@anthropic-ai/claude-agent-sdk 0.3.190 → 0.3.193

package/manifest.json

@@ -1,47 +1,47 @@
 {
-  "version": "2.1.190",
-  "commit": "c1e566ee5380a4c29ddd0fd0a742361e013cebd0",
-  "buildDate": "2026-06-24T02:29:57Z",
+  "version": "2.1.193",
+  "commit": "a1938d2a07a2e4fecbef4eeac813221929e97d22",
+  "buildDate": "2026-06-25T18:25:46Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "1fa59529c233914fdd9d42816a74ecf300eefa14c3d118d4ecba2f0f16fc5741",
-      "size": 217273568
+      "checksum": "f7513a30385ad9019c237226fd6ec46508b3062ebefca8aedbe397d111a818ff",
+      "size": 222248240
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "4eca48431a43c5540c53657964be604f301d38c02b244ca7c05da18f84bb5c85",
-      "size": 224795776
+      "checksum": "cba5c3bdca8ab5f8e7590406702d418f6114d9b39f48f16876680e881abf1ee8",
+      "size": 230317808
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "e7305203e7d78a6bfecb94f7973b0ee4a71a3ba67c8028c98b293cf571900b68",
-      "size": 232240864
+      "checksum": "39454ce62e795eeb4871a81f6453cda96e926e2db9a4dd41d0ec1b60b0153448",
+      "size": 237419248
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "0684e28517cc785ab8d19feb5dad3381eab4abc97bf6fce07bc534dc88040b27",
-      "size": 234891048
+      "checksum": "c9f04d929f18bd9a101f3897f27de4e1e0f15ebe8400d4aaf02983d73dd66b1d",
+      "size": 240556856
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "38f7dd672896ca7be1ff83872f5e67e79651f97ebd0624007a16b73597825bd6",
-      "size": 225620168
+      "checksum": "658bbae05441c2d3792f9870a5001a1dfa7a62956abffc151aed7cae0adf9f7d",
+      "size": 230667448
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "76a59ca11bde54ff828489bbe83c9d541872cb68f446412d067d49750edbc490",
-      "size": 229875088
+      "checksum": "b37861314ace243d8425ebce503c657c5d9f76af361f9bd8ca3bd34b2e71474a",
+      "size": 235258240
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "2715d8add61657a7e9465421fc3390b1a56af6e7781099126c0342c774b00828",
-      "size": 226344608
+      "checksum": "ffea22269bf66ce778ce845ea0c15cb5b21d39be82601a065c3eca6f7368da3e",
+      "size": 231359136
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "7e107609f94dca0275598f7c8fb8c2b79ef1db548c921e1edfb30697cf824b6e",
-      "size": 221007008
+      "checksum": "0bea15edaf5791220c646f9066bda84397a73053d88f225c7622c7a2ab45ff59",
+      "size": 225839264
     }
   }
 }

package/manifest.zst.json

@@ -1,55 +1,55 @@
 {
-  "version": "2.1.190",
-  "commit": "c1e566ee5380a4c29ddd0fd0a742361e013cebd0",
-  "buildDate": "2026-06-24T02:31:40Z",
+  "version": "2.1.193",
+  "commit": "a1938d2a07a2e4fecbef4eeac813221929e97d22",
+  "buildDate": "2026-06-25T18:27:30Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "daf8061021101f2d81ccbb57c44556fb02b7a48105adf2b9d2a419aabd53e57b",
-      "size": 45731117,
+      "checksum": "4a2ec55b60034283b5fa69f428e8f988ba34900df492570efa9d0b95ea8b2371",
+      "size": 46939034,
       "bundle": {
-        "checksum": "1fadf1be20b09739c8e2a0c30d5e036361b43fabc55ab74d08788ccb82ab4ce6",
-        "size": 45728695
+        "checksum": "b22dd015e35d7be690ab9bdb9881729f1193f7895cfe26537987b40d92abfef1",
+        "size": 46942638
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "8aae6405ae19b6622b481de1e5ee6fcdfd37997d8321576788c8f77b008e158d",
-      "size": 48642410,
+      "checksum": "03786846ce6be30dd8eacb4258802742d16ec380826b2f200c818a0dc24f974a",
+      "size": 49963257,
       "bundle": {
-        "checksum": "092941c56a1ead86ff72b6315cc74db8631e88792109026777dfc3c0fae23a49",
-        "size": 48652589
+        "checksum": "b65bc8bf45d0778e4bfd30fb3f4ad9ba9fe04467ee42b032fd11a1bda0bbb5ef",
+        "size": 49966826
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "b5a82bdc324721343f7a697803e932f18a8777af90110374fe4443d0bea65139",
-      "size": 53516004
+      "checksum": "78e004c0239710b557cc94c16b3bfd68901890ee615f065269940ec45344b230",
+      "size": 54766727
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "8e5815b87bda8bbdb9e0d6d77a1939d94c7e6858c19acbab45db39b8b06b330b",
-      "size": 54736635
+      "checksum": "f19d7c97b3f7a6042db6bd7c161f2cd79c9a989c561babc2aa9aba607d60b6c4",
+      "size": 56010978
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "ac6554156b0d45278140034ba409cda565f66c3ea977889aaf5b119296eb6a16",
-      "size": 52223186
+      "checksum": "439690d551c0d5208f621fabb5bbf7692d28917c97c75fe2422c108d7f567cfd",
+      "size": 53446704
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "64e702669c37658c70f26117f7e552850d09b91b90f5aee05df8650b2c948119",
-      "size": 53551935
+      "checksum": "3ad75f2b78602007b48e78b8e44fbd93cc3a08f7426874f4848a93d03f117f6d",
+      "size": 54812412
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "a471d89eba0f86f2ad4dcc389d998e69b2214aab99d6b0e30e1e36407c8403c3",
-      "size": 54984529
+      "checksum": "cd30d76348ef9d0af52d4b15bc72abc9d73e31ca8da5d3650cbb18cfdd767cd2",
+      "size": 56154427
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "701d5bd268e223b5be4a30c139870b59d681540754c19aab51e70f089186e5d0",
-      "size": 53017556
+      "checksum": "3ab354ba3f088c1629fcb34beb2c71b99a27ea951a471d22567213136b8ae541",
+      "size": 54174949
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.190",
+  "version": "0.3.193",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -57,14 +57,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.190",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.190",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.190",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.190",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.190",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.190",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.190",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.190"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.193",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.193",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.193",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.193",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.193",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.193",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.193",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.193"
   },
   "files": [
     "sdk.mjs",
@@ -80,5 +80,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.190"
+  "claudeCodeVersion": "2.1.193"
 }

package/sdk-tools.d.ts

@@ -2520,7 +2520,7 @@ export interface ArtifactInput {
    */
   favicon: string;
   /**
-   * Short human-readable name for this version (e.g. "fixed-background"). Shown in the version picker instead of the raw version id.
+   * Short human-readable name for this version, max 60 chars (e.g. "fixed-background"). Shown in the version picker. Not a description — keep it to a few words.
    */
   label?: string;
   /**
@@ -2776,7 +2776,7 @@ export interface GlobOutput {
    */
   durationMs: number;
   /**
-   * Total number of files found
+   * Number of file paths returned (after any truncation)
    */
   numFiles: number;
   /**
@@ -2787,6 +2787,14 @@ export interface GlobOutput {
    * Whether results were truncated (limited to 100 files)
    */
   truncated: boolean;
+  /**
+   * Total number of matching files before truncation. A lower bound when countIsComplete is false. Absent on results persisted by CLI versions predating this field.
+   */
+  totalMatches?: number;
+  /**
+   * Whether totalMatches is the exact total (true) or a floor because the underlying search truncated its own output (false). Absent on results persisted by CLI versions predating this field.
+   */
+  countIsComplete?: boolean;
 }
 export interface GrepOutput {
   mode?: "content" | "files_with_matches" | "count";
@@ -2821,6 +2829,10 @@ export interface NotebookEditOutput {
    * The new source code that was written to the cell
    */
   new_source: string;
+  /**
+   * The previous cell source (replace/delete only). Enables cell-relative diff rendering without re-reading the notebook.
+   */
+  old_source?: string;
   /**
    * The ID of the cell that was edited
    */

package/sdk.d.ts

@@ -366,6 +366,7 @@ declare namespace coreTypes {
         SDKMessage,
         SDKMirrorErrorMessage,
         SDKModelRefusalFallbackMessage,
+        SDKModelRefusalNoFallbackMessage,
         SDKNotificationMessage,
         SDKPartialAssistantMessage,
         SDKPermissionDenial,
@@ -916,6 +917,17 @@ export declare type ListSessionsOptions = {
      * Only applies when reading from the local filesystem.
      */
     includeWorktrees?: boolean;
+    /**
+     * Include programmatic/headless sessions (SDK entrypoints `sdk-cli`,
+     * `sdk-ts`, `sdk-py`) and daemon/daemon-worker sessions. Defaults to
+     * `true` for backward compatibility — SDK consumers enumerating their
+     * own sessions see them. IDE session pickers pass `false` for parity
+     * with terminal `/resume`.
+     *
+     * Only applies when reading from the local filesystem; ignored when
+     * `sessionStore` is provided.
+     */
+    includeProgrammatic?: boolean;
     /**
      * When provided, list sessions from this store instead of the local
      * filesystem. Requires `store.listSessions` to be defined.
@@ -2570,25 +2582,6 @@ export declare type RewindFilesResult = {
 
 export declare type SandboxCredentialsConfig = NonNullable<z.infer<ReturnType<typeof SandboxCredentialsConfigSchema>>>;
 
-/**
- * Credentials configuration schema for sandbox.
- *
- * Declares credential sources (files/directories and environment variables)
- * to protect. Every entry carries `mode: 'deny'`: file paths are denied for
- * reads inside the sandbox, environment variables are unset in sandboxed
- * commands.
- *
- * Only explicitly declared sources are affected — sandbox-runtime ships no
- * built-in credential deny list, so entries here are the complete set of
- * credential restrictions applied to sandboxed commands.
- *
- * Mode is `deny`-only — no `mask`. Claude Code hands this config to
- * sandbox-runtime programmatically, bypassing sandbox-runtime's own Zod
- * validation, and on that path unsupported modes are silently ignored rather
- * than rejected. This schema must be the gate that rejects modes
- * sandbox-runtime can't enforce yet; widen the mode (e.g. `mask`) only once
- * a sandbox-runtime version that enforces it ships.
- */
 declare const SandboxCredentialsConfigSchema: () => z.ZodOptional<z.ZodObject<{
     files: z.ZodOptional<z.ZodArray<z.ZodObject<{
         path: z.ZodString;
@@ -3704,7 +3697,7 @@ export declare type SDKMemoryRecallMessage = {
     session_id: string;
 };
 
-export declare type SDKMessage = SDKAssistantMessage | SDKUserMessage | SDKUserMessageReplay | SDKResultMessage | SDKSystemMessage | SDKPartialAssistantMessage | SDKCompactBoundaryMessage | SDKStatusMessage | SDKAPIRetryMessage | SDKModelRefusalFallbackMessage | SDKLocalCommandOutputMessage | SDKHookStartedMessage | SDKHookProgressMessage | SDKHookResponseMessage | SDKPluginInstallMessage | SDKToolProgressMessage | SDKAuthStatusMessage | SDKTaskNotificationMessage | SDKTaskStartedMessage | SDKTaskUpdatedMessage | SDKTaskProgressMessage | SDKThinkingTokensMessage | SDKSessionStateChangedMessage | SDKWorkerShuttingDownMessage | SDKCommandsChangedMessage | SDKNotificationMessage | SDKFilesPersistedEvent | SDKToolUseSummaryMessage | SDKMemoryRecallMessage | SDKRateLimitEvent | SDKElicitationCompleteMessage | SDKPermissionDeniedMessage | SDKPromptSuggestionMessage | SDKMirrorErrorMessage | SDKInformationalMessage;
+export declare type SDKMessage = SDKAssistantMessage | SDKUserMessage | SDKUserMessageReplay | SDKResultMessage | SDKSystemMessage | SDKPartialAssistantMessage | SDKCompactBoundaryMessage | SDKStatusMessage | SDKAPIRetryMessage | SDKModelRefusalFallbackMessage | SDKModelRefusalNoFallbackMessage | SDKLocalCommandOutputMessage | SDKHookStartedMessage | SDKHookProgressMessage | SDKHookResponseMessage | SDKPluginInstallMessage | SDKToolProgressMessage | SDKAuthStatusMessage | SDKTaskNotificationMessage | SDKTaskStartedMessage | SDKTaskUpdatedMessage | SDKTaskProgressMessage | SDKThinkingTokensMessage | SDKSessionStateChangedMessage | SDKWorkerShuttingDownMessage | SDKCommandsChangedMessage | SDKNotificationMessage | SDKFilesPersistedEvent | SDKToolUseSummaryMessage | SDKMemoryRecallMessage | SDKRateLimitEvent | SDKElicitationCompleteMessage | SDKPermissionDeniedMessage | SDKPromptSuggestionMessage | SDKMirrorErrorMessage | SDKInformationalMessage;
 
 /**
  * Provenance of a user-role message (peer session, team lead, channel). Absent or `human` means keyboard input from the user.
@@ -3770,6 +3763,26 @@ export declare type SDKModelRefusalFallbackMessage = {
      * Wire uuids of the messages this fallback retracted — the refused partial as the consumer received it (one uuid per normalized SDK message; multi-block messages carry per-block derived uuids) plus any tombstoned tool_results. Emitted AFTER the retraction, so this is a resolution-time eviction signal: remove these messages from transcript state on receipt. Eviction is idempotent — unknown or already-removed uuids are a no-op. Absent when emitted by an older CLI.
      */
     retracted_message_uuids?: string[];
+    /**
+     * UUID of the user message the refused request was for — the rewind target and composer prefill for edit-and-retry. This is the message's own uuid as delivered on the replay ack (not a per-block normalized uuid). null when the refused turn was not human-authored (e.g. a background task notification or auto-continuation — nothing to edit-and-retry) or otherwise cannot be identified; absent from older CLIs.
+     */
+    refused_user_message_uuid?: string | null;
+    content: string;
+    uuid: UUID;
+    session_id: string;
+};
+
+/**
+ * Emitted when the model ends the stream with stop_reason "refusal" and no fallback model is configured, so the turn ends as an error. The structured counterpart to detecting stop_reason "refusal" on the assistant error frame. Not emitted when a fallback existed but was declined or gate-failed (model_refusal_fallback covers the retry case). Absent from older CLIs.
+ */
+export declare type SDKModelRefusalNoFallbackMessage = {
+    type: 'system';
+    subtype: 'model_refusal_no_fallback';
+    original_model: string;
+    request_id: string | null;
+    api_refusal_category?: string | null;
+    api_refusal_explanation?: string | null;
+    refused_user_message_uuid?: string | null;
     content: string;
     uuid: UUID;
     session_id: string;
@@ -5180,7 +5193,7 @@ export declare interface Settings {
             } | {
                 source: 'hostPattern';
                 /**
-                 * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
+                 * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against github.com. For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
                  */
                 hostPattern: string;
             } | {
@@ -5380,7 +5393,7 @@ export declare interface Settings {
     } | {
         source: 'hostPattern';
         /**
-         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
+         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against github.com. For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
          */
         hostPattern: string;
     } | {
@@ -5570,7 +5583,7 @@ export declare interface Settings {
     } | {
         source: 'hostPattern';
         /**
-         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
+         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against github.com. For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
          */
         hostPattern: string;
     } | {
@@ -5678,6 +5691,10 @@ export declare interface Settings {
             url?: string;
         };
     })[];
+    /**
+     * When true (and set in managed settings), rejects the --plugin-dir, --plugin-url, --agents, and non-sdk --mcp-config CLI flags at startup. Closes the CLI-flag bypass of strictKnownMarketplaces. Pair with allowedMcpServers for per-server MCP control; this setting does not gate other MCP entry points (SDK setMcpServers, claude mcp add, .mcp.json). Also blocks surfaces that spawn the CLI with these flags internally (see settings documentation). Only honored from managed settings; ignored in user/project/local settings.
+     */
+    disableSideloadFlags?: boolean;
     /**
      * Marketplace names whose plugins may surface as contextual install suggestions (relevance-based tips). No marketplace-declared suggestions surface without this allowlist; the built-in first-party frontend-design tip is unaffected. Only honored when set in managed settings (policy scope); the key is ignored in user, project, and local settings. A name only takes effect when the marketplace is registered on the machine AND its registered source is also declared in managed settings, either as the extraKnownMarketplaces entry for that name or as an entry of strictKnownMarketplaces. A marketplace registered from a different source under an allowlisted name is ignored. The official marketplace is exempt from the source requirement: allowlisting its name alone suffices, since that name can only register from the official Anthropic source.
      */
@@ -5937,6 +5954,8 @@ export declare interface Settings {
             options?: {
                 [k: string]: string | number | boolean | string[];
             };
+        } | {
+            [k: string]: unknown;
         };
     };
     /**