@anthropic-ai/claude-agent-sdk 0.2.117 → 0.2.119

package/sdk.d.ts

@@ -325,6 +325,9 @@ declare namespace coreTypes {
         PermissionUpdateDestination,
         PermissionUpdate,
         PostCompactHookInput,
+        PostToolBatchHookInput,
+        PostToolBatchHookSpecificOutput,
+        PostToolBatchToolCall,
         PostToolUseFailureHookInput,
         PostToolUseFailureHookSpecificOutput,
         PostToolUseHookInput,
@@ -554,6 +557,29 @@ export declare type FileChangedHookSpecificOutput = {
     watchPaths?: string[];
 };
 
+/**
+ * Fold a batch of appended entries into the running summary for `key`.
+ *
+ * Stores call this from inside `append()` to keep a {@link SessionSummaryEntry}
+ * sidecar up to date without re-reading the transcript. `prev` is the previous
+ * summary for the same key (or `undefined` for the first append). The returned
+ * `data` blob is opaque to the store — persist it verbatim.
+ *
+ * Set-once fields (`isSidechain`, `createdAt`, `cwd`, `firstPrompt`) freeze on
+ * first sight; last-wins fields (`customTitle`, `aiTitle`, `lastPrompt`,
+ * `summaryHint`, `gitBranch`, `tag`) overwrite on every appearance.
+ *
+ * `mtime` is NOT derived from entry timestamps — the adapter MUST stamp it at
+ * persist time using the same clock it uses for `listSessions().mtime`. Pass
+ * it via `options.mtime`; when omitted, the previous summary's `mtime` is
+ * preserved (use this only when re-folding the same sidecar without a new
+ * persist). See {@link SessionSummaryEntry.mtime} for the contract.
+ * @alpha
+ */
+export declare function foldSessionSummary(prev: SessionSummaryEntry | undefined, key: SessionKey, entries: SessionStoreEntry[], options?: {
+    mtime?: number;
+}): SessionSummaryEntry;
+
 /**
  * Fork a session into a new branch with fresh UUIDs.
  *
@@ -684,7 +710,7 @@ export declare type GetSubagentMessagesOptions = {
     sessionStore?: SessionStore;
 };
 
-export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "PostToolUseFailure", "Notification", "UserPromptSubmit", "UserPromptExpansion", "SessionStart", "SessionEnd", "Stop", "StopFailure", "SubagentStart", "SubagentStop", "PreCompact", "PostCompact", "PermissionRequest", "PermissionDenied", "Setup", "TeammateIdle", "TaskCreated", "TaskCompleted", "Elicitation", "ElicitationResult", "ConfigChange", "WorktreeCreate", "WorktreeRemove", "InstructionsLoaded", "CwdChanged", "FileChanged"];
+export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "PostToolUseFailure", "PostToolBatch", "Notification", "UserPromptSubmit", "UserPromptExpansion", "SessionStart", "SessionEnd", "Stop", "StopFailure", "SubagentStart", "SubagentStop", "PreCompact", "PostCompact", "PermissionRequest", "PermissionDenied", "Setup", "TeammateIdle", "TaskCreated", "TaskCompleted", "Elicitation", "ElicitationResult", "ConfigChange", "WorktreeCreate", "WorktreeRemove", "InstructionsLoaded", "CwdChanged", "FileChanged"];
 
 /**
  * Hook callback function for responding to events during execution.
@@ -703,9 +729,9 @@ export declare interface HookCallbackMatcher {
     timeout?: number;
 }
 
-export declare type HookEvent = 'PreToolUse' | 'PostToolUse' | 'PostToolUseFailure' | 'Notification' | 'UserPromptSubmit' | 'UserPromptExpansion' | 'SessionStart' | 'SessionEnd' | 'Stop' | 'StopFailure' | 'SubagentStart' | 'SubagentStop' | 'PreCompact' | 'PostCompact' | 'PermissionRequest' | 'PermissionDenied' | 'Setup' | 'TeammateIdle' | 'TaskCreated' | 'TaskCompleted' | 'Elicitation' | 'ElicitationResult' | 'ConfigChange' | 'WorktreeCreate' | 'WorktreeRemove' | 'InstructionsLoaded' | 'CwdChanged' | 'FileChanged';
+export declare type HookEvent = 'PreToolUse' | 'PostToolUse' | 'PostToolUseFailure' | 'PostToolBatch' | 'Notification' | 'UserPromptSubmit' | 'UserPromptExpansion' | 'SessionStart' | 'SessionEnd' | 'Stop' | 'StopFailure' | 'SubagentStart' | 'SubagentStop' | 'PreCompact' | 'PostCompact' | 'PermissionRequest' | 'PermissionDenied' | 'Setup' | 'TeammateIdle' | 'TaskCreated' | 'TaskCompleted' | 'Elicitation' | 'ElicitationResult' | 'ConfigChange' | 'WorktreeCreate' | 'WorktreeRemove' | 'InstructionsLoaded' | 'CwdChanged' | 'FileChanged';
 
-export declare type HookInput = PreToolUseHookInput | PostToolUseHookInput | PostToolUseFailureHookInput | PermissionDeniedHookInput | NotificationHookInput | UserPromptSubmitHookInput | UserPromptExpansionHookInput | SessionStartHookInput | SessionEndHookInput | StopHookInput | StopFailureHookInput | SubagentStartHookInput | SubagentStopHookInput | PreCompactHookInput | PostCompactHookInput | PermissionRequestHookInput | SetupHookInput | TeammateIdleHookInput | TaskCreatedHookInput | TaskCompletedHookInput | ElicitationHookInput | ElicitationResultHookInput | ConfigChangeHookInput | InstructionsLoadedHookInput | WorktreeCreateHookInput | WorktreeRemoveHookInput | CwdChangedHookInput | FileChangedHookInput;
+export declare type HookInput = PreToolUseHookInput | PostToolUseHookInput | PostToolUseFailureHookInput | PostToolBatchHookInput | PermissionDeniedHookInput | NotificationHookInput | UserPromptSubmitHookInput | UserPromptExpansionHookInput | SessionStartHookInput | SessionEndHookInput | StopHookInput | StopFailureHookInput | SubagentStartHookInput | SubagentStopHookInput | PreCompactHookInput | PostCompactHookInput | PermissionRequestHookInput | SetupHookInput | TeammateIdleHookInput | TaskCreatedHookInput | TaskCompletedHookInput | ElicitationHookInput | ElicitationResultHookInput | ConfigChangeHookInput | InstructionsLoadedHookInput | WorktreeCreateHookInput | WorktreeRemoveHookInput | CwdChangedHookInput | FileChangedHookInput;
 
 export declare type HookJSONOutput = AsyncHookJSONOutput | SyncHookJSONOutput;
 
@@ -774,6 +800,8 @@ export declare type InferShape<T extends AnyZodRawShape> = {
 export declare class InMemorySessionStore implements SessionStore {
     private store;
     private mtimes;
+    private summaries;
+    private lastMtime;
     private keyToString;
     append(key: SessionKey, entries: SessionStoreEntry[]): Promise<void>;
     load(key: SessionKey): Promise<SessionStoreEntry[] | null>;
@@ -781,6 +809,7 @@ export declare class InMemorySessionStore implements SessionStore {
         sessionId: string;
         mtime: number;
     }>>;
+    listSessionSummaries(projectKey: string): Promise<SessionSummaryEntry[]>;
     delete(key: SessionKey): Promise<void>;
     listSubkeys(key: {
         projectKey: string;
@@ -1314,6 +1343,7 @@ export declare type Options = {
      * When true, `SDKPartialAssistantMessage` events will be emitted during streaming.
      */
     includePartialMessages?: boolean;
+
     /**
      * Controls Claude's thinking/reasoning behavior.
      *
@@ -1415,6 +1445,13 @@ export declare type Options = {
      * - `'dontAsk'` - Don't prompt for permissions, deny if not pre-approved
      */
     permissionMode?: PermissionMode;
+    /**
+     * Custom workflow instructions for plan mode. When `permissionMode` is
+     * `'plan'`, this string replaces the default code-implementation workflow
+     * body in the plan-mode system reminder. The CLI still wraps it with the
+     * read-only enforcement preamble and the ExitPlanMode protocol footer.
+     */
+    planModeInstructions?: string;
     /**
      * Must be set to `true` when using `permissionMode: 'bypassPermissions'`.
      * This is a safety measure to ensure intentional bypassing of permissions.
@@ -1542,13 +1579,36 @@ export declare type Options = {
      * ```
      */
     settings?: string | Settings;
+    /**
+     * Policy-tier settings supplied by the spawning parent process. Merged into
+     * the managed-settings layer below IT-controlled sources (server / MDM /
+     * managed-settings.json) but above HKCU. Honors policy-only keys such as
+     * `sandbox.network.allowManagedDomainsOnly`.
+     *
+     * Intended for embedding applications (e.g. desktop apps) that derive
+     * lockdown settings from their own enterprise configuration and need to
+     * enforce them on the spawned subprocess without writing root-owned files.
+     *
+     * Unlike `settings`, this option is loaded into the managed (policy) layer
+     * rather than the user-controlled flag layer, so user/project settings
+     * cannot widen restrictions set here.
+     *
+     * @example
+     * ```typescript
+     * managedSettings: {
+     *   sandbox: { network: { allowManagedDomainsOnly: true } }
+     * }
+     * ```
+     */
+    managedSettings?: Settings;
     /**
      * Control which filesystem settings to load.
      * - `'user'` - Global user settings (`~/.claude/settings.json`)
      * - `'project'` - Project settings (`.claude/settings.json`)
      * - `'local'` - Local settings (`.claude/settings.local.json`)
      *
-     * When omitted or empty, no filesystem settings are loaded (SDK isolation mode).
+     * When omitted, all sources are loaded (matches CLI defaults).
+     * Pass `[]` to disable filesystem settings (SDK isolation mode).
      * Must include `'project'` to load CLAUDE.md files.
      */
     settingSources?: SettingSource[];
@@ -1775,6 +1835,26 @@ export declare type PostCompactHookInput = BaseHookInput & {
     compact_summary: string;
 };
 
+/**
+ * Hook input for the PostToolBatch event. Fired once after every tool call in a batch has resolved, before the next model request. PostToolUse fires per-tool and may run concurrently for parallel tool calls; PostToolBatch fires exactly once with the full batch.
+ */
+export declare type PostToolBatchHookInput = BaseHookInput & {
+    hook_event_name: 'PostToolBatch';
+    tool_calls: PostToolBatchToolCall[];
+};
+
+export declare type PostToolBatchHookSpecificOutput = {
+    hookEventName: 'PostToolBatch';
+    additionalContext?: string;
+};
+
+export declare type PostToolBatchToolCall = {
+    tool_name: string;
+    tool_input: unknown;
+    tool_use_id: string;
+    tool_response?: unknown;
+};
+
 export declare type PostToolUseFailureHookInput = BaseHookInput & {
     hook_event_name: 'PostToolUseFailure';
     tool_name: string;
@@ -1782,6 +1862,10 @@ export declare type PostToolUseFailureHookInput = BaseHookInput & {
     tool_use_id: string;
     error: string;
     is_interrupt?: boolean;
+    /**
+     * Tool execution time in milliseconds. Excludes permission-prompt and hook time.
+     */
+    duration_ms?: number;
 };
 
 export declare type PostToolUseFailureHookSpecificOutput = {
@@ -1795,6 +1879,10 @@ export declare type PostToolUseHookInput = BaseHookInput & {
     tool_input: unknown;
     tool_response: unknown;
     tool_use_id: string;
+    /**
+     * Tool execution time in milliseconds. Excludes permission-prompt and hook time.
+     */
+    duration_ms?: number;
 };
 
 export declare type PostToolUseHookSpecificOutput = {
@@ -2283,6 +2371,13 @@ declare type SDKControlFileSuggestionsRequest = {
     query: string;
 };
 
+/**
+ * Requests the responder's CLI binary version. Used by /version in --remote mode so the thin client can show both its own and the remote container's version.
+ */
+declare type SDKControlGetBinaryVersionRequest = {
+    subtype: 'get_binary_version';
+};
+
 /**
  * Requests a breakdown of current context window usage by category.
  */
@@ -2385,6 +2480,13 @@ export declare type SDKControlGetContextUsageResponse = {
     } | null;
 };
 
+/**
+ * Requests the formatted session cost summary (the same text /usage prints in non-interactive mode). Used by the thin-client /usage dialog to show the remote container cost instead of the local $0.00.
+ */
+declare type SDKControlGetSessionCostRequest = {
+    subtype: 'get_session_cost';
+};
+
 /**
  * Returns the effective merged settings and the raw per-source settings.
  */
@@ -2402,6 +2504,10 @@ declare type SDKControlInitializeRequest = {
     jsonSchema?: Record<string, unknown>;
     systemPrompt?: string[];
     appendSystemPrompt?: string;
+    /**
+     * Custom workflow body for the plan-mode system reminder. Replaces the default code-implementation phases; the CLI still wraps it with the read-only enforcement preamble and the ExitPlanMode protocol footer.
+     */
+    planModeInstructions?: string;
 
     /**
      * When true, omit per-user dynamic sections (working directory, auto-memory path) from the cached system prompt and re-inject them as the first user message. Lets cross-user prompt caching hit on a static system prompt prefix. Tradeoff: the model sees this context slightly later in the prompt, so steering on the working directory and memory location is marginally less authoritative. Has no effect when a custom (non-preset) system prompt is in use.
@@ -2418,6 +2524,7 @@ declare type SDKControlInitializeRequest = {
     skills?: string[];
     promptSuggestions?: boolean;
     agentProgressSummaries?: boolean;
+    forwardSubagentText?: boolean;
 };
 
 /**
@@ -2576,7 +2683,7 @@ export declare type SDKControlRequest = {
     request: SDKControlRequestInner;
 };
 
-declare type SDKControlRequestInner = SDKControlInterruptRequest | SDKControlPermissionRequest | SDKControlInitializeRequest | SDKControlSetPermissionModeRequest | SDKControlSetModelRequest | SDKControlSetMaxThinkingTokensRequest | SDKControlRenameSessionRequest | SDKControlMcpStatusRequest | SDKControlGetContextUsageRequest | SDKControlMcpCallRequest | SDKControlFileSuggestionsRequest | SDKHookCallbackRequest | SDKControlMcpMessageRequest | SDKControlRewindFilesRequest | SDKControlCancelAsyncMessageRequest | SDKControlReadFileRequest | SDKControlSeedReadStateRequest | SDKControlMcpSetServersRequest | SDKControlReloadPluginsRequest | SDKControlMcpReconnectRequest | SDKControlMcpToggleRequest | SDKControlChannelEnableRequest | SDKControlEndSessionRequest | SDKControlMcpAuthenticateRequest | SDKControlMcpClearAuthRequest | SDKControlMcpOAuthCallbackUrlRequest | SDKControlClaudeAuthenticateRequest | SDKControlClaudeOAuthCallbackRequest | SDKControlClaudeOAuthWaitForCompletionRequest | SDKControlRemoteControlRequest | SDKControlGenerateSessionTitleRequest | SDKControlSideQuestionRequest | SDKControlUltrareviewLaunchRequest | SDKControlMessageRatedRequest | SDKControlOAuthTokenRefreshRequest | SDKControlStopTaskRequest | SDKControlApplyFlagSettingsRequest | SDKControlGetSettingsRequest | SDKControlElicitationRequest | SDKControlRequestUserDialogRequest;
+declare type SDKControlRequestInner = SDKControlInterruptRequest | SDKControlPermissionRequest | SDKControlInitializeRequest | SDKControlSetPermissionModeRequest | SDKControlSetModelRequest | SDKControlSetMaxThinkingTokensRequest | SDKControlRenameSessionRequest | SDKControlSetColorRequest | SDKControlMcpStatusRequest | SDKControlGetContextUsageRequest | SDKControlGetSessionCostRequest | SDKControlGetBinaryVersionRequest | SDKControlMcpCallRequest | SDKControlFileSuggestionsRequest | SDKHookCallbackRequest | SDKControlMcpMessageRequest | SDKControlRewindFilesRequest | SDKControlCancelAsyncMessageRequest | SDKControlReadFileRequest | SDKControlSeedReadStateRequest | SDKControlMcpSetServersRequest | SDKControlReloadPluginsRequest | SDKControlMcpReconnectRequest | SDKControlMcpToggleRequest | SDKControlChannelEnableRequest | SDKControlEndSessionRequest | SDKControlMcpAuthenticateRequest | SDKControlMcpClearAuthRequest | SDKControlMcpOAuthCallbackUrlRequest | SDKControlClaudeAuthenticateRequest | SDKControlClaudeOAuthCallbackRequest | SDKControlClaudeOAuthWaitForCompletionRequest | SDKControlRemoteControlRequest | SDKControlGenerateSessionTitleRequest | SDKControlSideQuestionRequest | SDKControlUltrareviewLaunchRequest | SDKControlMessageRatedRequest | SDKControlOAuthTokenRefreshRequest | SDKControlStopTaskRequest | SDKControlApplyFlagSettingsRequest | SDKControlGetSettingsRequest | SDKControlElicitationRequest | SDKControlRequestUserDialogRequest;
 
 /**
  * Requests the SDK consumer to render a tool-driven blocking dialog and return the user choice. Used by tools that previously rendered Ink JSX via setToolJSX with an onDone callback.
@@ -2617,6 +2724,14 @@ declare type SDKControlSeedReadStateRequest = {
     mtime: number;
 };
 
+/**
+ * Sets the session accent color. Accepts an agent color name or "default" to reset.
+ */
+declare type SDKControlSetColorRequest = {
+    subtype: 'set_color';
+    color: string;
+};
+
 /**
  * Sets the maximum number of thinking tokens for extended thinking.
  */
@@ -2752,7 +2867,7 @@ declare type SDKKeepAliveMessage = {
 };
 
 /**
- * Output from a local slash command (e.g. /voice, /cost). Displayed as assistant-style text in the transcript.
+ * Output from a local slash command (e.g. /voice, /usage). Displayed as assistant-style text in the transcript.
  */
 export declare type SDKLocalCommandOutputMessage = {
     type: 'system';
@@ -2822,7 +2937,7 @@ export declare type SDKMessageOrigin = {
 };
 
 /**
- * Emitted when SessionStore.append() rejects or times out for a transcript-mirror batch. The batch is dropped (at-most-once delivery); this surfaces the failure so consumers are not silent on data loss.
+ * Emitted when SessionStore.append() rejects or times out for a transcript-mirror batch after bounded retry (3 attempts with short backoff; timeouts are not retried). The batch is then dropped; this surfaces the failure so consumers are not silent on data loss.
  */
 export declare type SDKMirrorErrorMessage = {
     type: 'system';
@@ -2927,7 +3042,7 @@ export declare type SDKRateLimitInfo = {
     utilization?: number;
     overageStatus?: 'allowed' | 'allowed_warning' | 'rejected';
     overageResetsAt?: number;
-    overageDisabledReason?: 'overage_not_provisioned' | 'org_level_disabled' | 'org_level_disabled_until' | 'out_of_credits' | 'seat_tier_level_disabled' | 'member_level_disabled' | 'seat_tier_zero_credit_limit' | 'group_zero_credit_limit' | 'member_zero_credit_limit' | 'org_service_level_disabled' | 'org_service_zero_credit_limit' | 'no_limits_configured' | 'unknown';
+    overageDisabledReason?: 'overage_not_provisioned' | 'org_level_disabled' | 'org_level_disabled_until' | 'out_of_credits' | 'seat_tier_level_disabled' | 'member_level_disabled' | 'seat_tier_zero_credit_limit' | 'group_zero_credit_limit' | 'member_zero_credit_limit' | 'org_service_level_disabled' | 'no_limits_configured' | 'fetch_error' | 'unknown';
     isUsingOverage?: boolean;
     surpassedThreshold?: number;
 };
@@ -3075,7 +3190,9 @@ export declare type SDKSessionOptions = {
     cwd?: string;
     /**
      * Which settings sources to load (CLAUDE.md, `.claude/settings.json`).
-     * Defaults to `[]` — no project/user settings are loaded unless specified.
+     * Defaults to `[]`: no project/user settings are loaded unless specified.
+     * Note that `query()` has the opposite default and loads all sources when
+     * this is omitted.
      */
     settingSources?: SettingSource[];
     /**
@@ -3111,6 +3228,13 @@ export declare type SDKSessionOptions = {
      * - `'dontAsk'` - Don't prompt for permissions, deny if not pre-approved
      */
     permissionMode?: PermissionMode;
+    /**
+     * Custom workflow instructions for plan mode. When `permissionMode` is
+     * `'plan'`, this string replaces the default code-implementation workflow
+     * body in the plan-mode system reminder. The CLI still wraps it with the
+     * read-only enforcement preamble and the ExitPlanMode protocol footer.
+     */
+    planModeInstructions?: string;
 };
 
 /**
@@ -3184,6 +3308,7 @@ export declare type SDKSystemMessage = {
 
     fast_mode_state?: FastModeState;
 
+
     uuid: UUID;
     session_id: string;
 };
@@ -3418,8 +3543,16 @@ export declare type SessionStore = {
      * Within a single process, persist entries in append-call order; across
      * concurrent processes, order is by storage commit time, not call time.
      *
-     * Rejection is logged; the subprocess continues unaffected.
-     * At-most-once delivery — failed batches are not retried.
+     * Most entries carry a stable `uuid`. Adapters SHOULD treat `uuid` as an
+     * idempotency key (upsert / ignore-duplicate) so that retries and
+     * `importSessionToStore()` replays do not create duplicate rows. Entries
+     * without a `uuid` (e.g. titles, tags, mode markers) should be appended
+     * without dedup.
+     *
+     * Rejection is retried (3 attempts total) with short backoff; timeouts
+     * (60s) are not retried since the in-flight call may still land. After
+     * the final failure the batch is dropped and a `mirror_error` system
+     * message is emitted. The subprocess continues unaffected.
      */
     append(key: SessionKey, entries: SessionStoreEntry[]): Promise<void>;
     /**
@@ -3446,6 +3579,22 @@ export declare type SessionStore = {
         sessionId: string;
         mtime: number;
     }>>;
+    /**
+     * Return incrementally-maintained summaries for all sessions in one call.
+     *
+     * Stores should maintain these via {@link foldSessionSummary} inside
+     * `append()`. When implemented, `listSessions({ sessionStore })` reads
+     * all summary metadata in a single round-trip; when undefined, it falls
+     * back to `listSessions()` + per-session `load()`.
+     *
+     * @remarks
+     * Stores that maintain summaries inside `append()` MUST serialize sidecar
+     * writes if `append()` calls can race for the same session — e.g., wrap the
+     * read-fold-write in a transaction/CAS or hold a per-session lock.
+     * `foldSessionSummary` is pure; concurrency control is the store's responsibility.
+     * @alpha
+     */
+    listSessionSummaries?(projectKey: string): Promise<SessionSummaryEntry[]>;
     /**
      * Delete a session. Optional — if undefined, deletion is a no-op
      * (appropriate for WORM/append-only backends like S3).
@@ -3482,6 +3631,31 @@ export declare type SessionStoreEntry = {
     [k: string]: unknown;
 };
 
+/**
+ * Incrementally-maintained session summary.
+ *
+ * Stores update this on {@link SessionStore.append} via
+ * {@link foldSessionSummary} and return the full set from
+ * {@link SessionStore.listSessionSummaries}. Adapters never re-read
+ * previously appended entries.
+ * @alpha
+ */
+export declare type SessionSummaryEntry = {
+    sessionId: string;
+    /**
+     * Storage write time of the sidecar on the adapter. Must share a clock
+     * source with the `mtime` returned by `listSessions()` for this session —
+     * typically file mtime, S3 LastModified, Postgres `updated_at`, or whatever
+     * native timestamp the adapter surfaces. Do not derive from entry ISO
+     * timestamps — entry timestamps and storage write times can differ by
+     * batching and network latency, and conflating them defeats the staleness
+     * check.
+     */
+    mtime: number;
+    /** Opaque SDK-owned state. Stores MUST persist verbatim and MUST NOT interpret. */
+    data: Record<string, unknown>;
+};
+
 /**
  * AUTO-GENERATED - DO NOT EDIT
  *
@@ -3538,6 +3712,10 @@ export declare interface Settings {
      * Fraction of the context window (in characters) reserved for the skill listing sent to Claude (default: 0.01 = 1%). When the listing exceeds this, descriptions are shortened to fit. Raise to opt in to higher per-turn context cost.
      */
     skillListingBudgetFraction?: number;
+    /**
+     * When set to true in either admin-only Windows source — the HKLM SOFTWARE/Policies/ClaudeCode registry key or C:/Program Files/ClaudeCode/managed-settings.json — WSL reads managed settings from the full Windows policy chain (HKLM, C:/Program Files/ClaudeCode via DrvFs, HKCU) in addition to /etc/claude-code. Windows sources take priority. The flag is also required in HKCU itself for HKCU policy to apply on WSL (double opt-in: admin enables the chain, user confirms HKCU). On native Windows the flag has no effect.
+     */
+    wslInheritsWindowsSettings?: boolean;
     /**
      * Environment variables to set for Claude Code sessions
      */
@@ -3809,6 +3987,41 @@ export declare interface Settings {
                  * If true, hook runs once and is removed after execution
                  */
                 once?: boolean;
+            } | {
+                /**
+                 * MCP tool hook type
+                 */
+                type: 'mcp_tool';
+                /**
+                 * Name of an already-configured MCP server to invoke
+                 */
+                server: string;
+                /**
+                 * Name of the tool on that server to call
+                 */
+                tool: string;
+                /**
+                 * Arguments passed to the MCP tool. String values support ${path} interpolation from the hook input JSON (e.g. "${tool_input.file_path}").
+                 */
+                input?: {
+                    [k: string]: unknown;
+                };
+                /**
+                 * Permission rule syntax to filter when this hook runs (e.g., "Bash(git *)"). Only runs if the tool call matches the pattern. Avoids spawning hooks for non-matching commands.
+                 */
+                if?: string;
+                /**
+                 * Timeout in seconds for this specific tool call
+                 */
+                timeout?: number;
+                /**
+                 * Custom status message to display in spinner while hook runs
+                 */
+                statusMessage?: string;
+                /**
+                 * If true, hook runs once and is removed after execution
+                 */
+                once?: boolean;
             })[];
         }[];
     };
@@ -3873,6 +4086,10 @@ export declare interface Settings {
          */
         refreshInterval?: number;
     };
+    /**
+     * URL template for PR links in the footer badge and inline messages. Placeholders: {host} {owner} {repo} {number} {url}. Example: "https://reviews.example.com/{owner}/{repo}/pull/{number}"
+     */
+    prUrlTemplate?: string;
     /**
      * Custom per-subagent status line shown in the agent panel; receives row context as JSON on stdin
      */
@@ -4005,20 +4222,6 @@ export declare interface Settings {
                          * Custom NPM registry URL (defaults to using system default, likely npmjs.org)
                          */
                         registry?: string;
-                    } | {
-                        source: 'pip';
-                        /**
-                         * Python package name as it appears on PyPI
-                         */
-                        package: string;
-                        /**
-                         * Version specifier (e.g., ==1.0.0, >=2.0.0, <3.0.0)
-                         */
-                        version?: string;
-                        /**
-                         * Custom PyPI registry URL (defaults to using system default, likely pypi.org)
-                         */
-                        registry?: string;
                     } | {
                         source: 'url';
                         /**
@@ -4207,20 +4410,6 @@ export declare interface Settings {
                  * Custom NPM registry URL (defaults to using system default, likely npmjs.org)
                  */
                 registry?: string;
-            } | {
-                source: 'pip';
-                /**
-                 * Python package name as it appears on PyPI
-                 */
-                package: string;
-                /**
-                 * Version specifier (e.g., ==1.0.0, >=2.0.0, <3.0.0)
-                 */
-                version?: string;
-                /**
-                 * Custom PyPI registry URL (defaults to using system default, likely pypi.org)
-                 */
-                registry?: string;
             } | {
                 source: 'url';
                 /**
@@ -4399,20 +4588,6 @@ export declare interface Settings {
                  * Custom NPM registry URL (defaults to using system default, likely npmjs.org)
                  */
                 registry?: string;
-            } | {
-                source: 'pip';
-                /**
-                 * Python package name as it appears on PyPI
-                 */
-                package: string;
-                /**
-                 * Version specifier (e.g., ==1.0.0, >=2.0.0, <3.0.0)
-                 */
-                version?: string;
-                /**
-                 * Custom PyPI registry URL (defaults to using system default, likely pypi.org)
-                 */
-                registry?: string;
             } | {
                 source: 'url';
                 /**
@@ -4795,6 +4970,70 @@ export declare interface Settings {
      * Custom message to append to the plugin trust warning shown before installation. Only read from policy settings (managed-settings.json / MDM). Useful for enterprise administrators to add organization-specific context (e.g., "All plugins from our internal marketplace are vetted and approved.").
      */
     pluginTrustMessage?: string;
+    /**
+     * Color theme for the UI
+     */
+    theme?: ('auto' | 'dark' | 'light' | 'light-daltonized' | 'dark-daltonized' | 'light-ansi' | 'dark-ansi') | string;
+    /**
+     * Key binding mode for the prompt input
+     */
+    editorMode?: 'normal' | 'vim';
+    /**
+     * Show full tool output instead of truncated summaries
+     */
+    verbose?: boolean;
+    /**
+     * Preferred OS notification channel
+     */
+    preferredNotifChannel?: 'auto' | 'iterm2' | 'iterm2_with_bell' | 'terminal_bell' | 'kitty' | 'ghostty' | 'notifications_disabled';
+    /**
+     * Automatically compact conversation when context fills
+     */
+    autoCompactEnabled?: boolean;
+    /**
+     * Auto-scroll the conversation view to bottom (fullscreen mode only)
+     */
+    autoScrollEnabled?: boolean;
+    /**
+     * Snapshot files before edits so /rewind can restore them
+     */
+    fileCheckpointingEnabled?: boolean;
+    /**
+     * Show "Cooked for Nm Ns" after each assistant turn
+     */
+    showTurnDuration?: boolean;
+    /**
+     * Stamp each assistant message with its arrival time
+     */
+    showMessageTimestamps?: boolean;
+    /**
+     * Emit OSC 9;4 progress sequences during long operations
+     */
+    terminalProgressBarEnabled?: boolean;
+    /**
+     * Enable the todo / task tracking panel
+     */
+    todoFeatureEnabled?: boolean;
+    /**
+     * How spawned teammates execute (tmux, in-process, auto)
+     */
+    teammateMode?: 'auto' | 'tmux' | 'in-process';
+    /**
+     * Start Remote Control bridge automatically each session
+     */
+    remoteControlAtStartup?: boolean;
+    /**
+     * Mirror local sessions to claude.ai as view-only (no remote control)
+     */
+    autoUploadSessions?: boolean;
+    /**
+     * Push to mobile when a permission prompt or question is waiting
+     */
+    inputNeededNotifEnabled?: boolean;
+    /**
+     * Allow Claude to push proactive mobile notifications
+     */
+    agentPushNotifEnabled?: boolean;
     [k: string]: unknown;
 }
 
@@ -4829,6 +5068,10 @@ export declare type SlashCommand = {
      * Hint for skill arguments (e.g., "<file>")
      */
     argumentHint: string;
+    /**
+     * Alternate names that resolve to this command (e.g., /cost and /stats both resolve to /usage)
+     */
+    aliases?: string[];
 };
 
 /**
@@ -4901,7 +5144,7 @@ export declare function startup(_params?: {
     initializeTimeoutMs?: number;
 }): Promise<WarmQuery>;
 
-declare type StdoutMessage = coreTypes.SDKMessage | coreTypes.SDKPostTurnSummaryMessage | coreTypes.SDKTranscriptMirrorMessage | SDKControlResponse | SDKControlRequest | SDKControlCancelRequest | SDKKeepAliveMessage;
+declare type StdoutMessage = coreTypes.SDKMessage | coreTypes.SDKPostTurnSummaryMessage | coreTypes.SDKTaskSummaryMessage | coreTypes.SDKTranscriptMirrorMessage | SDKControlResponse | SDKControlRequest | SDKControlCancelRequest | SDKKeepAliveMessage;
 
 export declare type StopFailureHookInput = BaseHookInput & {
     hook_event_name: 'StopFailure';
@@ -4954,7 +5197,7 @@ export declare type SyncHookJSONOutput = {
     systemMessage?: string;
     reason?: string;
 
-    hookSpecificOutput?: PreToolUseHookSpecificOutput | UserPromptSubmitHookSpecificOutput | UserPromptExpansionHookSpecificOutput | SessionStartHookSpecificOutput | SetupHookSpecificOutput | SubagentStartHookSpecificOutput | PostToolUseHookSpecificOutput | PostToolUseFailureHookSpecificOutput | PermissionDeniedHookSpecificOutput | NotificationHookSpecificOutput | PermissionRequestHookSpecificOutput | ElicitationHookSpecificOutput | ElicitationResultHookSpecificOutput | CwdChangedHookSpecificOutput | FileChangedHookSpecificOutput | WorktreeCreateHookSpecificOutput;
+    hookSpecificOutput?: PreToolUseHookSpecificOutput | UserPromptSubmitHookSpecificOutput | UserPromptExpansionHookSpecificOutput | SessionStartHookSpecificOutput | SetupHookSpecificOutput | SubagentStartHookSpecificOutput | PostToolUseHookSpecificOutput | PostToolUseFailureHookSpecificOutput | PostToolBatchHookSpecificOutput | PermissionDeniedHookSpecificOutput | NotificationHookSpecificOutput | PermissionRequestHookSpecificOutput | ElicitationHookSpecificOutput | ElicitationResultHookSpecificOutput | CwdChangedHookSpecificOutput | FileChangedHookSpecificOutput | WorktreeCreateHookSpecificOutput;
 };
 
 /**