@anthropic-ai/sdk 0.102.0 → 0.104.0

package/src/resources/beta/sessions/sessions.ts

@@ -18,6 +18,7 @@ import {
   BetaManagedAgentsBase64DocumentSource,
   BetaManagedAgentsBase64ImageSource,
   BetaManagedAgentsBillingError,
+  BetaManagedAgentsCredentialHostUnreachableError,
   BetaManagedAgentsDocumentBlock,
   BetaManagedAgentsEventParams,
   BetaManagedAgentsFileDocumentSource,
@@ -61,6 +62,7 @@ import {
   BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent,
   BetaManagedAgentsSpanOutcomeEvaluationStartEvent,
   BetaManagedAgentsStreamSessionEvents,
+  BetaManagedAgentsSystemMessageEventParams,
   BetaManagedAgentsTextBlock,
   BetaManagedAgentsTextRubric,
   BetaManagedAgentsTextRubricParams,
@@ -555,6 +557,12 @@ export interface BetaManagedAgentsSession {
    * supplied.
    */
   vault_ids: Array<string>;
+
+  /**
+   * Deployment ID when the session was created from a deployment reference. Null
+   * otherwise.
+   */
+  deployment_id?: string | null;
 }
 
 /**
@@ -710,6 +718,41 @@ export interface BetaManagedAgentsSessionUsage {
   output_tokens?: number;
 }
 
+/**
+ * Regular text content.
+ */
+export interface BetaManagedAgentsSystemContentBlock {
+  /**
+   * The text content.
+   */
+  text: string;
+
+  type: 'text';
+}
+
+/**
+ * A mid-conversation system message event. Carries system-role content that is
+ * appended to the session as a `role: "system"` turn.
+ */
+export interface BetaManagedAgentsSystemMessageEvent {
+  /**
+   * Unique identifier for this event.
+   */
+  id: string;
+
+  /**
+   * System content blocks. Text-only.
+   */
+  content: Array<BetaManagedAgentsSystemContentBlock>;
+
+  type: 'system.message';
+
+  /**
+   * A timestamp in RFC 3339 format
+   */
+  processed_at?: string | null;
+}
+
 /**
  * Event sent by the client providing the result of an agent-toolset tool
  * execution. Only valid on `self_hosted` environments, where sandbox-routed tools
@@ -875,6 +918,11 @@ export interface SessionListParams extends PageCursorParams {
    */
   'created_at[lte]'?: string;
 
+  /**
+   * Query param: Filter sessions created by this deployment ID.
+   */
+  deployment_id?: string;
+
   /**
    * Query param: When true, includes archived sessions. Default: false (exclude
    * archived).
@@ -944,6 +992,8 @@ export declare namespace Sessions {
     type BetaManagedAgentsSessionStats as BetaManagedAgentsSessionStats,
     type BetaManagedAgentsSessionUpdatedEvent as BetaManagedAgentsSessionUpdatedEvent,
     type BetaManagedAgentsSessionUsage as BetaManagedAgentsSessionUsage,
+    type BetaManagedAgentsSystemContentBlock as BetaManagedAgentsSystemContentBlock,
+    type BetaManagedAgentsSystemMessageEvent as BetaManagedAgentsSystemMessageEvent,
     type BetaManagedAgentsUserToolResultEvent as BetaManagedAgentsUserToolResultEvent,
     type BetaManagedAgentsSessionsPageCursor as BetaManagedAgentsSessionsPageCursor,
     type SessionCreateParams as SessionCreateParams,
@@ -969,6 +1019,7 @@ export declare namespace Sessions {
     type BetaManagedAgentsBase64DocumentSource as BetaManagedAgentsBase64DocumentSource,
     type BetaManagedAgentsBase64ImageSource as BetaManagedAgentsBase64ImageSource,
     type BetaManagedAgentsBillingError as BetaManagedAgentsBillingError,
+    type BetaManagedAgentsCredentialHostUnreachableError as BetaManagedAgentsCredentialHostUnreachableError,
     type BetaManagedAgentsDocumentBlock as BetaManagedAgentsDocumentBlock,
     type BetaManagedAgentsEventParams as BetaManagedAgentsEventParams,
     type BetaManagedAgentsFileDocumentSource as BetaManagedAgentsFileDocumentSource,
@@ -1011,6 +1062,7 @@ export declare namespace Sessions {
     type BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent as BetaManagedAgentsSpanOutcomeEvaluationOngoingEvent,
     type BetaManagedAgentsSpanOutcomeEvaluationStartEvent as BetaManagedAgentsSpanOutcomeEvaluationStartEvent,
     type BetaManagedAgentsStreamSessionEvents as BetaManagedAgentsStreamSessionEvents,
+    type BetaManagedAgentsSystemMessageEventParams as BetaManagedAgentsSystemMessageEventParams,
     type BetaManagedAgentsTextBlock as BetaManagedAgentsTextBlock,
     type BetaManagedAgentsTextRubric as BetaManagedAgentsTextRubric,
     type BetaManagedAgentsTextRubricParams as BetaManagedAgentsTextRubricParams,

package/src/resources/beta/sessions/threads/threads.ts

@@ -255,7 +255,8 @@ export type BetaManagedAgentsStreamSessionThreadEvents =
   | EventsAPI.BetaManagedAgentsSessionThreadStatusTerminatedEvent
   | SessionsAPI.BetaManagedAgentsUserToolResultEvent
   | EventsAPI.BetaManagedAgentsSessionThreadStatusRescheduledEvent
-  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent;
+  | SessionsAPI.BetaManagedAgentsSessionUpdatedEvent
+  | SessionsAPI.BetaManagedAgentsSystemMessageEvent;
 
 export interface ThreadRetrieveParams {
   /**

package/src/resources/beta/vaults/credentials.ts

@@ -237,7 +237,10 @@ export interface BetaManagedAgentsCredential {
   /**
    * Authentication details for a credential.
    */
-  auth: BetaManagedAgentsMCPOAuthAuthResponse | BetaManagedAgentsStaticBearerAuthResponse;
+  auth:
+    | BetaManagedAgentsMCPOAuthAuthResponse
+    | BetaManagedAgentsStaticBearerAuthResponse
+    | BetaManagedAgentsEnvironmentVariableAuthResponse;
 
   /**
    * A timestamp in RFC 3339 format
@@ -267,6 +270,15 @@ export interface BetaManagedAgentsCredential {
   display_name?: string | null;
 }
 
+/**
+ * Substitute the secret on any host the session's Environment network policy
+ * permits egress to. The Environment's network policy is the only boundary on
+ * where the secret can reach.
+ */
+export type BetaManagedAgentsCredentialNetworkingParams =
+  | BetaManagedAgentsUnrestrictedCredentialNetworkingParams
+  | BetaManagedAgentsLimitedCredentialNetworkingParams;
+
 /**
  * Result of live-probing a credential against its configured MCP server.
  */
@@ -326,6 +338,94 @@ export interface BetaManagedAgentsDeletedCredential {
   type: 'vault_credential_deleted';
 }
 
+/**
+ * Environment variable credential details. The secret value is never returned.
+ */
+export interface BetaManagedAgentsEnvironmentVariableAuthResponse {
+  /**
+   * Outbound hosts the secret value is substituted on.
+   */
+  networking:
+    | BetaManagedAgentsUnrestrictedCredentialNetworkingResponse
+    | BetaManagedAgentsLimitedCredentialNetworkingResponse;
+
+  /**
+   * Name of the environment variable.
+   */
+  secret_name: string;
+
+  type: 'environment_variable';
+}
+
+/**
+ * Parameters for creating an environment variable credential.
+ */
+export interface BetaManagedAgentsEnvironmentVariableCreateParams {
+  /**
+   * Outbound hosts the secret value is substituted on.
+   */
+  networking: BetaManagedAgentsCredentialNetworkingParams;
+
+  /**
+   * Name of the environment variable. Immutable after create.
+   */
+  secret_name: string;
+
+  /**
+   * Secret value. Write-only; never returned in responses.
+   */
+  secret_value: string;
+
+  type: 'environment_variable';
+}
+
+/**
+ * Parameters for updating an environment variable credential. `secret_name` is
+ * immutable.
+ */
+export interface BetaManagedAgentsEnvironmentVariableUpdateParams {
+  type: 'environment_variable';
+
+  /**
+   * Updated networking scope. Full replacement.
+   */
+  networking?: BetaManagedAgentsCredentialNetworkingParams | null;
+
+  /**
+   * Updated secret value.
+   */
+  secret_value?: string | null;
+}
+
+/**
+ * Substitute the secret only on requests to the listed hosts.
+ */
+export interface BetaManagedAgentsLimitedCredentialNetworkingParams {
+  /**
+   * Hostnames on which the secret will be substituted. Each entry is a bare hostname
+   * (`api.example.com`), an IPv4 address (`192.0.2.1`), or a `*.`-prefixed wildcard
+   * (`*.example.com`). URLs, ports, paths, and IPv6 addresses are not accepted. At
+   * most 16 entries.
+   */
+  allowed_hosts: Array<string>;
+
+  type: 'limited';
+}
+
+/**
+ * The secret is substituted only on requests to the listed hosts.
+ */
+export interface BetaManagedAgentsLimitedCredentialNetworkingResponse {
+  /**
+   * Hostnames on which the secret will be substituted. An entry matches the request
+   * host exactly; a `*.`-prefixed entry matches any subdomain of the named domain
+   * but not the domain itself.
+   */
+  allowed_hosts: Array<string>;
+
+  type: 'limited';
+}
+
 /**
  * OAuth credential details for an MCP server.
  */
@@ -664,11 +764,31 @@ export interface BetaManagedAgentsTokenEndpointAuthPostUpdateParam {
   client_secret?: string | null;
 }
 
+/**
+ * Substitute the secret on any host the session's Environment network policy
+ * permits egress to. The Environment's network policy is the only boundary on
+ * where the secret can reach.
+ */
+export interface BetaManagedAgentsUnrestrictedCredentialNetworkingParams {
+  type: 'unrestricted';
+}
+
+/**
+ * The secret is substituted on any host the session's Environment network policy
+ * permits egress to.
+ */
+export interface BetaManagedAgentsUnrestrictedCredentialNetworkingResponse {
+  type: 'unrestricted';
+}
+
 export interface CredentialCreateParams {
   /**
    * Body param: Authentication details for creating a credential.
    */
-  auth: BetaManagedAgentsMCPOAuthCreateParams | BetaManagedAgentsStaticBearerCreateParams;
+  auth:
+    | BetaManagedAgentsMCPOAuthCreateParams
+    | BetaManagedAgentsStaticBearerCreateParams
+    | BetaManagedAgentsEnvironmentVariableCreateParams;
 
   /**
    * Body param: Human-readable name for the credential. Up to 255 characters.
@@ -708,7 +828,10 @@ export interface CredentialUpdateParams {
   /**
    * Body param: Updated authentication details for a credential.
    */
-  auth?: BetaManagedAgentsMCPOAuthUpdateParams | BetaManagedAgentsStaticBearerUpdateParams;
+  auth?:
+    | BetaManagedAgentsMCPOAuthUpdateParams
+    | BetaManagedAgentsStaticBearerUpdateParams
+    | BetaManagedAgentsEnvironmentVariableUpdateParams;
 
   /**
    * Body param: Updated human-readable name for the credential. 1-255 characters.
@@ -778,9 +901,15 @@ export interface CredentialMCPOAuthValidateParams {
 export declare namespace Credentials {
   export {
     type BetaManagedAgentsCredential as BetaManagedAgentsCredential,
+    type BetaManagedAgentsCredentialNetworkingParams as BetaManagedAgentsCredentialNetworkingParams,
     type BetaManagedAgentsCredentialValidation as BetaManagedAgentsCredentialValidation,
     type BetaManagedAgentsCredentialValidationStatus as BetaManagedAgentsCredentialValidationStatus,
     type BetaManagedAgentsDeletedCredential as BetaManagedAgentsDeletedCredential,
+    type BetaManagedAgentsEnvironmentVariableAuthResponse as BetaManagedAgentsEnvironmentVariableAuthResponse,
+    type BetaManagedAgentsEnvironmentVariableCreateParams as BetaManagedAgentsEnvironmentVariableCreateParams,
+    type BetaManagedAgentsEnvironmentVariableUpdateParams as BetaManagedAgentsEnvironmentVariableUpdateParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingParams as BetaManagedAgentsLimitedCredentialNetworkingParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingResponse as BetaManagedAgentsLimitedCredentialNetworkingResponse,
     type BetaManagedAgentsMCPOAuthAuthResponse as BetaManagedAgentsMCPOAuthAuthResponse,
     type BetaManagedAgentsMCPOAuthCreateParams as BetaManagedAgentsMCPOAuthCreateParams,
     type BetaManagedAgentsMCPOAuthRefreshParams as BetaManagedAgentsMCPOAuthRefreshParams,
@@ -801,6 +930,8 @@ export declare namespace Credentials {
     type BetaManagedAgentsTokenEndpointAuthPostParam as BetaManagedAgentsTokenEndpointAuthPostParam,
     type BetaManagedAgentsTokenEndpointAuthPostResponse as BetaManagedAgentsTokenEndpointAuthPostResponse,
     type BetaManagedAgentsTokenEndpointAuthPostUpdateParam as BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingParams as BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse as BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
     type BetaManagedAgentsCredentialsPageCursor as BetaManagedAgentsCredentialsPageCursor,
     type CredentialCreateParams as CredentialCreateParams,
     type CredentialRetrieveParams as CredentialRetrieveParams,

package/src/resources/beta/vaults/index.ts

@@ -3,9 +3,15 @@
 export {
   Credentials,
   type BetaManagedAgentsCredential,
+  type BetaManagedAgentsCredentialNetworkingParams,
   type BetaManagedAgentsCredentialValidation,
   type BetaManagedAgentsCredentialValidationStatus,
   type BetaManagedAgentsDeletedCredential,
+  type BetaManagedAgentsEnvironmentVariableAuthResponse,
+  type BetaManagedAgentsEnvironmentVariableCreateParams,
+  type BetaManagedAgentsEnvironmentVariableUpdateParams,
+  type BetaManagedAgentsLimitedCredentialNetworkingParams,
+  type BetaManagedAgentsLimitedCredentialNetworkingResponse,
   type BetaManagedAgentsMCPOAuthAuthResponse,
   type BetaManagedAgentsMCPOAuthCreateParams,
   type BetaManagedAgentsMCPOAuthRefreshParams,
@@ -26,6 +32,8 @@ export {
   type BetaManagedAgentsTokenEndpointAuthPostParam,
   type BetaManagedAgentsTokenEndpointAuthPostResponse,
   type BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+  type BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+  type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
   type CredentialCreateParams,
   type CredentialRetrieveParams,
   type CredentialUpdateParams,

package/src/resources/beta/vaults/vaults.ts

@@ -5,10 +5,16 @@ import * as BetaAPI from '../beta';
 import * as CredentialsAPI from './credentials';
 import {
   BetaManagedAgentsCredential,
+  BetaManagedAgentsCredentialNetworkingParams,
   BetaManagedAgentsCredentialValidation,
   BetaManagedAgentsCredentialValidationStatus,
   BetaManagedAgentsCredentialsPageCursor,
   BetaManagedAgentsDeletedCredential,
+  BetaManagedAgentsEnvironmentVariableAuthResponse,
+  BetaManagedAgentsEnvironmentVariableCreateParams,
+  BetaManagedAgentsEnvironmentVariableUpdateParams,
+  BetaManagedAgentsLimitedCredentialNetworkingParams,
+  BetaManagedAgentsLimitedCredentialNetworkingResponse,
   BetaManagedAgentsMCPOAuthAuthResponse,
   BetaManagedAgentsMCPOAuthCreateParams,
   BetaManagedAgentsMCPOAuthRefreshParams,
@@ -29,6 +35,8 @@ import {
   BetaManagedAgentsTokenEndpointAuthPostParam,
   BetaManagedAgentsTokenEndpointAuthPostResponse,
   BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+  BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+  BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
   CredentialArchiveParams,
   CredentialCreateParams,
   CredentialDeleteParams,
@@ -340,9 +348,15 @@ export declare namespace Vaults {
   export {
     Credentials as Credentials,
     type BetaManagedAgentsCredential as BetaManagedAgentsCredential,
+    type BetaManagedAgentsCredentialNetworkingParams as BetaManagedAgentsCredentialNetworkingParams,
     type BetaManagedAgentsCredentialValidation as BetaManagedAgentsCredentialValidation,
     type BetaManagedAgentsCredentialValidationStatus as BetaManagedAgentsCredentialValidationStatus,
     type BetaManagedAgentsDeletedCredential as BetaManagedAgentsDeletedCredential,
+    type BetaManagedAgentsEnvironmentVariableAuthResponse as BetaManagedAgentsEnvironmentVariableAuthResponse,
+    type BetaManagedAgentsEnvironmentVariableCreateParams as BetaManagedAgentsEnvironmentVariableCreateParams,
+    type BetaManagedAgentsEnvironmentVariableUpdateParams as BetaManagedAgentsEnvironmentVariableUpdateParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingParams as BetaManagedAgentsLimitedCredentialNetworkingParams,
+    type BetaManagedAgentsLimitedCredentialNetworkingResponse as BetaManagedAgentsLimitedCredentialNetworkingResponse,
     type BetaManagedAgentsMCPOAuthAuthResponse as BetaManagedAgentsMCPOAuthAuthResponse,
     type BetaManagedAgentsMCPOAuthCreateParams as BetaManagedAgentsMCPOAuthCreateParams,
     type BetaManagedAgentsMCPOAuthRefreshParams as BetaManagedAgentsMCPOAuthRefreshParams,
@@ -363,6 +377,8 @@ export declare namespace Vaults {
     type BetaManagedAgentsTokenEndpointAuthPostParam as BetaManagedAgentsTokenEndpointAuthPostParam,
     type BetaManagedAgentsTokenEndpointAuthPostResponse as BetaManagedAgentsTokenEndpointAuthPostResponse,
     type BetaManagedAgentsTokenEndpointAuthPostUpdateParam as BetaManagedAgentsTokenEndpointAuthPostUpdateParam,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingParams as BetaManagedAgentsUnrestrictedCredentialNetworkingParams,
+    type BetaManagedAgentsUnrestrictedCredentialNetworkingResponse as BetaManagedAgentsUnrestrictedCredentialNetworkingResponse,
     type BetaManagedAgentsCredentialsPageCursor as BetaManagedAgentsCredentialsPageCursor,
     type CredentialCreateParams as CredentialCreateParams,
     type CredentialRetrieveParams as CredentialRetrieveParams,

package/src/resources/beta/webhooks.ts

@@ -225,6 +225,11 @@ export interface BetaWebhookSessionThreadCreatedEventData {
 
   organization_id: string;
 
+  /**
+   * ID of the session thread this event refers to.
+   */
+  session_thread_id: string;
+
   type: 'session.thread_created';
 
   workspace_id: string;
@@ -238,6 +243,11 @@ export interface BetaWebhookSessionThreadIdledEventData {
 
   organization_id: string;
 
+  /**
+   * ID of the session thread this event refers to.
+   */
+  session_thread_id: string;
+
   type: 'session.thread_idled';
 
   workspace_id: string;
@@ -251,6 +261,11 @@ export interface BetaWebhookSessionThreadTerminatedEventData {
 
   organization_id: string;
 
+  /**
+   * ID of the session thread this event refers to.
+   */
+  session_thread_id: string;
+
   type: 'session.thread_terminated';
 
   workspace_id: string;

package/src/resources/messages/messages.ts

@@ -1197,6 +1197,8 @@ export interface MidConversationSystemBlockParam {
  * details and options.
  */
 export type Model =
+  | 'claude-fable-5'
+  | 'claude-mythos-5'
   | 'claude-opus-4-8'
   | 'claude-opus-4-7'
   | 'claude-mythos-preview'
@@ -1265,6 +1267,7 @@ const DEPRECATED_MODELS: {
   'claude-sonnet-4-20250514': 'June 15th, 2026',
   'claude-opus-4-1': 'August 5th, 2026',
   'claude-opus-4-1-20250805': 'August 5th, 2026',
+  'claude-mythos-preview': 'June 30th, 2026',
 };
 
 const MODELS_TO_WARN_WITH_THINKING_ENABLED: Model[] = ['claude-mythos-preview', 'claude-opus-4-6'];
@@ -1404,7 +1407,7 @@ export interface RefusalStopDetails {
    *
    * `null` when the refusal doesn't map to a named category.
    */
-  category: 'cyber' | 'bio' | null;
+  category: 'cyber' | 'bio' | 'reasoning_extraction' | null;
 
   /**
    * Human-readable explanation of the refusal.

package/src/tools/agent-toolset/node.browser.ts

@@ -0,0 +1,90 @@
+/**
+ * Browser stub for `tools/agent-toolset/node`.
+ *
+ * The real module implements the `agent_toolset_20260401` tools on top of Node
+ * built-ins (`node:child_process`, `node:fs`, …), which browser bundlers cannot
+ * resolve. The `browser` field in `package.json` substitutes this stub in
+ * browser builds so the SDK bundles cleanly for web targets; Node runtimes and
+ * node-target bundles ignore the mapping and load the real implementation.
+ *
+ * Every value export here throws an {@link AnthropicError} when used — the
+ * agent toolset only works in Node.js or a Node-compatible runtime. Type
+ * exports are re-exported from the real module (erased at build time), so
+ * type-level usage is unaffected.
+ */
+
+import { AnthropicError } from '../../core/error';
+import type { Anthropic } from '../../client';
+import type { BetaRunnableTool } from '../../lib/tools/BetaRunnableTool';
+import type { AgentToolContext } from './node';
+
+export type { AgentToolContext } from './node';
+
+function nodeOnly(name: string): never {
+  throw new AnthropicError(`${name} requires Node.js or a Node-compatible runtime`);
+}
+
+export function setupSkills(_ctx: AgentToolContext): Promise<() => Promise<void>> {
+  return nodeOnly('setupSkills');
+}
+
+export function resolveSkillVersion(_client: Anthropic, _skillId: string, _version: string): Promise<string> {
+  return nodeOnly('resolveSkillVersion');
+}
+
+export function extractSkillArchive(_resp: Response, _dest: string): Promise<void> {
+  return nodeOnly('extractSkillArchive');
+}
+
+export function betaAgentToolset20260401(_ctx: AgentToolContext): BetaRunnableTool[] {
+  return nodeOnly('betaAgentToolset20260401');
+}
+
+export function resolvePath(_ctx: AgentToolContext, _p: string): Promise<string> {
+  return nodeOnly('resolvePath');
+}
+
+export class BashSession {
+  constructor(_dir: string, _env?: NodeJS.ProcessEnv) {
+    nodeOnly('BashSession');
+  }
+
+  get closed(): boolean {
+    return nodeOnly('BashSession');
+  }
+
+  exec(
+    _command: string,
+    _opts: { timeoutMs?: number; signal?: AbortSignal | null | undefined } = {},
+  ): Promise<{ output: string; exitCode: number }> {
+    return nodeOnly('BashSession');
+  }
+
+  close(): void {
+    nodeOnly('BashSession');
+  }
+}
+
+export function betaBashTool(_ctx: AgentToolContext): BetaRunnableTool {
+  return nodeOnly('betaBashTool');
+}
+
+export function betaReadTool(_ctx: AgentToolContext): BetaRunnableTool {
+  return nodeOnly('betaReadTool');
+}
+
+export function betaWriteTool(_ctx: AgentToolContext): BetaRunnableTool {
+  return nodeOnly('betaWriteTool');
+}
+
+export function betaEditTool(_ctx: AgentToolContext): BetaRunnableTool {
+  return nodeOnly('betaEditTool');
+}
+
+export function betaGlobTool(_ctx: AgentToolContext): BetaRunnableTool {
+  return nodeOnly('betaGlobTool');
+}
+
+export function betaGrepTool(_ctx: AgentToolContext): BetaRunnableTool {
+  return nodeOnly('betaGrepTool');
+}

package/src/tools/memory/node.browser.ts

@@ -0,0 +1,64 @@
+/**
+ * Browser stub for `tools/memory/node`.
+ *
+ * The real module's {@link BetaLocalFilesystemMemoryTool} is implemented on top
+ * of Node built-ins (`fs/promises`, `path`, `crypto`), which browser bundlers
+ * cannot resolve. The `browser` field in `package.json` substitutes this stub
+ * in browser builds; Node runtimes and node-target bundles ignore the mapping
+ * and load the real implementation.
+ *
+ * `betaMemoryTool` is runtime-agnostic and is re-exported for real here; only
+ * the filesystem-backed handlers throw.
+ */
+
+export { betaMemoryTool } from '../../helpers/beta/memory';
+export type { MemoryToolHandlers } from '../../helpers/beta/memory';
+
+import { AnthropicError } from '../../core/error';
+import type { MemoryToolHandlers } from '../../helpers/beta/memory';
+import type {
+  BetaMemoryTool20250818CreateCommand,
+  BetaMemoryTool20250818DeleteCommand,
+  BetaMemoryTool20250818InsertCommand,
+  BetaMemoryTool20250818RenameCommand,
+  BetaMemoryTool20250818StrReplaceCommand,
+  BetaMemoryTool20250818ViewCommand,
+} from '../../resources/beta';
+
+function nodeOnly(name: string): never {
+  throw new AnthropicError(`${name} requires Node.js or a Node-compatible runtime`);
+}
+
+export class BetaLocalFilesystemMemoryTool implements MemoryToolHandlers {
+  constructor(_basePath: string = './memory') {
+    nodeOnly('BetaLocalFilesystemMemoryTool');
+  }
+
+  static init(_basePath: string = './memory'): Promise<BetaLocalFilesystemMemoryTool> {
+    return nodeOnly('BetaLocalFilesystemMemoryTool.init');
+  }
+
+  view(_command: BetaMemoryTool20250818ViewCommand): Promise<string> {
+    return nodeOnly('BetaLocalFilesystemMemoryTool');
+  }
+
+  create(_command: BetaMemoryTool20250818CreateCommand): Promise<string> {
+    return nodeOnly('BetaLocalFilesystemMemoryTool');
+  }
+
+  str_replace(_command: BetaMemoryTool20250818StrReplaceCommand): Promise<string> {
+    return nodeOnly('BetaLocalFilesystemMemoryTool');
+  }
+
+  insert(_command: BetaMemoryTool20250818InsertCommand): Promise<string> {
+    return nodeOnly('BetaLocalFilesystemMemoryTool');
+  }
+
+  delete(_command: BetaMemoryTool20250818DeleteCommand): Promise<string> {
+    return nodeOnly('BetaLocalFilesystemMemoryTool');
+  }
+
+  rename(_command: BetaMemoryTool20250818RenameCommand): Promise<string> {
+    return nodeOnly('BetaLocalFilesystemMemoryTool');
+  }
+}

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.102.0'; // x-release-please-version
+export const VERSION = '0.104.0'; // x-release-please-version

package/tools/agent-toolset/node.browser.d.mts

@@ -0,0 +1,42 @@
+/**
+ * Browser stub for `tools/agent-toolset/node`.
+ *
+ * The real module implements the `agent_toolset_20260401` tools on top of Node
+ * built-ins (`node:child_process`, `node:fs`, …), which browser bundlers cannot
+ * resolve. The `browser` field in `package.json` substitutes this stub in
+ * browser builds so the SDK bundles cleanly for web targets; Node runtimes and
+ * node-target bundles ignore the mapping and load the real implementation.
+ *
+ * Every value export here throws an {@link AnthropicError} when used — the
+ * agent toolset only works in Node.js or a Node-compatible runtime. Type
+ * exports are re-exported from the real module (erased at build time), so
+ * type-level usage is unaffected.
+ */
+import type { Anthropic } from "../../client.mjs";
+import type { BetaRunnableTool } from "../../lib/tools/BetaRunnableTool.mjs";
+import type { AgentToolContext } from "./node.mjs";
+export type { AgentToolContext } from "./node.mjs";
+export declare function setupSkills(_ctx: AgentToolContext): Promise<() => Promise<void>>;
+export declare function resolveSkillVersion(_client: Anthropic, _skillId: string, _version: string): Promise<string>;
+export declare function extractSkillArchive(_resp: Response, _dest: string): Promise<void>;
+export declare function betaAgentToolset20260401(_ctx: AgentToolContext): BetaRunnableTool[];
+export declare function resolvePath(_ctx: AgentToolContext, _p: string): Promise<string>;
+export declare class BashSession {
+    constructor(_dir: string, _env?: NodeJS.ProcessEnv);
+    get closed(): boolean;
+    exec(_command: string, _opts?: {
+        timeoutMs?: number;
+        signal?: AbortSignal | null | undefined;
+    }): Promise<{
+        output: string;
+        exitCode: number;
+    }>;
+    close(): void;
+}
+export declare function betaBashTool(_ctx: AgentToolContext): BetaRunnableTool;
+export declare function betaReadTool(_ctx: AgentToolContext): BetaRunnableTool;
+export declare function betaWriteTool(_ctx: AgentToolContext): BetaRunnableTool;
+export declare function betaEditTool(_ctx: AgentToolContext): BetaRunnableTool;
+export declare function betaGlobTool(_ctx: AgentToolContext): BetaRunnableTool;
+export declare function betaGrepTool(_ctx: AgentToolContext): BetaRunnableTool;
+//# sourceMappingURL=node.browser.d.mts.map

package/tools/agent-toolset/node.browser.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.browser.d.mts","sourceRoot":"","sources":["../../src/tools/agent-toolset/node.browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,yBAAqB;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,6CAAyC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAe;AAE/C,YAAY,EAAE,gBAAgB,EAAE,mBAAe;AAM/C,wBAAgB,WAAW,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAEhF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3G;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAEnF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE/E;AAED,qBAAa,WAAW;gBACV,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU;IAIlD,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,CACF,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAA;KAAO,GAC1E,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAIhD,KAAK,IAAI,IAAI;CAGd;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAEtE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE"}