@anthropic-ai/claude-agent-sdk 0.3.258 → 0.3.259

package/manifest.json

@@ -1,53 +1,52 @@
 {
-  "version": "2.1.258",
+  "version": "2.1.259",
   "manifestSignatureEnforcement": "flag",
-  "commit": "b3cd543a1f6fcdf4d8fabc0f5e5538d2ee7f38e1",
-  "buildDate": "2026-09-01T22:02:56Z",
+  "commit": "9b549c8d1c72e407ea9d3af3b9d5e50da794ec4d",
+  "buildDate": "2026-09-02T20:40:41Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "b63136194160791c27cfa7b0403060d85eb0752991625fde8c09f9acacb17c78",
-      "size": 199027600
+      "checksum": "884baa38fe1a624be25c4a91568bf5a08b5cf4e7d7acf29b7760e3525d964898",
+      "size": 200225968
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "c857db5cd712865623bd61e806cf3f7e8e279c9e5c7c0af5eca06ca6717fc7fb",
-      "size": 207778640
+      "checksum": "af8741cff0d3fb5c4b893c7cb3613bd21b28fa61cca45469d60b8e5e161eb9d8",
+      "size": 209000528
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "43dc490af55262edcb3e9b1cb315de22cc09ccb08bd52a4c39bc5eabaa63100f",
-      "size": 215014736
+      "checksum": "c6ff03c389ccdeae0f19e9dc32488eeba61fbef4796f531dbfba6c00f45040d0",
+      "size": 216194384
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "704f1334ac65d3e89e1c6c1d7663293ad786a6166afdb71b5075337df630f976",
-      "size": 215473560
+      "checksum": "f7dd62ae415378018cd21dd950eb3bac174ab085830304d3b8b098146bfd47b6",
+      "size": 216677784
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "d3bef6ba403fe3efba684fa93e1bb26bc7a08c054bd516639d54e77c77bb9821",
-      "size": 207894168
+      "checksum": "2203a17d0dddf7c5afece2d948d60d20fdef4f227ffc0c1c1ed17ce6221fa65b",
+      "size": 209073816
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "e74a226cf174d911664aff982486c55ca770d9c00007e52e86b13d10bae72af3",
-      "size": 209493960
+      "checksum": "1a595699211501087e8fb31952254d03a13ebb62a3e45f95990f15138eec6d70",
+      "size": 210702280
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "22f5f3a44093e14c75a4d1c8ce25c730b21dd634318fbe3268e9057d12b17c41",
-      "size": 218507936
+      "checksum": "85429000ec9b80082613e9ecd2e0d3b2276c9d5b22a681936575d2c4c2f342ed",
+      "size": 219715232
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "42675c431b6014ad7243fea0ed0e371045dedc89d94aac81a9a0f528e644ed97",
-      "size": 209548960
+      "checksum": "5d964b5bc68c1a4cd618a6f992ae56266cb34e68ae2c4aed9aa0ed68247dd218",
+      "size": 210756256
     }
   },
   "sdkCompat": {
     "testedWrapperVersions": [
-      "0.3.217",
       "0.3.218",
       "0.3.219",
       "0.3.220",

package/manifest.zst.json

@@ -1,61 +1,60 @@
 {
-  "version": "2.1.258",
+  "version": "2.1.259",
   "manifestSignatureEnforcement": "flag",
-  "commit": "b3cd543a1f6fcdf4d8fabc0f5e5538d2ee7f38e1",
-  "buildDate": "2026-09-01T22:04:05Z",
+  "commit": "9b549c8d1c72e407ea9d3af3b9d5e50da794ec4d",
+  "buildDate": "2026-09-02T20:41:43Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "ee83f6743e0e5f60ec1456ea813851c625051241f7bc55d607faafe44cf4bc82",
-      "size": 65811873,
+      "checksum": "e2afc0237a4ee7213730b3cf579a51f1c1a2b627b0f2d615ac3478433c4f9b9d",
+      "size": 66314944,
       "bundle": {
-        "checksum": "412f0b36da7cff5b20e7d856c939b449449583ee0971e9217c54972d1dfb4df3",
-        "size": 65814874
+        "checksum": "9a73fbc4c23cc04ba3ac0280cd6b7bf3941cd039099fad713be75b0010c7fc8b",
+        "size": 66313806
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "160aa9a06afcb80c293ecd4e42ea62adb67e471bed6b9a813504f26b96978034",
-      "size": 69876596,
+      "checksum": "bec7b01d0fccc8902b850cd9cf655024d0a484306e4da2104fb1bee6fb5334da",
+      "size": 70374909,
       "bundle": {
-        "checksum": "575203804ea01ddd3c12226c7c9cdcd068f1d039c732e22916297d438944510c",
-        "size": 69878203
+        "checksum": "ad45869201a4e81c882d7251c676a74a539d7378beeaaf13be044f4fa7d5397c",
+        "size": 70378257
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "31768a9f65e58e48a3cacf7fce069bb6d7bd707cdb49874af2cb19b9d05af671",
-      "size": 75035372
+      "checksum": "75b8227d2735398754aacc875866fee533e673d54199a16a7e5424f09feb21ad",
+      "size": 75526532
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "88207a58aee5a82e47db834ce81111200ad8fae9ea9abe2ff1ff9773d6a2100a",
-      "size": 75670149
+      "checksum": "3623df24e9be0ae1a92eb1103d11cdf44d04f6b589200952ce8e6853de8aa845",
+      "size": 76150824
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "6658622d769ad18dfbc1e70ea0056e34e88e258b15769e9c63c6c444cb83625a",
-      "size": 73516216
+      "checksum": "fcd70a9db4aaea51ff721fd0638faf9dc0b45f6e4d4489280801c4870b4bc642",
+      "size": 73995724
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "d357e596364fb922923e5db2b3877d3d7ba4a1b9d2f44f44879efa103bf459a0",
-      "size": 74188445
+      "checksum": "7afb1ee29124e2884226215c85cfcde486da6fd31dc999810dffe8e9d8cda37d",
+      "size": 74670388
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "94c7203fbeaa42f67dba3e7aabc544b1356dcec76bf830693948e99f4e4f21bc",
-      "size": 78074015
+      "checksum": "ae95350b7235bd1fc1fba12ca6b296205b505c4990af607ac18424746ad4ce37",
+      "size": 78555005
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "28eb7de6beb1adc3bc628426eada6aabd9592d42b66174cc419f64cb208f0127",
-      "size": 74810598
+      "checksum": "479df3648b599f4918d3305f909487103a4819cad574d14ef30441a8e48aec4f",
+      "size": 75294093
     }
   },
   "sdkCompat": {
     "testedWrapperVersions": [
-      "0.3.217",
       "0.3.218",
       "0.3.219",
       "0.3.220",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anthropic-ai/claude-agent-sdk",
-  "version": "0.3.258",
+  "version": "0.3.259",
   "main": "sdk.mjs",
   "types": "sdk.d.ts",
   "exports": {
@@ -57,14 +57,14 @@
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
-    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.258",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.258",
-    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.258",
-    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.258",
-    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.258",
-    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.258",
-    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.258",
-    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.258"
+    "@anthropic-ai/claude-agent-sdk-linux-x64": "0.3.259",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64": "0.3.259",
+    "@anthropic-ai/claude-agent-sdk-linux-x64-musl": "0.3.259",
+    "@anthropic-ai/claude-agent-sdk-linux-arm64-musl": "0.3.259",
+    "@anthropic-ai/claude-agent-sdk-darwin-x64": "0.3.259",
+    "@anthropic-ai/claude-agent-sdk-darwin-arm64": "0.3.259",
+    "@anthropic-ai/claude-agent-sdk-win32-x64": "0.3.259",
+    "@anthropic-ai/claude-agent-sdk-win32-arm64": "0.3.259"
   },
   "files": [
     "sdk.mjs",
@@ -80,5 +80,5 @@
     "manifest.json",
     "manifest.zst.json"
   ],
-  "claudeCodeVersion": "2.1.258"
+  "claudeCodeVersion": "2.1.259"
 }

package/sdk-tools.d.ts

@@ -443,6 +443,8 @@ export type ArtifactOutput =
         read?: string;
       };
       warnings?: string[];
+      publishesRemaining?: number;
+      publishesResetAt?: number;
       contract?: string;
       updated?: boolean;
       audience?: string;
@@ -2904,7 +2906,7 @@ export interface ProposeSkillsInput {
            */
           target?: string;
           /**
-           * One line saying when to use this skill. Shown on the review card and saved as the skill's description, which is what decides when the skill is used; for an improvement, restate or update the existing skill's description.
+           * One short sentence saying when to use this skill: aim for under 200 characters, never more than 1024. Shown on the review card and saved as the skill's description, which is what decides when the skill is used. For an improvement, reuse the existing skill's description unless the change alters when the skill applies.
            */
           description: string;
           /**
@@ -2929,7 +2931,7 @@ export interface ProposeSkillsInput {
            */
           target?: string;
           /**
-           * One line saying when to use this skill. Shown on the review card and saved as the skill's description, which is what decides when the skill is used; for an improvement, restate or update the existing skill's description.
+           * One short sentence saying when to use this skill: aim for under 200 characters, never more than 1024. Shown on the review card and saved as the skill's description, which is what decides when the skill is used. For an improvement, reuse the existing skill's description unless the change alters when the skill applies.
            */
           description: string;
           /**
@@ -2952,7 +2954,7 @@ export interface ProposeSkillsInput {
            */
           target?: string;
           /**
-           * One line saying when to use this skill. Shown on the review card and saved as the skill's description, which is what decides when the skill is used; for an improvement, restate or update the existing skill's description.
+           * One short sentence saying when to use this skill: aim for under 200 characters, never more than 1024. Shown on the review card and saved as the skill's description, which is what decides when the skill is used. For an improvement, reuse the existing skill's description unless the change alters when the skill applies.
            */
           description: string;
           /**
@@ -2977,7 +2979,7 @@ export interface ProposeSkillsInput {
            */
           target?: string;
           /**
-           * One line saying when to use this skill. Shown on the review card and saved as the skill's description, which is what decides when the skill is used; for an improvement, restate or update the existing skill's description.
+           * One short sentence saying when to use this skill: aim for under 200 characters, never more than 1024. Shown on the review card and saved as the skill's description, which is what decides when the skill is used. For an improvement, reuse the existing skill's description unless the change alters when the skill applies.
            */
           description: string;
           /**
@@ -3000,7 +3002,7 @@ export interface ProposeSkillsInput {
            */
           target?: string;
           /**
-           * One line saying when to use this skill. Shown on the review card and saved as the skill's description, which is what decides when the skill is used; for an improvement, restate or update the existing skill's description.
+           * One short sentence saying when to use this skill: aim for under 200 characters, never more than 1024. Shown on the review card and saved as the skill's description, which is what decides when the skill is used. For an improvement, reuse the existing skill's description unless the change alters when the skill applies.
            */
           description: string;
           /**
@@ -3023,7 +3025,7 @@ export interface ProposeSkillsInput {
            */
           target?: string;
           /**
-           * One line saying when to use this skill. Shown on the review card and saved as the skill's description, which is what decides when the skill is used; for an improvement, restate or update the existing skill's description.
+           * One short sentence saying when to use this skill: aim for under 200 characters, never more than 1024. Shown on the review card and saved as the skill's description, which is what decides when the skill is used. For an improvement, reuse the existing skill's description unless the change alters when the skill applies.
            */
           description: string;
           /**

package/sdk.d.ts

@@ -1848,6 +1848,15 @@ export declare type Options = {
      * will be routed through this MCP tool instead of the default handler.
      */
     permissionPromptToolName?: string;
+    /**
+     * Who answers permission prompts. `'host'` (default): this process, through
+     * `canUseTool` or `permissionPromptToolName`. `'none'`: nobody — the
+     * permission mode (including auto mode's classifier), rules and hooks still
+     * decide, and anything that would otherwise prompt is denied immediately
+     * with a message telling Claude the session has no approval surface;
+     * `canUseTool` is never called.
+     */
+    permissionPrompts?: 'host' | 'none';
     /**
      * Load plugins for this session. Plugins provide custom commands, agents,
      * skills, and hooks that extend Claude Code's capabilities.
@@ -3283,6 +3292,10 @@ export declare type SDKAssistantMessage = {
      * Client uuid of the user message that triggered this turn (submitMessage options.uuid), stamped on the turn's FIRST reply frame only — the first assistant message in complete-message mode; with --include-partial-messages the stamp normally rides the first non-ping stream event instead (see SDKPartialAssistantMessage), and a turn that produces no stream events still stamps its first assistant message — so a consumer can bind the reply to the send it answers without waiting for the result. Wrapper-level sibling — never inside `message.content` — so it is not replayed to the model. Absent on every later frame of the turn, on subagent frames (parent_tool_use_id set), on synthetic/scheduled (meta) turns, on turns without a client uuid, and from older producers.
      */
     user_message_uuid?: string;
+    /**
+     * Client uuids of every user message whose prompt this turn has consumed so far, in consumption order — all members of a prompt batch the host merged into this one turn (several messages sent close together run as one turn whose user_message_uuid is the LAST member's), so a consumer that sent any of them can bind this reply to its own send by finding its uuid anywhere in the list. Always contains user_message_uuid; at most 64 entries. Present exactly when user_message_uuid is, on the same first reply frame only; absent from older producers (fall back to user_message_uuid).
+     */
+    user_message_uuids?: string[];
     /**
      * This turn continued the preceding truncated assistant turn inside its trailing signed thinking block (max-output-tokens recovery). Its thinking signatures are cumulative over that preceding thinking-only turn, so a history replayed through the bridge must carry this flag back for the normalizer to keep the run's prefix on the wire. Wrapper-level sibling — never inside `message.content` — so it is not replayed to the model.
      */
@@ -4759,6 +4772,10 @@ export declare type SDKPartialAssistantMessage = {
      * Client uuid of the user message that triggered this turn (submitMessage options.uuid), stamped on the turn's FIRST non-ping stream event only (the frame that triggers the turn's initial ack) so a consumer can bind the reply stream to the send it answers without waiting for the result. Absent on every later stream event of the turn, on synthetic/scheduled (meta) turns, on turns without a client uuid, and from older producers.
      */
     user_message_uuid?: string;
+    /**
+     * Client uuids of every user message whose prompt this turn has consumed so far, in consumption order — all members of a prompt batch the host merged into this one turn (several messages sent close together run as one turn whose user_message_uuid is the LAST member's), so a consumer that sent any of them can bind this reply to its own send by finding its uuid anywhere in the list. Always contains user_message_uuid; at most 64 entries. Present exactly when user_message_uuid is, on the same first non-ping stream event only; absent from older producers (fall back to user_message_uuid).
+     */
+    user_message_uuids?: string[];
 };
 
 export declare type SDKPermissionDenial = {
@@ -4903,6 +4920,10 @@ export declare type SDKResultError = {
      * Client uuid of the user message that triggered this turn (submitMessage options.uuid), echoed back so a consumer can link this error result to the send it answers — the same join key the success variant echoes, carried alone (error turns have no request_sent_wall_ms to report). A delivery-failure result from the remote-session client echoes the failed send's queue key, which is client-minted when the host sent no uuid of its own. Absent on synthetic/scheduled (meta) turns, on turns without a client uuid, on session-scoped failures with no single triggering send (a crashed worker's zeroed result), and from older producers.
      */
     user_message_uuid?: string;
+    /**
+     * Client uuids of every user message whose prompt this turn consumed, in consumption order — all members of a prompt batch the host merged into this one turn (several messages sent close together run as one turn whose user_message_uuid is the LAST member's), then any queued user message folded into the running turn between tool rounds, once taken off the queue — so a consumer that sent any of them can bind this result to its own send by finding its uuid anywhere in the list. Always contains user_message_uuid; at most 64 entries; can be longer than the list on the turn's first reply frame. Present when a headless turn that ran echoes user_message_uuid; absent on delivery-failure and zeroed results and from older producers (fall back to user_message_uuid).
+     */
+    user_message_uuids?: string[];
     terminal_reason?: TerminalReason;
     fast_mode_state?: FastModeState;
     fast_mode_disabled_reason?: FastModeDisabledReason;
@@ -4925,6 +4946,7 @@ export declare type SDKResultSuccess = {
     ttft_stream_ms?: number;
     time_to_request_ms?: number;
     user_message_uuid?: string;
+    user_message_uuids?: string[];
     request_sent_wall_ms?: number;
     time_to_request_from_spawn_ms?: number;
     warm_spare_claimed?: boolean;
@@ -5158,6 +5180,9 @@ export declare type SDKTaskProgressMessage = {
         duration_ms: number;
     };
     last_tool_name?: string;
+    /**
+     * A one-line status for the task's row. For a local_agent task it is the model-generated progress summary (only when the agentProgressSummaries option is on); for a backgrounded mcp_task it is the MCP server's own bounded status message, emitted once per change without any option. Render it when present regardless of task type.
+     */
     summary?: string;
 
     uuid: UUID;
@@ -5888,7 +5913,15 @@ export declare interface Settings {
      */
     disableBundledSkills?: boolean;
     /**
-     * Enterprise allowlist of MCP servers that can be used. Applies to all scopes including enterprise servers from managed-mcp.json. If undefined, all servers are allowed. If empty array, no servers are allowed. Denylist takes precedence - if a server is on both lists, it is denied.
+     * MCP servers the organization provides to every user, keyed by server name, each with the .mcp.json entry shape; only "http" and "sse" servers are accepted (nothing that names a program to run, no ${VAR} references). Honored from managed settings only; users cannot remove them, deniedMcpServers still applies, and they need no allowedMcpServers entry. Not read in Claude Desktop's Code tab on a third-party deployment or in Cowork sessions, where Claude Desktop supplies and locks the session's MCP servers itself.
+     */
+    managedMcpServers?: {
+        [k: string]: {
+            [k: string]: unknown;
+        };
+    };
+    /**
+     * Enterprise allowlist of the MCP servers users may use. Governs servers users add (user, project and local config, --mcp-config, agent frontmatter, plugins, claude.ai connectors); servers the organization itself delivers (managedMcpServers, and managed-mcp.json entries that use no ${VAR} expansion) are allowed without being listed; a managed-mcp.json entry that uses ${VAR} expansion is still checked against this list. If undefined, all servers are allowed. If empty array, users can use no servers of their own. Denylist takes precedence - if a server is on both lists, it is denied.
      */
     allowedMcpServers?: {
         /**
@@ -7481,7 +7514,7 @@ export declare interface Settings {
      */
     parentSettingsBehavior?: 'first-wins' | 'merge';
     /**
-     * Controls how the managed settings sources compose. "first-wins" (default): the highest-priority source present (server-managed > MDM (managed plist / HKLM) > managed-settings.json) is the managed tier alone. "merge": every present source deep-merges with fixed precedence server-managed > MDM > managed-settings.json — scalars take the highest source's value and arrays union, except fallbackModel, the restriction allowlists allowedMcpServers, availableModels, strictKnownMarketplaces and allowedChannelPlugins, and sandbox.credentials.awsPairs and sandbox.ripgrep (the highest source that sets one owns it whole) and the auth pins forceLoginOrgUUID, forceLoginMethod and forceLoginGatewayUrl (highest source only). Honored only from the highest-priority source present; enable it only when every lower source is admin-controlled, since lower sources then contribute entries such as permissions.allow. HKCU and --managed-settings never take part in the merge.
+     * Controls how the managed settings sources compose. "first-wins" (default): the highest-priority source present (server-managed > MDM (managed plist / HKLM) > managed-settings.json) is the managed tier alone. "merge": every present source deep-merges with fixed precedence server-managed > MDM > managed-settings.json — scalars take the highest source's value and arrays union, except fallbackModel, the restriction allowlists allowedMcpServers, availableModels, strictKnownMarketplaces and allowedChannelPlugins, and sandbox.credentials.awsPairs and sandbox.ripgrep (the highest source that sets one owns it whole), managedMcpServers (server names union; a name set by two sources takes the higher source's whole entry) and the auth pins forceLoginOrgUUID, forceLoginMethod and forceLoginGatewayUrl (highest source only). Honored only from the highest-priority source present; enable it only when every lower source is admin-controlled, since lower sources then contribute entries such as permissions.allow. HKCU and --managed-settings never take part in the merge.
      */
     managedSourcesBehavior?: 'first-wins' | 'merge';
     /**
@@ -7993,6 +8026,7 @@ export declare interface Settings {
      * Disable auto mode
      */
     disableAutoMode?: 'disable';
+
     /**
      * SSH connection configurations for remote environments. Typically set in managed settings by enterprise administrators to pre-configure SSH connections for team members.
      */