "Unknown message type: #{type}" }
         raise MessageParseError.new("Unknown message type: #{type}", raw_message: raw)
@@ -336,5 +342,32 @@ module ClaudeAgent
         processed_at: fetch_dual(raw, :processed_at)
       )
     end
+
+    def parse_task_started_message(raw)
+      TaskStartedMessage.new(
+        uuid: raw["uuid"] || "",
+        session_id: fetch_dual(raw, :session_id, ""),
+        task_id: fetch_dual(raw, :task_id, ""),
+        tool_use_id: fetch_dual(raw, :tool_use_id),
+        description: raw["description"],
+        task_type: fetch_dual(raw, :task_type)
+      )
+    end
+
+    def parse_rate_limit_event(raw)
+      RateLimitEvent.new(
+        rate_limit_info: fetch_dual(raw, :rate_limit_info, {}),
+        uuid: raw["uuid"] || "",
+        session_id: fetch_dual(raw, :session_id, "")
+      )
+    end
+
+    def parse_prompt_suggestion_message(raw)
+      PromptSuggestionMessage.new(
+        uuid: raw["uuid"] || "",
+        session_id: fetch_dual(raw, :session_id, ""),
+        suggestion: raw["suggestion"] || ""
+      )
+    end
   end
 end

data/lib/claude_agent/messages.rb

@@ -616,6 +616,100 @@ module ClaudeAgent
     end
   end
 
+  # Task started message (TypeScript SDK v0.2.45 parity)
+  #
+  # Sent when a new task (subagent) is started.
+  #
+  # @example
+  #   msg = TaskStartedMessage.new(
+  #     uuid: "msg-123",
+  #     session_id: "session-abc",
+  #     task_id: "task-456",
+  #     tool_use_id: "tool-789",
+  #     description: "Running tests",
+  #     task_type: "bash"
+  #   )
+  #
+  TaskStartedMessage = Data.define(
+    :uuid,
+    :session_id,
+    :task_id,
+    :tool_use_id,
+    :description,
+    :task_type
+  ) do
+    def initialize(
+      uuid:,
+      session_id:,
+      task_id:,
+      tool_use_id: nil,
+      description: nil,
+      task_type: nil
+    )
+      super
+    end
+
+    def type
+      :task_started
+    end
+  end
+
+  # Rate limit event (TypeScript SDK v0.2.45 parity)
+  #
+  # Reports rate limit status and utilization information.
+  #
+  # @example
+  #   msg = RateLimitEvent.new(
+  #     uuid: "msg-123",
+  #     session_id: "session-abc",
+  #     rate_limit_info: {
+  #       "status" => "allowed_warning",
+  #       "resetsAt" => 1700000000,
+  #       "rateLimitType" => "five_hour",
+  #       "utilization" => 0.85,
+  #       "isUsingOverage" => false,
+  #       "overageStatus" => "available"
+  #     }
+  #   )
+  #   msg.status  # => "allowed_warning"
+  #
+  RateLimitEvent = Data.define(:rate_limit_info, :uuid, :session_id) do
+    def initialize(rate_limit_info:, uuid: nil, session_id: nil)
+      super
+    end
+
+    def type
+      :rate_limit_event
+    end
+
+    # Get the rate limit status
+    # @return [String, nil]
+    def status
+      rate_limit_info["status"] || rate_limit_info[:status]
+    end
+  end
+
+  # Prompt suggestion message (TypeScript SDK v0.2.47 parity)
+  #
+  # Contains a suggested prompt for the user.
+  #
+  # @example
+  #   msg = PromptSuggestionMessage.new(
+  #     uuid: "msg-123",
+  #     session_id: "session-abc",
+  #     suggestion: "Tell me about this project"
+  #   )
+  #
+  PromptSuggestionMessage = Data.define(:uuid, :session_id, :suggestion) do
+    def initialize(uuid: nil, session_id: nil, suggestion:)
+      super
+    end
+
+    def type
+      :prompt_suggestion
+    end
+  end
+
   # Files persisted event (TypeScript SDK v0.2.25 parity)
   #
   # Sent when files are persisted to storage during a session.
@@ -670,6 +764,9 @@ module ClaudeAgent
     HookStartedMessage,
     HookProgressMessage,
     ToolUseSummaryMessage,
-    FilesPersistedEvent
+    FilesPersistedEvent,
+    TaskStartedMessage,
+    RateLimitEvent,
+    PromptSuggestionMessage
   ].freeze
 end

data/lib/claude_agent/options.rb

@@ -4,7 +4,7 @@ require "json"
 
 module ClaudeAgent
   # Permission modes for tool execution (TypeScript SDK parity)
-  PERMISSION_MODES = %w[default acceptEdits plan bypassPermissions delegate dontAsk].freeze
+  PERMISSION_MODES = %w[default acceptEdits plan bypassPermissions dontAsk].freeze
 
   # Configuration options for ClaudeAgent queries and clients
   #
@@ -42,6 +42,7 @@ module ClaudeAgent
       init: false,
       init_only: false,
       maintenance: false,
+      prompt_suggestions: false,
       debug: false,
       debug_file: nil
     }.freeze
@@ -61,7 +62,7 @@ module ClaudeAgent
       settings sandbox cwd add_dirs env user agent
       cli_path extra_args agents setting_sources plugins
       include_partial_messages output_format enable_file_checkpointing
-      persist_session betas max_buffer_size stderr_callback
+      persist_session prompt_suggestions betas max_buffer_size stderr_callback
       abort_controller spawn_claude_code_process
       init init_only maintenance
       debug debug_file
@@ -260,6 +261,7 @@ module ClaudeAgent
         args.push("--no-persist-session") if persist_session == false
         args.push("--json-schema", JSON.generate(output_format)) if output_format
         args.push("--include-partial-messages") if include_partial_messages
+        args.push("--prompt-suggestions") if prompt_suggestions
         if agents
           agents_hash = agents.transform_values(&:to_h)
           args.push("--agents", JSON.generate(agents_hash))

data/lib/claude_agent/sandbox_settings.rb

@@ -85,6 +85,29 @@ module ClaudeAgent
     end
   end
 
+  # Filesystem-specific configuration for sandbox mode (TypeScript SDK v0.2.49 parity)
+  #
+  # @example
+  #   filesystem = SandboxFilesystemConfig.new(
+  #     allow_write: ["/tmp/*"],
+  #     deny_write: ["/etc/*"],
+  #     deny_read: ["/secrets/*"]
+  #   )
+  #
+  SandboxFilesystemConfig = Data.define(:allow_write, :deny_write, :deny_read) do
+    def initialize(allow_write: [], deny_write: [], deny_read: [])
+      super
+    end
+
+    def to_h
+      result = {}
+      result[:allowWrite] = allow_write unless allow_write.empty?
+      result[:denyWrite] = deny_write unless deny_write.empty?
+      result[:denyRead] = deny_read unless deny_read.empty?
+      result
+    end
+  end
+
   # Sandbox configuration for command execution (TypeScript SDK parity)
   #
   # @example Basic sandbox
@@ -112,7 +135,8 @@ module ClaudeAgent
     :network,
     :ignore_violations,
     :enable_weaker_nested_sandbox,
-    :ripgrep
+    :ripgrep,
+    :filesystem
   ) do
     def initialize(
       enabled: false,
@@ -122,7 +146,8 @@ module ClaudeAgent
       network: nil,
       ignore_violations: nil,
       enable_weaker_nested_sandbox: false,
-      ripgrep: nil
+      ripgrep: nil,
+      filesystem: nil
     )
       super
     end
@@ -136,6 +161,7 @@ module ClaudeAgent
       result[:ignoreViolations] = ignore_violations.to_h if ignore_violations && !ignore_violations.to_h.empty?
       result[:enableWeakerNestedSandbox] = enable_weaker_nested_sandbox if enable_weaker_nested_sandbox
       result[:ripgrep] = ripgrep.to_h if ripgrep
+      result[:filesystem] = filesystem.to_h if filesystem && !filesystem.to_h.empty?
       result
     end
   end

data/lib/claude_agent/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ClaudeAgent
-  VERSION = "0.7.5"
+  VERSION = "0.7.7"
 end

data/sig/claude_agent.rbs

@@ -231,6 +231,15 @@ module ClaudeAgent
     def to_h: () -> Hash[Symbol, untyped]
   end
 
+  class SandboxFilesystemConfig
+    attr_reader allow_write: Array[String]
+    attr_reader deny_write: Array[String]
+    attr_reader deny_read: Array[String]
+
+    def initialize: (?allow_write: Array[String], ?deny_write: Array[String], ?deny_read: Array[String]) -> void
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
   class SandboxSettings
     attr_reader enabled: bool
     attr_reader auto_allow_bash_if_sandboxed: bool
@@ -240,8 +249,9 @@ module ClaudeAgent
     attr_reader ignore_violations: SandboxIgnoreViolations?
     attr_reader enable_weaker_nested_sandbox: bool
     attr_reader ripgrep: SandboxRipgrepConfig?
+    attr_reader filesystem: SandboxFilesystemConfig?
 
-    def initialize: (?enabled: bool, ?auto_allow_bash_if_sandboxed: bool, ?excluded_commands: Array[String], ?allow_unsandboxed_commands: bool, ?network: SandboxNetworkConfig?, ?ignore_violations: SandboxIgnoreViolations?, ?enable_weaker_nested_sandbox: bool, ?ripgrep: SandboxRipgrepConfig?) -> void
+    def initialize: (?enabled: bool, ?auto_allow_bash_if_sandboxed: bool, ?excluded_commands: Array[String], ?allow_unsandboxed_commands: bool, ?network: SandboxNetworkConfig?, ?ignore_violations: SandboxIgnoreViolations?, ?enable_weaker_nested_sandbox: bool, ?ripgrep: SandboxRipgrepConfig?, ?filesystem: SandboxFilesystemConfig?) -> void
     def to_h: () -> Hash[Symbol, untyped]
   end
 
@@ -332,6 +342,9 @@ module ClaudeAgent
     attr_accessor output_format: Hash[String, untyped]?
     attr_accessor enable_file_checkpointing: bool
 
+    # Prompt suggestions
+    attr_accessor prompt_suggestions: bool
+
     # Beta features
     attr_accessor betas: Array[String]
 
@@ -436,7 +449,7 @@ module ClaudeAgent
   CONTENT_BLOCK_TYPES: Array[Class]
 
   # Message types
-  type message = UserMessage | UserMessageReplay | AssistantMessage | SystemMessage | ResultMessage | StreamEvent | CompactBoundaryMessage | StatusMessage | ToolProgressMessage | HookResponseMessage | AuthStatusMessage | TaskNotificationMessage | HookStartedMessage | HookProgressMessage | ToolUseSummaryMessage | FilesPersistedEvent
+  type message = UserMessage | UserMessageReplay | AssistantMessage | SystemMessage | ResultMessage | StreamEvent | CompactBoundaryMessage | StatusMessage | ToolProgressMessage | HookResponseMessage | AuthStatusMessage | TaskNotificationMessage | HookStartedMessage | HookProgressMessage | ToolUseSummaryMessage | FilesPersistedEvent | TaskStartedMessage | RateLimitEvent | PromptSuggestionMessage
 
   MESSAGE_TYPES: Array[Class]
 
@@ -673,6 +686,40 @@ module ClaudeAgent
     def type: () -> :files_persisted
   end
 
+  # Task started message (TypeScript SDK v0.2.45 parity)
+  class TaskStartedMessage
+    attr_reader uuid: String
+    attr_reader session_id: String
+    attr_reader task_id: String
+    attr_reader tool_use_id: String?
+    attr_reader description: String?
+    attr_reader task_type: String?
+
+    def initialize: (uuid: String, session_id: String, task_id: String, ?tool_use_id: String?, ?description: String?, ?task_type: String?) -> void
+    def type: () -> :task_started
+  end
+
+  # Rate limit event (TypeScript SDK v0.2.45 parity)
+  class RateLimitEvent
+    attr_reader rate_limit_info: Hash[String, untyped]
+    attr_reader uuid: String?
+    attr_reader session_id: String?
+
+    def initialize: (rate_limit_info: Hash[String, untyped], ?uuid: String?, ?session_id: String?) -> void
+    def type: () -> :rate_limit_event
+    def status: () -> String?
+  end
+
+  # Prompt suggestion message (TypeScript SDK v0.2.47 parity)
+  class PromptSuggestionMessage
+    attr_reader uuid: String?
+    attr_reader session_id: String?
+    attr_reader suggestion: String
+
+    def initialize: (?uuid: String?, ?session_id: String?, suggestion: String) -> void
+    def type: () -> :prompt_suggestion
+  end
+
   # Message parser
   class MessageParser
     def initialize: (?logger: Logger?) -> void
@@ -823,6 +870,15 @@ module ClaudeAgent
     def initialize: (task_id: String, task_subject: String, ?task_description: String?, ?teammate_name: String?, ?team_name: String?, **untyped) -> void
   end
 
+  class ConfigChangeInput < BaseHookInput
+    attr_reader source: String
+    attr_reader file_path: String?
+
+    SOURCES: Array[String]
+
+    def initialize: (source: String, ?file_path: String?, **untyped) -> void
+  end
+
   # Permission types
   type permission_result = PermissionResultAllow | PermissionResultDeny
 
@@ -910,6 +966,7 @@ module ClaudeAgent
     def set_mcp_servers: (Hash[String, untyped] servers) -> McpSetServersResult
     def mcp_reconnect: (String server_name) -> Hash[String, untyped]
     def mcp_toggle: (String server_name, enabled: bool) -> Hash[String, untyped]
+    def stop_task: (String task_id) -> Hash[String, untyped]
     def supported_commands: () -> Array[SlashCommand]
     def supported_models: () -> Array[ModelInfo]
     def mcp_server_status: () -> Array[McpServerStatus]
@@ -946,6 +1003,7 @@ module ClaudeAgent
     def set_mcp_servers: (Hash[String, untyped] servers) -> McpSetServersResult
     def mcp_reconnect: (String server_name) -> Hash[String, untyped]
     def mcp_toggle: (String server_name, enabled: bool) -> Hash[String, untyped]
+    def stop_task: (String task_id) -> Hash[String, untyped]
     def supported_commands: () -> Array[SlashCommand]
     def supported_models: () -> Array[ModelInfo]
     def mcp_server_status: () -> Array[McpServerStatus]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: claude_agent
 version: !ruby/object:Gem::Version
-  version: 0.7.5
+  version: 0.7.7
 platform: ruby
 authors:
 - Thomas Carr
@@ -43,6 +43,7 @@ files:
 - ".claude/skills/spec/SKILL.md"
 - ".claude/skills/spec/commands/complete.md"
 - ".claude/skills/spec/commands/update.md"
+- ".worktreeinclude"
 - CHANGELOG.md
 - CLAUDE.md
 - LICENSE.txt