@anthropic-ai/claude-agent-sdk 0.3.217 → 0.3.219

package/manifest.json

@@ -1,47 +1,47 @@
 {
-  "version": "2.1.217",
-  "commit": "9963b018d22c3e6659c99e135e687870301b5c67",
-  "buildDate": "2026-07-21T18:45:36Z",
+  "version": "2.1.219",
+  "commit": "7006c4c3acac98e554d3997baeda6a7fa4d1ff7c",
+  "buildDate": "2026-07-24T03:34:26Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "5840c777fd47115e9ca276e165563c6e121e7c7e2b4d86598e0025f8cc37de56",
-      "size": 250456784
+      "checksum": "a8e806faaefac53c7a0f26523d8a45c60dbef3407b14ef990c75765d08febc82",
+      "size": 256908272
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "8387a6fd44edfd40d7e74c5fdc3270a15f5e6b1b58c7c6fee560e70d3d1943da",
-      "size": 259908496
+      "checksum": "03be9f988ed88391b4a5f08e4c5dc317ce2fffa4a9dc66c01106326e7698ee76",
+      "size": 266381200
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "40c53507ac669c1d438366c19760c22f52748a06e50e0fc0e353d2cb73425597",
-      "size": 265337760
+      "checksum": "1f834b322ba9d1291cc7ffeff16a6795a59145bda279dbd59cd7ecebc7b7f15a",
+      "size": 271825824
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "2630fc5dc6db61bc03f86b95daf47766e5ed5b61873f7bb7cfea764c5ac5a9ba",
-      "size": 268573680
+      "checksum": "22cfd6f5b3061c0391ba84e9cf8c9deaa37783aac18b004d42ec061e98f00691",
+      "size": 275004400
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "e219a631e194e71bccbea2f81f5678c75f745aa6e7a74e8a407610c906d1299b",
-      "size": 258585960
+      "checksum": "22b2c2e0f41ab0b7c7b8845be9c49fe6f27e4c344aab1bd174bdf84a4e6b0570",
+      "size": 265074024
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "7c44188927edbf7b918b41bc7a284292359b1ad556b7802db0148adb4b395732",
-      "size": 263197264
+      "checksum": "487008769dd69599adb779205b6b371de27b4245f0ad2ad70f15baf4eac5f81e",
+      "size": 269627984
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "6e4a3a4679f381178a90cf741de9ce924a3274304b09277695ac3a679628ca17",
-      "size": 259460768
+      "checksum": "10f4c1f85b07f3cf6b8fff930fd26ecd475bd146a378acfafa559a6db9d89637",
+      "size": 265714848
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "f0128e1a50b8d7dec5bb4dbdff0ef622f617e798df61ebb009ed3f03d2afe613",
-      "size": 253836448
+      "checksum": "6a1db10161b93e81ac55537feeae8a299f0bf67601c1c0f2016e79c850302baa",
+      "size": 260090016
     }
   },
   "sdkCompat": {
@@ -67,7 +67,9 @@
       "0.3.207",
       "0.3.208",
       "0.3.209",
-      "0.3.215"
+      "0.3.215",
+      "0.3.217",
+      "0.3.218"
     ],
     "harnessSchema": 1
   }

package/manifest.zst.json

@@ -1,55 +1,55 @@
 {
-  "version": "2.1.217",
-  "commit": "9963b018d22c3e6659c99e135e687870301b5c67",
-  "buildDate": "2026-07-21T18:47:31Z",
+  "version": "2.1.219",
+  "commit": "7006c4c3acac98e554d3997baeda6a7fa4d1ff7c",
+  "buildDate": "2026-07-24T03:36:23Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "dc3d8d2494e22fa6252ed45797a11205f1a30e37fca74148e3f34250787686a5",
-      "size": 51465165,
+      "checksum": "c886b408ca4cda1d2959310faad132b933405a3b1bad4a9848d492d68eb47c2a",
+      "size": 52506446,
       "bundle": {
-        "checksum": "aa2146f4d150d3ae31324beab0bdbecce51da975141c7c3d6b031d9187da8d1e",
-        "size": 51492491
+        "checksum": "980a7160d6db0bc8173a269e2853fa1da2c5565fc3b288cd173704b85c74c0f8",
+        "size": 52497683
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "d7ed84882ce7eb1b85146f33a783c79e05aff520952f39e397ecedcf9c4ffd12",
-      "size": 55970349,
+      "checksum": "44a0ce208070bdfb884959292e35bd231204d2a023a02022e589ea73d7f69b9f",
+      "size": 56935079,
       "bundle": {
-        "checksum": "8a652b06f90ceb32d847507b1b1c95c5353d5a946506ac49a122821295462889",
-        "size": 55972645
+        "checksum": "51c66f290fea291765a110b4f665617b2e21560a8d75bccfe8cbcf0886c886da",
+        "size": 56935309
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "9a14fe91ce6d1f3872301cf010de153ff6aa4c76998aa045953688548a69d773",
-      "size": 60338477
+      "checksum": "799d6c5d6dff67c5cbd0bbc8ff680e6450ddbc671368e6de638d46f48ecbc4dd",
+      "size": 61249923
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "e80654f7acc551154d8f32c54a24767396152973b9addc5fdbe93fb1306a229d",
-      "size": 61724295
+      "checksum": "a24d9e365afe1d253518fa2cf2892430e11b06b18eaabec50dfe8e5cbba93d1d",
+      "size": 62548539
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "49bc1c32b2613a2f88b67e434b96e3298e246c6316b72a8211a608537615040f",
-      "size": 59011849
+      "checksum": "4134b86427f31017d709aefd83f08f2ae1c2c8b9c6ade1405c0afc7ff9acd86f",
+      "size": 59922435
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "2c5bd4127dc469d74e679da001bb01b171aca3f6bcc5823e8f1cd839971da3a9",
-      "size": 60425868
+      "checksum": "01acb73d847bbfe6eb53488a9d002695f5ee0b0897f0e0ae42bfb147ea70600d",
+      "size": 61622798
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "1b4bf647ba1ef4eaa7532cd5044b59d056ff2cf56e612103b6805fb54738a646",
-      "size": 62045244
+      "checksum": "f284e5c1b9591c71d00fa56724dbb93e97f2ad9062043641288b0aac197a6764",
+      "size": 62957683
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "2c3547cedf59cf4057c9487993010a67fa5c1a551d64985da753401eb4eb8380",
-      "size": 60035027
+      "checksum": "1b11cf292eb8db6dc8c26395dc26157d09b4d0846d4f4f996cd4386704ba58c6",
+      "size": 60973807
     }
   },
   "sdkCompat": {
@@ -75,7 +75,9 @@
       "0.3.207",
       "0.3.208",
       "0.3.209",
-      "0.3.215"
+      "0.3.215",
+      "0.3.217",
+      "0.3.218"
     ],
     "harnessSchema": 1
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.217",
+  "version": "0.3.219",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -57,14 +57,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.217",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.217",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.217",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.217",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.217",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.217",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.217",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.217"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.219",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.219",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.219",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.219",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.219",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.219",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.219",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.219"
   },
   "files": [
     "sdk.mjs",
@@ -80,5 +80,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.217"
+  "claudeCodeVersion": "2.1.219"
 }

package/sdk-tools.d.ts

@@ -2864,7 +2864,7 @@ export interface ArtifactInput {
    */
   url?: string;
   /**
-   * Overwrite without a conflict check. Use only after a 409 when you have reconciled with the other session's version and intend to replace it. The tracked baseVersion is always sent; with force:true the server treats it as informational and overwrites. Omit (or false) so a concurrent write 409s instead of being silently clobbered.
+   * Last-resort overwrite that DISCARDS another session's published version. On a 409 conflict the normal fix is to re-read the artifact, merge your edits on top of the newer content, and publish again — not force. Pass force:true only when the user explicitly wants to replace the other session's version. The tracked baseVersion is still sent; with force:true the server treats it as informational and overwrites. Omit (or false) so a concurrent write 409s instead of being silently clobbered.
    */
   force?: boolean;
 }

package/sdk.d.ts

@@ -328,11 +328,13 @@ declare namespace coreTypes {
         ConfigScope,
         CwdChangedHookInput,
         CwdChangedHookSpecificOutput,
+        DirectoryAddedHookInput,
         ElicitationHookInput,
         ElicitationHookSpecificOutput,
         ElicitationResultHookInput,
         ElicitationResultHookSpecificOutput,
         ExitReason,
+        FastModeDisabledReason,
         FastModeState,
         FileChangedHookInput,
         FileChangedHookSpecificOutput,
@@ -527,6 +529,18 @@ export declare type CwdChangedHookSpecificOutput = {
  */
 export declare function deleteSession(_sessionId: string, _options?: SessionMutationOptions): Promise<void>;
 
+export declare type DirectoryAddedHookInput = BaseHookInput & {
+    hook_event_name: 'DirectoryAdded';
+    /**
+     * Absolute path of the directory that was added.
+     */
+    directory: string;
+    /**
+     * How the directory was added: "slash_command" for /add-dir, "register_repo_root" for the SDK control_request.
+     */
+    source: 'slash_command' | 'register_repo_root';
+};
+
 /**
  * Effort level for controlling how much thinking/reasoning Claude applies.
  *
@@ -615,6 +629,11 @@ export declare const EXIT_REASONS: readonly ["clear", "resume", "logout", "promp
 
 export declare type ExitReason = 'clear' | 'resume' | 'logout' | 'prompt_input_exit' | 'other' | 'bypass_permissions_disabled';
 
+/**
+ * Why fast mode can't serve right now. Absent when nothing blocks it (a request may still choose standard speed). A paused-after-rate-limit run is not here; it rides fast_mode_state as 'cooldown'.
+ */
+export declare type FastModeDisabledReason = 'free' | 'preference' | 'extra_usage_disabled' | 'network_error' | 'unknown' | 'not_first_party' | 'disabled_by_env' | 'model_not_allowed' | 'sdk_opt_in_required' | 'pending';
+
 /**
  * Fast mode state: off, in cooldown after rate limit, or actively enabled.
  */
@@ -794,7 +813,7 @@ export declare type GetSubagentMessagesOptions = {
     sessionStore?: SessionStore;
 };
 
-export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "PostToolUseFailure", "PostToolBatch", "Notification", "UserPromptSubmit", "UserPromptExpansion", "SessionStart", "SessionEnd", "Stop", "StopFailure", "SubagentStart", "SubagentStop", "PreCompact", "PostCompact", "PermissionRequest", "PermissionDenied", "Setup", "TeammateIdle", "TaskCreated", "TaskCompleted", "Elicitation", "ElicitationResult", "ConfigChange", "WorktreeCreate", "WorktreeRemove", "InstructionsLoaded", "CwdChanged", "FileChanged", "MessageDisplay"];
+export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "PostToolUseFailure", "PostToolBatch", "Notification", "UserPromptSubmit", "UserPromptExpansion", "SessionStart", "SessionEnd", "Stop", "StopFailure", "SubagentStart", "SubagentStop", "PreCompact", "PostCompact", "PermissionRequest", "PermissionDenied", "Setup", "TeammateIdle", "TaskCreated", "TaskCompleted", "Elicitation", "ElicitationResult", "ConfigChange", "WorktreeCreate", "WorktreeRemove", "InstructionsLoaded", "CwdChanged", "FileChanged", "DirectoryAdded", "MessageDisplay"];
 
 /**
  * Hook callback function for responding to events during execution.
@@ -813,9 +832,9 @@ export declare interface HookCallbackMatcher {
     timeout?: number;
 }
 
-export declare type HookEvent = 'PreToolUse' | 'PostToolUse' | 'PostToolUseFailure' | 'PostToolBatch' | 'Notification' | 'UserPromptSubmit' | 'UserPromptExpansion' | 'SessionStart' | 'SessionEnd' | 'Stop' | 'StopFailure' | 'SubagentStart' | 'SubagentStop' | 'PreCompact' | 'PostCompact' | 'PermissionRequest' | 'PermissionDenied' | 'Setup' | 'TeammateIdle' | 'TaskCreated' | 'TaskCompleted' | 'Elicitation' | 'ElicitationResult' | 'ConfigChange' | 'WorktreeCreate' | 'WorktreeRemove' | 'InstructionsLoaded' | 'CwdChanged' | 'FileChanged' | 'MessageDisplay';
+export declare type HookEvent = 'PreToolUse' | 'PostToolUse' | 'PostToolUseFailure' | 'PostToolBatch' | 'Notification' | 'UserPromptSubmit' | 'UserPromptExpansion' | 'SessionStart' | 'SessionEnd' | 'Stop' | 'StopFailure' | 'SubagentStart' | 'SubagentStop' | 'PreCompact' | 'PostCompact' | 'PermissionRequest' | 'PermissionDenied' | 'Setup' | 'TeammateIdle' | 'TaskCreated' | 'TaskCompleted' | 'Elicitation' | 'ElicitationResult' | 'ConfigChange' | 'WorktreeCreate' | 'WorktreeRemove' | 'InstructionsLoaded' | 'CwdChanged' | 'FileChanged' | 'DirectoryAdded' | 'MessageDisplay';
 
-export declare type HookInput = PreToolUseHookInput | PostToolUseHookInput | PostToolUseFailureHookInput | PostToolBatchHookInput | PermissionDeniedHookInput | NotificationHookInput | UserPromptSubmitHookInput | UserPromptExpansionHookInput | SessionStartHookInput | SessionEndHookInput | StopHookInput | StopFailureHookInput | SubagentStartHookInput | SubagentStopHookInput | PreCompactHookInput | PostCompactHookInput | PermissionRequestHookInput | SetupHookInput | TeammateIdleHookInput | TaskCreatedHookInput | TaskCompletedHookInput | ElicitationHookInput | ElicitationResultHookInput | ConfigChangeHookInput | InstructionsLoadedHookInput | WorktreeCreateHookInput | WorktreeRemoveHookInput | CwdChangedHookInput | FileChangedHookInput | MessageDisplayHookInput;
+export declare type HookInput = PreToolUseHookInput | PostToolUseHookInput | PostToolUseFailureHookInput | PostToolBatchHookInput | PermissionDeniedHookInput | NotificationHookInput | UserPromptSubmitHookInput | UserPromptExpansionHookInput | SessionStartHookInput | SessionEndHookInput | StopHookInput | StopFailureHookInput | SubagentStartHookInput | SubagentStopHookInput | PreCompactHookInput | PostCompactHookInput | PermissionRequestHookInput | SetupHookInput | TeammateIdleHookInput | TaskCreatedHookInput | TaskCompletedHookInput | ElicitationHookInput | ElicitationResultHookInput | ConfigChangeHookInput | InstructionsLoadedHookInput | WorktreeCreateHookInput | WorktreeRemoveHookInput | CwdChangedHookInput | FileChangedHookInput | DirectoryAddedHookInput | MessageDisplayHookInput;
 
 export declare type HookJSONOutput = AsyncHookJSONOutput | SyncHookJSONOutput;
 
@@ -1252,6 +1271,14 @@ export declare type ModelUsage = {
     costUSD: number;
     contextWindow: number;
     maxOutputTokens: number;
+    /**
+     * Canonical model id used for the pricing lookup (e.g. 'claude-opus-4-7'). May differ from the raw model string this entry is keyed by (provider-specific ids, aliases).
+     */
+    canonicalModel?: string;
+    /**
+     * API provider that served this model ('firstParty', 'bedrock', 'vertex', 'foundry', 'anthropicAws', 'anthropicGoogleCloud', 'mantle', 'gateway').
+     */
+    provider?: string;
 };
 
 export declare type NonNullableUsage = {
@@ -2717,6 +2744,7 @@ export declare type SandboxNetworkConfig = NonNullable<z.infer<ReturnType<typeof
 declare const SandboxNetworkConfigSchema: () => z.ZodOptional<z.ZodObject<{
     allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
     deniedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    strictAllowlist: z.ZodOptional<z.ZodBoolean>;
     allowManagedDomainsOnly: z.ZodOptional<z.ZodBoolean>;
     allowUnixSockets: z.ZodOptional<z.ZodArray<z.ZodString>>;
     allowAllUnixSockets: z.ZodOptional<z.ZodBoolean>;
@@ -2743,6 +2771,7 @@ declare const SandboxSettingsSchema: () => z.ZodObject<{
     network: z.ZodOptional<z.ZodObject<{
         allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
         deniedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        strictAllowlist: z.ZodOptional<z.ZodBoolean>;
         allowManagedDomainsOnly: z.ZodOptional<z.ZodBoolean>;
         allowUnixSockets: z.ZodOptional<z.ZodArray<z.ZodString>>;
         allowAllUnixSockets: z.ZodOptional<z.ZodBoolean>;
@@ -3431,6 +3460,7 @@ export declare type SDKControlInitializeResponse = {
 
 
     fast_mode_state?: coreTypes.FastModeState;
+    fast_mode_disabled_reason?: coreTypes.FastModeDisabledReason;
 
 
 
@@ -3443,6 +3473,10 @@ export declare type SDKControlInitializeResponse = {
 declare type SDKControlInterruptRequest = {
     subtype: 'interrupt';
 
+    /**
+     * When true, the interrupt also cancels every uuid-stamped main-thread command still in the queue or already dequeued for the imminent turn but not yet reachable by the abort (the first-command prewait window) — the same set the response would otherwise list under `still_queued`. Each is closed with a terminal 'cancelled' lifecycle and listed on the response's `cancelled` field. `still_queued` is always empty. (The isFoldInFlight guard cancel_async_message uses does not apply here: this request also aborts the running turn, so a fold-in-flight uuid is never delivered and is swept with the rest. A fold-in-flight uuid's queued_command attachment may already appear in the aborted turn's transcript if the abort landed after the fold's attachment yield — pre-existing leave-queued semantics; it never runs as its own turn.) Uuid-less commands (task notifications) still in the queue are also dequeued but cannot be listed; a uuid-less command already in the prewait window is unreachable by either leg and still runs. When false or absent, queued commands survive the interrupt and are listed under `still_queued` — the interrupt_receipt_v1 contract is unchanged. A Stop-means-stop-everything client (a remote UI's Stop button) sets this true so one round-trip halts the session; a wrapper that wants per-uuid control leaves it false and follows up with cancel_async_message. Advertised by the `interrupt_cancel_queued_v1` capability on system/init; older CLIs ignore the field and behave as if false.
+     */
+    cancel_queued?: boolean;
 };
 
 /**
@@ -3450,9 +3484,13 @@ declare type SDKControlInterruptRequest = {
  */
 export declare type SDKControlInterruptResponse = {
     /**
-     * Uuids of async user messages that survive this interrupt: commands still in the queue, plus any batch already dequeued for the imminent turn but not yet reachable by the abort. These WILL run unless cancelled first. Cancellation granularity: uuids still in the queue are individually cancellable via cancel_async_message; once a batch is dequeued and coalesced into one turn, cancelling a NON-representative member uuid is a no-op (its content still runs), while cancelling the batch-representative uuid drops the WHOLE coalesced batch — in both cases the cancel response reports cancelled:false because the message was no longer in the queue. Coverage caveats: only uuid-STAMPED messages appear (a message enqueued without a uuid still runs but is never listed, so [] does not mean "nothing will run"); only main-thread messages are listed (subagent-addressed messages are out of scope); and the list may include internally-enqueued uuids the client never sent (cron triggers, auto-resume continuations) — ignore unknown uuids rather than treating them as an error. Ordering: on a clean interrupt this receipt is written before the interrupted turn result; a turn that crashes during interrupt handling emits its error result on a direct-write path that may precede the receipt. Snapshot is taken synchronously with abort processing — probing the queue after the interrupted result instead always loses the race against the drain loop, which starts the next queued turn immediately.
+     * Uuids of async user messages that survive this interrupt: commands still in the queue, plus any batch already dequeued for the imminent turn but not yet reachable by the abort. These WILL run unless cancelled first (or unless the request set cancel_queued:true, in which case this list is always empty — every uuid-stamped survivor is removed, emitted a terminal `cancelled` synchronously, and listed under `cancelled` instead). Cancellation granularity: uuids still in the queue are individually cancellable via cancel_async_message; once a batch is dequeued and coalesced into one turn, cancelling a NON-representative member uuid is a no-op (its content still runs), while cancelling the batch-representative uuid drops the WHOLE coalesced batch — in both cases the cancel response reports cancelled:false because the message was no longer in the queue. Coverage caveats: only uuid-STAMPED messages appear (a message enqueued without a uuid still runs but is never listed, so [] does not mean "nothing will run"); only main-thread messages are listed (subagent-addressed messages are out of scope); and the list may include internally-enqueued uuids the client never sent (cron triggers, auto-resume continuations) — ignore unknown uuids rather than treating them as an error. Ordering: on a clean interrupt this receipt is written before the interrupted turn result; a turn that crashes during interrupt handling emits its error result on a direct-write path that may precede the receipt. Snapshot is taken synchronously with abort processing — probing the queue after the interrupted result instead always loses the race against the drain loop, which starts the next queued turn immediately.
      */
     still_queued: string[];
+    /**
+     * Present only when the request set cancel_queued:true — uuids of main-thread commands cancelled by this interrupt: every survivor that would otherwise have appeared under `still_queued`, including any uuid that was mid-fold at the interrupt instant (this request also aborts, so the fold never delivers it). Each listed uuid has been removed (queue-resident) or marked cancel-pending (the first-command prewait window, closed by the drain loop's backstop) and emits a terminal 'cancelled' lifecycle synchronously at the first such interrupt (a repeat interrupt over the same parked batch re-lists the uuid idempotently without re-emitting); none will run. Same coverage caveats as `still_queued` (uuid-stamped main-thread only; internally-enqueued uuids may appear). Advertised by the `interrupt_cancel_queued_v1` capability.
+     */
+    cancelled?: string[];
 };
 
 /**
@@ -3624,7 +3662,7 @@ export declare type SDKControlReadFileResponse = {
 };
 
 /**
- * Add a directory as a working-directory root and optionally reload CLAUDE.md, skills, and plugins. The directory must resolve to a subdirectory of cwd.
+ * Add a directory as a working-directory root and optionally reload CLAUDE.md, skills, and plugins. The directory must resolve to a strict subdirectory of cwd, or of a directory passed at launch via --add-dir / the SDK additionalDirectories option. A directory that is already a registered working directory (including a duplicate of an earlier request) is denied with an error; the registration pipeline and DirectoryAdded hooks do not re-run.
  */
 declare type SDKControlRegisterRepoRootRequest = {
     subtype: 'register_repo_root';
@@ -4243,6 +4281,7 @@ export declare type SDKResultError = {
     errors: string[];
     terminal_reason?: TerminalReason;
     fast_mode_state?: FastModeState;
+    fast_mode_disabled_reason?: FastModeDisabledReason;
     origin?: SDKMessageOrigin;
     uuid: UUID;
     session_id: string;
@@ -4276,6 +4315,7 @@ export declare type SDKResultSuccess = {
     deferred_tool_use?: SDKDeferredToolUse;
     terminal_reason?: TerminalReason;
     fast_mode_state?: FastModeState;
+    fast_mode_disabled_reason?: FastModeDisabledReason;
     origin?: SDKMessageOrigin;
     uuid: UUID;
     session_id: string;
@@ -4401,9 +4441,11 @@ export declare type SDKSystemMessage = {
     }[];
 
 
+
     fast_mode_state?: FastModeState;
+    fast_mode_disabled_reason?: FastModeDisabledReason;
     /**
-     * Protocol capabilities this CLI supports, so SDK consumers can feature-detect instead of version-sniffing. Open set — ignore unknown values; check each capability for exactly the behavior you use. 'interrupt_receipt_v1' = the interrupt control_response success payload carries still_queued (uuids of async user messages that survive the interrupt). Absent on older CLIs.
+     * Protocol capabilities this CLI supports, so SDK consumers can feature-detect instead of version-sniffing. Open set — ignore unknown values; check each capability for exactly the behavior you use. 'interrupt_receipt_v1' = the interrupt control_response success payload carries still_queued (uuids of async user messages that survive the interrupt). 'interrupt_cancel_queued_v1' = the interrupt control_request honors cancel_queued:true (queued and pending-dispatch commands are cancelled alongside the abort, listed on the response's cancelled field; still_queued is always empty — including any uuid that was mid-fold at the interrupt instant, since this request also aborts and the fold never delivers it). Absent on older CLIs.
      */
     capabilities?: string[];
 
@@ -4544,7 +4586,7 @@ export declare type SDKUserMessage = {
     parent_tool_use_id: string | null;
     isSynthetic?: boolean;
     /**
-     * Structured tool output — the tool's full Output object, not the string content sent to the model. The shape is per-tool, keyed by the matching tool_use block's name (see the *Output types in toolTypes); MCP and dynamic tools carry their own shapes, so the field stays unknown-typed. For the Agent/Task tool the completed shape is AgentToolCompletedOutput: the subagent's final report without the model-directed agentId/usage trailer, plus run totals — render from it instead of parsing the tool_result text.
+     * Structured tool output — the tool's full Output object, not the string content sent to the model. The shape is per-tool, keyed by the matching tool_use block's name (see the *Output types in toolTypes); MCP and dynamic tools carry their own shapes, so the field stays unknown-typed. For the Agent/Task tool the completed shape is the subagent's final report without the model-directed agentId/usage trailer, plus run totals — render from it instead of parsing the tool_result text.
      */
     tool_use_result?: unknown;
     priority?: 'now' | 'next' | 'later';
@@ -4590,7 +4632,7 @@ export declare type SDKUserMessageReplay = {
     parent_tool_use_id: string | null;
     isSynthetic?: boolean;
     /**
-     * Structured tool output — the tool's full Output object, not the string content sent to the model. The shape is per-tool, keyed by the matching tool_use block's name (see the *Output types in toolTypes); MCP and dynamic tools carry their own shapes, so the field stays unknown-typed. For the Agent/Task tool the completed shape is AgentToolCompletedOutput: the subagent's final report without the model-directed agentId/usage trailer, plus run totals — render from it instead of parsing the tool_result text.
+     * Structured tool output — the tool's full Output object, not the string content sent to the model. The shape is per-tool, keyed by the matching tool_use block's name (see the *Output types in toolTypes); MCP and dynamic tools carry their own shapes, so the field stays unknown-typed. For the Agent/Task tool the completed shape is the subagent's final report without the model-directed agentId/usage trailer, plus run totals — render from it instead of parsing the tool_result text.
      */
     tool_use_result?: unknown;
     priority?: 'now' | 'next' | 'later';
@@ -5350,6 +5392,10 @@ export declare interface Settings {
      * Enable or disable the Workflows feature for this user. Unset = default by plan once the feature is available.
      */
     enableWorkflows?: boolean;
+    /**
+     * Advisory size guideline for the dynamic workflows Claude writes: "small" aims for fewer than 5 agents, "medium" (the default) fewer than 15, "large" fewer than 50, and "unrestricted" sends no guideline. A value here — including from managed settings — takes precedence over the "Dynamic workflow size" choice in /config, and that /config row is hidden while a settings file provides the key. This is a guideline, not an enforced limit.
+     */
+    workflowSizeGuideline?: 'unrestricted' | 'small' | 'medium' | 'large';
     /**
      * Enable the "ultracode" keyword trigger: including the keyword in a prompt opts that turn into the Workflow tool. Set to false to disable the trigger. Default: true.
      */
@@ -6104,6 +6150,10 @@ export declare interface Settings {
              * Domains that are always blocked, even if matched by allowedDomains. Supports the same wildcard syntax as allowedDomains. Merged from all settings sources regardless of allowManagedDomainsOnly.
              */
             deniedDomains?: string[];
+            /**
+             * When true, the sandbox runtime deterministically denies hosts not in allowedDomains instead of prompting. Enforced for sandboxed commands only — in-process tools such as WebFetch are not gated by this setting. Only honored from user, managed/policy, or CLI (--settings) settings — project settings (.claude/settings.json and .claude/settings.local.json) are ignored.
+             */
+            strictAllowlist?: boolean;
             /**
              * When true (and set in managed settings), only allowedDomains and WebFetch(domain:...) allow rules from managed settings are respected. User, project, local, and flag settings domains are ignored. Denied domains are still respected from all sources.
              */
@@ -6491,9 +6541,12 @@ export declare interface Settings {
      * Automatically compact conversation when context fills
      */
     autoCompactEnabled?: boolean;
-
     /**
-     * When safety measures flag a message, automatically switch to a different model to keep chatting. When off, your session will pause instead.
+     * Precompute the compaction summary in the background before it is needed. Only applies when auto-compact is on.
+     */
+    precomputeCompactionEnabled?: boolean;
+    /**
+     * When safeguards flag a message, automatically switch to a different model to keep chatting. When off, your session will pause instead.
      */
     switchModelsOnFlag?: boolean;
     /**
@@ -6513,7 +6566,7 @@ export declare interface Settings {
      */
     showTurnDuration?: boolean;
     /**
-     * Stamp each assistant message with its arrival time
+     * Stamp each message with its arrival time
      */
     showMessageTimestamps?: boolean;
     /**