@anthropic-ai/claude-agent-sdk 0.2.64 → 0.2.68

package/sdk.d.ts

@@ -101,14 +101,6 @@ export declare type BaseHookInput = {
     transcript_path: string;
     cwd: string;
     permission_mode?: string;
-    /**
-     * Subagent identifier. Present only when the hook fires from within a subagent (e.g., a tool called by an AgentTool worker). Absent for the main thread, even in --agent sessions. Use this field (not agent_type) to distinguish subagent calls from main-thread calls.
-     */
-    agent_id?: string;
-    /**
-     * Agent type name (e.g., "general-purpose", "code-reviewer"). Present when the hook fires from within a subagent (alongside agent_id), or on the main thread of a session started with --agent (without agent_id).
-     */
-    agent_type?: string;
 };
 
 export declare type BaseOutputFormat = {
@@ -199,7 +191,6 @@ declare namespace coreTypes {
         HookEvent,
         HookInput,
         HookJSONOutput,
-        InstructionsLoadedHookInput,
         JsonSchemaOutputFormat,
         McpClaudeAIProxyServerConfig,
         McpHttpServerConfig,
@@ -394,7 +385,7 @@ export declare type GetSessionMessagesOptions = {
     offset?: number;
 };
 
-export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "PostToolUseFailure", "Notification", "UserPromptSubmit", "SessionStart", "SessionEnd", "Stop", "SubagentStart", "SubagentStop", "PreCompact", "PermissionRequest", "Setup", "TeammateIdle", "TaskCompleted", "Elicitation", "ElicitationResult", "ConfigChange", "WorktreeCreate", "WorktreeRemove", "InstructionsLoaded"];
+export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "PostToolUseFailure", "Notification", "UserPromptSubmit", "SessionStart", "SessionEnd", "Stop", "SubagentStart", "SubagentStop", "PreCompact", "PermissionRequest", "Setup", "TeammateIdle", "TaskCompleted", "Elicitation", "ElicitationResult", "ConfigChange", "WorktreeCreate", "WorktreeRemove"];
 
 /**
  * Hook callback function for responding to events during execution.
@@ -413,9 +404,9 @@ export declare interface HookCallbackMatcher {
     timeout?: number;
 }
 
-export declare type HookEvent = 'PreToolUse' | 'PostToolUse' | 'PostToolUseFailure' | 'Notification' | 'UserPromptSubmit' | 'SessionStart' | 'SessionEnd' | 'Stop' | 'SubagentStart' | 'SubagentStop' | 'PreCompact' | 'PermissionRequest' | 'Setup' | 'TeammateIdle' | 'TaskCompleted' | 'Elicitation' | 'ElicitationResult' | 'ConfigChange' | 'WorktreeCreate' | 'WorktreeRemove' | 'InstructionsLoaded';
+export declare type HookEvent = 'PreToolUse' | 'PostToolUse' | 'PostToolUseFailure' | 'Notification' | 'UserPromptSubmit' | 'SessionStart' | 'SessionEnd' | 'Stop' | 'SubagentStart' | 'SubagentStop' | 'PreCompact' | 'PermissionRequest' | 'Setup' | 'TeammateIdle' | 'TaskCompleted' | 'Elicitation' | 'ElicitationResult' | 'ConfigChange' | 'WorktreeCreate' | 'WorktreeRemove';
 
-export declare type HookInput = PreToolUseHookInput | PostToolUseHookInput | PostToolUseFailureHookInput | NotificationHookInput | UserPromptSubmitHookInput | SessionStartHookInput | SessionEndHookInput | StopHookInput | SubagentStartHookInput | SubagentStopHookInput | PreCompactHookInput | PermissionRequestHookInput | SetupHookInput | TeammateIdleHookInput | TaskCompletedHookInput | ElicitationHookInput | ElicitationResultHookInput | ConfigChangeHookInput | InstructionsLoadedHookInput | WorktreeCreateHookInput | WorktreeRemoveHookInput;
+export declare type HookInput = PreToolUseHookInput | PostToolUseHookInput | PostToolUseFailureHookInput | NotificationHookInput | UserPromptSubmitHookInput | SessionStartHookInput | SessionEndHookInput | StopHookInput | SubagentStartHookInput | SubagentStopHookInput | PreCompactHookInput | PermissionRequestHookInput | SetupHookInput | TeammateIdleHookInput | TaskCompletedHookInput | ElicitationHookInput | ElicitationResultHookInput | ConfigChangeHookInput | WorktreeCreateHookInput | WorktreeRemoveHookInput;
 
 export declare type HookJSONOutput = AsyncHookJSONOutput | SyncHookJSONOutput;
 
@@ -425,16 +416,6 @@ export declare type InferShape<T extends AnyZodRawShape> = {
     } ? O : never;
 } & {};
 
-export declare type InstructionsLoadedHookInput = BaseHookInput & {
-    hook_event_name: 'InstructionsLoaded';
-    file_path: string;
-    memory_type: 'User' | 'Project' | 'Local' | 'Managed';
-    load_reason: 'session_start' | 'nested_traversal' | 'path_glob_match' | 'include';
-    globs?: string[];
-    trigger_file_path?: string;
-    parent_file_path?: string;
-};
-
 export declare type JsonSchemaOutputFormat = {
     type: 'json_schema';
     schema: Record<string, unknown>;
@@ -464,17 +445,12 @@ export declare function listSessions(_options?: ListSessionsOptions): Promise<SD
 export declare type ListSessionsOptions = {
     /**
      * Directory to list sessions for. When provided, returns sessions for
-     * this project directory (and optionally its git worktrees). When omitted,
-     * returns sessions across all projects.
+     * this project directory (and its git worktrees). When omitted, returns
+     * sessions across all projects.
      */
     dir?: string;
     /** Maximum number of sessions to return. */
     limit?: number;
-    /**
-     * When `dir` is provided and the directory is inside a git repository,
-     * include sessions from all git worktree paths. Defaults to `true`.
-     */
-    includeWorktrees?: boolean;
 };
 
 export declare type McpClaudeAIProxyServerConfig = {
@@ -1020,24 +996,6 @@ export declare type Options = {
      * @see https://docs.anthropic.com/en/docs/claude-code/settings#sandbox-settings
      */
     sandbox?: SandboxSettings;
-    /**
-     * Additional settings to apply. Accepts either a path to a settings JSON file
-     * or a settings object. These are loaded into the "flag settings" layer,
-     * which has the highest priority among user-controlled settings.
-     *
-     * Equivalent to the `--settings` CLI flag.
-     *
-     * @example Inline settings object
-     * ```typescript
-     * settings: { model: 'claude-sonnet-4-6', permissions: { allow: ['Bash(*)'] } }
-     * ```
-     *
-     * @example Path to settings file
-     * ```typescript
-     * settings: '/path/to/settings.json'
-     * ```
-     */
-    settings?: string | Settings;
     /**
      * Control which filesystem settings to load.
      * - `'user'` - Global user settings (`~/.claude/settings.json`)
@@ -1505,7 +1463,6 @@ declare const SandboxSettingsSchema: () => z.ZodObject<{
     }, z.core.$strip>>;
     ignoreViolations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
     enableWeakerNestedSandbox: z.ZodOptional<z.ZodBoolean>;
-    enableWeakerNetworkIsolation: z.ZodOptional<z.ZodBoolean>;
     excludedCommands: z.ZodOptional<z.ZodArray<z.ZodString>>;
     ripgrep: z.ZodOptional<z.ZodObject<{
         command: z.ZodString;
@@ -2170,7 +2127,6 @@ export declare type SDKUserMessage = {
     parent_tool_use_id: string | null;
     isSynthetic?: boolean;
     tool_use_result?: unknown;
-    priority?: 'now' | 'next' | 'later';
     uuid?: UUID;
     session_id: string;
 };
@@ -2181,7 +2137,6 @@ export declare type SDKUserMessageReplay = {
     parent_tool_use_id: string | null;
     isSynthetic?: boolean;
     tool_use_result?: unknown;
-    priority?: 'now' | 'next' | 'later';
     uuid: UUID;
     session_id: string;
     isReplay: true;
@@ -2216,815 +2171,6 @@ export declare type SessionStartHookSpecificOutput = {
     additionalContext?: string;
 };
 
-/**
- * AUTO-GENERATED - DO NOT EDIT
- *
- * This file is auto-generated from the settings JSON schema.
- * To modify these types, edit SettingsSchema in src/utils/settings/types.ts and run:
- *
- *   bun scripts/generate-sdk-types.ts
- */
-export declare interface Settings {
-    /**
-     * JSON Schema reference for Claude Code settings
-     */
-    $schema?: 'https://json.schemastore.org/claude-code-settings.json';
-    /**
-     * Path to a script that outputs authentication values
-     */
-    apiKeyHelper?: string;
-    /**
-     * Path to a script that exports AWS credentials
-     */
-    awsCredentialExport?: string;
-    /**
-     * Path to a script that refreshes AWS authentication
-     */
-    awsAuthRefresh?: string;
-    /**
-     * Custom file suggestion configuration for \@ mentions
-     */
-    fileSuggestion?: {
-        type: 'command';
-        command: string;
-    };
-    /**
-     * Whether file picker should respect .gitignore files (default: true). Note: .ignore files are always respected.
-     */
-    respectGitignore?: boolean;
-    /**
-     * Number of days to retain chat transcripts (0 to disable cleanup)
-     */
-    cleanupPeriodDays?: number;
-    /**
-     * Environment variables to set for Claude Code sessions
-     */
-    env?: {
-        [k: string]: string;
-    };
-    /**
-     * Customize attribution text for commits and PRs. Each field defaults to the standard Claude Code attribution if not set.
-     */
-    attribution?: {
-        /**
-         * Attribution text for git commits, including any trailers. Empty string hides attribution.
-         */
-        commit?: string;
-        /**
-         * Attribution text for pull request descriptions. Empty string hides attribution.
-         */
-        pr?: string;
-    };
-    /**
-     * Deprecated: Use attribution instead. Whether to include Claude's co-authored by attribution in commits and PRs (defaults to true)
-     */
-    includeCoAuthoredBy?: boolean;
-    /**
-     * Include built-in commit and PR workflow instructions in Claude's system prompt (default: true)
-     */
-    includeGitInstructions?: boolean;
-    /**
-     * Tool usage permissions configuration
-     */
-    permissions?: {
-        /**
-         * List of permission rules for allowed operations
-         */
-        allow?: string[];
-        /**
-         * List of permission rules for denied operations
-         */
-        deny?: string[];
-        /**
-         * List of permission rules that should always prompt for confirmation
-         */
-        ask?: string[];
-        /**
-         * Default permission mode when Claude Code needs access
-         */
-        defaultMode?: 'acceptEdits' | 'bypassPermissions' | 'default' | 'dontAsk' | 'plan';
-        /**
-         * Disable the ability to bypass permission prompts
-         */
-        disableBypassPermissionsMode?: 'disable';
-        /**
-         * Additional directories to include in the permission scope
-         */
-        additionalDirectories?: string[];
-        [k: string]: unknown;
-    };
-    /**
-     * Override the default model used by Claude Code
-     */
-    model?: string;
-    /**
-     * Allowlist of models that users can select. Accepts family aliases ("opus" allows any opus version), version prefixes ("opus-4-5" allows only that version), and full model IDs. If undefined, all models are available. If empty array, only the default model is available. Typically set in managed settings by enterprise administrators.
-     */
-    availableModels?: string[];
-    /**
-     * Whether to automatically approve all MCP servers in the project
-     */
-    enableAllProjectMcpServers?: boolean;
-    /**
-     * List of approved MCP servers from .mcp.json
-     */
-    enabledMcpjsonServers?: string[];
-    /**
-     * List of rejected MCP servers from .mcp.json
-     */
-    disabledMcpjsonServers?: string[];
-    /**
-     * Enterprise allowlist of MCP servers that can be used. Applies to all scopes including enterprise servers from managed-mcp.json. If undefined, all servers are allowed. If empty array, no servers are allowed. Denylist takes precedence - if a server is on both lists, it is denied.
-     */
-    allowedMcpServers?: {
-        /**
-         * Name of the MCP server that users are allowed to configure
-         */
-        serverName?: string;
-        /**
-         * Command array [command, ...args] to match exactly for allowed stdio servers
-         *
-         * \@minItems 1
-         */
-        serverCommand?: [string, ...string[]];
-        /**
-         * URL pattern with wildcard support (e.g., "https://*.example.com/*") for allowed remote MCP servers
-         */
-        serverUrl?: string;
-    }[];
-    /**
-     * Enterprise denylist of MCP servers that are explicitly blocked. If a server is on the denylist, it will be blocked across all scopes including enterprise. Denylist takes precedence over allowlist - if a server is on both lists, it is denied.
-     */
-    deniedMcpServers?: {
-        /**
-         * Name of the MCP server that is explicitly blocked
-         */
-        serverName?: string;
-        /**
-         * Command array [command, ...args] to match exactly for blocked stdio servers
-         *
-         * \@minItems 1
-         */
-        serverCommand?: [string, ...string[]];
-        /**
-         * URL pattern with wildcard support (e.g., "https://*.example.com/*") for blocked remote MCP servers
-         */
-        serverUrl?: string;
-    }[];
-    /**
-     * Custom commands to run before/after tool executions
-     */
-    hooks?: {
-        [k: string]: {
-            /**
-             * String pattern to match (e.g. tool names like "Write")
-             */
-            matcher?: string;
-            /**
-             * List of hooks to execute when the matcher matches
-             */
-            hooks: ({
-                /**
-                 * Bash command hook type
-                 */
-                type: 'command';
-                /**
-                 * Shell command to execute
-                 */
-                command: string;
-                /**
-                 * Timeout in seconds for this specific command
-                 */
-                timeout?: number;
-                /**
-                 * Custom status message to display in spinner while hook runs
-                 */
-                statusMessage?: string;
-                /**
-                 * If true, hook runs once and is removed after execution
-                 */
-                once?: boolean;
-                /**
-                 * If true, hook runs in background without blocking
-                 */
-                async?: boolean;
-                /**
-                 * If true, hook runs in background and wakes the model on exit code 2 (blocking error). Implies async.
-                 */
-                asyncRewake?: boolean;
-            } | {
-                /**
-                 * LLM prompt hook type
-                 */
-                type: 'prompt';
-                /**
-                 * Prompt to evaluate with LLM. Use $ARGUMENTS placeholder for hook input JSON.
-                 */
-                prompt: string;
-                /**
-                 * Timeout in seconds for this specific prompt evaluation
-                 */
-                timeout?: number;
-                /**
-                 * Model to use for this prompt hook (e.g., "claude-sonnet-4-6"). If not specified, uses the default small fast model.
-                 */
-                model?: string;
-                /**
-                 * Custom status message to display in spinner while hook runs
-                 */
-                statusMessage?: string;
-                /**
-                 * If true, hook runs once and is removed after execution
-                 */
-                once?: boolean;
-            } | {
-                /**
-                 * Agentic verifier hook type
-                 */
-                type: 'agent';
-                /**
-                 * Prompt describing what to verify (e.g. "Verify that unit tests ran and passed."). Use $ARGUMENTS placeholder for hook input JSON.
-                 */
-                prompt: string;
-                /**
-                 * Timeout in seconds for agent execution (default 60)
-                 */
-                timeout?: number;
-                /**
-                 * Model to use for this agent hook (e.g., "claude-sonnet-4-6"). If not specified, uses Haiku.
-                 */
-                model?: string;
-                /**
-                 * Custom status message to display in spinner while hook runs
-                 */
-                statusMessage?: string;
-                /**
-                 * If true, hook runs once and is removed after execution
-                 */
-                once?: boolean;
-            } | {
-                /**
-                 * HTTP hook type
-                 */
-                type: 'http';
-                /**
-                 * URL to POST the hook input JSON to
-                 */
-                url: string;
-                /**
-                 * Timeout in seconds for this specific request
-                 */
-                timeout?: number;
-                /**
-                 * Additional headers to include in the request. Values may reference environment variables using $VAR_NAME or ${VAR_NAME} syntax (e.g., "Authorization": "Bearer $MY_TOKEN"). Only variables listed in allowedEnvVars will be interpolated.
-                 */
-                headers?: {
-                    [k: string]: string;
-                };
-                /**
-                 * Explicit list of environment variable names that may be interpolated in header values. Only variables listed here will be resolved; all other $VAR references are left as empty strings. Required for env var interpolation to work.
-                 */
-                allowedEnvVars?: string[];
-                /**
-                 * Custom status message to display in spinner while hook runs
-                 */
-                statusMessage?: string;
-                /**
-                 * If true, hook runs once and is removed after execution
-                 */
-                once?: boolean;
-            })[];
-        }[];
-    };
-    /**
-     * Git worktree configuration for --worktree flag. Symlinks prevent duplicating large directories like node_modules across worktrees.
-     */
-    worktree?: {
-        /**
-         * Directories to symlink from main repository to worktrees to avoid disk bloat. Must be explicitly configured - no directories are symlinked by default. Common examples: "node_modules", ".cache", ".bin"
-         */
-        symlinkDirectories?: string[];
-    };
-    /**
-     * Disable all hooks and statusLine execution
-     */
-    disableAllHooks?: boolean;
-    /**
-     * When true (and set in managed settings), only hooks from managed settings run. User, project, and local hooks are ignored.
-     */
-    allowManagedHooksOnly?: boolean;
-    /**
-     * Allowlist of URL patterns that HTTP hooks may target. Supports * as a wildcard (e.g. "https://hooks.example.com/*"). When set, HTTP hooks with non-matching URLs are blocked. If undefined, all URLs are allowed. If empty array, no HTTP hooks are allowed. Arrays merge across settings sources (same semantics as allowedMcpServers).
-     */
-    allowedHttpHookUrls?: string[];
-    /**
-     * Allowlist of environment variable names HTTP hooks may interpolate into headers. When set, each hook's effective allowedEnvVars is the intersection with this list. If undefined, no restriction is applied. Arrays merge across settings sources (same semantics as allowedMcpServers).
-     */
-    httpHookAllowedEnvVars?: string[];
-    /**
-     * When true (and set in managed settings), only permission rules (allow/deny/ask) from managed settings are respected. User, project, local, and CLI argument permission rules are ignored.
-     */
-    allowManagedPermissionRulesOnly?: boolean;
-    /**
-     * When true (and set in managed settings), allowedMcpServers is only read from managed settings. deniedMcpServers still merges from all sources, so users can deny servers for themselves. Users can still add their own MCP servers, but only the admin-defined allowlist applies.
-     */
-    allowManagedMcpServersOnly?: boolean;
-    /**
-     * Custom status line display configuration
-     */
-    statusLine?: {
-        type: 'command';
-        command: string;
-        padding?: number;
-    };
-    /**
-     * Enabled plugins using plugin-id\@marketplace-id format. Example: { "formatter\@anthropic-tools": true }. Also supports extended format with version constraints.
-     */
-    enabledPlugins?: {
-        [k: string]: string[] | boolean | {
-            [k: string]: unknown;
-        };
-    };
-    /**
-     * Additional marketplaces to make available for this repository. Typically used in repository .claude/settings.json to ensure team members have required plugin sources.
-     */
-    extraKnownMarketplaces?: {
-        [k: string]: {
-            /**
-             * Where to fetch the marketplace from
-             */
-            source: {
-                source: 'url';
-                /**
-                 * Direct URL to marketplace.json file
-                 */
-                url: string;
-                /**
-                 * Custom HTTP headers (e.g., for authentication)
-                 */
-                headers?: {
-                    [k: string]: string;
-                };
-            } | {
-                source: 'github';
-                /**
-                 * GitHub repository in owner/repo format
-                 */
-                repo: string;
-                /**
-                 * Git branch or tag to use (e.g., "main", "v1.0.0"). Defaults to repository default branch.
-                 */
-                ref?: string;
-                /**
-                 * Path to marketplace.json within repo (defaults to .claude-plugin/marketplace.json)
-                 */
-                path?: string;
-                /**
-                 * Directories to include via git sparse-checkout (cone mode). Use for monorepos where the marketplace lives in a subdirectory. Example: [".claude-plugin", "plugins"]. If omitted, the full repository is cloned.
-                 */
-                sparsePaths?: string[];
-            } | {
-                source: 'git';
-                /**
-                 * Full git repository URL
-                 */
-                url: string;
-                /**
-                 * Git branch or tag to use (e.g., "main", "v1.0.0"). Defaults to repository default branch.
-                 */
-                ref?: string;
-                /**
-                 * Path to marketplace.json within repo (defaults to .claude-plugin/marketplace.json)
-                 */
-                path?: string;
-                /**
-                 * Directories to include via git sparse-checkout (cone mode). Use for monorepos where the marketplace lives in a subdirectory. Example: [".claude-plugin", "plugins"]. If omitted, the full repository is cloned.
-                 */
-                sparsePaths?: string[];
-            } | {
-                source: 'npm';
-                /**
-                 * NPM package containing marketplace.json
-                 */
-                package: string;
-            } | {
-                source: 'file';
-                /**
-                 * Local file path to marketplace.json
-                 */
-                path: string;
-            } | {
-                source: 'directory';
-                /**
-                 * Local directory containing .claude-plugin/marketplace.json
-                 */
-                path: string;
-            } | {
-                source: 'hostPattern';
-                /**
-                 * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
-                 */
-                hostPattern: string;
-            } | {
-                source: 'pathPattern';
-                /**
-                 * Regex pattern matched against the .path field of file and directory sources. Use in strictKnownMarketplaces to allow filesystem-based marketplaces alongside hostPattern restrictions for network sources. Use ".*" to allow all filesystem paths, or a narrower pattern (e.g., "^/opt/approved/") to restrict to specific directories.
-                 */
-                pathPattern: string;
-            };
-            /**
-             * Local cache path where marketplace manifest is stored (auto-generated if not provided)
-             */
-            installLocation?: string;
-            /**
-             * Whether to automatically update this marketplace and its installed plugins on startup
-             */
-            autoUpdate?: boolean;
-        };
-    };
-    /**
-     * Enterprise strict list of allowed marketplace sources. When set in managed settings, ONLY these exact sources can be added as marketplaces. The check happens BEFORE downloading, so blocked sources never touch the filesystem. Note: this is a policy gate only — it does NOT register marketplaces. To pre-register allowed marketplaces for users, also set extraKnownMarketplaces.
-     */
-    strictKnownMarketplaces?: ({
-        source: 'url';
-        /**
-         * Direct URL to marketplace.json file
-         */
-        url: string;
-        /**
-         * Custom HTTP headers (e.g., for authentication)
-         */
-        headers?: {
-            [k: string]: string;
-        };
-    } | {
-        source: 'github';
-        /**
-         * GitHub repository in owner/repo format
-         */
-        repo: string;
-        /**
-         * Git branch or tag to use (e.g., "main", "v1.0.0"). Defaults to repository default branch.
-         */
-        ref?: string;
-        /**
-         * Path to marketplace.json within repo (defaults to .claude-plugin/marketplace.json)
-         */
-        path?: string;
-        /**
-         * Directories to include via git sparse-checkout (cone mode). Use for monorepos where the marketplace lives in a subdirectory. Example: [".claude-plugin", "plugins"]. If omitted, the full repository is cloned.
-         */
-        sparsePaths?: string[];
-    } | {
-        source: 'git';
-        /**
-         * Full git repository URL
-         */
-        url: string;
-        /**
-         * Git branch or tag to use (e.g., "main", "v1.0.0"). Defaults to repository default branch.
-         */
-        ref?: string;
-        /**
-         * Path to marketplace.json within repo (defaults to .claude-plugin/marketplace.json)
-         */
-        path?: string;
-        /**
-         * Directories to include via git sparse-checkout (cone mode). Use for monorepos where the marketplace lives in a subdirectory. Example: [".claude-plugin", "plugins"]. If omitted, the full repository is cloned.
-         */
-        sparsePaths?: string[];
-    } | {
-        source: 'npm';
-        /**
-         * NPM package containing marketplace.json
-         */
-        package: string;
-    } | {
-        source: 'file';
-        /**
-         * Local file path to marketplace.json
-         */
-        path: string;
-    } | {
-        source: 'directory';
-        /**
-         * Local directory containing .claude-plugin/marketplace.json
-         */
-        path: string;
-    } | {
-        source: 'hostPattern';
-        /**
-         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
-         */
-        hostPattern: string;
-    } | {
-        source: 'pathPattern';
-        /**
-         * Regex pattern matched against the .path field of file and directory sources. Use in strictKnownMarketplaces to allow filesystem-based marketplaces alongside hostPattern restrictions for network sources. Use ".*" to allow all filesystem paths, or a narrower pattern (e.g., "^/opt/approved/") to restrict to specific directories.
-         */
-        pathPattern: string;
-    })[];
-    /**
-     * Enterprise blocklist of marketplace sources. When set in managed settings, these exact sources are blocked from being added as marketplaces. The check happens BEFORE downloading, so blocked sources never touch the filesystem.
-     */
-    blockedMarketplaces?: ({
-        source: 'url';
-        /**
-         * Direct URL to marketplace.json file
-         */
-        url: string;
-        /**
-         * Custom HTTP headers (e.g., for authentication)
-         */
-        headers?: {
-            [k: string]: string;
-        };
-    } | {
-        source: 'github';
-        /**
-         * GitHub repository in owner/repo format
-         */
-        repo: string;
-        /**
-         * Git branch or tag to use (e.g., "main", "v1.0.0"). Defaults to repository default branch.
-         */
-        ref?: string;
-        /**
-         * Path to marketplace.json within repo (defaults to .claude-plugin/marketplace.json)
-         */
-        path?: string;
-        /**
-         * Directories to include via git sparse-checkout (cone mode). Use for monorepos where the marketplace lives in a subdirectory. Example: [".claude-plugin", "plugins"]. If omitted, the full repository is cloned.
-         */
-        sparsePaths?: string[];
-    } | {
-        source: 'git';
-        /**
-         * Full git repository URL
-         */
-        url: string;
-        /**
-         * Git branch or tag to use (e.g., "main", "v1.0.0"). Defaults to repository default branch.
-         */
-        ref?: string;
-        /**
-         * Path to marketplace.json within repo (defaults to .claude-plugin/marketplace.json)
-         */
-        path?: string;
-        /**
-         * Directories to include via git sparse-checkout (cone mode). Use for monorepos where the marketplace lives in a subdirectory. Example: [".claude-plugin", "plugins"]. If omitted, the full repository is cloned.
-         */
-        sparsePaths?: string[];
-    } | {
-        source: 'npm';
-        /**
-         * NPM package containing marketplace.json
-         */
-        package: string;
-    } | {
-        source: 'file';
-        /**
-         * Local file path to marketplace.json
-         */
-        path: string;
-    } | {
-        source: 'directory';
-        /**
-         * Local directory containing .claude-plugin/marketplace.json
-         */
-        path: string;
-    } | {
-        source: 'hostPattern';
-        /**
-         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
-         */
-        hostPattern: string;
-    } | {
-        source: 'pathPattern';
-        /**
-         * Regex pattern matched against the .path field of file and directory sources. Use in strictKnownMarketplaces to allow filesystem-based marketplaces alongside hostPattern restrictions for network sources. Use ".*" to allow all filesystem paths, or a narrower pattern (e.g., "^/opt/approved/") to restrict to specific directories.
-         */
-        pathPattern: string;
-    })[];
-    /**
-     * Force a specific login method: "claudeai" for Claude Pro/Max, "console" for Console billing
-     */
-    forceLoginMethod?: 'claudeai' | 'console';
-    /**
-     * Organization UUID to use for OAuth login
-     */
-    forceLoginOrgUUID?: string;
-    /**
-     * Path to a script that outputs OpenTelemetry headers
-     */
-    otelHeadersHelper?: string;
-    /**
-     * Controls the output style for assistant responses
-     */
-    outputStyle?: string;
-    /**
-     * Preferred language for Claude responses (e.g., "japanese", "spanish")
-     */
-    language?: string;
-    /**
-     * Skip the WebFetch blocklist check for enterprise environments with restrictive security policies
-     */
-    skipWebFetchPreflight?: boolean;
-    sandbox?: {
-        enabled?: boolean;
-        autoAllowBashIfSandboxed?: boolean;
-        /**
-         * Allow commands to run outside the sandbox via the dangerouslyDisableSandbox parameter. When false, the dangerouslyDisableSandbox parameter is completely ignored and all commands must run sandboxed. Default: true.
-         */
-        allowUnsandboxedCommands?: boolean;
-        network?: {
-            allowedDomains?: string[];
-            /**
-             * When true (and set in managed settings), only allowedDomains and WebFetch(domain:...) allow rules from managed settings are respected. User, project, local, and flag settings domains are ignored. Denied domains are still respected from all sources.
-             */
-            allowManagedDomainsOnly?: boolean;
-            /**
-             * macOS only: Unix socket paths to allow. Ignored on Linux (seccomp cannot filter by path).
-             */
-            allowUnixSockets?: string[];
-            /**
-             * If true, allow all Unix sockets (disables blocking on both platforms).
-             */
-            allowAllUnixSockets?: boolean;
-            allowLocalBinding?: boolean;
-            httpProxyPort?: number;
-            socksProxyPort?: number;
-        };
-        filesystem?: {
-            /**
-             * Additional paths to allow writing within the sandbox. Merged with paths from Edit(...) allow permission rules.
-             */
-            allowWrite?: string[];
-            /**
-             * Additional paths to deny writing within the sandbox. Merged with paths from Edit(...) deny permission rules.
-             */
-            denyWrite?: string[];
-            /**
-             * Additional paths to deny reading within the sandbox. Merged with paths from Read(...) deny permission rules.
-             */
-            denyRead?: string[];
-        };
-        ignoreViolations?: {
-            [k: string]: string[];
-        };
-        enableWeakerNestedSandbox?: boolean;
-        /**
-         * macOS only: Allow access to com.apple.trustd.agent in the sandbox. Needed for Go-based CLI tools (gh, gcloud, terraform, etc.) to verify TLS certificates when using httpProxyPort with a MITM proxy and custom CA. **Reduces security** — opens a potential data exfiltration vector through the trustd service. Default: false
-         */
-        enableWeakerNetworkIsolation?: boolean;
-        excludedCommands?: string[];
-        /**
-         * Custom ripgrep configuration for bundled ripgrep support
-         */
-        ripgrep?: {
-            command: string;
-            args?: string[];
-        };
-        [k: string]: unknown;
-    };
-    /**
-     * Whether to show tips in the spinner
-     */
-    spinnerTipsEnabled?: boolean;
-    /**
-     * Customize spinner verbs. mode: "append" adds verbs to defaults, "replace" uses only your verbs.
-     */
-    spinnerVerbs?: {
-        mode: 'append' | 'replace';
-        verbs: string[];
-    };
-    /**
-     * Override spinner tips. tips: array of tip strings. excludeDefault: if true, only show custom tips (default: false).
-     */
-    spinnerTipsOverride?: {
-        excludeDefault?: boolean;
-        tips: string[];
-    };
-    /**
-     * Whether to disable syntax highlighting in diffs
-     */
-    syntaxHighlightingDisabled?: boolean;
-    /**
-     * Whether /rename updates the terminal tab title (defaults to true). Set to false to keep auto-generated topic titles.
-     */
-    terminalTitleFromRename?: boolean;
-    /**
-     * When false, thinking is disabled. When absent or true, thinking is enabled automatically for supported models.
-     */
-    alwaysThinkingEnabled?: boolean;
-    /**
-     * When true, fast mode is enabled. When absent or false, fast mode is off.
-     */
-    fastMode?: boolean;
-    /**
-     * When true, fast mode does not persist across sessions. Each session starts with fast mode off.
-     */
-    fastModePerSessionOptIn?: boolean;
-    /**
-     * When false, prompt suggestions are disabled. When absent or true, prompt suggestions are enabled.
-     */
-    promptSuggestionEnabled?: boolean;
-    /**
-     * Name of an agent (built-in or custom) to use for the main thread. Applies the agent's system prompt, tool restrictions, and model.
-     */
-    agent?: string;
-    /**
-     * Company announcements to display at startup (one will be randomly selected if multiple are provided)
-     */
-    companyAnnouncements?: string[];
-    /**
-     * Per-plugin configuration including MCP server user configs, keyed by plugin ID (plugin\@marketplace format)
-     */
-    pluginConfigs?: {
-        [k: string]: {
-            /**
-             * User configuration values for MCP servers keyed by server name
-             */
-            mcpServers?: {
-                [k: string]: {
-                    [k: string]: string | number | boolean | string[];
-                };
-            };
-        };
-    };
-    /**
-     * Remote session configuration
-     */
-    remote?: {
-        /**
-         * Default environment ID to use for remote sessions
-         */
-        defaultEnvironmentId?: string;
-    };
-    /**
-     * Release channel for auto-updates (latest or stable)
-     */
-    autoUpdatesChannel?: 'latest' | 'stable';
-    /**
-     * Minimum version to stay on - prevents downgrades when switching to stable channel
-     */
-    minimumVersion?: string;
-    /**
-     * Custom directory for plan files, relative to project root. If not set, defaults to ~/.claude/plans/
-     */
-    plansDirectory?: string;
-    /**
-     * Reduce or disable animations for accessibility (spinner shimmer, flash effects, etc.)
-     */
-    prefersReducedMotion?: boolean;
-    /**
-     * Enable auto-memory for this project. When false, Claude will not read from or write to the auto-memory directory.
-     */
-    autoMemoryEnabled?: boolean;
-    /**
-     * Show thinking summaries in the transcript view (ctrl+o). Default: false.
-     */
-    showThinkingSummaries?: boolean;
-    /**
-     * Whether the user has accepted the bypass permissions mode dialog
-     */
-    skipDangerousModePermissionPrompt?: boolean;
-    /**
-     * SSH connection configurations for remote environments. Typically set in managed settings by enterprise administrators to pre-configure SSH connections for team members.
-     */
-    sshConfigs?: {
-        /**
-         * Unique identifier for this SSH config. Used to match configs across settings sources.
-         */
-        id: string;
-        /**
-         * Display name for the SSH connection
-         */
-        name: string;
-        /**
-         * SSH host in format "user\@hostname" or "hostname", or a host alias from ~/.ssh/config
-         */
-        sshHost: string;
-        /**
-         * SSH port (default: 22)
-         */
-        sshPort?: number;
-        /**
-         * Path to SSH identity file (private key)
-         */
-        sshIdentityFile?: string;
-    }[];
-    /**
-     * Glob patterns or absolute paths of CLAUDE.md files to exclude from loading. Patterns are matched against absolute file paths using picomatch. Only applies to User, Project, and Local memory types (Managed/policy files cannot be excluded). Examples: "/home/user/monorepo/CLAUDE.md", "** /code/CLAUDE.md", "** /some-dir/.claude/rules/**"
-     */
-    claudeMdExcludes?: string[];
-    /**
-     * Custom message to append to the plugin trust warning shown before installation. Only read from policy settings (managed-settings.json / MDM). Useful for enterprise administrators to add organization-specific context (e.g., "All plugins from our internal marketplace are vetted and approved.").
-     */
-    pluginTrustMessage?: string;
-    [k: string]: unknown;
-}
-
 /**
  * Source for loading filesystem-based settings. 'user' - Global user settings (~/.claude/settings.json). 'project' - Project settings (.claude/settings.json). 'local' - Local settings (.claude/settings.local.json).
  */