@anthropic-ai/claude-agent-sdk 0.2.133 → 0.2.137

package/manifest.json

@@ -1,47 +1,47 @@
 {
-  "version": "2.1.133",
-  "commit": "cba57ffec4f5d5c279b5f66ea9d7a2544fa410ec",
-  "buildDate": "2026-05-07T18:34:30Z",
+  "version": "2.1.137",
+  "commit": "88a017e5d1d4c7de4e6de6a496ac08c9c1b77d79",
+  "buildDate": "2026-05-08T23:09:27Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "d38f34444911c86c73f32beb82821008b26be889fa0d0caf7085580cf5737e14",
-      "size": 204170768
+      "checksum": "6d91ce741b8aa129fd43c2f844b39dcc1fec8cfd77e8e5a1ed0f0e7ba54cfea9",
+      "size": 205062416
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "b16758680c3bb1e0f8a867e31f9df84e8df2473b0693e811f0b29b465d2e64c3",
-      "size": 206672560
+      "checksum": "bc71e2701a196c1eee65d0cda675f40118aaf11ce469831bb45092fc342527ff",
+      "size": 207568336
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "dcc7275f9198317e073c329abe174827604a801e9bfb577a00d86efcf4f8167c",
-      "size": 229619336
+      "checksum": "8198e7c845a4f3806504b7350424158970c24c56724de400675d6597507d6183",
+      "size": 230471304
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "d0ddf0aee6e4426a705719e5d4716e3ce3cb38f9a5fe06eb6d5ffcef6c98832a",
-      "size": 229701328
+      "checksum": "ae29f87fdee2d42b5e9ff05c84256bf50a0e7edaa2d58975f9b4b2bd2c29897c",
+      "size": 230577872
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "fd8370f93bb41b4018b7ec26f421368c25630e42129882e9c6ae6b719d595330",
-      "size": 222474072
+      "checksum": "a0fc2fc56e36e281bf2849c6edb7403fa2d97a4ca68d555cfa18c9232fdd7d8d",
+      "size": 223326040
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "9dedf83f3e367bcd306e80a47c06f70234e02e38846096f39d84a0131d7a5320",
-      "size": 224095280
+      "checksum": "35e6c7fd0e03717a74e3fe8b016ca7ee448131d3edf060f82164a573cb818449",
+      "size": 224971824
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "ba4c41963ed7d6567dfec0e7b252cdbc02f17a4f7c0a9e69ca2d7ccb9e94016e",
-      "size": 225659552
+      "checksum": "4bb6443d136278fbb8acf637cdf3481e5db5c547a7f9bc4658dcd8630279dfe4",
+      "size": 226494112
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "389d5e7bc9d4bf3f1909c60be63fccc93cc824d7c691638418a5904ce675afbd",
-      "size": 221617824
+      "checksum": "83db287224382522157ecbb733f63f51cbc1fb5d048a3950ee2a05c779edbfb5",
+      "size": 222451872
     }
   }
 }

package/manifest.zst.json

@@ -1,55 +1,55 @@
 {
-  "version": "2.1.133",
-  "commit": "cba57ffec4f5d5c279b5f66ea9d7a2544fa410ec",
-  "buildDate": "2026-05-07T18:41:25Z",
+  "version": "2.1.137",
+  "commit": "88a017e5d1d4c7de4e6de6a496ac08c9c1b77d79",
+  "buildDate": "2026-05-08T23:16:16Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "9947312c65fdd4c632926099ef4b0baf4796d232bb183c2a24e529055ddf338f",
-      "size": 42353282,
+      "checksum": "b381dc330330a8e3165f10f36e0f7b9741cc2ae81e9c30b9de27fc87aac42ccf",
+      "size": 42514413,
       "bundle": {
-        "checksum": "acdc148b07ca2d5d58d1ef0f7d9d1263fa9380b8368d00c48abd78a4fa998ad0",
-        "size": 42360716
+        "checksum": "b498ae41fb58a3f53fe628408c0dcceee0f0a105c2aaee8f92cbad5f6b81eb54",
+        "size": 42522515
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "907bcb38b96e7a0a141f299467550b9ead5ee8ec21b2e0943eca5ba291188ce0",
-      "size": 44266071,
+      "checksum": "5d658e16017805881635c16057b5354eca1f2d86d6112892456e708e06f600a4",
+      "size": 44416297,
       "bundle": {
-        "checksum": "038c40341848d7808ae976373887e1f06ec0ef1522d7a21d6082693fdb3da4f2",
-        "size": 44263353
+        "checksum": "a7ddd624dc877c1bea9fcda689cb9a4a6ee09fac9baf328a8aea805ae8c79b6b",
+        "size": 44415877
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "38716ff150d6b551d1dbeb7bd27ca0d06ce3e836e6fce77af6c3ac13c2e18967",
-      "size": 50147780
+      "checksum": "20e1967c32839d5042b48b7b72a551a0bf3f23ec45424913b9482dcc3b000bd0",
+      "size": 50314251
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "2b3f2b28ba5142c87b740bbd3d587ebe1c1e051cace6f8326207bdc1205849fa",
-      "size": 50761829
+      "checksum": "f28707885240752a318f0b527d00fb2bb9dde98c0066bef9af80524fc386eaec",
+      "size": 50919636
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "b8fa2a77e0ab7a07f3cb91418c4e5edf99ef3291b762481aa14916301feba40d",
-      "size": 48774646
+      "checksum": "8ee8dbf6fcc56a2a72b16e46019903424665f28f9815833d2eeedafd84469a30",
+      "size": 48945786
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "0eb3c6bd29e5ce9eec973682e701de06663ca432b29b339903edeb12b853dea4",
-      "size": 49480595
+      "checksum": "14bf7ce7badc63f66c316f0fea83b26b5a89dbea4627e1783f510ccb8d31d86b",
+      "size": 49642958
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "ebfd46c5664f381e6b9e2cae2b05ab446776ae160314474aec00f9372bd361af",
-      "size": 51506130
+      "checksum": "e186c6c7662de8352f5df83db2457de4313242d040773467a81032303a7e799a",
+      "size": 51649755
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "22bddc1a6f82e2b3be2c2a85540f802b698ebe5c51076bac924966ad2b358ab6",
-      "size": 49773273
+      "checksum": "75a3d6e63a57bc8133974376b7f86de0363da033c24db588a416b0c5df759f29",
+      "size": 49912570
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.2.133",
+  "version": "0.2.137",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -55,14 +55,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.2.133",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.2.133",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.2.133",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.2.133",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.2.133",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.2.133",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.2.133",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.2.133"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.2.137",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.2.137",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.2.137",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.2.137",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.2.137",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.2.137",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.2.137",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.2.137"
   },
   "files": [
     "sdk.mjs",
@@ -78,5 +78,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.133"
+  "claudeCodeVersion": "2.1.137"
 }

package/sdk-tools.d.ts

@@ -260,7 +260,15 @@ export type ListMcpResourcesOutput = {
 /**
  * MCP tool execution result
  */
-export type McpOutput = string;
+export type McpOutput =
+  | string
+  | {
+      type: string;
+      [k: string]: unknown;
+    }[]
+  | {
+      [k: string]: unknown;
+    };
 
 export interface AgentInput {
   /**

package/sdk.d.ts

@@ -367,6 +367,7 @@ declare namespace coreTypes {
         SDKNotificationMessage,
         SDKPartialAssistantMessage,
         SDKPermissionDenial,
+        SDKPermissionDeniedMessage,
         SDKPluginInstallMessage,
         SDKPromptSuggestionMessage,
         SDKRateLimitEvent,
@@ -574,6 +575,16 @@ export declare type FileChangedHookSpecificOutput = {
     watchPaths?: string[];
 };
 
+/**
+ * Apply the same trust-tier filter the CLI applies before honoring escalating
+ * permission modes from settings: if `permissions.defaultMode` is escalating
+ * (`bypassPermissions`/`auto`/`acceptEdits`) AND was set by a repo-committed
+ * tier (`project`), drop it from the returned `effective`.
+ *
+ * @alpha
+ */
+export declare function filterEscalatingDefaultMode(_resolved: ResolvedSettings): Settings;
+
 /**
  * Fold a batch of appended entries into the running summary for `key`.
  *
@@ -1410,7 +1421,7 @@ export declare type Options = {
      * - `'medium'` — Moderate thinking
      * - `'high'` — Deep reasoning (default)
      * - `'xhigh'` — Deeper than high (Opus 4.7 only)
-     * - `'max'` — Maximum effort (Opus 4.6/4.7 only)
+     * - `'max'` — Maximum effort (Opus 4.6/4.7, Sonnet 4.6)
      *
      * @see https://docs.anthropic.com/en/docs/build-with-claude/effort
      */
@@ -1897,6 +1908,12 @@ export declare type PermissionUpdate = {
 
 export declare type PermissionUpdateDestination = 'userSettings' | 'projectSettings' | 'localSettings' | 'session' | 'cliArg';
 
+/**
+ * Which policy sub-source supplied a `'managed'` value.
+ * @alpha
+ */
+export declare type PolicySettingsOrigin = 'helper' | 'remote' | 'plist' | 'hklm' | 'file' | 'parent' | 'hkcu';
+
 export declare type PostCompactHookInput = BaseHookInput & {
     hook_event_name: 'PostCompact';
     trigger: 'manual' | 'auto';
@@ -2031,6 +2048,18 @@ export declare type PromptResponse = {
     selected: string;
 };
 
+/**
+ * Per-key provenance entry.
+ * @alpha
+ */
+export declare type ProvenanceEntry = {
+    source: ResolvedSettingSource;
+    /** Absolute path to the settings file, for filesystem-backed sources. */
+    path?: string;
+    /** Which policy sub-source supplied the value, when `source === 'managed'`. */
+    policyOrigin?: PolicySettingsOrigin;
+};
+
 /**
  * Query interface with methods for controlling query execution.
  * Extends AsyncGenerator and has methods, so not serializable.
@@ -2264,6 +2293,96 @@ export declare function query(_params: {
  */
 export declare function renameSession(_sessionId: string, _title: string, _options?: SessionMutationOptions): Promise<void>;
 
+/**
+ * Result of {@link resolveSettings}.
+ * @alpha
+ */
+export declare type ResolvedSettings = {
+    /** Merged settings after applying all enabled sources in precedence order. */
+    effective: Settings;
+    /** For each top-level key in `effective`, which source supplied the value. */
+    provenance: Partial<Record<keyof Settings, ProvenanceEntry>>;
+    /**
+     * Per-source raw settings, low→high precedence. Use this when per-top-level
+     * provenance is too coarse (e.g. checking which tier set a nested key).
+     */
+    sources: Array<{
+        source: ResolvedSettingSource;
+        settings: Settings;
+        path?: string;
+        policyOrigin?: PolicySettingsOrigin;
+    }>;
+};
+
+/**
+ * Source that contributed an effective setting value. Filesystem sources use
+ * the same names as {@link SettingSource}; `'managed'` is the policy tier
+ * (managed-settings.json / `managedSettings` option); `'flag'` is the
+ * `--settings` CLI flag tier.
+ * @alpha
+ */
+export declare type ResolvedSettingSource = SettingSource | 'managed' | 'flag';
+
+/**
+ * Resolve the effective Claude Code settings for the given options using the
+ * same merge engine as the CLI, without spawning the Claude CLI. Useful for
+ * inspecting what configuration a `query()` call would see.
+ *
+ * @remarks
+ * This reports the **raw settings cascade**, not a security decision. Two
+ * caveats:
+ *
+ * - **The policy tier matches CLI startup** (managed-settings.json,
+ *   remote-cached managed settings, MDM via macOS plist / Windows
+ *   HKLM/HKCU, and `managedSettings`) **except** the admin-configured
+ *   `policyHelper` subprocess is not executed. MDM resolution may invoke
+ *   `plutil` (macOS, when an MDM plist exists) or `reg.exe` (Windows/WSL)
+ *   on the first call per process. If your deployment relies on
+ *   policyHelper to inject managed settings, results will differ.
+ * - **`permissions.defaultMode` is reported as-is across all tiers**
+ *   including project. The CLI applies a separate trust filter before
+ *   honoring escalating modes (`bypassPermissions`, `auto`, `acceptEdits`)
+ *   from repo-committed files; pass the result through
+ *   {@link filterEscalatingDefaultMode} before acting on `defaultMode`.
+ *
+ * @alpha
+ */
+export declare function resolveSettings(_opts?: ResolveSettingsOptions): Promise<ResolvedSettings>;
+
+/**
+ * Options for {@link resolveSettings}.
+ * @alpha
+ */
+export declare type ResolveSettingsOptions = {
+    /**
+     * Directory to resolve project/local settings relative to. Defaults to the
+     * current process's working directory.
+     */
+    cwd?: string;
+    /**
+     * Which filesystem settings sources to load. When omitted, all sources are
+     * loaded (matches CLI defaults). Pass `[]` to skip user/project/local
+     * sources — the managed-settings policy tier is still read from disk.
+     */
+    settingSources?: SettingSource[];
+    /**
+     * Restrictive policy-tier settings — equivalent to `Options.managedSettings`
+     * on `query()`. Feeds the lowest-precedence policy sub-source and is
+     * filtered through a restrictive-key allowlist (`allowManaged*Only` locks,
+     * `permissions.deny`/`ask`, sandbox restrictions); non-restrictive keys
+     * such as `model`, `env`, `cleanupPeriodDays` are silently dropped.
+     */
+    managedSettings?: Settings;
+    /**
+     * Server-managed settings payload (the result of fetching
+     * `/api/claude_code/settings`). Feeds the `'remote'` policy sub-source —
+     * same trust level as the on-disk cache it replaces, so non-restrictive
+     * keys flow through unfiltered. Use this when the embedding host has a
+     * fresher result than the CLI's `~/.claude/remote-settings.json` cache.
+     */
+    serverManagedSettings?: Settings;
+};
+
 /**
  * Result of a rewindFiles operation.
  */
@@ -3016,7 +3135,7 @@ export declare type SDKMemoryRecallMessage = {
     session_id: string;
 };
 
-export declare type SDKMessage = SDKAssistantMessage | SDKUserMessage | SDKUserMessageReplay | SDKResultMessage | SDKSystemMessage | SDKPartialAssistantMessage | SDKCompactBoundaryMessage | SDKStatusMessage | SDKAPIRetryMessage | SDKLocalCommandOutputMessage | SDKHookStartedMessage | SDKHookProgressMessage | SDKHookResponseMessage | SDKPluginInstallMessage | SDKToolProgressMessage | SDKAuthStatusMessage | SDKTaskNotificationMessage | SDKTaskStartedMessage | SDKTaskUpdatedMessage | SDKTaskProgressMessage | SDKSessionStateChangedMessage | SDKNotificationMessage | SDKFilesPersistedEvent | SDKToolUseSummaryMessage | SDKMemoryRecallMessage | SDKRateLimitEvent | SDKElicitationCompleteMessage | SDKPromptSuggestionMessage | SDKMirrorErrorMessage;
+export declare type SDKMessage = SDKAssistantMessage | SDKUserMessage | SDKUserMessageReplay | SDKResultMessage | SDKSystemMessage | SDKPartialAssistantMessage | SDKCompactBoundaryMessage | SDKStatusMessage | SDKAPIRetryMessage | SDKLocalCommandOutputMessage | SDKHookStartedMessage | SDKHookProgressMessage | SDKHookResponseMessage | SDKPluginInstallMessage | SDKToolProgressMessage | SDKAuthStatusMessage | SDKTaskNotificationMessage | SDKTaskStartedMessage | SDKTaskUpdatedMessage | SDKTaskProgressMessage | SDKSessionStateChangedMessage | SDKNotificationMessage | SDKFilesPersistedEvent | SDKToolUseSummaryMessage | SDKMemoryRecallMessage | SDKRateLimitEvent | SDKElicitationCompleteMessage | SDKPermissionDeniedMessage | SDKPromptSuggestionMessage | SDKMirrorErrorMessage;
 
 /**
  * Provenance of a user-role message (peer session, team lead, channel). Absent or `human` means keyboard input from the user.
@@ -3082,6 +3201,34 @@ export declare type SDKPermissionDenial = {
     tool_input: Record<string, unknown>;
 };
 
+/**
+ * Emitted when a tool call is auto-denied without an interactive permission prompt (e.g. auto-mode classifier, dontAsk mode, headless-agent auto-deny, or a deny rule). The 'ask' path surfaces via a can_use_tool control_request; this event covers the 'deny' short-circuit in canUseTool so SDK hosts can render the denial instead of only seeing an is_error tool_result. PreToolUse hook denies bypass canUseTool and are not covered here.
+ */
+export declare type SDKPermissionDeniedMessage = {
+    type: 'system';
+    subtype: 'permission_denied';
+    tool_name: string;
+    tool_use_id: string;
+    /**
+     * Subagent ID when the denied tool call originated inside a subagent. Mirrors can_use_tool for host-side routing.
+     */
+    agent_id?: string;
+    /**
+     * Discriminator from PermissionDecisionReason (e.g. 'classifier', 'asyncAgent', 'mode', 'rule').
+     */
+    decision_reason_type?: string;
+    /**
+     * Human-readable reason from the deciding component, when available.
+     */
+    decision_reason?: string;
+    /**
+     * The rejection message returned to the model in the tool_result.
+     */
+    message: string;
+    uuid: UUID;
+    session_id: string;
+};
+
 /**
  * Configuration for loading a plugin.
  */
@@ -3807,6 +3954,17 @@ export declare interface Settings {
      * Command to refresh GCP authentication (e.g., gcloud auth application-default login)
      */
     gcpAuthRefresh?: string;
+    /**
+     * Executable that computes managed settings at startup. Honored only from admin-controlled policy sources.
+     */
+    policyHelper?: {
+        /**
+         * Absolute path to the helper executable
+         */
+        path: string;
+        timeoutMs?: number;
+        refreshIntervalMs?: 0 | number;
+    };
     /**
      * Custom file suggestion configuration for \@ mentions
      */
@@ -5199,6 +5357,10 @@ export declare interface Settings {
      * Prevent claude-cli:// protocol handler registration with the OS
      */
     disableDeepLinkRegistration?: 'disable';
+    /**
+     * Default transcript view: chat (SendUserMessage checkpoints only) or transcript (full)
+     */
+    defaultView?: 'chat' | 'transcript';
     [k: string]: unknown;
 }