@anthropic-ai/claude-agent-sdk 0.3.185 → 0.3.187

package/manifest.json

@@ -1,47 +1,47 @@
 {
-  "version": "2.1.185",
-  "commit": "9d0bb50cc439a8bbfdbf96567a55bd0e353e9333",
-  "buildDate": "2026-06-20T06:46:16Z",
+  "version": "2.1.187",
+  "commit": "6a53320fad5541a68d79e4b6c53677df77b98e33",
+  "buildDate": "2026-06-23T17:07:42Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "a280c23b210525218f5bd86f001c9dbc89b9e07410175c5a9355044bfadc0af1",
-      "size": 215952608
+      "checksum": "a59a16ba4922adab7a145728f215d042184d349f5f7e72cddb7fc114250a4ce3",
+      "size": 215994048
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "ade7a13c3027f754b4cdac80bcdd6ba470f7becb27cdcf8b6ba9a70cf9e77af7",
-      "size": 223491328
+      "checksum": "7f57b6935b4246d03cb7acee90dc22153083483a267da589c5c920dd04744c36",
+      "size": 224795776
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "db880812272504455df73160d92fadf9370eda684c219cebf8e62b0a262cb2f8",
-      "size": 230930144
+      "checksum": "b49be8a5e565bf2d45b50d2de62017b25462131acc9425d2fdb98b8f29c9dce2",
+      "size": 232240864
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "e1246338699f04ee0e627dee3f6d4ed7a0bab48e0514bde69c6dad43bc303952",
-      "size": 233584424
+      "checksum": "bb02fcb33626f8c599d10d8bee38585d4cf8d4225c3b497869dee7454e7bf361",
+      "size": 234874664
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "eada6422a437a112d1928cb9e80203180b58b3d0c0c6aee1edb6f041fda39415",
-      "size": 224309448
+      "checksum": "972fc2e0bc8104edb593ce7723d4414c0ed8e4df6d90ad26ae48097b1d910478",
+      "size": 225620168
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "5f12eea1e3fd35bfa3f75db0647189bdfe64f45ab0d69e76a427d38ce684dd38",
-      "size": 228568464
+      "checksum": "c5a783d13aac71d42324f2e9dcd395c266bd5774951faf0d94855c737024bee3",
+      "size": 229858704
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "0206cfb94a323d91e0ff51edf63c9e4d9951c8e48dbdee627fefa6f6a0b56643",
-      "size": 225108640
+      "checksum": "24964d08c5100bac6071352e5837101b333de1c1afefd2b8b0e7a60db6c0ef5c",
+      "size": 226329760
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "b42889d60c89cb0a65dd4d047ad4396304f01368693f968d1827c08474eccc59",
-      "size": 219771552
+      "checksum": "04124c0ba09ece85a856de652e84386094c372f002ff767a94d4a43ecf776f96",
+      "size": 220992160
     }
   }
 }

package/manifest.zst.json

@@ -1,55 +1,55 @@
 {
-  "version": "2.1.185",
-  "commit": "9d0bb50cc439a8bbfdbf96567a55bd0e353e9333",
-  "buildDate": "2026-06-20T06:47:57Z",
+  "version": "2.1.187",
+  "commit": "6a53320fad5541a68d79e4b6c53677df77b98e33",
+  "buildDate": "2026-06-23T17:09:24Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "d59010d83dd428a085028492b62afce55aaf46fe7a8f386b416ec9490eea0aa9",
-      "size": 45443849,
+      "checksum": "658417c6e9f5d76f407ee1bb04220fa6dd02333b1f8ce50bf1a7340efec64f61",
+      "size": 44489766,
       "bundle": {
-        "checksum": "12851064b70e4c0d90eb1e83b12fcf9258cb506c5233f841c688e3fd501e49f6",
-        "size": 45444169
+        "checksum": "2c83be71c9f40ed86a806574ae5ef3aa99aff9735a8aaec65922d495e1e148d7",
+        "size": 44493483
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "2d20bd4125c0cee23c2f3c78c9eb3118955c6b5da9ec28f30c54be7ef4d2c04a",
-      "size": 48331402,
+      "checksum": "9d52d2b3c1c85c83dbb9fc81be4c73f2bd2d1c09b44e5c8924c9233f4a16b3e0",
+      "size": 48636051,
       "bundle": {
-        "checksum": "964b05ad892411bcfba51c85055844e2ca7a331b56ea45160efae959cef0bb5e",
-        "size": 48339506
+        "checksum": "43f31b4d6b04a5bf8fbe8a9b200cbf592e5e8f74616d86dd2bb3cf94dd7b1fe4",
+        "size": 48631278
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "57c3c9492272ed60c805315a8b79e3172d3c0120f7ed25fe1da08e3f0c9d9721",
-      "size": 53216788
+      "checksum": "dc5f7e6752374a06fb74fb222ad76d02af72acfe40c53365440b4a4b936ab890",
+      "size": 53511490
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "a997461de84ae7b68ec4f572b21837ee2ae8e828534caafc597de43355ca63e2",
-      "size": 54440740
+      "checksum": "a209a9ed0af46b40691c271eceb69a7a8ba1d6e97e6899dc6cc93977751bcf86",
+      "size": 54745022
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "0fbf39ae109eb4e32f381119b37d8e1d370ae5d4e7b6c14cb0c1dbec0ec37f4b",
-      "size": 51929511
+      "checksum": "7a9e8659ab4edace5b364c102a5bfc0ddd4fc2ba48b83e30b5564d77c0b93da1",
+      "size": 52225691
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "6d66f8181fc55e26931140b5fc8b878f55fee29f04802637c96834eb8390db04",
-      "size": 53230149
+      "checksum": "5ee81053b67a0418a6035b814b689cc6158054757e503643d182892ac64d2920",
+      "size": 53549455
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "b88623a95707b3f8cb784e5bd4113bec7ac9c968d4eafc512d891960e544ab13",
-      "size": 54679651
+      "checksum": "d3574e6f0e5d901724d3843e1d6dc0f1c6ddc1e14dbd30e733a582fc03698c43",
+      "size": 54983558
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "e1c0e09fe3e92fbeb20ee54c21d8ba6e19cca362f7420b29e49eb8eaa4f74857",
-      "size": 52713852
+      "checksum": "81830e155993db5f756f6f29f58bad01c6b72473033534f43941739d2527fbe5",
+      "size": 53030291
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.185",
+  "version": "0.3.187",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -57,14 +57,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.185",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.185",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.185",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.185",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.185",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.185",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.185",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.185"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.187",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.187",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.187",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.187",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.187",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.187",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.187",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.187"
   },
   "files": [
     "sdk.mjs",
@@ -80,5 +80,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.185"
+  "claudeCodeVersion": "2.1.187"
 }

package/sdk-tools.d.ts

@@ -22,6 +22,7 @@ export type ToolInputSchemas =
   | ListMcpResourcesInput
   | McpInput
   | NotebookEditInput
+  | ReadMcpResourceDirInput
   | ReadMcpResourceInput
   | TodoWriteInput
   | WebFetchInput
@@ -60,6 +61,7 @@ export type ToolOutputSchemas =
   | ListMcpResourcesOutput
   | McpOutput
   | NotebookEditOutput
+  | ReadMcpResourceDirOutput
   | ReadMcpResourceOutput
   | TodoWriteOutput
   | WebFetchOutput
@@ -665,6 +667,16 @@ export interface NotebookEditInput {
    */
   edit_mode?: "replace" | "insert" | "delete";
 }
+export interface ReadMcpResourceDirInput {
+  /**
+   * The MCP server name
+   */
+  server: string;
+  /**
+   * The directory resource URI to list
+   */
+  uri: string;
+}
 export interface ReadMcpResourceInput {
   /**
    * The MCP server name
@@ -2515,6 +2527,10 @@ export interface ArtifactInput {
    * Existing artifact URL to redeploy to. Pass when the user gives you a URL for an artifact not published in this session; omit for new artifacts or same-session redeploys. Must be an artifact the user owns.
    */
   url?: string;
+  /**
+   * Overwrite without a conflict check. Use only after a 409 when you have reconciled with the other session's version and intend to replace it. Omit (or false) to send baseVersion so a concurrent write 409s instead of being silently clobbered.
+   */
+  force?: boolean;
 }
 export interface PushNotificationInput {
   /**
@@ -2838,6 +2854,29 @@ export interface NotebookEditOutput {
    */
   updated_file: string;
 }
+export interface ReadMcpResourceDirOutput {
+  /**
+   * Direct children of the directory resource. Subdirectories appear with mimeType "inode/directory".
+   */
+  resources: {
+    /**
+     * Child resource URI
+     */
+    uri: string;
+    /**
+     * Child resource name
+     */
+    name: string;
+    /**
+     * Child MIME type
+     */
+    mimeType?: string;
+  }[];
+  /**
+   * Human-readable error when the server could not list the directory
+   */
+  error?: string;
+}
 export interface ReadMcpResourceOutput {
   contents: {
     /**
@@ -2861,23 +2900,6 @@ export interface ReadMcpResourceOutput {
    * Human-readable error when the server could not read the resource
    */
   error?: string;
-  /**
-   * Direct children when the URI is a directory resource (SEP-2640 resources/directory/read). Subdirectories appear with mimeType "inode/directory".
-   */
-  resources?: {
-    /**
-     * Child resource URI
-     */
-    uri: string;
-    /**
-     * Child resource name
-     */
-    name: string;
-    /**
-     * Child MIME type
-     */
-    mimeType?: string;
-  }[];
 }
 export interface TodoWriteOutput {
   /**

package/sdk.d.ts

@@ -270,6 +270,7 @@ declare type ControlResponse = {
 
 declare namespace coreTypes {
     export {
+        SandboxCredentialsConfig,
         SandboxFilesystemConfig,
         SandboxIgnoreViolations,
         SandboxNetworkConfig,
@@ -2197,6 +2198,25 @@ export declare interface Query extends AsyncGenerator<SDKMessage, void> {
      * @param mode - The new permission mode to set
      */
     setPermissionMode(mode: PermissionMode): Promise<void>;
+    /**
+     * Pin (or clear, with mode:null) a per-MCP-server permission-mode
+     * override. Tighten-only: only 'default' | 'auto' | null are accepted;
+     * the override applies only when the session mode would already
+     * auto-allow (bypassPermissions/auto), so it can never widen privilege.
+     * Only available in streaming input mode.
+     *
+     * @param serverName - The MCP server name (must match the name the server
+     *   was registered under)
+     * @param mode - 'default' to force per-action prompts, 'auto' to route
+     *   through the auto-mode classifier, or null to clear the override
+     * @returns An object with an optional `warning` — set when `serverName`
+     *   does not match any currently known MCP server. For a set, the
+     *   override is stored regardless and applies once a server with that
+     *   exact name connects; the warning is informational (typo detection).
+     */
+    setMcpPermissionModeOverride(serverName: string, mode: 'default' | 'auto' | null): Promise<{
+        warning?: string;
+    }>;
     /**
      * Change the model used for subsequent responses.
      * Only available in streaming input mode.
@@ -2548,6 +2568,38 @@ export declare type RewindFilesResult = {
     deletions?: number;
 };
 
+export declare type SandboxCredentialsConfig = NonNullable<z.infer<ReturnType<typeof SandboxCredentialsConfigSchema>>>;
+
+/**
+ * Credentials configuration schema for sandbox.
+ *
+ * Declares credential sources (files/directories and environment variables)
+ * to protect. Every entry carries `mode: 'deny'`: file paths are denied for
+ * reads inside the sandbox, environment variables are unset in sandboxed
+ * commands.
+ *
+ * Only explicitly declared sources are affected — sandbox-runtime ships no
+ * built-in credential deny list, so entries here are the complete set of
+ * credential restrictions applied to sandboxed commands.
+ *
+ * Mode is `deny`-only — no `mask`. Claude Code hands this config to
+ * sandbox-runtime programmatically, bypassing sandbox-runtime's own Zod
+ * validation, and on that path unsupported modes are silently ignored rather
+ * than rejected. This schema must be the gate that rejects modes
+ * sandbox-runtime can't enforce yet; widen the mode (e.g. `mask`) only once
+ * a sandbox-runtime version that enforces it ships.
+ */
+declare const SandboxCredentialsConfigSchema: () => z.ZodOptional<z.ZodObject<{
+    files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        mode: z.ZodLiteral<"deny">;
+    }, z.core.$strip>>>;
+    envVars: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        mode: z.ZodLiteral<"deny">;
+    }, z.core.$strip>>>;
+}, z.core.$strip>>;
+
 export declare type SandboxFilesystemConfig = NonNullable<z.infer<ReturnType<typeof SandboxFilesystemConfigSchema>>>;
 
 /**
@@ -2616,6 +2668,16 @@ declare const SandboxSettingsSchema: () => z.ZodObject<{
         allowRead: z.ZodOptional<z.ZodArray<z.ZodString>>;
         allowManagedReadPathsOnly: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    credentials: z.ZodOptional<z.ZodObject<{
+        files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            mode: z.ZodLiteral<"deny">;
+        }, z.core.$strip>>>;
+        envVars: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            mode: z.ZodLiteral<"deny">;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
     ignoreViolations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
     enableWeakerNestedSandbox: z.ZodOptional<z.ZodBoolean>;
     enableWeakerNetworkIsolation: z.ZodOptional<z.ZodBoolean>;
@@ -3374,7 +3436,7 @@ export declare type SDKControlRequest = {
     request: SDKControlRequestInner;
 };
 
-declare type SDKControlRequestInner = SDKControlInterruptRequest | SDKControlPermissionRequest | SDKControlInitializeRequest | SDKControlSetPermissionModeRequest | SDKControlSetModelRequest | SDKControlSetMaxThinkingTokensRequest | SDKControlRenameSessionRequest | SDKControlSetColorRequest | SDKControlMcpStatusRequest | SDKControlGetContextUsageRequest | SDKControlGetSessionCostRequest | SDKControlGetUsageRequest | SDKControlGetBinaryVersionRequest | SDKControlMcpCallRequest | SDKControlFileSuggestionsRequest | SDKHookCallbackRequest | SDKControlMcpMessageRequest | SDKControlRewindFilesRequest | SDKControlCancelAsyncMessageRequest | SDKControlReadFileRequest | SDKControlSeedReadStateRequest | SDKControlMcpSetServersRequest | SDKControlRegisterRepoRootRequest | SDKControlReloadPluginsRequest | SDKControlReloadSkillsRequest | SDKControlMcpReconnectRequest | SDKControlMcpToggleRequest | SDKControlSetMcpPermissionModeOverrideRequest | SDKControlChannelEnableRequest | SDKControlEndSessionRequest | SDKControlMcpAuthenticateRequest | SDKControlMcpClearAuthRequest | SDKControlMcpOAuthCallbackUrlRequest | SDKControlClaudeAuthenticateRequest | SDKControlClaudeOAuthCallbackRequest | SDKControlClaudeOAuthWaitForCompletionRequest | SDKControlRemoteControlRequest | SDKControlGenerateSessionTitleRequest | SDKControlSideQuestionRequest | SDKControlUltrareviewLaunchRequest | SDKControlStageFileRequest | SDKControlMessageRatedRequest | SDKControlOAuthTokenRefreshRequest | SDKControlHostAuthTokenRefreshRequest | SDKControlStopTaskRequest | SDKControlBackgroundTasksRequest | SDKControlApplyFlagSettingsRequest | SDKControlGetSettingsRequest | SDKControlElicitationRequest | SDKControlRequestUserDialogRequest | SDKControlSubmitFeedbackRequest;
+declare type SDKControlRequestInner = SDKControlInterruptRequest | SDKControlPermissionRequest | SDKControlInitializeRequest | SDKControlSetPermissionModeRequest | SDKControlSetModelRequest | SDKControlSetMaxThinkingTokensRequest | SDKControlRenameSessionRequest | SDKControlSetColorRequest | SDKControlMcpStatusRequest | SDKControlGetContextUsageRequest | SDKControlGetSessionCostRequest | SDKControlGetUsageRequest | SDKControlGetBinaryVersionRequest | SDKControlMcpCallRequest | SDKControlFileSuggestionsRequest | SDKHookCallbackRequest | SDKControlMcpMessageRequest | SDKControlRewindFilesRequest | SDKControlCancelAsyncMessageRequest | SDKControlReadFileRequest | SDKControlSeedReadStateRequest | SDKControlMcpSetServersRequest | SDKControlRegisterRepoRootRequest | SDKControlReloadPluginsRequest | SDKControlReloadSkillsRequest | SDKControlMcpReconnectRequest | SDKControlMcpToggleRequest | SDKControlSetMcpPermissionModeOverrideRequest | SDKControlRewindConversationRequest | SDKControlChannelEnableRequest | SDKControlEndSessionRequest | SDKControlMcpAuthenticateRequest | SDKControlMcpClearAuthRequest | SDKControlMcpOAuthCallbackUrlRequest | SDKControlClaudeAuthenticateRequest | SDKControlClaudeOAuthCallbackRequest | SDKControlClaudeOAuthWaitForCompletionRequest | SDKControlRemoteControlRequest | SDKControlGenerateSessionTitleRequest | SDKControlSideQuestionRequest | SDKControlUltrareviewLaunchRequest | SDKControlStageFileRequest | SDKControlAddDirectoryRequest | SDKControlMessageRatedRequest | SDKControlOAuthTokenRefreshRequest | SDKControlHostAuthTokenRefreshRequest | SDKControlStopTaskRequest | SDKControlBackgroundTasksRequest | SDKControlApplyFlagSettingsRequest | SDKControlGetSettingsRequest | SDKControlElicitationRequest | SDKControlRequestUserDialogRequest | SDKControlSubmitFeedbackRequest;
 
 /**
  * Requests the SDK consumer to render a tool-driven blocking dialog and return the user choice. Used by tools that previously rendered Ink JSX via setToolJSX with an onDone callback.
@@ -3829,6 +3891,7 @@ export declare type SDKRateLimitInfo = {
     overageInUse?: boolean;
     surpassedThreshold?: number;
 
+
     errorCode?: 'credits_required';
     canUserPurchaseCredits?: boolean;
     hasChargeableSavedPaymentMethod?: boolean;
@@ -4924,6 +4987,10 @@ export declare interface Settings {
      * Default shell for input-box ! commands. Defaults to 'bash' on all platforms (no Windows auto-flip).
      */
     defaultShell?: 'bash' | 'powershell';
+    /**
+     * Whether Claude responds after an input-box ! bash command runs. Set to false to add the command output to context without a response. Default: true.
+     */
+    respondToBashCommands?: boolean;
     /**
      * When true (and set in managed settings), only hooks from managed settings run. User, project, and local hooks are ignored.
      */
@@ -5707,6 +5774,34 @@ export declare interface Settings {
              */
             allowManagedReadPathsOnly?: boolean;
         };
+        credentials?: {
+            /**
+             * Credential files or directories to protect. `deny` blocks reads inside the sandbox.
+             */
+            files?: {
+                /**
+                 * Path to a credential file or directory. Same resolution as sandbox.filesystem.* paths: absolute, ~ expanded, or relative to the settings file root (project root for project settings, ~/.claude for user settings).
+                 */
+                path: string;
+                /**
+                 * Access mode for this path. Only `deny` is supported.
+                 */
+                mode: 'deny';
+            }[];
+            /**
+             * Environment variables to protect. `deny` unsets the variable for sandboxed commands.
+             */
+            envVars?: {
+                /**
+                 * Environment variable name.
+                 */
+                name: string;
+                /**
+                 * Access mode for this environment variable. Only `deny` is supported.
+                 */
+                mode: 'deny';
+            }[];
+        };
         ignoreViolations?: {
             [k: string]: string[];
         };
@@ -6017,9 +6112,9 @@ export declare interface Settings {
      */
     todoFeatureEnabled?: boolean;
     /**
-     * How spawned teammates execute (tmux, in-process, auto)
+     * How spawned teammates execute (tmux, iterm2, in-process, auto)
      */
-    teammateMode?: 'auto' | 'tmux' | 'in-process';
+    teammateMode?: 'auto' | 'tmux' | 'iterm2' | 'in-process';
     /**
      * Start Remote Control bridge automatically each session
      */
@@ -6330,7 +6425,7 @@ export declare type TeammateIdleHookInput = BaseHookInput & {
 /**
  * Why the query loop terminated. Unset when the loop was bypassed (local slash command) or interrupted externally (budget/retry limits checked between yields).
  */
-export declare type TerminalReason = 'blocking_limit' | 'rapid_refill_breaker' | 'prompt_too_long' | 'image_error' | 'model_error' | 'aborted_streaming' | 'aborted_tools' | 'stop_hook_prevented' | 'hook_stopped' | 'tool_deferred' | 'max_turns' | 'completed';
+export declare type TerminalReason = 'blocking_limit' | 'rapid_refill_breaker' | 'prompt_too_long' | 'image_error' | 'model_error' | 'aborted_streaming' | 'aborted_tools' | 'stop_hook_prevented' | 'hook_stopped' | 'tool_deferred' | 'max_turns' | 'background_requested' | 'completed';
 
 /**
  * Claude decides when and how much to think (Opus 4.6+).