@anthropic-ai/claude-agent-sdk 0.3.191 → 0.3.195

package/manifest.json

@@ -1,47 +1,47 @@
 {
-  "version": "2.1.191",
-  "commit": "397db5e73d569118815b8037ca9ff2483a06bbfe",
-  "buildDate": "2026-06-24T11:32:23Z",
+  "version": "2.1.195",
+  "commit": "4603aa3f2ea164bd0974f82eb413ae7acc99a7ee",
+  "buildDate": "2026-06-26T01:56:37Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "99fdfb552a5260e649aedd06c024d0a4105b09cefec0bf67d558e017ee66c400",
-      "size": 219856224
+      "checksum": "8b45adad93f336ab95f33e714494b19fd3377a494eb05c122c8677bc895876ad",
+      "size": 224682640
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "6e83aad5fc4fd459fd74539cda06d2279105eac2befc603d2fba6494974cb2a4",
-      "size": 229178416
+      "checksum": "7eb8716e6d6e6a278d13158793529336290837fca457facfec656f1b1a287c60",
+      "size": 234066032
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "1a31a7cbcfd784f8c073bfc8a0a1583fb6e93e60ef70b76d7fcf663ffed8949b",
-      "size": 236305136
+      "checksum": "b02279999058dc80a0e1c5d39463d1545a178615492f84139aac8d61214a7e9a",
+      "size": 241154800
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "1038dba88bdf1b80941dc3e383e93b088325b00497329ac50da460c8786d5bee",
-      "size": 239438648
+      "checksum": "8323e70125063147a4478b957745d835a87e5e72ffd25b838ea9a841c03e6a37",
+      "size": 244276024
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "7e5d3ac86e28dbd224f84d9349372b74bed39ad6392408df63356fd8a810c96e",
-      "size": 229553336
+      "checksum": "52713b5f7690764b3b4742807b1a6fab24ce5e01dabf82964b97f519e8f9e7fe",
+      "size": 234403000
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "b80e0066fb208cbd50fe539ed9c03dadd24fcc058bb67774fd36a316bca396ad",
-      "size": 234123648
+      "checksum": "63a2b3291369ff85e970c0cfd3767bb48065071ec12fb2d0055387ccde511541",
+      "size": 238977408
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "83397a6a029c7da663fb1ce27211e05174a3546d8b151e42451bf4590b8343d7",
-      "size": 230281888
+      "checksum": "3ef7fb7b16e169739640fe2903ee7011cff8b43d2dbb15f9badc9b11cfad18a3",
+      "size": 234930336
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "ec8c342e835ee8891ef2c6d0eb9ac460f2d5e6a668788c8a03faa3451748c275",
-      "size": 224756384
+      "checksum": "038fb49213c0ac828b5a8a1f31cf510753d7e7891e9ae4596673a602cff251f5",
+      "size": 229410464
     }
   }
 }

package/manifest.zst.json

@@ -1,55 +1,55 @@
 {
-  "version": "2.1.191",
-  "commit": "397db5e73d569118815b8037ca9ff2483a06bbfe",
-  "buildDate": "2026-06-24T11:34:13Z",
+  "version": "2.1.195",
+  "commit": "4603aa3f2ea164bd0974f82eb413ae7acc99a7ee",
+  "buildDate": "2026-06-26T01:58:22Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "1e0e43751a0c379346460f049bce96e575609b4e71d5962f4d2acf0b91c78fd9",
-      "size": 45457602,
+      "checksum": "edd737e0b727d846b333abea409fe41b288d93a61b57c9436ba5936a95777524",
+      "size": 46324238,
       "bundle": {
-        "checksum": "2ab22c16cee6c72f85e69445225e57db046d46cb1568d8224321114a83792d33",
-        "size": 45461631
+        "checksum": "dadeba60923e54e98dc5a1a391be77839fb7f23bf1e66d69988daa951caf5e57",
+        "size": 46316695
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "4bee8d449b6f68c1b360a446d43f4bcea0e4f03b89929b5db5a84ccbc3c3848e",
-      "size": 49724319,
+      "checksum": "d2b1b1ca02bf3f15d90e63c645c12e854cd9b860bc134278b9f5be2ccdc9ad51",
+      "size": 50621837,
       "bundle": {
-        "checksum": "6f0c567adf7319c4c8fc384ad734aa3cf78de5e7f8689475032714ab28d2ea08",
-        "size": 49726387
+        "checksum": "42b85b75f832b0e1ab2c2e27e7f7bdc3f7d754f26a9b09aee1ab8a3ca641ead8",
+        "size": 50626429
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "be5f54f9eaa0dca1daf8b8e0f8677343dca5096265cfe8643db19f4136daa659",
-      "size": 54566562
+      "checksum": "92790e9ac5e82011b13603fdc6cbd169f4404a7294dba096bfd53d4d148418ea",
+      "size": 55414570
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "e230ba2f62780d101457f701b4427b714eb6d8bf9b3b2daa177216de9dce125f",
-      "size": 55814450
+      "checksum": "502eb0186d3f2af31fc1eff3a89d440ce682cb941a09ab9f95828635e2e6cdcf",
+      "size": 56663286
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "7892cc6f6e0bcff888b645b411cf727c032a6ac303e383251627883beff5a74e",
-      "size": 53232201
+      "checksum": "6d318ddec8dc6bbab324ae0b70231160721f608c837a92a449c24359db87971a",
+      "size": 54087314
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "0d755b201aec6523f32964b8411b5f8efe25f36050b190985633ab41bd4cb790",
-      "size": 54619464
+      "checksum": "9ea3130f98bcdfa9651ce487c415787928e5392568b391628be2da4aa62f0ba2",
+      "size": 55471929
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "4c69daacf0d7f35b6649eac7578a4100e7179653636744293c2d59c3b913a60e",
-      "size": 55953341
+      "checksum": "b1d4cfecfb3c5c617cf0c4f52406cee1f7f5c7c39ad73009c92e351066ca52f1",
+      "size": 56797947
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "308f78035eb81be6c7948858e61bc1f89869b84cc65ec877c36b0301e30a253f",
-      "size": 53992570
+      "checksum": "7ada1c6de7e4111a7bc128389f96f013af57997f39efb46d35759ed5ce2e5ab6",
+      "size": 54835024
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.191",
+  "version": "0.3.195",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -57,14 +57,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.191",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.191",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.191",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.191",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.191",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.191",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.191",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.191"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.195",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.195",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.195",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.195",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.195",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.195",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.195",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.195"
   },
   "files": [
     "sdk.mjs",
@@ -80,5 +80,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.191"
+  "claudeCodeVersion": "2.1.195"
 }

package/sdk-tools.d.ts

@@ -2508,7 +2508,14 @@ export interface MonitorInput {
   /**
    * Shell command or script. Each stdout line is an event; exit ends the watch.
    */
-  command: string;
+  command?: string;
+  /**
+   * WebSocket to open. Each text frame is an event; binary frames are reported as a placeholder line. Socket close ends the watch. Cannot be combined with command.
+   */
+  ws?: {
+    url: string;
+    protocols?: string[];
+  };
 }
 export interface ArtifactInput {
   /**
@@ -2520,7 +2527,7 @@ export interface ArtifactInput {
    */
   favicon: string;
   /**
-   * Short human-readable name for this version (e.g. "fixed-background"). Shown in the version picker instead of the raw version id.
+   * Short human-readable name for this version, max 60 chars (e.g. "fixed-background"). Shown in the version picker. Not a description — keep it to a few words.
    */
   label?: string;
   /**

package/sdk.d.ts

@@ -366,6 +366,7 @@ declare namespace coreTypes {
         SDKMessage,
         SDKMirrorErrorMessage,
         SDKModelRefusalFallbackMessage,
+        SDKModelRefusalNoFallbackMessage,
         SDKNotificationMessage,
         SDKPartialAssistantMessage,
         SDKPermissionDenial,
@@ -2286,6 +2287,23 @@ export declare interface Query extends AsyncGenerator<SDKMessage, void> {
      * @returns The complete initialization response
      */
     initializationResult(): Promise<SDKControlInitializeResponse>;
+    /**
+     * Re-send the `initialize` control request to an already-running CLI.
+     *
+     * Use this after a transport gap (e.g. reattaching to a daemon whose
+     * ring buffer evicted frames during a disconnect): the CLI's response
+     * carries any `can_use_tool` / `request_user_dialog` control requests
+     * the loop is still blocked on, and the SDK redelivers them to
+     * `canUseTool` / `onUserDialog`. In-flight request_ids are deduped
+     * SDK-side, but callbacks should be idempotent per request_id since a
+     * request whose response was lost in the gap will be dispatched again.
+     *
+     * Unlike {@link Query.initializationResult}, this always sends a fresh request
+     * rather than returning the cached first-connect result.
+     *
+     * @returns A fresh initialization response
+     */
+    reinitialize(): Promise<SDKControlInitializeResponse>;
     /**
      * Get the list of available skills for the current session.
      *
@@ -3696,7 +3714,7 @@ export declare type SDKMemoryRecallMessage = {
     session_id: string;
 };
 
-export declare type SDKMessage = SDKAssistantMessage | SDKUserMessage | SDKUserMessageReplay | SDKResultMessage | SDKSystemMessage | SDKPartialAssistantMessage | SDKCompactBoundaryMessage | SDKStatusMessage | SDKAPIRetryMessage | SDKModelRefusalFallbackMessage | SDKLocalCommandOutputMessage | SDKHookStartedMessage | SDKHookProgressMessage | SDKHookResponseMessage | SDKPluginInstallMessage | SDKToolProgressMessage | SDKAuthStatusMessage | SDKTaskNotificationMessage | SDKTaskStartedMessage | SDKTaskUpdatedMessage | SDKTaskProgressMessage | SDKThinkingTokensMessage | SDKSessionStateChangedMessage | SDKWorkerShuttingDownMessage | SDKCommandsChangedMessage | SDKNotificationMessage | SDKFilesPersistedEvent | SDKToolUseSummaryMessage | SDKMemoryRecallMessage | SDKRateLimitEvent | SDKElicitationCompleteMessage | SDKPermissionDeniedMessage | SDKPromptSuggestionMessage | SDKMirrorErrorMessage | SDKInformationalMessage;
+export declare type SDKMessage = SDKAssistantMessage | SDKUserMessage | SDKUserMessageReplay | SDKResultMessage | SDKSystemMessage | SDKPartialAssistantMessage | SDKCompactBoundaryMessage | SDKStatusMessage | SDKAPIRetryMessage | SDKModelRefusalFallbackMessage | SDKModelRefusalNoFallbackMessage | SDKLocalCommandOutputMessage | SDKHookStartedMessage | SDKHookProgressMessage | SDKHookResponseMessage | SDKPluginInstallMessage | SDKToolProgressMessage | SDKAuthStatusMessage | SDKTaskNotificationMessage | SDKTaskStartedMessage | SDKTaskUpdatedMessage | SDKTaskProgressMessage | SDKThinkingTokensMessage | SDKSessionStateChangedMessage | SDKWorkerShuttingDownMessage | SDKCommandsChangedMessage | SDKNotificationMessage | SDKFilesPersistedEvent | SDKToolUseSummaryMessage | SDKMemoryRecallMessage | SDKRateLimitEvent | SDKElicitationCompleteMessage | SDKPermissionDeniedMessage | SDKPromptSuggestionMessage | SDKMirrorErrorMessage | SDKInformationalMessage;
 
 /**
  * Provenance of a user-role message (peer session, team lead, channel). Absent or `human` means keyboard input from the user.
@@ -3762,6 +3780,26 @@ export declare type SDKModelRefusalFallbackMessage = {
      * Wire uuids of the messages this fallback retracted — the refused partial as the consumer received it (one uuid per normalized SDK message; multi-block messages carry per-block derived uuids) plus any tombstoned tool_results. Emitted AFTER the retraction, so this is a resolution-time eviction signal: remove these messages from transcript state on receipt. Eviction is idempotent — unknown or already-removed uuids are a no-op. Absent when emitted by an older CLI.
      */
     retracted_message_uuids?: string[];
+    /**
+     * UUID of the user message the refused request was for — the rewind target and composer prefill for edit-and-retry. This is the message's own uuid as delivered on the replay ack (not a per-block normalized uuid). null when the refused turn was not human-authored (e.g. a background task notification or auto-continuation — nothing to edit-and-retry) or otherwise cannot be identified; absent from older CLIs.
+     */
+    refused_user_message_uuid?: string | null;
+    content: string;
+    uuid: UUID;
+    session_id: string;
+};
+
+/**
+ * Emitted when the model ends the stream with stop_reason "refusal" and no fallback model is configured, so the turn ends as an error. The structured counterpart to detecting stop_reason "refusal" on the assistant error frame. Not emitted when a fallback existed but was declined or gate-failed (model_refusal_fallback covers the retry case). Absent from older CLIs.
+ */
+export declare type SDKModelRefusalNoFallbackMessage = {
+    type: 'system';
+    subtype: 'model_refusal_no_fallback';
+    original_model: string;
+    request_id: string | null;
+    api_refusal_category?: string | null;
+    api_refusal_explanation?: string | null;
+    refused_user_message_uuid?: string | null;
     content: string;
     uuid: UUID;
     session_id: string;
@@ -5172,7 +5210,7 @@ export declare interface Settings {
             } | {
                 source: 'hostPattern';
                 /**
-                 * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
+                 * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against github.com. For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
                  */
                 hostPattern: string;
             } | {
@@ -5372,7 +5410,7 @@ export declare interface Settings {
     } | {
         source: 'hostPattern';
         /**
-         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
+         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against github.com. For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
          */
         hostPattern: string;
     } | {
@@ -5562,7 +5600,7 @@ export declare interface Settings {
     } | {
         source: 'hostPattern';
         /**
-         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against "github.com". For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
+         * Regex pattern to match the host/domain extracted from any marketplace source type. For github sources, matches against github.com. For git sources (SSH or HTTPS), extracts the hostname from the URL. Use in strictKnownMarketplaces to allow all marketplaces from a specific host (e.g., "^github\.mycompany\.com$").
          */
         hostPattern: string;
     } | {
@@ -5670,6 +5708,10 @@ export declare interface Settings {
             url?: string;
         };
     })[];
+    /**
+     * When true (and set in managed settings), rejects the --plugin-dir, --plugin-url, --agents, and non-sdk --mcp-config CLI flags at startup. Closes the CLI-flag bypass of strictKnownMarketplaces. Pair with allowedMcpServers for per-server MCP control; this setting does not gate other MCP entry points (SDK setMcpServers, claude mcp add, .mcp.json). Also blocks surfaces that spawn the CLI with these flags internally (see settings documentation). Only honored from managed settings; ignored in user/project/local settings.
+     */
+    disableSideloadFlags?: boolean;
     /**
      * Marketplace names whose plugins may surface as contextual install suggestions (relevance-based tips). No marketplace-declared suggestions surface without this allowlist; the built-in first-party frontend-design tip is unaffected. Only honored when set in managed settings (policy scope); the key is ignored in user, project, and local settings. A name only takes effect when the marketplace is registered on the machine AND its registered source is also declared in managed settings, either as the extraKnownMarketplaces entry for that name or as an entry of strictKnownMarketplaces. A marketplace registered from a different source under an allowlisted name is ignored. The official marketplace is exempt from the source requirement: allowlisting its name alone suffices, since that name can only register from the official Anthropic source.
      */
@@ -5929,6 +5971,8 @@ export declare interface Settings {
             options?: {
                 [k: string]: string | number | boolean | string[];
             };
+        } | {
+            [k: string]: unknown;
         };
     };
     /**