@leo000001/claude-code-mcp 2.4.8 → 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/CHANGELOG.md +11 -4
  2. package/NOTICE.md +2 -2
  3. package/README.md +18 -18
  4. package/dist/index.js +110 -10
  5. package/dist/index.js.map +1 -1
  6. package/package.json +96 -96
package/CHANGELOG.md CHANGED
@@ -2,14 +2,20 @@
2
2
 
3
3
  ## Unreleased
4
4
 
5
+ - (TBD)
6
+
7
+ ## 2.5.0 (2026-02-27)
8
+
5
9
  ### Security
6
10
 
7
11
  - Validate `resumeToken` using timing-safe comparison (`timingSafeEqual` for fixed-length HMAC tokens) to reduce timing side-channel risk.
12
+ - Refresh transitive dependencies via `npm audit fix` (0 known vulnerabilities after update).
8
13
 
9
14
  ### Improvements
10
15
 
11
- - Upgrade `@anthropic-ai/claude-agent-sdk` to `^0.2.49` and align MCP-facing schemas with the current SDK surface.
12
- - Permission mode enum now follows SDK 0.2.49 (`default`, `acceptEdits`, `bypassPermissions`, `plan`, `dontAsk`; `delegate` removed).
16
+ - Upgrade `@anthropic-ai/claude-agent-sdk` to `^0.2.62` and align MCP-facing schemas with the current SDK surface.
17
+ - Upgrade `@modelcontextprotocol/sdk` to `^1.27.1`.
18
+ - Permission mode enum now follows SDK 0.2.62 (`default`, `acceptEdits`, `bypassPermissions`, `plan`, `dontAsk`; `delegate` removed).
13
19
  - Session cleanup now marks timed-out running/waiting sessions as `cancelled` for consistent status semantics.
14
20
  - `SessionManager.destroy()` now clears in-memory session/runtime maps after aborting active runs, so post-destroy reads are no longer stale.
15
21
  - Event buffer eviction now uses batch compaction (instead of repeated `findIndex` + `splice`) and `readEvents` now uses binary search for cursor start.
@@ -18,7 +24,8 @@
18
24
  - Enrich compatibility resources with package version, disk-resume diagnostics, and runtime limits.
19
25
  - Remove deprecated `claude_code` parameter aliases: top-level `sessionInitTimeoutMs` and `advanced.effort` / `advanced.thinking`.
20
26
  - Add support for SDK `promptSuggestions` option passthrough and expose `promptSuggestions` in `advanced`/`diskResumeConfig`.
21
- - Query consumer now maps additional SDK stream messages (`system/task_started`, `rate_limit`, `prompt_suggestion`) to progress events.
27
+ - Query consumer now maps additional SDK stream messages (`system/task_started`, `system/task_progress`, `system/hook_*`, `system/files_persisted`, `rate_limit`, `prompt_suggestion`) to progress events.
28
+ - Event buffer eviction now prefers dropping noisy progress events before output events to reduce missed output under high-frequency streams.
22
29
 
23
30
  ### Documentation
24
31
 
@@ -41,7 +48,7 @@
41
48
  - Add `CLAUDE_CODE_MCP_MAX_PENDING_PERMISSIONS` (default: `64`) to cap outstanding permission requests per session.
42
49
  - Promote `effort` and `thinking` to top-level parameters on `claude_code` and `claude_code_reply` (deprecated aliases: `advanced.effort`, `advanced.thinking`).
43
50
  - Tool responses now include `structuredContent` (in addition to JSON text) for easier MCP client consumption.
44
- - Emit `tools/list_changed` and `resources/list_changed` once after connect; update `claude_code` tool description dynamically when runtime tool discovery changes.
51
+ - Emit `notifications/tools/list_changed` and `notifications/resources/list_changed` once after connect; update `claude_code` tool description dynamically when runtime tool discovery changes.
45
52
  - Align declared MCP capabilities with implemented primitives (`logging`, `tools`, `resources`) and remove prompt primitive exposure.
46
53
  - Add unit tests for `build-options.ts` and `race-with-abort.ts`.
47
54
 
package/NOTICE.md CHANGED
@@ -9,8 +9,8 @@ requirements on redistribution and use.
9
9
 
10
10
  ### Direct dependencies (from `package.json`)
11
11
 
12
- - `@anthropic-ai/claude-agent-sdk@0.2.38` — license is declared as “SEE LICENSE IN README.md” in the package metadata. This package bundles a Claude Code CLI; please review Anthropic's documentation and legal terms referenced by that project before redistributing or deploying.
13
- - `@modelcontextprotocol/sdk@1.26.0` — MIT License
12
+ - `@anthropic-ai/claude-agent-sdk@0.2.62` — license is declared as “SEE LICENSE IN README.md” in the package metadata. This package bundles a Claude Code CLI; please review Anthropic's documentation and legal terms referenced by that project before redistributing or deploying.
13
+ - `@modelcontextprotocol/sdk@1.27.1` — MIT License
14
14
  - `zod@4.3.6` — MIT License
15
15
 
16
16
  For a complete dependency graph, see `package-lock.json`. When installed, each dependency’s
package/README.md CHANGED
@@ -32,7 +32,7 @@ See `CHANGELOG.md` for release history.
32
32
 
33
33
  This MCP server uses the [`@anthropic-ai/claude-agent-sdk`](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk) package, which **bundles its own Claude Code CLI** (`cli.js`). It does not use the `claude` binary from your system PATH.
34
34
 
35
- - The SDK's bundled CLI version is determined by the SDK package version (e.g. SDK 0.2.38 = Claude Code 2.1.38)
35
+ - The SDK bundles a Claude Code CLI; its version generally tracks the SDK package version, but the exact scheme is not guaranteed
36
36
  - **Configuration is shared** — the bundled CLI reads API keys and settings from `~/.claude/`, same as the system-installed `claude`
37
37
  - **All local settings are loaded by default** — unlike the raw SDK (which defaults to isolation mode), this MCP server loads `user`, `project`, and `local` settings automatically, including `CLAUDE.md` project context. Pass `advanced.settingSources: []` to opt out
38
38
  - You must have Claude Code configured (API key set up) before using this MCP server: see [Claude Code documentation](https://docs.anthropic.com/en/docs/claude-code/overview)
@@ -62,7 +62,7 @@ Add to your MCP client configuration (Claude Desktop, Cursor, etc.):
62
62
  }
63
63
  ```
64
64
 
65
- > Some clients cache tool/resource metadata at connect-time. This server emits `notifications/tools/list_changed` and resource update notifications after runtime tool discovery so clients can refresh both the `claude_code` tool description and `internal-tools` resource.
65
+ > Some clients cache tool/resource metadata at connect-time. This server emits `notifications/tools/list_changed` and `notifications/resources/list_changed` after runtime tool discovery so clients can refresh both the `claude_code` tool description and `internal-tools` resource.
66
66
 
67
67
  ### Anthropic Claude Code CLI (as an MCP client)
68
68
 
@@ -123,7 +123,7 @@ Start a new Claude Code session. The agent autonomously performs coding tasks: r
123
123
  | ------------------------------------- | ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
124
124
  | `advanced.tools` | string[] \| object | Define the base tool set. Default: SDK/Claude Code default toolset. Array of tool name strings, or `{ type: "preset", preset: "claude_code" }` for the default toolset. `allowedTools`/`disallowedTools` further filter on top of this |
125
125
  | `advanced.persistSession` | boolean | Persist session history to disk (`~/.claude/projects/`). Default: `true`. Set `false` to disable. |
126
- | `advanced.sessionInitTimeoutMs` | number | Session init timeout in milliseconds waiting for `system/init`. Default: `10000`. |
126
+ | `advanced.sessionInitTimeoutMs` | number | Session init timeout in milliseconds waiting for `system/init`. Default: `10000`. |
127
127
  | `advanced.agents` | object | Define custom sub-agents the main agent can delegate tasks to. Default: none. SDK default: if a sub-agent omits `tools`, it inherits all tools from the parent. |
128
128
  | `advanced.agent` | string | Name of a custom agent (defined in `agents`) to use as the primary agent. Default: omitted |
129
129
  | `advanced.maxBudgetUsd` | number | Maximum budget in USD. Default: SDK/Claude Code default |
@@ -136,7 +136,7 @@ Start a new Claude Code session. The agent autonomously performs coding tasks: r
136
136
  | `advanced.fallbackModel` | string | Fallback model if the primary model fails or is unavailable. Default: none |
137
137
  | `advanced.enableFileCheckpointing` | boolean | Enable file checkpointing to track file changes during the session. Default: `false` |
138
138
  | `advanced.includePartialMessages` | boolean | When true, includes intermediate streaming messages in the response. Useful for real-time progress monitoring. Default: false |
139
- | `advanced.promptSuggestions` | boolean | When true, emits post-turn prompt suggestion events (`prompt_suggestion`). Default: `false` |
139
+ | `advanced.promptSuggestions` | boolean | When true, emits post-turn prompt suggestion events (`prompt_suggestion`). Default: `false` |
140
140
  | `advanced.strictMcpConfig` | boolean | Enforce strict validation of MCP server configurations. Default: `false` |
141
141
  | `advanced.settingSources` | string[] | Which filesystem settings to load. Defaults to `["user", "project", "local"]` (loads all settings and CLAUDE.md). Pass `[]` for SDK isolation mode |
142
142
  | `advanced.debug` | boolean | Enable debug mode for verbose logging. Default: `false` |
@@ -207,7 +207,7 @@ Continue an existing session by sending a follow-up message. The agent retains f
207
207
  | `diskResumeConfig.fallbackModel` | string | Fallback model. Default: none |
208
208
  | `diskResumeConfig.enableFileCheckpointing` | boolean | Enable file checkpointing. Default: `false` |
209
209
  | `diskResumeConfig.includePartialMessages` | boolean | Include intermediate streaming messages. Default: `false` |
210
- | `diskResumeConfig.promptSuggestions` | boolean | Emit post-turn prompt suggestion events (`prompt_suggestion`). Default: `false` |
210
+ | `diskResumeConfig.promptSuggestions` | boolean | Emit post-turn prompt suggestion events (`prompt_suggestion`). Default: `false` |
211
211
  | `diskResumeConfig.strictMcpConfig` | boolean | Strict MCP config validation. Default: `false` |
212
212
  | `diskResumeConfig.settingSources` | string[] | Which filesystem settings to load. Default: `["user", "project", "local"]` |
213
213
  | `diskResumeConfig.debug` | boolean | Debug mode. Default: `false` |
@@ -291,18 +291,18 @@ Poll session events/results and approve/deny pending permission requests.
291
291
  <details>
292
292
  <summary><code>pollOptions</code> object parameters (10 fine-grained poll controls)</summary>
293
293
 
294
- | Parameter | Type | Description |
295
- | ------------------------------------- | ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
296
- | `pollOptions.includeTools` | boolean | When true, includes `availableTools` (`poll` only). Default: `false` (omitted until session init is received). Derived from SDK `system/init.tools` (internal features may not appear). |
297
- | `pollOptions.includeEvents` | boolean | When false, omits `events` (but `nextCursor` still advances). Default: `true` |
298
- | `pollOptions.includeActions` | boolean | When false, omits `actions[]` even if `waiting_permission`. Default: `true` |
299
- | `pollOptions.includeResult` | boolean | When false, omits top-level `result` even when `idle`/`error`. Default: `true` |
300
- | `pollOptions.includeUsage` | boolean | Include `result.usage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`) |
301
- | `pollOptions.includeModelUsage` | boolean | Include `result.modelUsage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`) |
302
- | `pollOptions.includeStructuredOutput` | boolean | Include `result.structuredOutput` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`) |
303
- | `pollOptions.includeTerminalEvents` | boolean | When true, keeps terminal `result`/`error` events in `events` even if top-level `result` is included. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"` |
304
- | `pollOptions.includeProgressEvents` | boolean | When true, includes progress events (`tool_progress`, `auth_status`) in the events stream. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"` |
305
- | `pollOptions.maxBytes` | number | Approximate max JSON bytes for `events` in this response. When exceeded, events are truncated and `truncatedFields` includes `"events_bytes"`. Default: unlimited |
294
+ | Parameter | Type | Description |
295
+ | ------------------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
296
+ | `pollOptions.includeTools` | boolean | When true, includes `availableTools` (`poll` only). Default: `false` (omitted until session init is received). Derived from SDK `system/init.tools` (internal features may not appear). |
297
+ | `pollOptions.includeEvents` | boolean | When false, omits `events` (but `nextCursor` still advances). Default: `true` |
298
+ | `pollOptions.includeActions` | boolean | When false, omits `actions[]` even if `waiting_permission`. Default: `true` |
299
+ | `pollOptions.includeResult` | boolean | When false, omits top-level `result` even when `idle`/`error`. Default: `true` |
300
+ | `pollOptions.includeUsage` | boolean | Include `result.usage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`) |
301
+ | `pollOptions.includeModelUsage` | boolean | Include `result.modelUsage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`) |
302
+ | `pollOptions.includeStructuredOutput` | boolean | Include `result.structuredOutput` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`) |
303
+ | `pollOptions.includeTerminalEvents` | boolean | When true, keeps terminal `result`/`error` events in `events` even if top-level `result` is included. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"` |
304
+ | `pollOptions.includeProgressEvents` | boolean | When true, includes noisy SDK progress subtypes (e.g. `tool_progress`, `auth_status`, `system/task_progress`, `system/hook_progress`) as MCP `progress` events. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"` |
305
+ | `pollOptions.maxBytes` | number | Approximate max JSON bytes for `events` in this response. When exceeded, events are truncated and `truncatedFields` includes `"events_bytes"`. Default: unlimited |
306
306
 
307
307
  </details>
308
308
 
@@ -331,7 +331,7 @@ Notes:
331
331
  - `compatWarnings` surfaces compatibility hints (for example, unresolved tool names or path/platform mismatch signals) and is **non-blocking**; treat it as advisory unless the session actually fails.
332
332
  - Permission `actions[]` include `timeoutMs`, `expiresAt`, and best-effort `remainingMs` to help callers avoid auto-deny timeouts.
333
333
  - `permission_result` event data is `{ requestId, toolName, behavior, source, message?, interrupt? }` (denial details only present for `deny`).
334
- - In `"minimal"` mode (default): assistant message events are slimmed (strips `usage`, `model`, `id`, `cache_control` from content blocks); noisy progress events (`tool_progress`, `auth_status`) are filtered out; `lastEventId`/`lastToolUseId` are omitted; `AgentResult` omits `durationApiMs`/`sessionTotalTurns`/`sessionTotalCostUsd`. Use `responseMode: "full"` or individual `include*` flags to restore any of these.
334
+ - In `"minimal"` mode (default): assistant message events are slimmed (strips `usage`, `model`, `id`, `cache_control` from content blocks); noisy SDK progress subtypes (`tool_progress`, `auth_status`, `system/task_progress`, `system/hook_progress`) are filtered out; `lastEventId`/`lastToolUseId` are omitted; `AgentResult` omits `durationApiMs`/`sessionTotalTurns`/`sessionTotalCostUsd`. Use `responseMode: "full"` or individual `include*` flags to restore any of these.
335
335
  - In `"delta_compact"` mode: defaults are optimized for high-frequency polling (`events` and top-level `result` omitted unless explicitly enabled via `pollOptions`), while still returning session status/actions/cursors.
336
336
 
337
337
  ## Usage Example
package/dist/index.js CHANGED
@@ -841,7 +841,15 @@ var SessionManager = class _SessionManager {
841
841
  if (typeof requestId !== "string") return true;
842
842
  return isActivePermissionRequest ? !isActivePermissionRequest(requestId) : true;
843
843
  };
844
+ const isNoisyProgressEvent = (event) => {
845
+ if (event.type !== "progress") return false;
846
+ const t = event.data?.type;
847
+ return t === "tool_progress" || t === "auth_status" || t === "task_progress" || t === "hook_progress";
848
+ };
844
849
  let toDropForSoftLimit = remaining - buffer.maxSize;
850
+ if (toDropForSoftLimit > 0) {
851
+ toDropForSoftLimit -= dropOldestMatching(toDropForSoftLimit, isNoisyProgressEvent);
852
+ }
845
853
  if (toDropForSoftLimit > 0) {
846
854
  toDropForSoftLimit -= dropOldestMatching(toDropForSoftLimit, (event) => !event.pinned);
847
855
  }
@@ -1206,7 +1214,9 @@ function messageToEvent(msg) {
1206
1214
  type: "tool_progress",
1207
1215
  tool_use_id: msg.tool_use_id,
1208
1216
  tool_name: msg.tool_name,
1209
- elapsed_time_seconds: msg.elapsed_time_seconds
1217
+ parent_tool_use_id: msg.parent_tool_use_id,
1218
+ elapsed_time_seconds: msg.elapsed_time_seconds,
1219
+ task_id: msg.task_id
1210
1220
  }
1211
1221
  };
1212
1222
  }
@@ -1227,15 +1237,55 @@ function messageToEvent(msg) {
1227
1237
  data: { type: "status", status: msg.status, permissionMode: msg.permissionMode }
1228
1238
  };
1229
1239
  }
1230
- if (msg.type === "system" && msg.subtype === "task_notification") {
1240
+ if (msg.type === "system" && msg.subtype === "hook_started") {
1231
1241
  return {
1232
1242
  type: "progress",
1233
1243
  data: {
1234
- type: "task_notification",
1235
- task_id: msg.task_id,
1236
- status: msg.status,
1237
- summary: msg.summary,
1238
- output_file: msg.output_file
1244
+ type: "hook_started",
1245
+ hook_id: msg.hook_id,
1246
+ hook_name: msg.hook_name,
1247
+ hook_event: msg.hook_event
1248
+ }
1249
+ };
1250
+ }
1251
+ if (msg.type === "system" && msg.subtype === "hook_progress") {
1252
+ return {
1253
+ type: "progress",
1254
+ data: {
1255
+ type: "hook_progress",
1256
+ hook_id: msg.hook_id,
1257
+ hook_name: msg.hook_name,
1258
+ hook_event: msg.hook_event,
1259
+ stdout: msg.stdout,
1260
+ stderr: msg.stderr,
1261
+ output: msg.output
1262
+ }
1263
+ };
1264
+ }
1265
+ if (msg.type === "system" && msg.subtype === "hook_response") {
1266
+ return {
1267
+ type: "progress",
1268
+ data: {
1269
+ type: "hook_response",
1270
+ hook_id: msg.hook_id,
1271
+ hook_name: msg.hook_name,
1272
+ hook_event: msg.hook_event,
1273
+ output: msg.output,
1274
+ stdout: msg.stdout,
1275
+ stderr: msg.stderr,
1276
+ exit_code: msg.exit_code,
1277
+ outcome: msg.outcome
1278
+ }
1279
+ };
1280
+ }
1281
+ if (msg.type === "system" && msg.subtype === "files_persisted") {
1282
+ return {
1283
+ type: "progress",
1284
+ data: {
1285
+ type: "files_persisted",
1286
+ files: msg.files,
1287
+ failed: msg.failed,
1288
+ processed_at: msg.processed_at
1239
1289
  }
1240
1290
  };
1241
1291
  }
@@ -1251,9 +1301,38 @@ function messageToEvent(msg) {
1251
1301
  }
1252
1302
  };
1253
1303
  }
1304
+ if (msg.type === "system" && msg.subtype === "task_progress") {
1305
+ return {
1306
+ type: "progress",
1307
+ data: {
1308
+ type: "task_progress",
1309
+ task_id: msg.task_id,
1310
+ tool_use_id: msg.tool_use_id,
1311
+ description: msg.description,
1312
+ usage: msg.usage,
1313
+ last_tool_name: msg.last_tool_name
1314
+ }
1315
+ };
1316
+ }
1317
+ if (msg.type === "system" && msg.subtype === "task_notification") {
1318
+ return {
1319
+ type: "progress",
1320
+ data: {
1321
+ type: "task_notification",
1322
+ task_id: msg.task_id,
1323
+ tool_use_id: msg.tool_use_id,
1324
+ status: msg.status,
1325
+ summary: msg.summary,
1326
+ output_file: msg.output_file,
1327
+ usage: msg.usage
1328
+ }
1329
+ };
1330
+ }
1254
1331
  if (msg.type === "rate_limit" || msg.type === "prompt_suggestion") {
1255
1332
  const rest = { ...msg };
1256
1333
  delete rest.type;
1334
+ delete rest.uuid;
1335
+ delete rest.session_id;
1257
1336
  return {
1258
1337
  type: "progress",
1259
1338
  data: { type: msg.type, ...rest }
@@ -1406,7 +1485,11 @@ function consumeQuery(params) {
1406
1485
  }
1407
1486
  };
1408
1487
  const interrupt = () => {
1409
- activeQuery.interrupt?.();
1488
+ try {
1489
+ void Promise.resolve(activeQuery.interrupt?.()).catch(() => {
1490
+ });
1491
+ } catch {
1492
+ }
1410
1493
  };
1411
1494
  const done = (async () => {
1412
1495
  const preInit = [];
@@ -2300,6 +2383,23 @@ var TOOL_CATALOG = {
2300
2383
  description: "Ask user a question",
2301
2384
  category: "interaction"
2302
2385
  },
2386
+ SubscribeMcpResource: {
2387
+ description: "Subscribe to an MCP resource stream",
2388
+ category: "mcp",
2389
+ notes: ["Requires an MCP server that supports resource subscriptions."]
2390
+ },
2391
+ UnsubscribeMcpResource: {
2392
+ description: "Unsubscribe from an MCP resource stream",
2393
+ category: "mcp"
2394
+ },
2395
+ SubscribePolling: {
2396
+ description: "Subscribe to periodic polling",
2397
+ category: "mcp"
2398
+ },
2399
+ UnsubscribePolling: {
2400
+ description: "Unsubscribe from periodic polling",
2401
+ category: "mcp"
2402
+ },
2303
2403
  TeamDelete: {
2304
2404
  description: "Delete team (may need shutdown_approved first)",
2305
2405
  category: "agent",
@@ -2654,7 +2754,7 @@ function buildResult(sessionManager, toolCache, input) {
2654
2754
  if (e.type !== "progress") return true;
2655
2755
  const d = e.data;
2656
2756
  const progressType = d?.type;
2657
- return progressType !== "tool_progress" && progressType !== "auth_status";
2757
+ return progressType !== "tool_progress" && progressType !== "auth_status" && progressType !== "task_progress" && progressType !== "hook_progress";
2658
2758
  });
2659
2759
  }
2660
2760
  return filtered;
@@ -3595,7 +3695,7 @@ function registerResources(server, deps) {
3595
3695
  }
3596
3696
 
3597
3697
  // src/server.ts
3598
- var SERVER_VERSION = true ? "2.4.8" : "0.0.0-dev";
3698
+ var SERVER_VERSION = true ? "2.5.0" : "0.0.0-dev";
3599
3699
  function createServerContext(serverCwd) {
3600
3700
  const sessionManager = new SessionManager();
3601
3701
  const server = new McpServer(