@anthropic-ai/claude-agent-sdk 0.3.147 → 0.3.149

package/manifest.json

@@ -1,47 +1,47 @@
 {
-  "version": "2.1.147",
-  "commit": "09432314e83522f23b42b184fb69f0a4bb8a80e0",
-  "buildDate": "2026-05-21T16:18:26Z",
+  "version": "2.1.149",
+  "commit": "6c2dbc3fdfb7e88180d4729eeedd40244aa540cf",
+  "buildDate": "2026-05-22T15:35:21Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "94a81554195edc33c2587f106bfc2e301f450f52a05cbfaed8b20f6f0882697c",
-      "size": 211584672
+      "checksum": "659d1a65cfd439bb43708fd1cfbe8346b59370a27f7f60f789e05f4604dee9a5",
+      "size": 213070752
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "91f5a6364d8899860b20c348142fa66e18ee380e6d379b35e3d26b643603c612",
-      "size": 214082320
+      "checksum": "666a20a19d0119ced88dd386c3503700ee14f508c7ce3b0047277256a420226d",
+      "size": 215584912
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "c7b5b050f9a4cebdc1b369935d3f64078b587b869ae8789c06c437c559d6bb2b",
-      "size": 236959368
+      "checksum": "ab11cb6a2c43ef2dd1e68244b2dd470af07de163419a8b073a9b0e157ef64fc3",
+      "size": 238401160
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "d3e134bf504d6ff7db68d0a6f2206c9a15a6d2f94053845116f3303b0a0d79d4",
-      "size": 237037264
+      "checksum": "2959c02a605a616fb39cfa23e2f76356b254699dfdd5e5e838fcfb0414e48984",
+      "size": 238524112
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "060f28ad7857553716a97f9847ea19fb3a6fa3713ba9ed95d9a3ebda19f1ab2e",
-      "size": 229814104
+      "checksum": "31201feb4f2956d4482f9d85e9497ba042f3a0dd89a5e57bbd6955d198c519be",
+      "size": 231255896
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "d336583d6d65f072dea9ea1874eceb6a25db15c893969b60da0ed3ffa4f0777a",
-      "size": 231431216
+      "checksum": "784e833811198887ac55d508379748f1ca60f387523cf2f3c8f0c9f07a9b83ee",
+      "size": 232918064
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "1fd537873b6f2573d48be5fef95ae5ae42f8d837b64ee102f36b151de2ff7b79",
-      "size": 232828064
+      "checksum": "7e6192bc6a5c421556dcfa40f108cf9401b8860b3f671bd6cadad8ae3dd2d3ca",
+      "size": 234249376
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "3bb2d495a87df058cae050400c8815994fe6a50413ad12f726d36fd583ad362e",
-      "size": 228793504
+      "checksum": "6a59576f6f42714e81ce49b609d02056cc9a4e3c7457d4a1ad70bba1619025bf",
+      "size": 230213792
     }
   }
 }

package/manifest.zst.json

@@ -1,55 +1,55 @@
 {
-  "version": "2.1.147",
-  "commit": "09432314e83522f23b42b184fb69f0a4bb8a80e0",
-  "buildDate": "2026-05-21T16:25:55Z",
+  "version": "2.1.149",
+  "commit": "6c2dbc3fdfb7e88180d4729eeedd40244aa540cf",
+  "buildDate": "2026-05-22T15:42:52Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "d44b2eafc9047aaaa9e33b215801f67a830966e9345dcb8b5d6d7fda246ff98c",
-      "size": 43820535,
+      "checksum": "ebfc2dfcc885e79ab4e6a15fd981d7c488393f3cc5ff3aa4b4d00c44026daa39",
+      "size": 43968862,
       "bundle": {
-        "checksum": "ca64c67307c9dfd35d808ba34e80fb7afc0a8172b6853dbd739fbf9578b5f96d",
-        "size": 43815620
+        "checksum": "a98fa9db037f7cf82b1d189e36340010a6460d1794bde236bf2ce750c146fa91",
+        "size": 43971827
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "12eeb0200fc60d6ced6d566d7581ca3a2903ded2937a78466b6330c09c31f749",
-      "size": 45727099,
+      "checksum": "f18c8d22e048521409d58e28ae3afb0d884d13129af6b6a972a81b18796940df",
+      "size": 45880939,
       "bundle": {
-        "checksum": "9d3a1da8e687e8499da944e779d0176b8aec5b094479b6b54a9657ce31d70f87",
-        "size": 45738513
+        "checksum": "311e18f6c43c30feb387aa84b91c55ef4b8d546126a507f37239254dba85efdb",
+        "size": 45889328
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "03ac9583ff487f084144121f39305b41ce09e6751496fa1b27aaae134ec2f801",
-      "size": 51548280
+      "checksum": "96038122e29d59fa3de470793d5650f4974018d602b7ea2f203ad74c70497af4",
+      "size": 51705747
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "db95687a8ade4f38641c5fa29b0a8d0bb87064092aba869eb7d890885b27be63",
-      "size": 52179875
+      "checksum": "a0bf9fe661c31f883191ffc9766daf665a824c2171e2374df569bdd1a87a20cf",
+      "size": 52311840
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "f1c0cf829c0abc8d359eca21b1f8317a5014dcce345138535d38cbbd6a90c141",
-      "size": 50160745
+      "checksum": "76199b801b78de74098b31c15e8f17e2430f79401f97f46a40ede8bf96886e49",
+      "size": 50322050
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "5c55ba03b368484f94ddb906983652842d607cf8e19c4a293870ad011bd230a0",
-      "size": 50896557
+      "checksum": "97c5f5b8f72e7aa3bd29f42c649e0b2626f5ae4fd0914d3cd033f8a19b0b0c4f",
+      "size": 51008664
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "1bdd36b4f0503f460eac798199f4b36fd809a2c71d6e5d056073f45953e3bb4d",
-      "size": 52896816
+      "checksum": "eec034178ebb2d23983b6f09acf64ba097c79b3b4111ee30867d5a1647df0cd5",
+      "size": 53048610
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "ae4ecb6941a62d52084ee3ce7998645bfffa820a0dd447de36e8a574d3c505b6",
-      "size": 51172676
+      "checksum": "9630098e077f59a37fd6ce7a376b7401cdffc43028b5ccab33335567e9ddc06d",
+      "size": 51332335
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.147",
+  "version": "0.3.149",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -61,14 +61,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.147",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.147",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.147",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.147",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.147",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.147",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.147",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.147"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.149",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.149",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.149",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.149",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.149",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.149",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.149",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.149"
   },
   "files": [
     "sdk.mjs",
@@ -86,5 +86,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.147"
+  "claudeCodeVersion": "2.1.149"
 }

package/sdk-tools.d.ts

@@ -27,10 +27,20 @@ export type ToolInputSchemas =
   | WebFetchInput
   | WebSearchInput
   | AskUserQuestionInput
+  | EnterPlanModeInput
   | TaskCreateInput
   | TaskGetInput
   | TaskUpdateInput
   | TaskListInput
+  | REPLInput
+  | WorkflowInput
+  | CronCreateInput
+  | CronDeleteInput
+  | CronListInput
+  | ScheduleWakeupInput
+  | RemoteTriggerInput
+  | MonitorInput
+  | PushNotificationInput
   | EnterWorktreeInput
   | ExitWorktreeInput
   | ToolOutputSchemas;
@@ -57,7 +67,17 @@ export type ToolOutputSchemas =
   | TaskCreateOutput
   | TaskGetOutput
   | TaskUpdateOutput
-  | TaskListOutput;
+  | TaskListOutput
+  | RemoteTriggerOutput
+  | ScheduleWakeupOutput
+  | MonitorOutput
+  | EnterPlanModeOutput
+  | REPLOutput
+  | WorkflowOutput
+  | CronCreateOutput
+  | CronDeleteOutput
+  | CronListOutput
+  | PushNotificationOutput;
 export type AgentOutput =
   | {
       agentId: string;
@@ -2162,6 +2182,7 @@ export interface AskUserQuestionInput {
     source?: string;
   };
 }
+export interface EnterPlanModeInput {}
 export interface TaskCreateInput {
   /**
    * A brief title for the task
@@ -2229,6 +2250,121 @@ export interface TaskUpdateInput {
   };
 }
 export interface TaskListInput {}
+export interface REPLInput {
+  /**
+   * JavaScript code to execute. Supports top-level await. State persists across calls.
+   */
+  code: string;
+  /**
+   * Clear, concise description of what this script does in active voice (5-10 words). E.g. "Trace upgrade message to its GrowthBook flag"
+   */
+  description?: string;
+  /**
+   * Optional timeout in milliseconds (default 30000, max 600000)
+   */
+  timeout?: number;
+}
+export interface WorkflowInput {
+  /**
+   * Self-contained workflow script. Must begin with `export const meta = { name, description, phases }` (pure literal, no computed values) followed by the script body using agent()/parallel()/pipeline()/phase().
+   */
+  script?: string;
+  /**
+   * Name of a predefined workflow (built-in or from .claude/workflows/). Resolves to a self-contained script.
+   */
+  name?: string;
+  /**
+   * Optional input value exposed to the script as the global `args`. Use for parameterized named workflows (e.g. a research question).
+   */
+  args?: {
+    [k: string]: unknown;
+  };
+  /**
+   * Path to a workflow script file on disk. Every Workflow invocation persists its script under the session directory and returns the path in the tool result. To iterate, edit that file with Write/Edit and re-invoke Workflow with the same `scriptPath` instead of re-sending the full script. Takes precedence over `script` and `name`.
+   */
+  scriptPath?: string;
+  /**
+   * Run ID of a prior Workflow invocation to resume from. Completed agent() calls with unchanged (prompt, opts) return their cached results instantly; only edited or new calls re-run. Same-session only. Stop the prior run first (TaskStop) before resuming.
+   */
+  resumeFromRunId?: string;
+}
+export interface CronCreateInput {
+  /**
+   * Standard 5-field cron expression in local time: "M H DoM Mon DoW" (e.g. "* /5 * * * *" = every 5 minutes, "30 14 28 2 *" = Feb 28 at 2:30pm local once).
+   */
+  cron: string;
+  /**
+   * The prompt to enqueue at each fire time.
+   */
+  prompt: string;
+  /**
+   * true (default) = fire on every cron match until deleted or auto-expired after 7 days. false = fire once at the next match, then auto-delete. Use false for "remind me at X" one-shot requests with pinned minute/hour/dom/month.
+   */
+  recurring?: boolean;
+  /**
+   * true = persist to .claude/scheduled_tasks.json and survive restarts. false (default) = in-memory only, dies when this Claude session ends. Use true only when the user asks the task to survive across sessions.
+   */
+  durable?: boolean;
+}
+export interface CronDeleteInput {
+  /**
+   * Job ID returned by CronCreate.
+   */
+  id: string;
+}
+export interface CronListInput {}
+export interface ScheduleWakeupInput {
+  /**
+   * Seconds from now to wake up. Clamped to [60, 3600] by the runtime.
+   */
+  delaySeconds: number;
+  /**
+   * One short sentence explaining the chosen delay. Goes to telemetry and is shown to the user. Be specific.
+   */
+  reason: string;
+  /**
+   * The /loop input to fire on wake-up. Pass the same /loop input verbatim each turn so the next firing re-enters the skill and continues the loop. For autonomous /loop (no user prompt), pass the literal sentinel `<<autonomous-loop-dynamic>>` instead (the dynamic-pacing variant, not the CronCreate-mode `<<autonomous-loop>>`).
+   */
+  prompt: string;
+}
+export interface RemoteTriggerInput {
+  action: "list" | "get" | "create" | "update" | "run";
+  /**
+   * Required for get, update, and run
+   */
+  trigger_id?: string;
+  /**
+   * Required for create and update; optional for run
+   */
+  body?: {
+    [k: string]: unknown;
+  };
+}
+export interface MonitorInput {
+  /**
+   * Short human-readable description of what you are monitoring (shown in notifications).
+   */
+  description: string;
+  /**
+   * Kill the monitor after this deadline. Default 300000ms, max 3600000ms. Ignored when persistent is true.
+   */
+  timeout_ms: number;
+  /**
+   * Run for the lifetime of the session (no timeout). Use for session-length watches like PR monitoring or log tails. Stop with TaskStop.
+   */
+  persistent: boolean;
+  /**
+   * Shell command or script. Each stdout line is an event; exit ends the watch.
+   */
+  command: string;
+}
+export interface PushNotificationInput {
+  /**
+   * The notification body. Keep it under 200 characters; mobile OSes truncate.
+   */
+  message: string;
+  status: "proactive";
+}
 export interface EnterWorktreeInput {
   /**
    * Optional name for a new worktree. Each "/"-separated segment may contain only letters, digits, dots, underscores, and dashes; max 64 chars total. A random name is generated if not provided. Mutually exclusive with `path`.
@@ -2850,3 +2986,143 @@ export interface TaskListOutput {
     blockedBy: string[];
   }[];
 }
+export interface RemoteTriggerOutput {
+  status: number;
+  json: string;
+  summary?: string;
+}
+export interface ScheduleWakeupOutput {
+  /**
+   * Epoch ms timestamp when the next wakeup will fire
+   */
+  scheduledFor: number;
+  /**
+   * Actual delay used after clamping to runtime bounds
+   */
+  clampedDelaySeconds: number;
+  /**
+   * True if the requested delaySeconds was outside [60, 3600]
+   */
+  wasClamped: boolean;
+}
+export interface MonitorOutput {
+  /**
+   * ID of the background monitor task.
+   */
+  taskId: string;
+  /**
+   * Timeout deadline in milliseconds (0 when persistent).
+   */
+  timeoutMs: number;
+  /**
+   * No timeout — runs until TaskStop or session end.
+   */
+  persistent?: boolean;
+}
+export interface EnterPlanModeOutput {
+  /**
+   * Confirmation that plan mode was entered
+   */
+  message: string;
+}
+export interface REPLOutput {
+  /**
+   * The code that was executed
+   */
+  code: string;
+  /**
+   * Return value from the code execution
+   */
+  result: {
+    [k: string]: unknown;
+  };
+  /**
+   * Captured console.log output
+   */
+  stdout: string;
+  /**
+   * Captured console.error output
+   */
+  stderr: string;
+  /**
+   * Error message if execution failed
+   */
+  error?: string;
+  /**
+   * Names of tools registered during this execution
+   */
+  registeredTools?: string[];
+  /**
+   * Images returned by inner Read calls — surfaced as image content blocks
+   */
+  images?: {
+    base64: string;
+    mediaType: string;
+  }[];
+  /**
+   * PDFs returned by inner Read calls — surfaced as document content blocks
+   */
+  documents?: {
+    base64: string;
+  }[];
+}
+export interface WorkflowOutput {
+  status: "async_launched" | "remote_launched";
+  taskId: string;
+  /**
+   * Local workflow run identifier for resumeFromRunId. Absent for remote_launched (the CCR session URL is the resume handle there) and on transcripts written before this field existed.
+   */
+  runId?: string;
+  summary?: string;
+  /**
+   * Directory where subagent transcripts are written during execution
+   */
+  transcriptDir?: string;
+  /**
+   * Path to the persisted workflow script for this invocation. Editable via Write/Edit; pass back as `scriptPath` to re-run without resending the script.
+   */
+  scriptPath?: string;
+  /**
+   * CCR session URL when status is remote_launched
+   */
+  sessionUrl?: string;
+  /**
+   * Non-blocking heads-up (e.g. local git state diverges from the pushed branch the remote session will clone)
+   */
+  warning?: string;
+  /**
+   * Set if syntax check failed
+   */
+  error?: string;
+}
+export interface CronCreateOutput {
+  id: string;
+  humanSchedule: string;
+  recurring: boolean;
+  durable?: boolean;
+}
+export interface CronDeleteOutput {
+  id: string;
+}
+export interface CronListOutput {
+  jobs: {
+    id: string;
+    cron: string;
+    humanSchedule: string;
+    prompt: string;
+    recurring?: boolean;
+    durable?: boolean;
+  }[];
+}
+export interface PushNotificationOutput {
+  message: string;
+  pushSent?: boolean;
+  localSent?: boolean;
+  disabledReason?: "config_off" | "user_present" | "no_transport";
+  idleSec?: number;
+  hasFocus?: boolean;
+  /**
+   * ISO timestamp captured at tool execution on the emitting process. Optional — resumed sessions replay pre-sentAt outputs verbatim.
+   */
+  sentAt?: string;
+}

package/sdk.d.ts

@@ -1324,15 +1324,19 @@ export declare type Options = {
         preset: 'claude_code';
     };
     /**
-     * Environment variables to pass to the Claude Code process.
-     * Defaults to `process.env`.
+     * Environment variables for the Claude Code process.
+     *
+     * When set, this value REPLACES the subprocess environment entirely — it is
+     * not merged with `process.env`. Spread `process.env` yourself if the
+     * subprocess still needs inherited variables like `PATH`, `HOME`, or
+     * `ANTHROPIC_API_KEY`. When omitted, the subprocess inherits `process.env`.
      *
      * SDK consumers can identify their app/library to include in the User-Agent header by setting:
      * - `CLAUDE_AGENT_SDK_CLIENT_APP` - Your app/library identifier (e.g., "my-app/1.0.0", "my-library/2.1")
      *
      * @example
      * ```typescript
-     * env: { CLAUDE_AGENT_SDK_CLIENT_APP: 'my-app/1.0.0' }
+     * env: { ...process.env, CLAUDE_AGENT_SDK_CLIENT_APP: 'my-app/1.0.0' }
      * ```
      */
     env?: {
@@ -3558,6 +3562,7 @@ export declare type SDKSystemMessage = {
     fast_mode_state?: FastModeState;
 
 
+
     uuid: UUID;
     session_id: string;
 };
@@ -4006,6 +4011,8 @@ export declare interface Settings {
      * Whether file picker should respect .gitignore files (default: true). Note: .ignore files are always respected.
      */
     respectGitignore?: boolean;
+
+
     /**
      * Number of days to retain chat transcripts before automatic cleanup (default: 30). Minimum 1. Use a large value for long retention; use --no-session-persistence to disable transcript writes entirely.
      */
@@ -4400,6 +4407,10 @@ export declare interface Settings {
      * When true (and set in managed settings), allowedMcpServers is only read from managed settings. deniedMcpServers still merges from all sources, so users can deny servers for themselves. Users can still add their own MCP servers, but only the admin-defined allowlist applies.
      */
     allowManagedMcpServersOnly?: boolean;
+    /**
+     * When true (and set in managed settings), claude.ai cloud MCP connectors load alongside managed-mcp.json instead of being suppressed by its exclusive-control lockdown. Default off preserves the lockdown. Read from managed settings only.
+     */
+    allowAllClaudeAiMcps?: boolean;
     /**
      * When set in managed settings, blocks non-plugin customization sources for the listed surfaces. Array form locks specific surfaces (e.g. ["skills", "hooks"]); `true` locks all four; `false` is an explicit no-op. Blocked: ~/.claude/{surface}/, .claude/{surface}/ (project), settings.json hooks, .mcp.json. NOT blocked: managed (policySettings) sources, plugin-provided customizations. Composes with strictKnownMarketplaces for end-to-end admin control — plugins gated by marketplace allowlist, everything else blocked here.
      */