@anthropic-ai/claude-agent-sdk 0.3.227 → 0.3.229

package/manifest.json

@@ -1,53 +1,51 @@
 {
-  "version": "2.1.227",
-  "commit": "5ecc7d5389d8b682652d0ea32eadd3e0eb537ee8",
-  "buildDate": "2026-08-10T19:04:57Z",
+  "version": "2.1.229",
+  "commit": "10b3e93beb60b9548432371b3de664a4190e8da7",
+  "buildDate": "2026-08-12T17:57:28Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "7432511ba3be818e01f23f6eef8630d214a8b618451e188c3c7d61a987eef6c7",
-      "size": 285046400
+      "checksum": "d732f0ba0a539c58c2ffcaef06ed03b4e523726f0cb6cc27b3a5b7e7ae0a7a21",
+      "size": 294720528
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "14484fb9a0480b6b638230685a7d9a248a5339b384a162e0df127e4a4a07249b",
-      "size": 294700704
+      "checksum": "1cb62183e9f89ea21eb4950b84896fa7101182c7dfcbbe92e7a293f0b20ba541",
+      "size": 303439136
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "db47335532cbcab67a4b3ab16d8f3f77976bf85d53c7d79f8296538aa22bfce6",
-      "size": 300923832
+      "checksum": "ba53130acbda3ddb00b3dd5641f11733867f5d837a258b7e6ccef4927cc1a509",
+      "size": 308795592
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "6832dc3f1797b890b71116e5f2dbbf9a83fd3d0498c235b4b0f9cd0e6e499ad6",
-      "size": 304282632
+      "checksum": "200338139a3df04a9ad22233837d1fb53fb6dffa21cd82e47559bfaa115acc1b",
+      "size": 311175440
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "8284d20a5d61e71502e69836b1598ba03f688f4d8de6c22105055fbf0af118f6",
-      "size": 294237544
+      "checksum": "858d14b64c5c78f4da24a684184a61a05db12cf8f703290f8913c238ce789a27",
+      "size": 302202424
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "da7b62210da0000c09c7c29b217e166ccc66dad4c79c9e2bc8d52fc7b66f590d",
-      "size": 298885712
+      "checksum": "3f575b0e8de6ab0473b9652979e1f6f506dc7d6b9ecadeeba47716a07c1b09e1",
+      "size": 305483520
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "a5d8bcc6549cf99a2ea35451f8034a12f0db919e63334477c72d42fc8e0d5c09",
-      "size": 292227232
+      "checksum": "5736c66be98a372d5e5e3b3598ead89ab5a9d1aca60d347fe7b561801c58376c",
+      "size": 307186848
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "68935d2c971ad417e90f1d5bb503c8773b218c7f7049fe35e502f0180232ff18",
-      "size": 286900384
+      "checksum": "e213992024e807fab57ab53bab039c22c1911df262da30d038a4892b8662ce54",
+      "size": 296566432
     }
   },
   "sdkCompat": {
     "testedWrapperVersions": [
-      "0.3.187",
-      "0.3.190",
       "0.3.191",
       "0.3.195",
       "0.3.196",
@@ -75,7 +73,8 @@
       "0.3.220",
       "0.3.221",
       "0.3.222",
-      "0.3.226"
+      "0.3.226",
+      "0.3.227"
     ],
     "harnessSchema": 1
   }

package/manifest.zst.json

@@ -1,61 +1,59 @@
 {
-  "version": "2.1.227",
-  "commit": "5ecc7d5389d8b682652d0ea32eadd3e0eb537ee8",
-  "buildDate": "2026-08-10T19:07:09Z",
+  "version": "2.1.229",
+  "commit": "10b3e93beb60b9548432371b3de664a4190e8da7",
+  "buildDate": "2026-08-12T17:59:47Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "256afdff806d28d027008c351f83986f11b7751fff1e44a52f66480361831542",
-      "size": 56884882,
+      "checksum": "6f451a59e3fe24730bc719bc9f86f6640332edacc3ce6b54c4bc50e1d314059f",
+      "size": 59219054,
       "bundle": {
-        "checksum": "3b86d1a8f29a404dca144faf0ba1d155ef12f24c08606080a6c7eb85143ca117",
-        "size": 56888900
+        "checksum": "a4e61d93a9366972aad98b33cd42f03e28107ed7f6beecf579f372ce7b96096e",
+        "size": 59216883
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "d4299135b0596df5ed10bbf4930995c2a9f0b660c405d119dac783141e9d5778",
-      "size": 61653275,
+      "checksum": "c6eb631b43e8044972ee009725adf08c0c8fcb959017b666ed37d455a3a84d75",
+      "size": 63771353,
       "bundle": {
-        "checksum": "933dd4335d3db811d863c86b7b2a22d38519d14a46efbbfe207330c5355e15d1",
-        "size": 61647726
+        "checksum": "73a6be36f2ab1167cbf815a8584b573ed379ff9aa0093e01513d0de9f1f6ebcc",
+        "size": 63779277
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "7bc21154bf75a98bb7a2ae6b47f7d2ea8b75e86ef749749519af1fda5a73c7b9",
-      "size": 66000031
+      "checksum": "8ea9c7c217a6a8d1a8bf8c58288285a70c88ddd14c4b5a47d7c0c6ca3a4fdb63",
+      "size": 67495276
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "5eebaa5625c306f6c5737b86f6e64f3fa5657269fd8434aea9c00803f97d1547",
-      "size": 67310589
+      "checksum": "c39722950b2cb1ceb2e1ffe4027fa89121150e3853b4f4f27a34e80a6e09cdbe",
+      "size": 68644044
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "d5300c37aa78600838387fa9b61ed9c5b47d5277706dd832372fe7d9ea24dd0a",
-      "size": 64750207
+      "checksum": "e52ada8826a43cd4973041865124d688b05a6c7a62d9e80df0f9c76086190463",
+      "size": 66215021
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "86f3903699da0a604bbaf04d977794207f1a4c2a63b3e2729a6abe342a7a095c",
-      "size": 66159367
+      "checksum": "0d591732a58c6aa1a0eb0ae2da557ff0834301821024290b4bd51ee456c895c0",
+      "size": 67153466
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "3c0328fc224b2c2e433d144f1c4817a9d92006d97fa747a191f973873cb1cfd3",
-      "size": 67271619
+      "checksum": "f9d9ce1264cebc0af6b7acf14f7ddd65de84369f4a9985bda9759d8bb0c11786",
+      "size": 71120125
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "9850e3fd889489166614e360f9aea02d679062971cbbe489a652bffe8a8bb40c",
-      "size": 65421569
+      "checksum": "4ac170c5d18bf2ae3f37eedcbc41520d00abb40827291dd16e482a9f71cdea1c",
+      "size": 67671658
     }
   },
   "sdkCompat": {
     "testedWrapperVersions": [
-      "0.3.187",
-      "0.3.190",
       "0.3.191",
       "0.3.195",
       "0.3.196",
@@ -83,7 +81,8 @@
       "0.3.220",
       "0.3.221",
       "0.3.222",
-      "0.3.226"
+      "0.3.226",
+      "0.3.227"
     ],
     "harnessSchema": 1
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.227",
+  "version": "0.3.229",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -57,14 +57,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.227",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.227",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.227",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.227",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.227",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.227",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.227",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.227"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.229",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.229",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.229",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.229",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.229",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.229",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.229",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.229"
   },
   "files": [
     "sdk.mjs",
@@ -80,5 +80,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.227"
+  "claudeCodeVersion": "2.1.229"
 }

package/sdk-tools.d.ts

@@ -46,6 +46,7 @@ export type ToolInputSchemas =
   | ScheduleWakeupInput
   | RemoteTriggerInput
   | ShowOnboardingRolePickerInput
+  | ReadNotificationsInput
   | MonitorInput
   | ProposeSkillsInput
   | ProposeGoalInput
@@ -85,6 +86,7 @@ export type ToolOutputSchemas =
   | ArtifactOutput
   | RemoteTriggerOutput
   | ShowOnboardingRolePickerOutput
+  | ReadNotificationsOutput
   | ScheduleWakeupOutput
   | MonitorOutput
   | ProposeSkillsOutput
@@ -129,6 +131,9 @@ export type AgentOutput =
         inference_geo?: string | null;
         speed?: string | null;
         iterations?: unknown;
+        output_tokens_details?: {
+          thinking_tokens?: number | null;
+        } | null;
       };
       toolStats?: {
         readCount: number;
@@ -2684,6 +2689,7 @@ export interface RemoteTriggerInput {
   };
 }
 export interface ShowOnboardingRolePickerInput {}
+export interface ReadNotificationsInput {}
 export interface MonitorInput {
   /**
    * Short human-readable description of what you are monitoring (shown in notifications).
@@ -2892,7 +2898,7 @@ export interface ArtifactInput {
    */
   scope?: "mine" | "shared" | "all";
   /**
-   * Title for the artifact — the name shown in the browser tab and gallery. Prefer a <title> tag at the top of the HTML itself; this parameter fills in only when the file lacks one in the first 8KB of the file, and never overrides the tag. HTML publishes only — Markdown pages keep their filename identity. Content always comes from file_path — there is no inline content parameter.
+   * Title for the artifact — the name shown in the browser tab and gallery. A short, distinctive noun-phrase name — not a generic label, a summary, or a name with an appended explainer. Prefer a <title> tag at the top of the HTML itself; this parameter fills in only when the file lacks one in the first 8KB of the file, and never overrides the tag. HTML publishes only — Markdown pages keep their filename identity. Content always comes from file_path — there is no inline content parameter.
    */
   title?: string;
   /**
@@ -3692,6 +3698,30 @@ export interface ShowOnboardingRolePickerOutput {
   role?: string;
   dismissed?: boolean;
 }
+export interface ReadNotificationsOutput {
+  notifications: {
+    /**
+     * Server-assigned stable id — the dedup key across redeliveries.
+     */
+    notification_id: string;
+    /**
+     * Server-attested source token: "github_webhook" | "trigger_fire" | "mcp_send_message" (open set; unknown well-formed tokens pass through verbatim, off-grammar values coerce to "unknown").
+     */
+    origin: string;
+    /**
+     * RFC3339 timestamp of when the backend queued it.
+     */
+    queued_at: string;
+    /**
+     * Verbatim notification body.
+     */
+    content: string;
+  }[];
+  /**
+   * Notifications still queued after this drain (drains are size-budgeted); call the tool again to read them.
+   */
+  remaining: number;
+}
 export interface ScheduleWakeupOutput {
   /**
    * Epoch ms timestamp when the next wakeup will fire

package/sdk.d.ts

@@ -2716,7 +2716,7 @@ export declare type ResolvedSettingSource = SettingSource | 'managed' | 'flag';
  * - **The policy tier matches CLI startup** (managed-settings.json,
  *   remote-cached managed settings, MDM via macOS plist / Windows
  *   HKLM/HKCU, and `managedSettings`) **except** the admin-configured
- *   `policyHelper` subprocess is not executed. MDM resolution may invoke
+ *   `policyHelper`/`policyHelpers` subprocess is not executed. MDM resolution may invoke
  *   `plutil` (macOS, when an MDM plist exists) or `reg.exe` (Windows/WSL)
  *   on the first call per process. If your deployment relies on
  *   policyHelper to inject managed settings, results will differ.
@@ -4617,6 +4617,10 @@ export declare type SDKSystemMessage = {
      */
     permissionMode: PermissionMode;
     slash_commands: string[];
+    /**
+     * Subset of slash_commands whose UX is bound to the local terminal (e.g. exit, statusline). Phone/remote UIs should hide these from command menus; desktop surfaces may keep them. Present only when non-empty; absent on CLIs that predate the field, and on sessions where no advertised command carries the tag.
+     */
+    terminal_slash_commands?: string[];
     output_style: string;
     skills: string[];
     plugins: {
@@ -4634,7 +4638,7 @@ export declare type SDKSystemMessage = {
     fast_mode_state?: FastModeState;
     fast_mode_disabled_reason?: FastModeDisabledReason;
     /**
-     * Protocol capabilities this CLI supports, so SDK consumers can feature-detect instead of version-sniffing. Open set — ignore unknown values; check each capability for exactly the behavior you use. 'interrupt_receipt_v1' = the interrupt control_response success payload carries still_queued (uuids of async user messages that survive the interrupt). 'interrupt_cancel_queued_v1' = the interrupt control_request honors cancel_queued:true (queued and pending-dispatch commands are cancelled alongside the abort, listed on the response's cancelled field; still_queued is always empty — including any uuid that was mid-fold at the interrupt instant, since this request also aborts and the fold never delivers it). Absent on older CLIs.
+     * Protocol capabilities this CLI supports, so SDK consumers can feature-detect instead of version-sniffing. Open set — ignore unknown values; check each capability for exactly the behavior you use. 'interrupt_receipt_v1' = the interrupt control_response success payload carries still_queued (uuids of async user messages that survive the interrupt). 'interrupt_cancel_queued_v1' = the interrupt control_request honors cancel_queued:true (queued and pending-dispatch commands are cancelled alongside the abort, listed on the response's cancelled field; still_queued is always empty — including any uuid that was mid-fold at the interrupt instant, since this request also aborts and the fold never delivers it). 'queued_notifications' = the CLI accepts inbound queued_notification stream messages and drains them via ReadNotifications (the CCR backend reads this from the persisted init event to decide whether it may send them). Absent on older CLIs.
      */
     capabilities?: string[];
 
@@ -5166,6 +5170,43 @@ export declare interface Settings {
         timeoutMs?: number;
         refreshIntervalMs?: 0 | number;
     };
+    /**
+     * Per-OS variant of policyHelper, keyed by platform: macos, linux, windows, wsl. The entry for the current platform wins over policyHelper; a platform with no entry falls back to policyHelper (wsl falls back to the linux entry first). Honored only from admin-controlled policy sources.
+     */
+    policyHelpers?: {
+        macos?: {
+            /**
+             * Absolute path to the helper executable
+             */
+            path: string;
+            timeoutMs?: number;
+            refreshIntervalMs?: 0 | number;
+        };
+        linux?: {
+            /**
+             * Absolute path to the helper executable
+             */
+            path: string;
+            timeoutMs?: number;
+            refreshIntervalMs?: 0 | number;
+        };
+        windows?: {
+            /**
+             * Absolute path to the helper executable
+             */
+            path: string;
+            timeoutMs?: number;
+            refreshIntervalMs?: 0 | number;
+        };
+        wsl?: {
+            /**
+             * Absolute path to the helper executable
+             */
+            path: string;
+            timeoutMs?: number;
+            refreshIntervalMs?: 0 | number;
+        };
+    };
     /**
      * Custom file suggestion configuration for \@ mentions
      */
@@ -5217,6 +5258,7 @@ export declare interface Settings {
          * Whether to append the claude.ai session link to commits and PRs created from web or Remote Control sessions (default: true). Set to false to omit the Claude-Session trailer and PR-body link.
          */
         sessionUrl?: boolean;
+        [k: string]: unknown;
     };
     /**
      * Deprecated: Use attribution instead. Whether to include Claude's co-authored by attribution in commits and PRs (defaults to true)
@@ -5875,6 +5917,20 @@ export declare interface Settings {
                          * SHA-256 digest of the archive. When set, every download is verified against it and the install is refused on mismatch. It also serves as the version identity when neither plugin.json nor the marketplace entry declares a `version`. Recommended. Note the update signal is the version string (plugin.json version, else the entry version, else this digest) — changing only the digest while a version is declared does not trigger an update.
                          */
                         sha256?: string;
+                    } | {
+                        source: 'command';
+                        /**
+                         * Shell command that prints the absolute path of the plugin directory on stdout (exactly one line) and exits 0. It must leave a complete plugin in that directory before exiting; the directory is copied into the plugin cache, so the printed path may change between runs (it is re-resolved on every install and update, and once per session in the background). Runs through the platform shell (sh on macOS/Linux, cmd.exe on Windows) from the user's home directory with Claude Code's subprocess environment.
+                         */
+                        command: string;
+                        /**
+                         * Seconds to wait for the command before giving up (default: 60)
+                         */
+                        timeout?: number;
+                        /**
+                         * copy (default): the printed directory is copied into the plugin cache and content-hashed, so it may be deleted afterwards. link: the cache entry links to the printed directory in place (no copy, no size limit; macOS/Linux) — for large exports; the directory must then stay valid while Claude Code runs, and a different printed path is what signals new content.
+                         */
+                        mode?: 'copy' | 'link';
                     } | {
                         source: 'unsupported';
                         error?: string;
@@ -6086,6 +6142,20 @@ export declare interface Settings {
                  * SHA-256 digest of the archive. When set, every download is verified against it and the install is refused on mismatch. It also serves as the version identity when neither plugin.json nor the marketplace entry declares a `version`. Recommended. Note the update signal is the version string (plugin.json version, else the entry version, else this digest) — changing only the digest while a version is declared does not trigger an update.
                  */
                 sha256?: string;
+            } | {
+                source: 'command';
+                /**
+                 * Shell command that prints the absolute path of the plugin directory on stdout (exactly one line) and exits 0. It must leave a complete plugin in that directory before exiting; the directory is copied into the plugin cache, so the printed path may change between runs (it is re-resolved on every install and update, and once per session in the background). Runs through the platform shell (sh on macOS/Linux, cmd.exe on Windows) from the user's home directory with Claude Code's subprocess environment.
+                 */
+                command: string;
+                /**
+                 * Seconds to wait for the command before giving up (default: 60)
+                 */
+                timeout?: number;
+                /**
+                 * copy (default): the printed directory is copied into the plugin cache and content-hashed, so it may be deleted afterwards. link: the cache entry links to the printed directory in place (no copy, no size limit; macOS/Linux) — for large exports; the directory must then stay valid while Claude Code runs, and a different printed path is what signals new content.
+                 */
+                mode?: 'copy' | 'link';
             } | {
                 source: 'unsupported';
                 error?: string;
@@ -6287,6 +6357,20 @@ export declare interface Settings {
                  * SHA-256 digest of the archive. When set, every download is verified against it and the install is refused on mismatch. It also serves as the version identity when neither plugin.json nor the marketplace entry declares a `version`. Recommended. Note the update signal is the version string (plugin.json version, else the entry version, else this digest) — changing only the digest while a version is declared does not trigger an update.
                  */
                 sha256?: string;
+            } | {
+                source: 'command';
+                /**
+                 * Shell command that prints the absolute path of the plugin directory on stdout (exactly one line) and exits 0. It must leave a complete plugin in that directory before exiting; the directory is copied into the plugin cache, so the printed path may change between runs (it is re-resolved on every install and update, and once per session in the background). Runs through the platform shell (sh on macOS/Linux, cmd.exe on Windows) from the user's home directory with Claude Code's subprocess environment.
+                 */
+                command: string;
+                /**
+                 * Seconds to wait for the command before giving up (default: 60)
+                 */
+                timeout?: number;
+                /**
+                 * copy (default): the printed directory is copied into the plugin cache and content-hashed, so it may be deleted afterwards. link: the cache entry links to the printed directory in place (no copy, no size limit; macOS/Linux) — for large exports; the directory must then stay valid while Claude Code runs, and a different printed path is what signals new content.
+                 */
+                mode?: 'copy' | 'link';
             } | {
                 source: 'unsupported';
                 error?: string;
@@ -6310,6 +6394,10 @@ export declare interface Settings {
             url?: string;
         };
     })[];
+    /**
+     * Controls the `command` plugin source, whose plugin directory is produced by running a marketplace-declared command on this machine. true: command-sourced plugins are never installed, updated, or re-resolved (the command never runs). false: explicitly allowed. Unset: follows allowManagedHooksOnly — an org that restricts hook execution to managed settings gets command sources disabled too. Only honored from managed settings.
+     */
+    disableCommandPluginSources?: boolean;
     /**
      * When true (and set in managed settings), rejects the --plugin-dir, --plugin-url, --agents, and non-sdk --mcp-config CLI flags at startup. Closes the CLI-flag bypass of strictKnownMarketplaces. Pair with allowedMcpServers for per-server MCP control; this setting does not gate other MCP entry points (SDK setMcpServers, claude mcp add, .mcp.json). Also blocks surfaces that spawn the CLI with these flags internally (see settings documentation). Only honored from managed settings; ignored in user/project/local settings.
      */