@anthropic-ai/claude-agent-sdk 0.2.89 → 0.2.91

package/manifest.json

@@ -1,46 +1,46 @@
 {
-  "version": "2.1.89",
-  "buildDate": "2026-03-31T23:01:10Z",
+  "version": "2.1.91",
+  "buildDate": "2026-04-02T22:04:30Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "f903a5e53f845b1ac5566296b713193827665f28da16300fdca7539cb0669a7f",
-      "size": 196886384
+      "checksum": "7433d76d3ec5d223a340e21d7a05f3d481d89999f228113168ad5d64c66fd376",
+      "size": 198092944
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "1322c5eecec8047e9cd7114f7d547ef6a9596563d6bbc7e594167d0f8bc8b406",
-      "size": 198397008
+      "checksum": "47409dc476c199711d5c776cf359773f75cb9dc72ce7494a4e4cb100520e8ab4",
+      "size": 199574608
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "428301f56cf0139e6fbfa55e13be3f0f032ac1eb5ddb8849fbc703ee220c1cca",
-      "size": 228657728
+      "checksum": "dddba100b352ea6d06aa7e036d5afe49749edddd1309a4aa22e47049fafcadf9",
+      "size": 230427200
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "903cb3c96b314d86856632c8702f5cdf971b804d0b19ef87446573bcd1d7df1c",
-      "size": 228473472
+      "checksum": "01b74e1b02e3330940b3526d2f6e00bf32f7fd9e6b3861be6a61e01cfd7296e6",
+      "size": 230161024
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "7cb5fd60f3d2366672857077f3bd0f93ab83dffebd8f93c70344afa58bdb91ec",
-      "size": 221776320
+      "checksum": "3dcaacefb510f6aee3573d35fe65f5dccbbbf4b6fdcca9a5a5455c03556a2f8b",
+      "size": 223480256
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "60941916f0a5656a5952a0f2f54228f574f8756ea503119f858724ad43c9b28d",
-      "size": 223099328
+      "checksum": "b05d9447b7d9a4fa92f936b2275ca87db3bada52d8589bf4e4c49d437366942a",
+      "size": 224459200
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "2e312000b538f11d13f1dfc52d4131996895b9a07bd8897d8f9153635d4ea092",
-      "size": 238557856
+      "checksum": "12f69849f6774749718520f41fb94f6fc30779b55d8f9b0acaaf20c755e6b55d",
+      "size": 239873184
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "5f1d597c542aac3a11f557e12c92d0c49220ab77e741014b0599a572d81ca679",
-      "size": 235014304
+      "checksum": "389de7f1f2b979cb4098f7752ca0099275cedabcfe3908a9886d143ef594972b",
+      "size": 236586144
     }
   }
 }

package/manifest.zst.json

@@ -1,54 +1,54 @@
 {
-  "version": "2.1.89",
-  "buildDate": "2026-03-31T23:01:11Z",
+  "version": "2.1.91",
+  "buildDate": "2026-04-02T22:04:31Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "ee6870995b94768b165410dc18e5523d840b149657ed52dba45e6dfef075da48",
-      "size": 40741984,
+      "checksum": "3cbce93101acbf4af55025efc443ed38c3605e48d67b93eff79e8feaeb646ee6",
+      "size": 40979083,
       "bundle": {
-        "checksum": "0eaf878b84a8f2f2d86bb5c8dd1f25a20ed37fd34c8bc7f7e65e057f2e38389c",
-        "size": 40746913
+        "checksum": "67979609f28865b77c37a57da948d352f23013afe261c3e06668e28f8957f21c",
+        "size": 40975507
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "d698b7101ad599a6d98c4bad7ced35e24e789693a70abdd1dc42064b5a9a7701",
-      "size": 42386954,
+      "checksum": "f14816b97af313694ee025a9398e184b5c10b1f83e4b95279c4e9c7e9852650c",
+      "size": 42669756,
       "bundle": {
-        "checksum": "cb030dd63605eac527e83bb436578ad7472c1da01bb59abfa6596bf5a054eea2",
-        "size": 42383339
+        "checksum": "04b781dd2d84c67f399d93d6430b58757f8b71bbc2548ea6117c6b246cf98436",
+        "size": 42671616
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "09ba9e09dee846d924f8a0ec28f7fabd127260d1a5b8e9d3e896fdbeb17a4ff5",
-      "size": 50422513
+      "checksum": "787c1311934930180f0b4f06dc879c9727cfb12e350f879a62b5d38fc93a0576",
+      "size": 50673837
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "5a909d13f308be6c7bb341ca7a0b0de6ce048fc336f4bbe8ab6fdddc45f0d5ec",
-      "size": 50918863
+      "checksum": "3fe7f8bd1ec9318d90e497fee3c8a9d24390f70efe199cee6b2853b3f4f4b388",
+      "size": 51210881
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "7399c3c9d4d79651de9a3db2df6064bede6f5027ef2fdde6dfbf32b4eb0c35d7",
-      "size": 49008572
+      "checksum": "28a3bd81a6025594397a6defd32aaab09add5d8113e170bd8b8189a019471776",
+      "size": 49318919
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "5c68a381a31ed52494b2bb77d8969fa8a97aaedd8fb3636e32cf81fa2a1e9b3c",
-      "size": 49687404
+      "checksum": "67a921d74c572f2b673209c3eae8a54c73844a496b719f7ad413427c679e6097",
+      "size": 49931358
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "41572f32d4b3cd8b24fa7a367d56bd7fdbcb21ca07c515d25ff44228e7c8cb6a",
-      "size": 52644178
+      "checksum": "fcafda7aa8e8d1b29fd188698d4919d99213fbe3a39561679292d5a3e797b480",
+      "size": 52880797
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "536c03ee45cb9c4e29d42fb81c8d64d499972664348d924c54663b0f8558f8de",
-      "size": 50813305
+      "checksum": "88af689a81ddb34cdda26be335350afec720de6e41b87180c94ebaaf07059793",
+      "size": 51050547
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.2.89",
+  "version": "0.2.91",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -48,7 +48,7 @@
     "code-generation"
   ],
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.74.0",
+    "@anthropic-ai/sdk": "^0.80.0",
     "@modelcontextprotocol/sdk": "^1.27.1"
   },
   "peerDependencies": {
@@ -65,5 +65,24 @@
     "@img/sharp-win32-arm64": "^0.34.2",
     "@img/sharp-win32-x64": "^0.34.2"
   },
-  "claudeCodeVersion": "2.1.89"
+  "files": [
+    "cli.js",
+    "sdk.mjs",
+    "sdk.d.ts",
+    "sdk-tools.d.ts",
+    "agentSdkTypes.d.ts",
+    "bridge.mjs",
+    "bridge.d.ts",
+    "browser-sdk.js",
+    "browser-sdk.d.ts",
+    "embed.js",
+    "embed.d.ts",
+    "extractFromBunfs.js",
+    "extractFromBunfs.d.ts",
+    "manifest.json",
+    "manifest.zst.json",
+    "vendor/ripgrep/",
+    "vendor/audio-capture/"
+  ],
+  "claudeCodeVersion": "2.1.91"
 }

package/sdk-tools.d.ts

@@ -287,7 +287,7 @@ export interface AgentInput {
   /**
    * Permission mode for spawned teammate (e.g., "plan" to require plan approval).
    */
-  mode?: "acceptEdits" | "bypassPermissions" | "default" | "dontAsk" | "plan";
+  mode?: "acceptEdits" | "auto" | "bypassPermissions" | "default" | "dontAsk" | "plan";
   /**
    * Isolation mode. "worktree" creates a temporary git worktree so the agent works on an isolated copy of the repo.
    */

package/sdk.d.ts

@@ -29,7 +29,7 @@ export declare type AccountInfo = {
     /**
      * Active API backend. Anthropic OAuth login only applies when "firstParty"; for 3P providers the other fields are absent and auth is external (AWS creds, gcloud ADC, etc.).
      */
-    apiProvider?: 'firstParty' | 'bedrock' | 'vertex' | 'foundry';
+    apiProvider?: 'firstParty' | 'bedrock' | 'vertex' | 'foundry' | 'anthropicAws';
 };
 
 /**
@@ -335,6 +335,7 @@ declare namespace coreTypes {
         TaskCompletedHookInput,
         TaskCreatedHookInput,
         TeammateIdleHookInput,
+        TerminalReason,
         ThinkingAdaptive,
         ThinkingConfig,
         ThinkingDisabled,
@@ -1269,6 +1270,12 @@ export declare type Options = {
      * These sandbox settings control sandbox behavior (enabled, auto-allow, etc.),
      * while the actual access restrictions come from your permission configuration.
      *
+     * **Dependency check:** When `enabled: true` is passed via this option,
+     * `failIfUnavailable` defaults to `true` — if sandbox dependencies are missing
+     * (e.g. `bubblewrap` on Linux) or the platform is unsupported, `query()` will
+     * emit an error result and exit rather than silently running commands
+     * unsandboxed. Set `failIfUnavailable: false` to allow graceful degradation.
+     *
      * @example Enable sandboxing with auto-allow
      * ```typescript
      * sandbox: {
@@ -1411,9 +1418,9 @@ export declare type PermissionDeniedHookSpecificOutput = {
 };
 
 /**
- * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved.
+ * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved. 'auto' - Use a model classifier to approve/deny permission prompts.
  */
-export declare type PermissionMode = 'default' | 'acceptEdits' | 'bypassPermissions' | 'plan' | 'dontAsk';
+export declare type PermissionMode = 'default' | 'acceptEdits' | 'bypassPermissions' | 'plan' | 'dontAsk' | 'auto';
 
 export declare type PermissionRequestHookInput = BaseHookInput & {
     hook_event_name: 'PermissionRequest';
@@ -2242,7 +2249,7 @@ declare type SDKControlSetModelRequest = {
 declare type SDKControlSetPermissionModeRequest = {
     subtype: 'set_permission_mode';
     /**
-     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved.
+     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved. 'auto' - Use a model classifier to approve/deny permission prompts.
      */
     mode: coreTypes.PermissionMode;
 
@@ -2460,6 +2467,7 @@ export declare type SDKResultError = {
     modelUsage: Record<string, ModelUsage>;
     permission_denials: SDKPermissionDenial[];
     errors: string[];
+    terminal_reason?: TerminalReason;
     fast_mode_state?: FastModeState;
     uuid: UUID;
     session_id: string;
@@ -2482,6 +2490,7 @@ export declare type SDKResultSuccess = {
     permission_denials: SDKPermissionDenial[];
     structured_output?: unknown;
     deferred_tool_use?: SDKDeferredToolUse;
+    terminal_reason?: TerminalReason;
     fast_mode_state?: FastModeState;
     uuid: UUID;
     session_id: string;
@@ -2646,7 +2655,7 @@ export declare type SDKSystemMessage = {
     }[];
     model: string;
     /**
-     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved.
+     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved. 'auto' - Use a model classifier to approve/deny permission prompts.
      */
     permissionMode: PermissionMode;
     slash_commands: string[];
@@ -2897,7 +2906,7 @@ export declare interface Settings {
         /**
          * Default permission mode when Claude Code needs access
          */
-        defaultMode?: 'acceptEdits' | 'bypassPermissions' | 'default' | 'dontAsk' | 'plan';
+        defaultMode?: 'acceptEdits' | 'auto' | 'bypassPermissions' | 'default' | 'dontAsk' | 'plan';
         /**
          * Disable the ability to bypass permission prompts
          */
@@ -3134,6 +3143,10 @@ export declare interface Settings {
      * Disable all hooks and statusLine execution
      */
     disableAllHooks?: boolean;
+    /**
+     * Disable inline shell execution in skills and custom slash commands from user, project, or plugin sources. Commands are replaced with a placeholder instead of being run.
+     */
+    disableSkillShellExecution?: boolean;
     /**
      * Default shell for input-box ! commands. Defaults to 'bash' on all platforms (no Windows auto-flip).
      */
@@ -4147,7 +4160,7 @@ export declare interface SpawnOptions {
     signal: AbortSignal;
 }
 
-declare type StdoutMessage = coreTypes.SDKMessage | coreTypes.SDKStreamlinedTextMessage | coreTypes.SDKStreamlinedToolUseSummaryMessage | coreTypes.SDKPostTurnSummaryMessage | SDKControlResponse | SDKControlRequest | SDKControlCancelRequest | SDKKeepAliveMessage;
+declare type StdoutMessage = coreTypes.SDKMessage | coreTypes.SDKPostTurnSummaryMessage | SDKControlResponse | SDKControlRequest | SDKControlCancelRequest | SDKKeepAliveMessage;
 
 export declare type StopFailureHookInput = BaseHookInput & {
     hook_event_name: 'StopFailure';
@@ -4231,6 +4244,11 @@ export declare type TeammateIdleHookInput = BaseHookInput & {
     team_name: string;
 };
 
+/**
+ * Why the query loop terminated. Unset when the loop was bypassed (local slash command) or interrupted externally (budget/retry limits checked between yields).
+ */
+export declare type TerminalReason = 'blocking_limit' | 'rapid_refill_breaker' | 'prompt_too_long' | 'image_error' | 'model_error' | 'aborted_streaming' | 'aborted_tools' | 'stop_hook_prevented' | 'hook_stopped' | 'tool_deferred' | 'max_turns' | 'completed';
+
 /**
  * Claude decides when and how much to think (Opus 4.6+).
  */