claude_agent 0.7.6 → 0.7.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 461539691af2ef7a8824d3d5976a7d9741e7e41cbd1bf7d5c07fa13f7909894b
-  data.tar.gz: 7c56823efe8f18b0502c652e5cf3e214ed81a6a057322e871dabb4b4d19fbbc2
+  metadata.gz: e9304128d18cec59aa0b0221f199b2674d60a5a2813141562b9df51b88057987
+  data.tar.gz: 8bd6696b854f8660e21744bc02d178e3e402a734119554c2869cc4fbb188a75d
 SHA512:
-  metadata.gz: 84a3b38295cab7f4d28969a73573b97028d0fd26d61e65520fc6375804e67128ea7f08678cb094a6763fffb7a837248d9f6a06e1616985af9615957d10b4d6a2
-  data.tar.gz: 423cda325548a65dd32780582efdcefb352c2d83b6c852d362564d0391d7287b20ab4fb9ec2aa39c0348069d451da773e95c29e34a74766b3c52434afc261563
+  metadata.gz: 8ad2321250e0967d302d41d23724fe6f368f3e8fe6cb4461f483f6d13d3b9b35368189cce06dd28f5fa427013a9a272c6a4e1b3e94ee75b8a38dd7ed422c5068
+  data.tar.gz: d17257cfcabecbb033ce1427a0237456e5ecbeb0c1c3bedb9bc21dac1336be6a21b96a85ffc96919f7c4774a3f51498a4876f31d11249a05f327966af23f0ae8

data/.worktreeinclude

@@ -0,0 +1,13 @@
+# Files to copy to new worktrees (must also be in .gitignore)
+
+# Claude Configs
+.claude/settings.local.json
+.claude/**/local-*
+.claude/**/local/
+
+# MCP server configuration
+.mcp.json
+
+# Local dependencies and temp files
+/tmp/**
+/vendor/**

data/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.8] - 2026-02-22
+
+### Added
+- `WorktreeCreate` hook event with `WorktreeCreateInput` class (TypeScript SDK v0.2.50 parity)
+- `WorktreeRemove` hook event with `WorktreeRemoveInput` class (TypeScript SDK v0.2.50 parity)
+- `apply_flag_settings` control request on `ControlProtocol` and `Client` for merging settings into the flag layer (TypeScript SDK v0.2.50 parity)
+- RBS signatures for all new types
+
+## [0.7.7] - 2026-02-20
+
+### Added
+- `TaskStartedMessage` for background task start notifications (TypeScript SDK v0.2.43 parity)
+- `RateLimitEvent` message type for rate limit visibility (TypeScript SDK v0.2.44 parity)
+- `PromptSuggestionMessage` type and `prompt_suggestions` option for suggested follow-up prompts (TypeScript SDK v0.2.46 parity)
+- `ConfigChange` hook event with `ConfigChangeInput` class (TypeScript SDK v0.2.47 parity)
+- `SandboxFilesystemConfig` with `allow_write`, `deny_write`, `deny_read` fields (TypeScript SDK v0.2.49 parity)
+- RBS signatures for all new types
+
 ## [0.7.6] - 2026-02-13
 
 ### Added

data/SPEC.md

@@ -3,11 +3,11 @@
 This document provides a comprehensive specification of the Claude Agent SDK, comparing feature parity across the official TypeScript and Python SDKs with this Ruby implementation.
 
 **Reference Versions:**
-- TypeScript SDK: v0.2.42 (npm package)
-- Python SDK: v0.1.36 from GitHub (commit 4d74748)
+- TypeScript SDK: v0.2.50 (npm package)
+- Python SDK: v0.1.39 from GitHub (commit 146e3d6)
 - Ruby SDK: This repository
 
-**Last Updated:** 2026-02-13
+**Last Updated:** 2026-02-22
 
 ---
 
@@ -41,7 +41,7 @@ Configuration options for SDK queries and clients.
 | `tools`                           |     ✅      |   ✅    |  ✅   | Array or preset                                              |
 | `allowedTools`                    |     ✅      |   ✅    |  ✅   | Auto-allowed tools                                           |
 | `disallowedTools`                 |     ✅      |   ✅    |  ✅   | Blocked tools                                                |
-| `permissionMode`                  |     ✅      |   ✅    |  ✅   | default/acceptEdits/plan/bypassPermissions/delegate/dontAsk  |
+| `permissionMode`                  |     ✅      |   ✅    |  ✅   | default/acceptEdits/plan/bypassPermissions/dontAsk           |
 | `allowDangerouslySkipPermissions` |     ✅      |   ❌    |  ✅   | Required for bypassPermissions                               |
 | `canUseTool`                      |     ✅      |   ✅    |  ✅   | Permission callback                                          |
 | `permissionPromptToolName`        |     ✅      |   ✅    |  ✅   | MCP tool for permission prompts                              |
@@ -83,6 +83,7 @@ Configuration options for SDK queries and clients.
 | `init`                            |     ✅      |   ❌    |  ✅   | Run Setup hooks (init trigger), then continue (hidden CLI)   |
 | `initOnly`                        |     ✅      |   ❌    |  ✅   | Run Setup hooks (init trigger), then exit (hidden CLI)       |
 | `maintenance`                     |     ✅      |   ❌    |  ✅   | Run Setup hooks (maintenance trigger), continue (hidden CLI) |
+| `promptSuggestions`               |     ✅      |   ❌    |  ✅   | Enable prompt suggestion after each turn (v0.2.47)           |
 | `debug`                           |     ✅      |   ❌    |  ✅   | Enable verbose debug logging                                 |
 | `debugFile`                       |     ✅      |   ❌    |  ✅   | Write debug logs to specific file path                       |
 
@@ -109,6 +110,9 @@ Messages exchanged between SDK and CLI.
 | `AuthStatusMessage`       |     ✅      |   ❌    |  ✅   | Authentication status              |
 | `TaskNotificationMessage` |     ✅      |   ❌    |  ✅   | Background task completion         |
 | `ToolUseSummaryMessage`   |     ✅      |   ❌    |  ✅   | Summary of tool use (collapsed)    |
+| `TaskStartedMessage`      |     ✅      |   ❌    |  ✅   | Subagent task registered (v0.2.45) |
+| `RateLimitEvent`          |     ✅      |   ❌    |  ✅   | Rate limit status changes          |
+| `PromptSuggestionMessage` |     ✅      |   ❌    |  ✅   | Suggested next prompt (v0.2.47)    |
 | `FilesPersistedEvent`     |     ✅      |   ❌    |  ✅   | File persistence confirmation      |
 
 ### Message Fields
@@ -231,6 +235,7 @@ Bidirectional control protocol for SDK-CLI communication.
 | `supported_commands`      |     ✅      |   ❌    |  ✅   | Get available slash commands      |
 | `supported_models`        |     ✅      |   ❌    |  ✅   | Get available models              |
 | `account_info`            |     ✅      |   ❌    |  ✅   | Get account information           |
+| `apply_flag_settings`     |     ✅      |   ❌    |  ✅   | Merge settings into flag layer    |
 
 ### Return Types
 
@@ -269,6 +274,9 @@ Event hooks for intercepting and modifying SDK behavior.
 | `Setup`              |     ✅      |   ❌    |  ✅   | Initial setup/maintenance         |
 | `TeammateIdle`       |     ✅      |   ❌    |  ✅   | Teammate idle (v0.2.33)           |
 | `TaskCompleted`      |     ✅      |   ❌    |  ✅   | Task completed (v0.2.33)          |
+| `ConfigChange`       |     ✅      |   ❌    |  ✅   | Config file changed (v0.2.49)     |
+| `WorktreeCreate`     |     ✅      |   ❌    |  ✅   | Worktree creation (v0.2.50)       |
+| `WorktreeRemove`     |     ✅      |   ❌    |  ✅   | Worktree removal (v0.2.50)        |
 
 ### Hook Input Types
 
@@ -289,6 +297,9 @@ Event hooks for intercepting and modifying SDK behavior.
 | `SetupHookInput`              |     ✅      |   ❌    |  ✅   |
 | `TeammateIdleHookInput`       |     ✅      |   ❌    |  ✅   |
 | `TaskCompletedHookInput`      |     ✅      |   ❌    |  ✅   |
+| `ConfigChangeHookInput`       |     ✅      |   ❌    |  ✅   |
+| `WorktreeCreateHookInput`     |     ✅      |   ❌    |  ✅   |
+| `WorktreeRemoveHookInput`     |     ✅      |   ❌    |  ✅   |
 
 ### Hook Output Types
 
@@ -388,7 +399,6 @@ Permission handling and updates.
 | `acceptEdits`       |     ✅      |   ✅    |  ✅   | Auto-accept edits  |
 | `plan`              |     ✅      |   ✅    |  ✅   | Planning mode      |
 | `bypassPermissions` |     ✅      |   ✅    |  ✅   | Skip all checks    |
-| `delegate`          |     ✅      |   ❌    |  ✅   | Delegate mode      |
 | `dontAsk`           |     ✅      |   ❌    |  ✅   | Never prompt       |
 
 ### Permission Result Types
@@ -556,6 +566,15 @@ Sandbox configuration for command execution isolation.
 | `ignoreViolations`          |     ✅      |   ✅    |  ✅   |
 | `enableWeakerNestedSandbox` |     ✅      |   ✅    |  ✅   |
 | `ripgrep`                   |     ✅      |   ❌    |  ✅   |
+| `filesystem`                |     ✅      |   ❌    |  ✅   |
+
+### SandboxFilesystemConfig
+
+| Field        | TypeScript | Python | Ruby |
+|--------------|:----------:|:------:|:----:|
+| `allowWrite` |     ✅      |   ❌    |  ✅   |
+| `denyWrite`  |     ✅      |   ❌    |  ✅   |
+| `denyRead`   |     ✅      |   ❌    |  ✅   |
 
 ### SandboxNetworkConfig
 
@@ -673,19 +692,24 @@ Public API surface for SDK clients.
 - Source is bundled/minified, but `sdk.d.ts` provides complete type definitions
 - Includes unstable V2 session API
 - `executable`/`executableArgs` are JS-specific (`node`/`bun`/`deno`)
+- v0.2.45: Added `TaskStartedMessage`, `RateLimitEvent` message types
+- v0.2.47: Added `promptSuggestions` option and `PromptSuggestionMessage`
+- v0.2.49: Added `ConfigChange` hook event, `SandboxFilesystemConfig`
+- v0.2.50: Added `WorktreeCreate`/`WorktreeRemove` hook events, `apply_flag_settings` control request
 
 ### Python SDK
 - Full source available with `Transport` abstract class
 - Partial control protocol: query and client support interrupt, setPermissionMode, setModel, rewindFiles, mcpStatus
-- Missing hooks: SessionStart, SessionEnd, Setup, TeammateIdle, TaskCompleted
-- Missing permission modes: `delegate`, `dontAsk`
-- Missing options: `allowDangerouslySkipPermissions`, `persistSession`, `resumeSessionAt`, `sessionId`, `strictMcpConfig`, `init`/`initOnly`/`maintenance`, `debug`/`debugFile`
+- Missing hooks: SessionStart, SessionEnd, Setup, TeammateIdle, TaskCompleted, ConfigChange, WorktreeCreate, WorktreeRemove
+- Missing permission modes: `dontAsk`
+- Missing options: `allowDangerouslySkipPermissions`, `persistSession`, `resumeSessionAt`, `sessionId`, `strictMcpConfig`, `init`/`initOnly`/`maintenance`, `debug`/`debugFile`, `promptSuggestions`
 - `ToolPermissionContext` missing `blockedPath`, `decisionReason`, `toolUseID`, `agentID`, `description`
 - Has SDK MCP server support with `tool()` helper and annotations
 - Added `thinking` config and `effort` option in v0.1.36
+- Handles `rate_limit_event` and unknown message types gracefully (v0.1.39)
 
 ### Ruby SDK (This Repository)
-- Full feature parity with TypeScript SDK v0.2.42
+- Feature parity with TypeScript SDK v0.2.50
 - Ruby-idiomatic patterns (Data.define, snake_case)
 - Complete control protocol, hook, and V2 Session API support
 - Dedicated Client class for multi-turn conversations

data/lib/claude_agent/client.rb

@@ -298,6 +298,22 @@ module ClaudeAgent
       @protocol.stop_task(task_id)
     end
 
+    # Apply flag settings (TypeScript SDK v0.2.50 parity)
+    #
+    # Merges the provided settings into the flag settings layer.
+    #
+    # @param settings [Hash] Settings to merge into the flag layer
+    # @return [Hash] Response from the CLI
+    #
+    # @example
+    #   client.apply_flag_settings({ "model" => "claude-sonnet-4-5-20250514" })
+    #
+    def apply_flag_settings(settings)
+      require_connection!
+
+      @protocol.apply_flag_settings(settings)
+    end
+
     # Dynamically set MCP servers for this session (TypeScript SDK parity)
     #
     # This replaces the current set of dynamically-added MCP servers.

data/lib/claude_agent/control_protocol.rb

@@ -458,6 +458,20 @@ module ClaudeAgent
       send_control_request(subtype: "stop_task", task_id: task_id)
     end
 
+    # Apply flag settings (TypeScript SDK v0.2.50 parity)
+    #
+    # Merges the provided settings into the flag settings layer.
+    #
+    # @param settings [Hash] Settings to merge into the flag layer
+    # @return [Hash] Response from the CLI
+    #
+    # @example
+    #   protocol.apply_flag_settings({ "model" => "claude-sonnet-4-5-20250514" })
+    #
+    def apply_flag_settings(settings)
+      send_control_request(subtype: "apply_flag_settings", settings: settings)
+    end
+
     # Dynamically set MCP servers for this session (TypeScript SDK parity)
     #
     # This replaces the current set of dynamically-added MCP servers.
@@ -532,6 +546,7 @@ module ClaudeAgent
 
       request = { subtype: "initialize" }
       request[:hooks] = hooks_config if hooks_config
+      request[:promptSuggestions] = true if options.prompt_suggestions
 
       send_control_request(**request)
     end

data/lib/claude_agent/hooks.rb

@@ -18,6 +18,9 @@ module ClaudeAgent
     Setup
     TeammateIdle
     TaskCompleted
+    ConfigChange
+    WorktreeCreate
+    WorktreeRemove
   ].freeze
 
   # Matcher configuration for hooks
@@ -278,6 +281,59 @@ module ClaudeAgent
     end
   end
 
+  # Input for ConfigChange hook (TypeScript SDK v0.2.49 parity)
+  #
+  # Fired when a configuration file changes.
+  #
+  # @example
+  #   input = ConfigChangeInput.new(
+  #     source: "user_settings",
+  #     file_path: "~/.claude/settings.json",
+  #     session_id: "sess-123"
+  #   )
+  #
+  class ConfigChangeInput < BaseHookInput
+    attr_reader :source, :file_path
+
+    SOURCES = %w[user_settings project_settings local_settings policy_settings skills].freeze
+
+    # @param source [String] One of SOURCES
+    # @param file_path [String, nil] Path to the changed file
+    def initialize(source:, file_path: nil, **kwargs)
+      super(hook_event_name: "ConfigChange", **kwargs)
+      @source = source
+      @file_path = file_path
+    end
+  end
+
+  # Input for WorktreeCreate hook (TypeScript SDK v0.2.50 parity)
+  #
+  # Fired when a worktree is created.
+  #
+  class WorktreeCreateInput < BaseHookInput
+    attr_reader :name
+
+    # @param name [String] Worktree name
+    def initialize(name:, **kwargs)
+      super(hook_event_name: "WorktreeCreate", **kwargs)
+      @name = name
+    end
+  end
+
+  # Input for WorktreeRemove hook (TypeScript SDK v0.2.50 parity)
+  #
+  # Fired when a worktree is removed.
+  #
+  class WorktreeRemoveInput < BaseHookInput
+    attr_reader :worktree_path
+
+    # @param worktree_path [String] Path to the worktree
+    def initialize(worktree_path:, **kwargs)
+      super(hook_event_name: "WorktreeRemove", **kwargs)
+      @worktree_path = worktree_path
+    end
+  end
+
   # Input for TaskCompleted hook (TypeScript SDK v0.2.33 parity)
   #
   # Fired when a task completes.

data/lib/claude_agent/message_parser.rb

@@ -16,7 +16,7 @@ module ClaudeAgent
     # Parse a raw message hash into a typed message object
     #
     # @param raw [Hash] Raw message from CLI
-    # @return [UserMessage, UserMessageReplay, AssistantMessage, SystemMessage, ResultMessage, StreamEvent, CompactBoundaryMessage, StatusMessage, ToolProgressMessage, HookResponseMessage, AuthStatusMessage, TaskNotificationMessage, HookStartedMessage, HookProgressMessage, ToolUseSummaryMessage, FilesPersistedEvent]
+    # @return [UserMessage, UserMessageReplay, AssistantMessage, SystemMessage, ResultMessage, StreamEvent, CompactBoundaryMessage, StatusMessage, ToolProgressMessage, HookResponseMessage, AuthStatusMessage, TaskNotificationMessage, HookStartedMessage, HookProgressMessage, ToolUseSummaryMessage, FilesPersistedEvent, TaskStartedMessage, RateLimitEvent, PromptSuggestionMessage]
     # @raise [MessageParseError] If message cannot be parsed
     def parse(raw)
       type = raw["type"]
@@ -44,6 +44,8 @@ module ClaudeAgent
           parse_hook_progress_message(raw)
         when "files_persisted"
           parse_files_persisted_event(raw)
+        when "task_started"
+          parse_task_started_message(raw)
         else
           parse_system_message(raw)
         end
@@ -57,6 +59,10 @@ module ClaudeAgent
         parse_auth_status_message(raw)
       when "tool_use_summary"
         parse_tool_use_summary_message(raw)
+      when "rate_limit_event"
+        parse_rate_limit_event(raw)
+      when "prompt_suggestion"
+        parse_prompt_suggestion_message(raw)
       else
         logger.error("parser") { "Unknown message type: #{type}" }
         raise MessageParseError.new("Unknown message type: #{type}", raw_message: raw)
@@ -336,5 +342,32 @@ module ClaudeAgent
         processed_at: fetch_dual(raw, :processed_at)
       )
     end
+
+    def parse_task_started_message(raw)
+      TaskStartedMessage.new(
+        uuid: raw["uuid"] || "",
+        session_id: fetch_dual(raw, :session_id, ""),
+        task_id: fetch_dual(raw, :task_id, ""),
+        tool_use_id: fetch_dual(raw, :tool_use_id),
+        description: raw["description"],
+        task_type: fetch_dual(raw, :task_type)
+      )
+    end
+
+    def parse_rate_limit_event(raw)
+      RateLimitEvent.new(
+        rate_limit_info: fetch_dual(raw, :rate_limit_info, {}),
+        uuid: raw["uuid"] || "",
+        session_id: fetch_dual(raw, :session_id, "")
+      )
+    end
+
+    def parse_prompt_suggestion_message(raw)
+      PromptSuggestionMessage.new(
+        uuid: raw["uuid"] || "",
+        session_id: fetch_dual(raw, :session_id, ""),
+        suggestion: raw["suggestion"] || ""
+      )
+    end
   end
 end

data/lib/claude_agent/messages.rb

@@ -616,6 +616,100 @@ module ClaudeAgent
     end
   end
 
+  # Task started message (TypeScript SDK v0.2.45 parity)
+  #
+  # Sent when a new task (subagent) is started.
+  #
+  # @example
+  #   msg = TaskStartedMessage.new(
+  #     uuid: "msg-123",
+  #     session_id: "session-abc",
+  #     task_id: "task-456",
+  #     tool_use_id: "tool-789",
+  #     description: "Running tests",
+  #     task_type: "bash"
+  #   )
+  #
+  TaskStartedMessage = Data.define(
+    :uuid,
+    :session_id,
+    :task_id,
+    :tool_use_id,
+    :description,
+    :task_type
+  ) do
+    def initialize(
+      uuid:,
+      session_id:,
+      task_id:,
+      tool_use_id: nil,
+      description: nil,
+      task_type: nil
+    )
+      super
+    end
+
+    def type
+      :task_started
+    end
+  end
+
+  # Rate limit event (TypeScript SDK v0.2.45 parity)
+  #
+  # Reports rate limit status and utilization information.
+  #
+  # @example
+  #   msg = RateLimitEvent.new(
+  #     uuid: "msg-123",
+  #     session_id: "session-abc",
+  #     rate_limit_info: {
+  #       "status" => "allowed_warning",
+  #       "resetsAt" => 1700000000,
+  #       "rateLimitType" => "five_hour",
+  #       "utilization" => 0.85,
+  #       "isUsingOverage" => false,
+  #       "overageStatus" => "available"
+  #     }
+  #   )
+  #   msg.status  # => "allowed_warning"
+  #
+  RateLimitEvent = Data.define(:rate_limit_info, :uuid, :session_id) do
+    def initialize(rate_limit_info:, uuid: nil, session_id: nil)
+      super
+    end
+
+    def type
+      :rate_limit_event
+    end
+
+    # Get the rate limit status
+    # @return [String, nil]
+    def status
+      rate_limit_info["status"] || rate_limit_info[:status]
+    end
+  end
+
+  # Prompt suggestion message (TypeScript SDK v0.2.47 parity)
+  #
+  # Contains a suggested prompt for the user.
+  #
+  # @example
+  #   msg = PromptSuggestionMessage.new(
+  #     uuid: "msg-123",
+  #     session_id: "session-abc",
+  #     suggestion: "Tell me about this project"
+  #   )
+  #
+  PromptSuggestionMessage = Data.define(:uuid, :session_id, :suggestion) do
+    def initialize(uuid: nil, session_id: nil, suggestion:)
+      super
+    end
+
+    def type
+      :prompt_suggestion
+    end
+  end
+
   # Files persisted event (TypeScript SDK v0.2.25 parity)
   #
   # Sent when files are persisted to storage during a session.
@@ -670,6 +764,9 @@ module ClaudeAgent
     HookStartedMessage,
     HookProgressMessage,
     ToolUseSummaryMessage,
-    FilesPersistedEvent
+    FilesPersistedEvent,
+    TaskStartedMessage,
+    RateLimitEvent,
+    PromptSuggestionMessage
   ].freeze
 end

data/lib/claude_agent/options.rb

@@ -4,7 +4,7 @@ require "json"
 
 module ClaudeAgent
   # Permission modes for tool execution (TypeScript SDK parity)
-  PERMISSION_MODES = %w[default acceptEdits plan bypassPermissions delegate dontAsk].freeze
+  PERMISSION_MODES = %w[default acceptEdits plan bypassPermissions dontAsk].freeze
 
   # Configuration options for ClaudeAgent queries and clients
   #
@@ -42,6 +42,7 @@ module ClaudeAgent
       init: false,
       init_only: false,
       maintenance: false,
+      prompt_suggestions: false,
       debug: false,
       debug_file: nil
     }.freeze
@@ -61,7 +62,7 @@ module ClaudeAgent
       settings sandbox cwd add_dirs env user agent
       cli_path extra_args agents setting_sources plugins
       include_partial_messages output_format enable_file_checkpointing
-      persist_session betas max_buffer_size stderr_callback
+      persist_session prompt_suggestions betas max_buffer_size stderr_callback
       abort_controller spawn_claude_code_process
       init init_only maintenance
       debug debug_file
@@ -260,6 +261,7 @@ module ClaudeAgent
         args.push("--no-persist-session") if persist_session == false
         args.push("--json-schema", JSON.generate(output_format)) if output_format
         args.push("--include-partial-messages") if include_partial_messages
+        args.push("--prompt-suggestions") if prompt_suggestions
         if agents
           agents_hash = agents.transform_values(&:to_h)
           args.push("--agents", JSON.generate(agents_hash))

data/lib/claude_agent/sandbox_settings.rb

@@ -85,6 +85,29 @@ module ClaudeAgent
     end
   end
 
+  # Filesystem-specific configuration for sandbox mode (TypeScript SDK v0.2.49 parity)
+  #
+  # @example
+  #   filesystem = SandboxFilesystemConfig.new(
+  #     allow_write: ["/tmp/*"],
+  #     deny_write: ["/etc/*"],
+  #     deny_read: ["/secrets/*"]
+  #   )
+  #
+  SandboxFilesystemConfig = Data.define(:allow_write, :deny_write, :deny_read) do
+    def initialize(allow_write: [], deny_write: [], deny_read: [])
+      super
+    end
+
+    def to_h
+      result = {}
+      result[:allowWrite] = allow_write unless allow_write.empty?
+      result[:denyWrite] = deny_write unless deny_write.empty?
+      result[:denyRead] = deny_read unless deny_read.empty?
+      result
+    end
+  end
+
   # Sandbox configuration for command execution (TypeScript SDK parity)
   #
   # @example Basic sandbox
@@ -112,7 +135,8 @@ module ClaudeAgent
     :network,
     :ignore_violations,
     :enable_weaker_nested_sandbox,
-    :ripgrep
+    :ripgrep,
+    :filesystem
   ) do
     def initialize(
       enabled: false,
@@ -122,7 +146,8 @@ module ClaudeAgent
       network: nil,
       ignore_violations: nil,
       enable_weaker_nested_sandbox: false,
-      ripgrep: nil
+      ripgrep: nil,
+      filesystem: nil
     )
       super
     end
@@ -136,6 +161,7 @@ module ClaudeAgent
       result[:ignoreViolations] = ignore_violations.to_h if ignore_violations && !ignore_violations.to_h.empty?
       result[:enableWeakerNestedSandbox] = enable_weaker_nested_sandbox if enable_weaker_nested_sandbox
       result[:ripgrep] = ripgrep.to_h if ripgrep
+      result[:filesystem] = filesystem.to_h if filesystem && !filesystem.to_h.empty?
       result
     end
   end

data/lib/claude_agent/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ClaudeAgent
-  VERSION = "0.7.6"
+  VERSION = "0.7.8"
 end

data/sig/claude_agent.rbs

@@ -231,6 +231,15 @@ module ClaudeAgent
     def to_h: () -> Hash[Symbol, untyped]
   end
 
+  class SandboxFilesystemConfig
+    attr_reader allow_write: Array[String]
+    attr_reader deny_write: Array[String]
+    attr_reader deny_read: Array[String]
+
+    def initialize: (?allow_write: Array[String], ?deny_write: Array[String], ?deny_read: Array[String]) -> void
+    def to_h: () -> Hash[Symbol, untyped]
+  end
+
   class SandboxSettings
     attr_reader enabled: bool
     attr_reader auto_allow_bash_if_sandboxed: bool
@@ -240,8 +249,9 @@ module ClaudeAgent
     attr_reader ignore_violations: SandboxIgnoreViolations?
     attr_reader enable_weaker_nested_sandbox: bool
     attr_reader ripgrep: SandboxRipgrepConfig?
+    attr_reader filesystem: SandboxFilesystemConfig?
 
-    def initialize: (?enabled: bool, ?auto_allow_bash_if_sandboxed: bool, ?excluded_commands: Array[String], ?allow_unsandboxed_commands: bool, ?network: SandboxNetworkConfig?, ?ignore_violations: SandboxIgnoreViolations?, ?enable_weaker_nested_sandbox: bool, ?ripgrep: SandboxRipgrepConfig?) -> void
+    def initialize: (?enabled: bool, ?auto_allow_bash_if_sandboxed: bool, ?excluded_commands: Array[String], ?allow_unsandboxed_commands: bool, ?network: SandboxNetworkConfig?, ?ignore_violations: SandboxIgnoreViolations?, ?enable_weaker_nested_sandbox: bool, ?ripgrep: SandboxRipgrepConfig?, ?filesystem: SandboxFilesystemConfig?) -> void
     def to_h: () -> Hash[Symbol, untyped]
   end
 
@@ -332,6 +342,9 @@ module ClaudeAgent
     attr_accessor output_format: Hash[String, untyped]?
     attr_accessor enable_file_checkpointing: bool
 
+    # Prompt suggestions
+    attr_accessor prompt_suggestions: bool
+
     # Beta features
     attr_accessor betas: Array[String]
 
@@ -436,7 +449,7 @@ module ClaudeAgent
   CONTENT_BLOCK_TYPES: Array[Class]
 
   # Message types
-  type message = UserMessage | UserMessageReplay | AssistantMessage | SystemMessage | ResultMessage | StreamEvent | CompactBoundaryMessage | StatusMessage | ToolProgressMessage | HookResponseMessage | AuthStatusMessage | TaskNotificationMessage | HookStartedMessage | HookProgressMessage | ToolUseSummaryMessage | FilesPersistedEvent
+  type message = UserMessage | UserMessageReplay | AssistantMessage | SystemMessage | ResultMessage | StreamEvent | CompactBoundaryMessage | StatusMessage | ToolProgressMessage | HookResponseMessage | AuthStatusMessage | TaskNotificationMessage | HookStartedMessage | HookProgressMessage | ToolUseSummaryMessage | FilesPersistedEvent | TaskStartedMessage | RateLimitEvent | PromptSuggestionMessage
 
   MESSAGE_TYPES: Array[Class]
 
@@ -673,6 +686,40 @@ module ClaudeAgent
     def type: () -> :files_persisted
   end
 
+  # Task started message (TypeScript SDK v0.2.45 parity)
+  class TaskStartedMessage
+    attr_reader uuid: String
+    attr_reader session_id: String
+    attr_reader task_id: String
+    attr_reader tool_use_id: String?
+    attr_reader description: String?
+    attr_reader task_type: String?
+
+    def initialize: (uuid: String, session_id: String, task_id: String, ?tool_use_id: String?, ?description: String?, ?task_type: String?) -> void
+    def type: () -> :task_started
+  end
+
+  # Rate limit event (TypeScript SDK v0.2.45 parity)
+  class RateLimitEvent
+    attr_reader rate_limit_info: Hash[String, untyped]
+    attr_reader uuid: String?
+    attr_reader session_id: String?
+
+    def initialize: (rate_limit_info: Hash[String, untyped], ?uuid: String?, ?session_id: String?) -> void
+    def type: () -> :rate_limit_event
+    def status: () -> String?
+  end
+
+  # Prompt suggestion message (TypeScript SDK v0.2.47 parity)
+  class PromptSuggestionMessage
+    attr_reader uuid: String?
+    attr_reader session_id: String?
+    attr_reader suggestion: String
+
+    def initialize: (?uuid: String?, ?session_id: String?, suggestion: String) -> void
+    def type: () -> :prompt_suggestion
+  end
+
   # Message parser
   class MessageParser
     def initialize: (?logger: Logger?) -> void
@@ -823,6 +870,27 @@ module ClaudeAgent
     def initialize: (task_id: String, task_subject: String, ?task_description: String?, ?teammate_name: String?, ?team_name: String?, **untyped) -> void
   end
 
+  class ConfigChangeInput < BaseHookInput
+    attr_reader source: String
+    attr_reader file_path: String?
+
+    SOURCES: Array[String]
+
+    def initialize: (source: String, ?file_path: String?, **untyped) -> void
+  end
+
+  class WorktreeCreateInput < BaseHookInput
+    attr_reader name: String
+
+    def initialize: (name: String, **untyped) -> void
+  end
+
+  class WorktreeRemoveInput < BaseHookInput
+    attr_reader worktree_path: String
+
+    def initialize: (worktree_path: String, **untyped) -> void
+  end
+
   # Permission types
   type permission_result = PermissionResultAllow | PermissionResultDeny
 
@@ -911,6 +979,7 @@ module ClaudeAgent
     def mcp_reconnect: (String server_name) -> Hash[String, untyped]
     def mcp_toggle: (String server_name, enabled: bool) -> Hash[String, untyped]
     def stop_task: (String task_id) -> Hash[String, untyped]
+    def apply_flag_settings: (Hash[String, untyped] settings) -> Hash[String, untyped]
     def supported_commands: () -> Array[SlashCommand]
     def supported_models: () -> Array[ModelInfo]
     def mcp_server_status: () -> Array[McpServerStatus]
@@ -948,6 +1017,7 @@ module ClaudeAgent
     def mcp_reconnect: (String server_name) -> Hash[String, untyped]
     def mcp_toggle: (String server_name, enabled: bool) -> Hash[String, untyped]
     def stop_task: (String task_id) -> Hash[String, untyped]
+    def apply_flag_settings: (Hash[String, untyped] settings) -> Hash[String, untyped]
     def supported_commands: () -> Array[SlashCommand]
     def supported_models: () -> Array[ModelInfo]
     def mcp_server_status: () -> Array[McpServerStatus]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: claude_agent
 version: !ruby/object:Gem::Version
-  version: 0.7.6
+  version: 0.7.8
 platform: ruby
 authors:
 - Thomas Carr
@@ -43,6 +43,7 @@ files:
 - ".claude/skills/spec/SKILL.md"
 - ".claude/skills/spec/commands/complete.md"
 - ".claude/skills/spec/commands/update.md"
+- ".worktreeinclude"
 - CHANGELOG.md
 - CLAUDE.md
 - LICENSE.txt