@anthropic-ai/claude-agent-sdk 0.3.205 → 0.3.207

package/extractFromBunfs.js

@@ -1,4 +1,4 @@
-/* eslint-disable custom-rules/no-sync-fs */
+/* oxlint-disable custom-rules/no-sync-fs */
 // Extracts a file from Bun's $bunfs virtual filesystem to a real temp directory
 // so it can be spawned as a subprocess (child processes cannot access $bunfs).
 //
@@ -28,7 +28,7 @@ function tmpdir() {
     return process.env.CLAUDE_CODE_TMPDIR
   }
   if (process.platform === 'darwin') {
-    // eslint-disable-next-line custom-rules/no-hardcoded-tmp -- mirrors tempfile.ts: macOS /tmp works fine; os.tmpdir() below is for Android-on-Linux where /tmp isn't writable.
+    // oxlint-disable-next-line custom-rules/no-hardcoded-tmp -- mirrors tempfile.ts: macOS /tmp works fine; os.tmpdir() below is for Android-on-Linux where /tmp isn't writable.
     return '/tmp'
   }
   return osTmpdir()

package/manifest.json

@@ -1,47 +1,68 @@
 {
-  "version": "2.1.205",
-  "commit": "4cf2699a14277d4a8edf7e74442381071fc0cfd2",
-  "buildDate": "2026-07-08T17:46:21Z",
+  "version": "2.1.207",
+  "commit": "bc512d56332530b2be3f5079e29ec17aa20b8553",
+  "buildDate": "2026-07-10T21:39:38Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "33e28624c5ae84f2bd7d2d8761e5d2e77997ba965cb11b6448de6b6e2c566f9c",
-      "size": 237437968
+      "checksum": "1397a062c6889675055e3314dd956376ac51262a7734ad9e819c26975d71547a",
+      "size": 241237136
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "4299a3f48551ef365f2d056f24d87e84b822c4c10b6acc46979446b7b5c60ceb",
-      "size": 246862928
+      "checksum": "8a4355d251a60c90d8cf08f32fdb22a8157dd3d085542f95d0da0475f9a2c57c",
+      "size": 249273680
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "c1874c85bcd3a88b70439fd50ff5910b7e6ac5371c14dd49d4ccc2878a592d09",
-      "size": 253803248
+      "checksum": "8bc14a284065383460f37981d724b8f7aa7ca93c9849d2fe367e08f03383f454",
+      "size": 256228080
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "dd8734c0b6a503fe1d17425184e57b397c30bb0337a33f1470d9985febfe5b09",
-      "size": 257006392
+      "checksum": "85e7e988a392d859f90802ca21fb26e89d3c9ab527f5ed0b08df3955e34d5c83",
+      "size": 259402552
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "a8cd2a626d7d0b5fb3516164a4cf3b4acbbadb053a5b1b2a2462ccbd2ebf6bde",
-      "size": 247051448
+      "checksum": "ec3b657344dcf6693f434fe11ffe4592381d31d4e6a7976649c1a610770dcc74",
+      "size": 249476280
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "20018df16e75f4287c3bfb088e04019452cf262f66ee43041e285113c4e479d8",
-      "size": 251695488
+      "checksum": "09a43ff41e33cbb0c4903a4939353933ee8f0d1964abab4b837004a951edb9ee",
+      "size": 254091648
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "f09120889098672074e7c5166d5474da0c5482f2bec898b3510cacd9c1fefa42",
-      "size": 247162528
+      "checksum": "781fdc2c89868b1cb05cc22c253ef142a0b44e7cc36236aecd6335745c7d42d0",
+      "size": 249485472
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "9a86e5acbc584ab7c1b684f1cc1bf5c7bddd6afd4817c0d2c2113d15bfbff0a9",
-      "size": 241629344
+      "checksum": "fa0c887a3f944ba1915766b525538b82b029ca8078ed6ee180c3b83c1b862521",
+      "size": 243952800
     }
+  },
+  "sdkCompat": {
+    "testedWrapperVersions": [
+      "0.3.181",
+      "0.3.182",
+      "0.3.183",
+      "0.3.185",
+      "0.3.186",
+      "0.3.187",
+      "0.3.190",
+      "0.3.191",
+      "0.3.195",
+      "0.3.196",
+      "0.3.197",
+      "0.3.198",
+      "0.3.201",
+      "0.3.202",
+      "0.3.204",
+      "0.3.205"
+    ],
+    "harnessSchema": 1
   }
 }

package/manifest.zst.json

@@ -1,55 +1,76 @@
 {
-  "version": "2.1.205",
-  "commit": "4cf2699a14277d4a8edf7e74442381071fc0cfd2",
-  "buildDate": "2026-07-08T17:48:20Z",
+  "version": "2.1.207",
+  "commit": "bc512d56332530b2be3f5079e29ec17aa20b8553",
+  "buildDate": "2026-07-10T21:41:27Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "b1713d2279428d0c10acfa1731393ffa5cf30f3c5955ef172a6b13ae5af49023",
-      "size": 48757644,
+      "checksum": "1a8f29a408042f9695f2f757ac55ea22c92607940d1ff7739b22b738dce221e2",
+      "size": 50610712,
       "bundle": {
-        "checksum": "14cf66d61f52fc0b1674912a62f823538b2692059f8eeecb579c054d7e813a21",
-        "size": 48749372
+        "checksum": "03debae4f03c3b2163f755a633b11708a69098bda768f6a241e99103821ab713",
+        "size": 50594718
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "22c4e2db930e973ef11572b9972a1b6d58a7b49835c2e2107eca88b7b3746d38",
-      "size": 53154391,
+      "checksum": "b5e3cd3bb3a541a8e7eadf87a76b267804b9753326b8ffbae2b667afe85297fb",
+      "size": 53624005,
       "bundle": {
-        "checksum": "3f3a79ecf0da7a80e27fd58cd742c65daa5236e45c28e34127616409ba8410a5",
-        "size": 53153125
+        "checksum": "d272255ec783b43f8644d34d590d75c1904a55dfacf6c2f67342576871da5509",
+        "size": 53637501
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "3e746e549d2c1f5e7ee68d84c5adecf6a54cba672ccce09ab982b839890673de",
-      "size": 57833829
+      "checksum": "72b19a4cf11ee241a8187dd099bf662e1eebf7093996c61ef572f877882ca285",
+      "size": 58294671
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "b7f51e61f52b316499bfd3b60d8eb188bea835cd6d226c68ea63c9e78d94bbf8",
-      "size": 59080834
+      "checksum": "df17174ee43c41372332b5fa8cbc7787aa9a0e7eb0d1e2f83ef9cbba635027c8",
+      "size": 59550032
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "fcda3caf5d92259a27b7561ba8a0d98e3892d9738078508b94da13ed80ebaa17",
-      "size": 56501960
+      "checksum": "9012a37af351dd99f8f57555efd127d385037fa9d1e02f17dc8690e13f9f0d19",
+      "size": 56979756
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "6d5c482230c17f87dfca84b1792cbbe0be16e67cfd0bb059f32fab70652ce8f2",
-      "size": 57890693
+      "checksum": "1fcedd418e777e178d682c64bb5ffa7d529b1e1fe71205f05cdf2064b94a6506",
+      "size": 58355365
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "1b3fef8dd08568bd68f352111c879fcad444f16c527b242633066819855744d3",
-      "size": 59229824
+      "checksum": "26bfafd689f32a3422ea61ca602b5fdbd859ac5a3fdbee1ee6d2e5ec2a78883d",
+      "size": 59678481
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "3210095a295804291820f2901293ce0a5cf51fcdf272c4b13054c8579c4aca28",
-      "size": 57260419
+      "checksum": "feab03d833eb383445471007c2ece19d0ea12f0704f9c86252356d8f0b254b0c",
+      "size": 57703648
     }
+  },
+  "sdkCompat": {
+    "testedWrapperVersions": [
+      "0.3.181",
+      "0.3.182",
+      "0.3.183",
+      "0.3.185",
+      "0.3.186",
+      "0.3.187",
+      "0.3.190",
+      "0.3.191",
+      "0.3.195",
+      "0.3.196",
+      "0.3.197",
+      "0.3.198",
+      "0.3.201",
+      "0.3.202",
+      "0.3.204",
+      "0.3.205"
+    ],
+    "harnessSchema": 1
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.205",
+  "version": "0.3.207",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -57,14 +57,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.205",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.205",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.205",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.205",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.205",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.205",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.205",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.205"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.207",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.207",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.207",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.207",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.207",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.207",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.207",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.207"
   },
   "files": [
     "sdk.mjs",
@@ -80,5 +80,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.205"
+  "claudeCodeVersion": "2.1.207"
 }

package/sdk-tools.d.ts

@@ -97,6 +97,7 @@ export type AgentOutput =
       content: {
         type: "text";
         text: string;
+        citations?: unknown[] | null;
       }[];
       resolvedModel?: string;
       totalToolUseCount: number;
@@ -111,11 +112,14 @@ export type AgentOutput =
           web_search_requests: number;
           web_fetch_requests: number;
         } | null;
-        service_tier: ("standard" | "priority" | "batch") | null;
+        service_tier: string | null;
         cache_creation: {
           ephemeral_1h_input_tokens: number;
           ephemeral_5m_input_tokens: number;
         } | null;
+        inference_geo?: string | null;
+        speed?: string | null;
+        iterations?: unknown;
       };
       toolStats?: {
         readCount: number;
@@ -125,12 +129,16 @@ export type AgentOutput =
         linesAdded: number;
         linesRemoved: number;
         otherToolCount: number;
+        frameCount?: number;
       };
       status: "completed";
       prompt: string;
+      worktreePath?: string;
+      worktreeBranch?: string;
     }
   | {
       status: "async_launched";
+      isAsync?: true;
       /**
        * The ID of the async agent
        */
@@ -3102,7 +3110,7 @@ export interface WebFetchOutput {
   url: string;
   artifactRead?: {
     slug: string;
-    ver: string;
+    ver?: string;
   };
 }
 export interface WebSearchOutput {
@@ -3407,6 +3415,10 @@ export interface ScheduleWakeupOutput {
    * True when the model ended the loop via `stop: true`
    */
   stopped?: boolean;
+  /**
+   * How many pending dynamic-loop wakeups stop:true cancelled. 0 means nothing was pending — a recurring /loop cron is not cancelled by stop:true.
+   */
+  cancelledWakeups?: number;
 }
 export interface MonitorOutput {
   /**

package/sdk.d.ts

@@ -3413,15 +3413,53 @@ declare type SDKControlListModelsRequest = {
 };
 
 /**
- * Invokes an MCP tool via the subprocess MCP client without a model turn. No permission check (control channel is trusted, same as other subtypes). SDK-type MCP servers (config.type === "sdk") are rejected — they are caller-provided, so the caller can invoke them directly without the subprocess round-trip. Result content passes through the same processing as model-turn MCP calls. Session expiry is not retried automatically; callers can mcp_reconnect and retry. UrlElicitationRequired (-32042) tries Elicitation hooks; if no hook resolves, the call errors with the URL in the message — open it out-of-band, then retry mcp_call.
+ * Invokes an MCP tool via the subprocess MCP client without a model turn. No permission check (control channel is trusted, same as other subtypes). SDK-type MCP servers (config.type === "sdk") are rejected — they are caller-provided, so the caller can invoke them directly without the subprocess round-trip. Result content passes through the same processing as model-turn MCP calls. Session expiry is not retried automatically; callers can mcp_reconnect and retry. UrlElicitationRequired (-32042) tries Elicitation hooks; if no hook resolves, the call errors with the URL in the message — open it out-of-band, then retry mcp_call. STAGED calls (input_files/output_files declared) additionally stage lane rows in/out around the call — see the input_files describe. Staged failures come back as a success-subtype response whose staging field carries a typed error_code; subtype:error is emitted only when the call could not be attempted at all (server not connected, kill switch, dispatch failure) and means nothing ran. Standard RPC semantics: a redelivered request_id supersedes the in-flight run (it is aborted and its response suppressed — exactly one response per request_id); conversion is idempotent, so re-running is safe. Cancellable via control_cancel_request.
  */
 declare type SDKControlMcpCallRequest = {
     subtype: 'mcp_call';
     /**
-     * Fully-qualified MCP tool name, e.g. mcp__server__tool_name.
+     * Fully-qualified MCP tool name, e.g. mcp__server__tool_name. Plugin-hosted servers are ordinary MCP servers here — e.g. mcp__plugin_documents_docs__doc_export (server names are normalized: non-[a-zA-Z0-9_-] becomes _).
      */
     tool: string;
+    /**
+     * Tool arguments. When input_files/output_files are declared, any string VALUE that exactly equals "{{in:NAME}}" or "{{out:NAME}}" (whole string, not a substring) is replaced with the worker-chosen absolute path of that named staged file before the call; a token naming no declared file fails the request with staging error_code=tool_error, and every declared output's "{{out:NAME}}" token must appear in arguments (the substituted path is the only way the tool learns where to write, so an unreferenced output fails the request before the tool runs). With no files declared — including expires_at/timeout_ms-only staged calls — passed through unchanged.
+     */
     arguments?: Record<string, unknown>;
+    /**
+     * RFC3339 deadline, REQUIRED when output_files are declared (a stale buffered drain must not overwrite rows written since). Sending expires_at routes the call through the staging engine, same as timeout_ms — the response gains a staging result. UNDELIVERED requests buffer durably and drain after reattach; a drain past this instant is dropped with staging error_code=expired instead of executing stale. Once delivered to a live worker the request is acked immediately and never redelivered — a worker killed mid-run surfaces as a missing response (apply your own deadline), not a later drain. An unparseable value is treated as already expired (fail closed).
+     */
+    expires_at?: string;
+    /**
+     * Tool-execution timeout (staging and collection have their own transport timeouts). Clamped to [1000, 600000]; default 120000. Sending timeout_ms routes the call through the staging engine — so it is always enforced when present and the response carries a staging result; omit it for a plain call. Staged calls are POSIX-worker-only: on a Windows worker any staged-field call fails with a typed staging refusal.
+     */
+    timeout_ms?: number;
+    /**
+     * Declaring input_files or output_files makes this a STAGED call: rows are fetched from the synced-file lane into a private per-request temp dir the WORKER chooses (random, per-UID — the caller never sees or computes paths; it references files via tokens in arguments), the tool runs, and declared outputs are written back as lane rows (durable-at-ack PUT). The response then carries a `staging` result the caller switches on.
+     */
+    input_files?: {
+        /**
+         * Handle referenced from arguments as "{{in:NAME}}". Unique within the request.
+         */
+        name: string;
+        /**
+         * Synced-file lane row to stage, e.g. /working/.cowork/originals/a.docx. A missing row fails with staging error_code=input_missing; the etag actually staged is echoed back in staging.inputs_used.
+         */
+        lane_path: string;
+    }[];
+    output_files?: {
+        /**
+         * Handle referenced from arguments as "{{out:NAME}}" — the tool is told (via the substituted path) where to write; the worker collects from exactly that path. Unique within the request.
+         */
+        name: string;
+        /**
+         * Synced-file lane row to write, e.g. /working/report.cd. Unique within the request (two outputs on one row would self-conflict under CAS). Outputs over the 25 MiB lane cap fail with staging error_code=output_too_large.
+         */
+        lane_path: string;
+        /**
+         * Opaque lane etag the output row must still carry for the write to land (CAS). Omitted = unconditional last-writer-wins (an empty string is rejected, not treated as unconditional). A row that moved since fails that output with staging error_code=output_conflict and the requested bytes are not written. Redelivery of a completed CAS write re-runs and conflicts with its own prior write — treat output_conflict on a retry as possible-prior-success and reconcile by etag.
+         */
+        if_match?: string;
+    }[];
 };
 
 /**
@@ -3956,7 +3994,7 @@ export declare type SDKModelRefusalFallbackMessage = {
 };
 
 /**
- * Emitted when the model ends the stream with stop_reason "refusal" and no fallback model is configured, so the turn ends as an error. The structured counterpart to detecting stop_reason "refusal" on the assistant error frame. Not emitted when a fallback existed but was declined or gate-failed (model_refusal_fallback covers the retry case). Absent from older CLIs.
+ * Emitted when the model ends the stream with stop_reason "refusal" and no retry runs: no fallback model is configured, or per-category routing declined the retry (the refusal category has no fallback map entry). The structured counterpart to detecting stop_reason "refusal" on the assistant error frame. Not emitted when the retry ran or the user declined the retry dialog (model_refusal_fallback covers the retry case). Absent from older CLIs.
  */
 export declare type SDKModelRefusalNoFallbackMessage = {
     type: 'system';
@@ -4403,6 +4441,9 @@ export declare type SDKUserMessage = {
     message: MessageParam;
     parent_tool_use_id: string | null;
     isSynthetic?: boolean;
+    /**
+     * Structured tool output — the tool's full Output object, not the string content sent to the model. The shape is per-tool, keyed by the matching tool_use block's name (see the *Output types in toolTypes); MCP and dynamic tools carry their own shapes, so the field stays unknown-typed. For the Agent/Task tool the completed shape is AgentToolCompletedOutput: the subagent's final report without the model-directed agentId/usage trailer, plus run totals — render from it instead of parsing the tool_result text.
+     */
     tool_use_result?: unknown;
     priority?: 'now' | 'next' | 'later';
     origin?: SDKMessageOrigin;
@@ -4445,6 +4486,9 @@ export declare type SDKUserMessageReplay = {
     message: MessageParam;
     parent_tool_use_id: string | null;
     isSynthetic?: boolean;
+    /**
+     * Structured tool output — the tool's full Output object, not the string content sent to the model. The shape is per-tool, keyed by the matching tool_use block's name (see the *Output types in toolTypes); MCP and dynamic tools carry their own shapes, so the field stays unknown-typed. For the Agent/Task tool the completed shape is AgentToolCompletedOutput: the subagent's final report without the model-directed agentId/usage trailer, plus run totals — render from it instead of parsing the tool_result text.
+     */
     tool_use_result?: unknown;
     priority?: 'now' | 'next' | 'later';
     origin?: SDKMessageOrigin;
@@ -6665,9 +6709,9 @@ export declare type TeammateIdleHookInput = BaseHookInput & {
 };
 
 /**
- * Why the query loop terminated. Unset when the loop was bypassed (local slash command) or interrupted externally (budget/retry limits checked between yields).
+ * Why the query loop terminated. Unset when the loop was bypassed (local slash command).
  */
-export declare type TerminalReason = 'blocking_limit' | 'rapid_refill_breaker' | 'prompt_too_long' | 'image_error' | 'model_error' | 'aborted_streaming' | 'aborted_tools' | 'stop_hook_prevented' | 'hook_stopped' | 'tool_deferred' | 'max_turns' | 'background_requested' | 'completed';
+export declare type TerminalReason = 'blocking_limit' | 'rapid_refill_breaker' | 'prompt_too_long' | 'image_error' | 'model_error' | 'api_error' | 'malformed_tool_use_exhausted' | 'aborted_streaming' | 'aborted_tools' | 'stop_hook_prevented' | 'hook_stopped' | 'tool_deferred' | 'max_turns' | 'background_requested' | 'completed' | 'budget_exhausted' | 'structured_output_retry_exhausted' | 'tool_deferred_unavailable' | 'turn_setup_failed';
 
 /**
  * Claude decides when and how much to think (Opus 4.6+).