@anthropic-ai/sdk 0.98.1 → 0.100.0

package/src/lib/MessageStream.ts

@@ -576,6 +576,9 @@ export class MessageStream<ParsedT = null> implements AsyncIterable<MessageStrea
       case 'message_delta':
         snapshot.stop_reason = event.delta.stop_reason;
         snapshot.stop_sequence = event.delta.stop_sequence;
+        if (event.delta.stop_details != null) {
+          snapshot.stop_details = event.delta.stop_details;
+        }
         snapshot.usage.output_tokens = event.usage.output_tokens;
 
         // Update other usage fields if they exist in the event

package/src/lib/environments/worker.ts

@@ -57,6 +57,8 @@ export interface EnvironmentWorkerOptions {
   workdir?: string;
   /** Forwarded to the per-session {@link AgentToolContext}. */
   unrestrictedPaths?: boolean;
+  /** Forwarded to the per-session {@link AgentToolContext} (`maxFileBytes`). */
+  maxFileBytes?: number | null;
   /** Forwarded to {@link SessionToolRunner} (`maxIdleMs`). */
   maxIdleMs?: number;
   /** Forwarded to the {@link WorkPoller}. */
@@ -138,6 +140,7 @@ export class EnvironmentWorker {
   readonly tools: EnvironmentWorkerTools | undefined;
   readonly workdir: string;
   readonly unrestrictedPaths: boolean | undefined;
+  readonly maxFileBytes: number | null | undefined;
   readonly maxIdleMs: number | undefined;
   readonly workerId: string | undefined;
   readonly requestOptions: BetaToolRunnerRequestOptions | undefined;
@@ -150,6 +153,7 @@ export class EnvironmentWorker {
     this.tools = opts.tools;
     this.workdir = opts.workdir ?? process.cwd();
     this.unrestrictedPaths = opts.unrestrictedPaths;
+    this.maxFileBytes = opts.maxFileBytes;
     this.maxIdleMs = opts.maxIdleMs;
     this.workerId = opts.workerId;
     this.requestOptions = opts.requestOptions;
@@ -268,6 +272,7 @@ export class EnvironmentWorker {
       client: this.client,
       sessionId,
       ...(this.unrestrictedPaths !== undefined ? { unrestrictedPaths: this.unrestrictedPaths } : {}),
+      ...(this.maxFileBytes !== undefined ? { maxFileBytes: this.maxFileBytes } : {}),
     };
     // Lazily load the Node-only toolset module — see the import note at the top.
     const agentToolset = await import('../../tools/agent-toolset/node');

package/src/resources/beta/agents/agents.ts

@@ -671,11 +671,13 @@ export interface BetaManagedAgentsMCPToolsetParams {
 }
 
 /**
- * The model that will power your agent.\n\nSee
- * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+ * The model that will power your agent.
+ *
+ * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
  * details and options.
  */
 export type BetaManagedAgentsModel =
+  | 'claude-opus-4-8'
   | 'claude-opus-4-7'
   | 'claude-opus-4-6'
   | 'claude-sonnet-4-6'
@@ -692,8 +694,9 @@ export type BetaManagedAgentsModel =
  */
 export interface BetaManagedAgentsModelConfig {
   /**
-   * The model that will power your agent.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will power your agent.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   id: BetaManagedAgentsModel;
@@ -711,8 +714,9 @@ export interface BetaManagedAgentsModelConfig {
  */
 export interface BetaManagedAgentsModelConfigParams {
   /**
-   * The model that will power your agent.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will power your agent.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   id: BetaManagedAgentsModel;

package/src/resources/beta/beta.ts

@@ -264,7 +264,9 @@ import {
   BetaMessageParam,
   BetaMessageTokensCount,
   BetaMetadata,
+  BetaMidConversationSystemBlockParam,
   BetaOutputConfig,
+  BetaOutputTokensDetails,
   BetaPlainTextSource,
   BetaRawContentBlockDelta,
   BetaRawContentBlockDeltaEvent,
@@ -698,7 +700,9 @@ export declare namespace Beta {
     type BetaMessageParam as BetaMessageParam,
     type BetaMessageTokensCount as BetaMessageTokensCount,
     type BetaMetadata as BetaMetadata,
+    type BetaMidConversationSystemBlockParam as BetaMidConversationSystemBlockParam,
     type BetaOutputConfig as BetaOutputConfig,
+    type BetaOutputTokensDetails as BetaOutputTokensDetails,
     type BetaPlainTextSource as BetaPlainTextSource,
     type BetaRawContentBlockDelta as BetaRawContentBlockDelta,
     type BetaRawContentBlockDeltaEvent as BetaRawContentBlockDeltaEvent,

package/src/resources/beta/index.ts

@@ -220,7 +220,9 @@ export {
   type BetaMessageParam,
   type BetaMessageTokensCount,
   type BetaMetadata,
+  type BetaMidConversationSystemBlockParam,
   type BetaOutputConfig,
+  type BetaOutputTokensDetails,
   type BetaPlainTextSource,
   type BetaRawContentBlockDelta,
   type BetaRawContentBlockDeltaEvent,

package/src/resources/beta/messages/batches.ts

@@ -538,8 +538,9 @@ export namespace BatchCreateParams {
       messages: Array<BetaMessagesAPI.BetaMessageParam>;
 
       /**
-       * The model that will complete your prompt.\n\nSee
-       * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+       * The model that will complete your prompt.
+       *
+       * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
        * details and options.
        */
       model: MessagesApi.Model;

package/src/resources/beta/messages/index.ts

@@ -129,7 +129,9 @@ export {
   type BetaMessageParam,
   type BetaMessageTokensCount,
   type BetaMetadata,
+  type BetaMidConversationSystemBlockParam,
   type BetaOutputConfig,
+  type BetaOutputTokensDetails,
   type BetaPlainTextSource,
   type BetaRawContentBlockDelta,
   type BetaRawContentBlockDeltaEvent,

package/src/resources/beta/messages/messages.ts

@@ -289,8 +289,9 @@ export interface BetaAdvisorMessageIterationUsage {
   input_tokens: number;
 
   /**
-   * The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: MessagesAPI.Model;
@@ -313,6 +314,12 @@ export interface BetaAdvisorRedactedResultBlock {
    */
   encrypted_content: string;
 
+  /**
+   * The advisor sub-inference's stop reason (same values as the top-level message
+   * `stop_reason`).
+   */
+  stop_reason: string | null;
+
   type: 'advisor_redacted_result';
 }
 
@@ -323,9 +330,18 @@ export interface BetaAdvisorRedactedResultBlockParam {
   encrypted_content: string;
 
   type: 'advisor_redacted_result';
+
+  stop_reason?: string | null;
 }
 
 export interface BetaAdvisorResultBlock {
+  /**
+   * The advisor sub-inference's stop reason (same values as the top-level message
+   * `stop_reason`). `max_tokens` indicates the advisor's output was truncated at the
+   * tool's `max_tokens` value or the advisor model's policy cap.
+   */
+  stop_reason: string | null;
+
   text: string;
 
   type: 'advisor_result';
@@ -335,12 +351,15 @@ export interface BetaAdvisorResultBlockParam {
   text: string;
 
   type: 'advisor_result';
+
+  stop_reason?: string | null;
 }
 
 export interface BetaAdvisorTool20260301 {
   /**
-   * The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: MessagesAPI.Model;
@@ -1347,7 +1366,8 @@ export type BetaContentBlockParam =
   | BetaMCPToolUseBlockParam
   | BetaRequestMCPToolResultBlockParam
   | BetaContainerUploadBlockParam
-  | BetaCompactionBlockParam;
+  | BetaCompactionBlockParam
+  | BetaMidConversationSystemBlockParam;
 
 export interface BetaContentBlockSource {
   content: string | Array<BetaContentBlockSourceContent>;
@@ -1837,8 +1857,9 @@ export interface BetaMessage {
   diagnostics: BetaDiagnostics | null;
 
   /**
-   * The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: MessagesAPI.Model;
@@ -1942,6 +1963,16 @@ export interface BetaMessageDeltaUsage {
    */
   output_tokens: number;
 
+  /**
+   * Breakdown of output tokens by category.
+   *
+   * `output_tokens` remains the inclusive, authoritative total used for billing.
+   * This object provides a read-only decomposition for observability — for example,
+   * how many of the billed output tokens were spent on internal reasoning that may
+   * have been summarized before being returned to you.
+   */
+  output_tokens_details: BetaOutputTokensDetails | null;
+
   /**
    * The number of server tool requests.
    */
@@ -1986,7 +2017,7 @@ export interface BetaMessageIterationUsage {
 export interface BetaMessageParam {
   content: string | Array<BetaContentBlockParam>;
 
-  role: 'user' | 'assistant';
+  role: 'user' | 'assistant' | 'system';
 }
 
 export interface BetaMessageTokensCount {
@@ -2013,6 +2044,27 @@ export interface BetaMetadata {
   user_id?: string | null;
 }
 
+/**
+ * System instructions that appear mid-conversation.
+ *
+ * Use this block to provide or update system-level instructions at a specific
+ * point in the conversation, rather than only via the top-level `system`
+ * parameter.
+ */
+export interface BetaMidConversationSystemBlockParam {
+  /**
+   * System instruction text blocks.
+   */
+  content: Array<BetaTextBlockParam>;
+
+  type: 'mid_conv_system';
+
+  /**
+   * Create a cache control breakpoint at this content block.
+   */
+  cache_control?: BetaCacheControlEphemeral | null;
+}
+
 export interface BetaOutputConfig {
   /**
    * All possible effort levels.
@@ -2031,6 +2083,20 @@ export interface BetaOutputConfig {
   task_budget?: BetaTokenTaskBudget | null;
 }
 
+export interface BetaOutputTokensDetails {
+  /**
+   * Number of output tokens the model generated as internal reasoning, including the
+   * thinking-block delimiter tokens.
+   *
+   * Reflects the raw reasoning the model produced, not the (possibly shorter)
+   * summarized thinking text returned in the response body. Computed by
+   * re-tokenizing the raw reasoning text, so it may differ from the model's exact
+   * generation count by a small number of tokens. Always ≤ `output_tokens`;
+   * `output_tokens - thinking_tokens` approximates the non-reasoning output.
+   */
+  thinking_tokens: number;
+}
+
 export interface BetaPlainTextSource {
   data: string;
 
@@ -3439,6 +3505,16 @@ export interface BetaUsage {
    */
   output_tokens: number;
 
+  /**
+   * Breakdown of output tokens by category.
+   *
+   * `output_tokens` remains the inclusive, authoritative total used for billing.
+   * This object provides a read-only decomposition for observability — for example,
+   * how many of the billed output tokens were spent on internal reasoning that may
+   * have been summarized before being returned to you.
+   */
+  output_tokens_details: BetaOutputTokensDetails | null;
+
   /**
    * The number of server tool requests.
    */
@@ -3738,6 +3814,7 @@ export type BetaWebFetchToolResultErrorCode =
   | 'invalid_tool_input'
   | 'url_too_long'
   | 'url_not_allowed'
+  | 'url_not_in_prior_context'
   | 'url_not_accessible'
   | 'unsupported_content_type'
   | 'too_many_requests'
@@ -4024,8 +4101,9 @@ export interface MessageCreateParamsBase {
   messages: Array<BetaMessageParam>;
 
   /**
-   * Body param: The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * Body param: The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: MessagesAPI.Model;
@@ -4357,8 +4435,9 @@ export interface MessageCountTokensParams {
   messages: Array<BetaMessageParam>;
 
   /**
-   * Body param: The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * Body param: The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: MessagesAPI.Model;
@@ -4660,7 +4739,9 @@ export declare namespace Messages {
     type BetaMessageParam as BetaMessageParam,
     type BetaMessageTokensCount as BetaMessageTokensCount,
     type BetaMetadata as BetaMetadata,
+    type BetaMidConversationSystemBlockParam as BetaMidConversationSystemBlockParam,
     type BetaOutputConfig as BetaOutputConfig,
+    type BetaOutputTokensDetails as BetaOutputTokensDetails,
     type BetaPlainTextSource as BetaPlainTextSource,
     type BetaRawContentBlockDelta as BetaRawContentBlockDelta,
     type BetaRawContentBlockDeltaEvent as BetaRawContentBlockDeltaEvent,

package/src/resources/completions.ts

@@ -67,8 +67,9 @@ export interface Completion {
   completion: string;
 
   /**
-   * The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: MessagesAPI.Model;
@@ -104,8 +105,9 @@ export interface CompletionCreateParamsBase {
   max_tokens_to_sample: number;
 
   /**
-   * Body param: The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * Body param: The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: MessagesAPI.Model;

package/src/resources/index.ts

@@ -91,8 +91,10 @@ export {
   type MessageStreamParams,
   type MessageTokensCount,
   type Metadata,
+  type MidConversationSystemBlockParam,
   type Model,
   type OutputConfig,
+  type OutputTokensDetails,
   type PlainTextSource,
   type RawContentBlockDelta,
   type RawContentBlockDeltaEvent,

package/src/resources/messages/index.ts

@@ -82,8 +82,10 @@ export {
   type MessageParam,
   type MessageTokensCount,
   type Metadata,
+  type MidConversationSystemBlockParam,
   type Model,
   type OutputConfig,
+  type OutputTokensDetails,
   type PlainTextSource,
   type RawContentBlockDelta,
   type RawContentBlockDeltaEvent,

package/src/resources/messages/messages.ts

@@ -823,7 +823,8 @@ export type ContentBlockParam =
   | BashCodeExecutionToolResultBlockParam
   | TextEditorCodeExecutionToolResultBlockParam
   | ToolSearchToolResultBlockParam
-  | ContainerUploadBlockParam;
+  | ContainerUploadBlockParam
+  | MidConversationSystemBlockParam;
 
 export interface ContentBlockSource {
   content: string | Array<ContentBlockSourceContent>;
@@ -1011,8 +1012,9 @@ export interface Message {
   content: Array<ContentBlock>;
 
   /**
-   * The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: Model;
@@ -1126,6 +1128,16 @@ export interface MessageDeltaUsage {
    */
   output_tokens: number;
 
+  /**
+   * Breakdown of output tokens by category.
+   *
+   * `output_tokens` remains the inclusive, authoritative total used for billing.
+   * This object provides a read-only decomposition for observability — for example,
+   * how many of the billed output tokens were spent on internal reasoning that may
+   * have been summarized before being returned to you.
+   */
+  output_tokens_details: OutputTokensDetails | null;
+
   /**
    * The number of server tool requests.
    */
@@ -1135,7 +1147,7 @@ export interface MessageDeltaUsage {
 export interface MessageParam {
   content: string | Array<ContentBlockParam>;
 
-  role: 'user' | 'assistant';
+  role: 'user' | 'assistant' | 'system';
 }
 
 export interface MessageTokensCount {
@@ -1158,11 +1170,34 @@ export interface Metadata {
 }
 
 /**
- * The model that will complete your prompt.\n\nSee
- * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+ * System instructions that appear mid-conversation.
+ *
+ * Use this block to provide or update system-level instructions at a specific
+ * point in the conversation, rather than only via the top-level `system`
+ * parameter.
+ */
+export interface MidConversationSystemBlockParam {
+  /**
+   * System instruction text blocks.
+   */
+  content: Array<TextBlockParam>;
+
+  type: 'mid_conv_system';
+
+  /**
+   * Create a cache control breakpoint at this content block.
+   */
+  cache_control?: CacheControlEphemeral | null;
+}
+
+/**
+ * The model that will complete your prompt.
+ *
+ * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
  * details and options.
  */
 export type Model =
+  | 'claude-opus-4-8'
   | 'claude-opus-4-7'
   | 'claude-mythos-preview'
   | 'claude-opus-4-6'
@@ -1195,6 +1230,19 @@ export interface OutputConfig {
   format?: JSONOutputFormat | null;
 }
 
+export interface OutputTokensDetails {
+  /**
+   * Number of output tokens the model generated as internal reasoning, including the
+   * thinking-block delimiter tokens.
+   *
+   * Reflects the raw reasoning the model produced, not the (possibly shorter)
+   * summarized thinking text returned in the response body. Computed by
+   * re-tokenizing the raw reasoning text, so it may differ from the model's exact
+   * generation count by a small number of tokens. Always ≤ `output_tokens`;
+   * `output_tokens - thinking_tokens` approximates the non-reasoning output.
+   */
+  thinking_tokens: number;
+}
 const DEPRECATED_MODELS: {
   [K in Model]?: string;
 } = {
@@ -2235,6 +2283,16 @@ export interface Usage {
    */
   output_tokens: number;
 
+  /**
+   * Breakdown of output tokens by category.
+   *
+   * `output_tokens` remains the inclusive, authoritative total used for billing.
+   * This object provides a read-only decomposition for observability — for example,
+   * how many of the billed output tokens were spent on internal reasoning that may
+   * have been summarized before being returned to you.
+   */
+  output_tokens_details: OutputTokensDetails | null;
+
   /**
    * The number of server tool requests.
    */
@@ -2529,6 +2587,7 @@ export type WebFetchToolResultErrorCode =
   | 'invalid_tool_input'
   | 'url_too_long'
   | 'url_not_allowed'
+  | 'url_not_in_prior_context'
   | 'url_not_accessible'
   | 'unsupported_content_type'
   | 'too_many_requests'
@@ -2840,8 +2899,9 @@ export interface MessageCreateParamsBase {
   messages: Array<MessageParam>;
 
   /**
-   * The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: Model;
@@ -3126,8 +3186,9 @@ export interface MessageCountTokensParams {
   messages: Array<MessageParam>;
 
   /**
-   * The model that will complete your prompt.\n\nSee
-   * [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+   * The model that will complete your prompt.
+   *
+   * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
    * details and options.
    */
   model: Model;
@@ -3320,8 +3381,10 @@ export declare namespace Messages {
     type MessageParam as MessageParam,
     type MessageTokensCount as MessageTokensCount,
     type Metadata as Metadata,
+    type MidConversationSystemBlockParam as MidConversationSystemBlockParam,
     type Model as Model,
     type OutputConfig as OutputConfig,
+    type OutputTokensDetails as OutputTokensDetails,
     type PlainTextSource as PlainTextSource,
     type RawContentBlockDelta as RawContentBlockDelta,
     type RawContentBlockDeltaEvent as RawContentBlockDeltaEvent,

package/src/tools/agent-toolset/node.ts

@@ -47,12 +47,10 @@ export { setupSkills, resolveSkillVersion, extractSkillArchive } from './skills'
 
 const BASH_OUTPUT_LIMIT = 100 * 1024;
 const BASH_DEFAULT_TIMEOUT_MS = 120_000;
-const READ_MAX_BYTES = 256 * 1024;
-// `edit` reads the whole file before rewriting it, so it carries the same
-// OOM/FIFO exposure as `read`. Kept as a symmetric alias for now; the cap value
-// (and reject-vs-truncate behaviour) is intentionally a separate knob pending
-// validation with the CMA team.
-const EDIT_MAX_BYTES = READ_MAX_BYTES;
+// Default size cap for the read/edit tools (both load the whole file into
+// memory) when AgentToolContext.maxFileBytes is unset. The reject-vs-truncate
+// behaviour remains a separate question pending CMA validation.
+const DEFAULT_MAX_FILE_BYTES = 256 * 1024;
 const GREP_OUTPUT_LIMIT = 100 * 1024;
 const GREP_MAX_LINE_LENGTH = 2000;
 const GLOB_RESULT_LIMIT = 200;
@@ -72,6 +70,10 @@ type GlobFn = (
 ) => AsyncIterable<fssync.Dirent>;
 const fsGlob = (fs as unknown as { glob: GlobFn }).glob;
 
+function resolveMaxBytes(configured: number | null | undefined): number | null {
+  return configured === undefined ? DEFAULT_MAX_FILE_BYTES : configured;
+}
+
 /**
  * Workdir + path-policy for the agent toolset.
  *
@@ -116,6 +118,15 @@ export interface AgentToolContext {
    * build the combined mapping yourself before passing it.
    */
   env?: NodeJS.ProcessEnv;
+  /**
+   * Size cap for the `read` and `edit` tools, which both load the whole file into
+   * memory. `undefined` (default) uses the built-in 256 KiB cap; a positive number
+   * sets a custom cap; `null` disables the cap entirely. Disabling it reintroduces
+   * the OOM risk on a model-controlled path, so pass `null` only when the sandbox
+   * can absorb arbitrarily large files. The non-regular-file (FIFO/device) guard
+   * always applies regardless of this value.
+   */
+  maxFileBytes?: number | null;
 }
 
 /**
@@ -435,9 +446,10 @@ export function betaReadTool(ctx: AgentToolContext): BetaRunnableTool {
         if (!st.isFile()) {
           throw new ToolError(`read: ${file_path} is not a regular file`);
         }
-        if (st.size > READ_MAX_BYTES) {
+        const limit = resolveMaxBytes(ctx.maxFileBytes);
+        if (limit !== null && st.size > limit) {
           throw new ToolError(
-            `read: ${file_path} is ${st.size} bytes, exceeds ${READ_MAX_BYTES}-byte limit. ` +
+            `read: ${file_path} is ${st.size} bytes, exceeds ${limit}-byte limit. ` +
               'Use bash (head/tail/sed) to read a slice.',
           );
         }
@@ -510,9 +522,10 @@ export function betaEditTool(ctx: AgentToolContext): BetaRunnableTool {
         if (!st.isFile()) {
           throw new ToolError(`edit: ${file_path} is not a regular file`);
         }
-        if (st.size > EDIT_MAX_BYTES) {
+        const limit = resolveMaxBytes(ctx.maxFileBytes);
+        if (limit !== null && st.size > limit) {
           throw new ToolError(
-            `edit: ${file_path} is ${st.size} bytes, exceeds ${EDIT_MAX_BYTES}-byte limit. ` +
+            `edit: ${file_path} is ${st.size} bytes, exceeds ${limit}-byte limit. ` +
               'Use bash (sed/awk) to edit a large file.',
           );
         }

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.98.1'; // x-release-please-version
+export const VERSION = '0.100.0'; // x-release-please-version

package/tools/agent-toolset/node.d.mts

@@ -75,6 +75,15 @@ export interface AgentToolContext {
      * build the combined mapping yourself before passing it.
      */
     env?: NodeJS.ProcessEnv;
+    /**
+     * Size cap for the `read` and `edit` tools, which both load the whole file into
+     * memory. `undefined` (default) uses the built-in 256 KiB cap; a positive number
+     * sets a custom cap; `null` disables the cap entirely. Disabling it reintroduces
+     * the OOM risk on a model-controlled path, so pass `null` only when the sandbox
+     * can absorb arbitrarily large files. The non-regular-file (FIFO/device) guard
+     * always applies regardless of this value.
+     */
+    maxFileBytes?: number | null;
 }
 /**
  * Returns the `agent_toolset_20260401` implementations bound to `ctx`. The

package/tools/agent-toolset/node.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.mts","sourceRoot":"","sources":["../../src/tools/agent-toolset/node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAQH,OAAO,KAAK,EAAE,SAAS,EAAE,yBAAqB;AAE9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,6CAAyC;AAMzE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAiB;AA6BjF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CASlF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7E;AA0BD;;;GAGG;AACH,qBAAa,WAAW;;gBASV,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAA+B;IAyBpE,uDAAuD;IACvD,IAAI,MAAM,IAAI,OAAO,CAEpB;IAkBK,IAAI,CACR,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAA;KAAO,GACzE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAkEhD,KAAK,IAAI,IAAI;CAkBd;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAgEpE;AAID,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAgDpE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAqBrE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CA6DpE;AAID,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAgEpE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAmBpE"}
+{"version":3,"file":"node.d.mts","sourceRoot":"","sources":["../../src/tools/agent-toolset/node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAQH,OAAO,KAAK,EAAE,SAAS,EAAE,yBAAqB;AAE9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,6CAAyC;AAMzE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAiB;AA+BjF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CASlF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7E;AA0BD;;;GAGG;AACH,qBAAa,WAAW;;gBASV,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAA+B;IAyBpE,uDAAuD;IACvD,IAAI,MAAM,IAAI,OAAO,CAEpB;IAkBK,IAAI,CACR,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAA;KAAO,GACzE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAkEhD,KAAK,IAAI,IAAI;CAkBd;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAgEpE;AAID,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAiDpE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAqBrE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CA8DpE;AAID,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAgEpE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAmBpE"}