@anthropic-ai/claude-agent-sdk 0.2.90 → 0.2.92

package/extractFromBunfs.js

@@ -13,8 +13,8 @@ import {
   renameSync,
   writeFileSync,
 } from 'fs'
-import { tmpdir } from 'os'
 import { join } from 'path'
+import { tmpdir } from './tempfile.js'
 
 /**
  * If `embeddedPath` is inside Bun's $bunfs virtual filesystem, extract it to a

package/manifest.json

@@ -1,46 +1,46 @@
 {
-  "version": "2.1.90",
-  "buildDate": "2026-04-01T22:59:02Z",
+  "version": "2.1.92",
+  "buildDate": "2026-04-03T23:31:32Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "73c1a7570501ca743cd2d7467cb4699103534a2138052a4e6cab53c0e09d79c8",
-      "size": 197828752
+      "checksum": "6d1b9657727dce81332b3cda11bfe0a8c83e2392e3c062a31022e10b0e71cdd1",
+      "size": 198736976
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "9934675063ea4360665b7a43f649c92e6ba5cf93257324af7af1a6b490746395",
-      "size": 199326928
+      "checksum": "d422b5cc974b3bc4b28f698144fd0316f3e17774babe0bc1eb76c2bb0858d0aa",
+      "size": 200226896
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "15d5089ee7d9981faacf5463eabd427a012814d9fc02113883bb23a4f387ad4a",
-      "size": 230165056
+      "checksum": "08deb3d56477496eb92e624f492e25b123f4527dd5674f71afff58a48eccd953",
+      "size": 231082560
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "6074e3959989b2958a9abec60adf7b441a0f6f1c7e66401abff0fe54dad04fd6",
-      "size": 229902976
+      "checksum": "e22324514967ff2d5e9f91f0ee37e4675bf8b6dfec27fafb19cb25cc5b23fcaf",
+      "size": 230787712
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "2508fa1c9c0575cf6fa26f2561ff7f0fd83be5fb4c6f9ec8281dfd5911d44371",
-      "size": 223218112
+      "checksum": "d0163f8857511b8f9dad7de1f072de2ca8c4e881d006b3b43525af3534050ae3",
+      "size": 224201152
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "854746d04db11f543ed8d3836b5316366d965e6b6cfa2ac6312e6f7a5c4b5cb1",
-      "size": 224201152
+      "checksum": "e0f4a300ff9d0d9cb9c3ee37c706a9db239e3bbce96118245196ae6bc1b0492e",
+      "size": 225102272
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "f6be38fbdcadc373e93f751d1286845f58b032690e32be8f64799380a295a79f",
-      "size": 239622816
+      "checksum": "ebd9007c464d912593418f133a61d9f24866428530a81e88e910a24823066415",
+      "size": 240482464
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "019f7210055cd7a884d13c4e6a0b6caf1a82348ee42950b7b5247a4b0484709c",
-      "size": 236335776
+      "checksum": "c258bce79aefac609f909e5abde92d1653bcef47d3577656d299d1d56f1604bb",
+      "size": 237192864
     }
   }
 }

package/manifest.zst.json

@@ -1,54 +1,54 @@
 {
-  "version": "2.1.90",
-  "buildDate": "2026-04-01T22:59:03Z",
+  "version": "2.1.92",
+  "buildDate": "2026-04-03T23:31:33Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "f9e5837c6b1443c8195273693ddcd0e0d36bb1df8869b4a243476fec1cd99353",
-      "size": 40930381,
+      "checksum": "6fec908f28273216d437bbcf34fcc1b3bc9eb7e1c4c492b3c075f522bf4f8fc1",
+      "size": 41115236,
       "bundle": {
-        "checksum": "af98cac55f19dd7db4c291f42e8c75d34fa7320c00834f3036d2f34133080edd",
-        "size": 40943366
+        "checksum": "d9bfbe986a1d42644ff2d30bb341bc8e6358f8f986cba357b96f0c80474e6f89",
+        "size": 41118218
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "feba4e7545b1fcf2f5654d7f5e93d513b6866748a5661c723209c3b6e080e999",
-      "size": 42570760,
+      "checksum": "008d6b8ea1d155f010d9528e9857af55fc5e6867bef86d1a33ebf50c9dbd6130",
+      "size": 42773458,
       "bundle": {
-        "checksum": "f6c5188a6eed2b57e21062e10f02afc4c1f577579c1caf61f16b54c10e34e050",
-        "size": 42576243
+        "checksum": "96d90798abed3b2714f0efe564c9deebc1a55c1934aeeb5576f04101d537ed6e",
+        "size": 42770032
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "cfaa2f7c288ce59b5b89efa83f1bc20444d019c96317cf97a8fd82d9e484b12c",
-      "size": 50613437
+      "checksum": "c2f7369888de4c14205925fd3ea1ecda6c81307a766a5ba04abc18df5421984d",
+      "size": 50781363
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "1d68e9bf6f8d2068c5d846fbedff9c48a71e19e6b28f826ea22a9faf854bdbe7",
-      "size": 51155944
+      "checksum": "f0b025b64553501b6456cd0ef15ad57818be1088cf77de14f323d6660354ca10",
+      "size": 51333715
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "3d5be51b80e0f9296b17c8cde5f1f48691213f628c3dfd95282416d1bbe0e403",
-      "size": 49270739
+      "checksum": "a1b7206b9f7dd9d8d34ca4b4e89d8d1c53a568d0b20533ddb3f602329f6b0792",
+      "size": 49456613
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "8821108c6d63c6994ff2118bddc95ce682dc94cce39c71548719aef020042278",
-      "size": 49863571
+      "checksum": "b6ecf226171ddc90293088d618970d5c83e23f47e5dae1e7dbfebbf57135b01d",
+      "size": 50030440
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "8297f87c0f5b049c2eab6074ad7cd862c363fb5006ae081d9a60b49736827ab0",
-      "size": 52814347
+      "checksum": "ec1b0d5dcefe9301ae26e8588aa691d6b9c5fa80f87360f76ec574233f4f624c",
+      "size": 52979934
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "b22b93b33b44db2d07a8902a46a1c91386a04771e85e8c4b6b2fc18c10a10f7a",
-      "size": 50979842
+      "checksum": "b393cb9169e6907443522ffc5e9951325f244ac19f987c3b99e8e6b815e6c5b0",
+      "size": 51162683
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.2.90",
+  "version": "0.2.92",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -48,7 +48,7 @@
     "code-generation"
   ],
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.74.0",
+    "@anthropic-ai/sdk": "^0.80.0",
     "@modelcontextprotocol/sdk": "^1.27.1"
   },
   "peerDependencies": {
@@ -65,5 +65,24 @@
     "@img/sharp-win32-arm64": "^0.34.2",
     "@img/sharp-win32-x64": "^0.34.2"
   },
-  "claudeCodeVersion": "2.1.90"
+  "files": [
+    "cli.js",
+    "sdk.mjs",
+    "sdk.d.ts",
+    "sdk-tools.d.ts",
+    "agentSdkTypes.d.ts",
+    "bridge.mjs",
+    "bridge.d.ts",
+    "browser-sdk.js",
+    "browser-sdk.d.ts",
+    "embed.js",
+    "embed.d.ts",
+    "extractFromBunfs.js",
+    "extractFromBunfs.d.ts",
+    "manifest.json",
+    "manifest.zst.json",
+    "vendor/ripgrep/",
+    "vendor/audio-capture/"
+  ],
+  "claudeCodeVersion": "2.1.92"
 }

package/sdk-tools.d.ts

@@ -287,7 +287,7 @@ export interface AgentInput {
   /**
    * Permission mode for spawned teammate (e.g., "plan" to require plan approval).
    */
-  mode?: "acceptEdits" | "bypassPermissions" | "default" | "dontAsk" | "plan";
+  mode?: "acceptEdits" | "auto" | "bypassPermissions" | "default" | "dontAsk" | "plan";
   /**
    * Isolation mode. "worktree" creates a temporary git worktree so the agent works on an isolated copy of the repo.
    */

package/sdk.d.ts

@@ -335,6 +335,7 @@ declare namespace coreTypes {
         TaskCompletedHookInput,
         TaskCreatedHookInput,
         TeammateIdleHookInput,
+        TerminalReason,
         ThinkingAdaptive,
         ThinkingConfig,
         ThinkingDisabled,
@@ -1269,6 +1270,12 @@ export declare type Options = {
      * These sandbox settings control sandbox behavior (enabled, auto-allow, etc.),
      * while the actual access restrictions come from your permission configuration.
      *
+     * **Dependency check:** When `enabled: true` is passed via this option,
+     * `failIfUnavailable` defaults to `true` — if sandbox dependencies are missing
+     * (e.g. `bubblewrap` on Linux) or the platform is unsupported, `query()` will
+     * emit an error result and exit rather than silently running commands
+     * unsandboxed. Set `failIfUnavailable: false` to allow graceful degradation.
+     *
      * @example Enable sandboxing with auto-allow
      * ```typescript
      * sandbox: {
@@ -1411,9 +1418,9 @@ export declare type PermissionDeniedHookSpecificOutput = {
 };
 
 /**
- * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved.
+ * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved. 'auto' - Use a model classifier to approve/deny permission prompts.
  */
-export declare type PermissionMode = 'default' | 'acceptEdits' | 'bypassPermissions' | 'plan' | 'dontAsk';
+export declare type PermissionMode = 'default' | 'acceptEdits' | 'bypassPermissions' | 'plan' | 'dontAsk' | 'auto';
 
 export declare type PermissionRequestHookInput = BaseHookInput & {
     hook_event_name: 'PermissionRequest';
@@ -2242,7 +2249,7 @@ declare type SDKControlSetModelRequest = {
 declare type SDKControlSetPermissionModeRequest = {
     subtype: 'set_permission_mode';
     /**
-     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved.
+     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved. 'auto' - Use a model classifier to approve/deny permission prompts.
      */
     mode: coreTypes.PermissionMode;
 
@@ -2460,6 +2467,7 @@ export declare type SDKResultError = {
     modelUsage: Record<string, ModelUsage>;
     permission_denials: SDKPermissionDenial[];
     errors: string[];
+    terminal_reason?: TerminalReason;
     fast_mode_state?: FastModeState;
     uuid: UUID;
     session_id: string;
@@ -2482,6 +2490,7 @@ export declare type SDKResultSuccess = {
     permission_denials: SDKPermissionDenial[];
     structured_output?: unknown;
     deferred_tool_use?: SDKDeferredToolUse;
+    terminal_reason?: TerminalReason;
     fast_mode_state?: FastModeState;
     uuid: UUID;
     session_id: string;
@@ -2646,7 +2655,7 @@ export declare type SDKSystemMessage = {
     }[];
     model: string;
     /**
-     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved.
+     * Permission mode for controlling how tool executions are handled. 'default' - Standard behavior, prompts for dangerous operations. 'acceptEdits' - Auto-accept file edit operations. 'bypassPermissions' - Bypass all permission checks (requires allowDangerouslySkipPermissions). 'plan' - Planning mode, no actual tool execution. 'dontAsk' - Don't prompt for permissions, deny if not pre-approved. 'auto' - Use a model classifier to approve/deny permission prompts.
      */
     permissionMode: PermissionMode;
     slash_commands: string[];
@@ -2897,7 +2906,7 @@ export declare interface Settings {
         /**
          * Default permission mode when Claude Code needs access
          */
-        defaultMode?: 'acceptEdits' | 'bypassPermissions' | 'default' | 'dontAsk' | 'plan';
+        defaultMode?: 'acceptEdits' | 'auto' | 'bypassPermissions' | 'default' | 'dontAsk' | 'plan';
         /**
          * Disable the ability to bypass permission prompts
          */
@@ -3134,6 +3143,10 @@ export declare interface Settings {
      * Disable all hooks and statusLine execution
      */
     disableAllHooks?: boolean;
+    /**
+     * Disable inline shell execution in skills and custom slash commands from user, project, or plugin sources. Commands are replaced with a placeholder instead of being run.
+     */
+    disableSkillShellExecution?: boolean;
     /**
      * Default shell for input-box ! commands. Defaults to 'bash' on all platforms (no Windows auto-flip).
      */
@@ -3777,6 +3790,10 @@ export declare interface Settings {
      * Organization UUID to require for OAuth login. Accepts a single UUID string or an array of UUIDs (any one is permitted). When set in managed settings, login fails if the authenticated account does not belong to a listed organization.
      */
     forceLoginOrgUUID?: string | string[];
+    /**
+     * When set in managed settings, the CLI blocks startup until remote managed settings are freshly fetched, and exits if the fetch fails
+     */
+    forceRemoteSettingsRefresh?: boolean;
     /**
      * Path to a script that outputs OpenTelemetry headers
      */
@@ -3974,6 +3991,16 @@ export declare interface Settings {
      * Custom directory for plan files, relative to project root. If not set, defaults to ~/.claude/plans/
      */
     plansDirectory?: string;
+    /**
+     * Autonomous background operation configuration
+     */
+    proactive?: {
+        /**
+         * When true, autonomous background operation is activated automatically at launch (if entitled). When false or null, the user must opt in via the /proactive command or --proactive flag. Existing entitlement gates (GrowthBook flag, ZDR, managed-settings) still apply.
+         */
+        autoEnable?: boolean | null;
+    };
+
     /**
      * Teams/Enterprise opt-in for channel notifications (MCP servers with the claude/channel capability pushing inbound messages). Default off. Set true to allow; users then select servers via --channels.
      */
@@ -4231,6 +4258,11 @@ export declare type TeammateIdleHookInput = BaseHookInput & {
     team_name: string;
 };
 
+/**
+ * Why the query loop terminated. Unset when the loop was bypassed (local slash command) or interrupted externally (budget/retry limits checked between yields).
+ */
+export declare type TerminalReason = 'blocking_limit' | 'rapid_refill_breaker' | 'prompt_too_long' | 'image_error' | 'model_error' | 'aborted_streaming' | 'aborted_tools' | 'stop_hook_prevented' | 'hook_stopped' | 'tool_deferred' | 'max_turns' | 'completed';
+
 /**
  * Claude decides when and how much to think (Opus 4.6+).
  */