@leo000001/claude-code-mcp 2.5.0 → 2.8.0

package/CHANGELOG.md

@@ -2,7 +2,17 @@
 
 ## Unreleased
 
-- (TBD)
+### Improvements
+
+- Upgrade `@anthropic-ai/claude-agent-sdk` to `^0.2.81` and align exposed option passthrough with current SDK fields (`toolConfig`, `agentProgressSummaries`, `settings`).
+- Expand SDK stream/event mapping for `rate_limit_event`, `system/api_retry`, `system/local_command_output`, `system/elicitation_complete`, `system/compact_boundary`, and partial `stream_event` output.
+- Preserve newer SDK metadata in session/results, including `fastModeState` and richer permission prompt labels (`title`, `displayName`).
+- Prefer SDK permission `suggestions` for `allow_for_session` responses and sync session metadata from `system/init` (for example actual model / permission mode).
+
+### Documentation
+
+- Add OpenCode-specific setup and usage guidance, including local MCP config examples and async polling recommendations.
+- Sync README and DESIGN option/message matrices with the current SDK 0.2.81 surface.
 
 ## 2.5.0 (2026-02-27)
 

package/NOTICE.md

@@ -9,7 +9,7 @@ requirements on redistribution and use.
 
 ### Direct dependencies (from `package.json`)
 
-- `@anthropic-ai/claude-agent-sdk@0.2.62` — license is declared as “SEE LICENSE IN README.md” in the package metadata. This package bundles a Claude Code CLI; please review Anthropic's documentation and legal terms referenced by that project before redistributing or deploying.
+- `@anthropic-ai/claude-agent-sdk@0.2.81` — license is declared as “SEE LICENSE IN README.md” in the package metadata. This package bundles a Claude Code CLI; please review Anthropic's documentation and legal terms referenced by that project before redistributing or deploying.
 - `@modelcontextprotocol/sdk@1.27.1` — MIT License
 - `zod@4.3.6` — MIT License
 

package/README.md

@@ -4,7 +4,7 @@
 [![license](https://img.shields.io/npm/l/@leo000001/claude-code-mcp.svg)](https://github.com/xihuai18/claude-code-mcp/blob/HEAD/LICENSE)
 [![node](https://img.shields.io/node/v/@leo000001/claude-code-mcp.svg)](https://nodejs.org)
 
-MCP server that wraps [Claude Code (Claude Agent SDK)](https://docs.anthropic.com/en/docs/claude-code/overview) as tools, enabling any MCP client to invoke Claude Code for autonomous coding tasks. Designed for local use — the MCP server and client are expected to run on the same machine.
+MCP server that wraps [Claude Code (Claude Agent SDK)](https://docs.anthropic.com/en/docs/claude-code/overview) as tools, enabling any MCP client to invoke Claude Code for autonomous coding tasks. Designed for local use — the MCP server and client are expected to run on the same machine. It works especially well with OpenCode/Codex-style clients that prefer async polling and explicit permission decisions.
 
 Inspired by the [Codex MCP](https://developers.openai.com/codex/guides/agents-sdk/) design philosophy — minimum tools, maximum capability.
 
@@ -70,6 +70,26 @@ Add to your MCP client configuration (Claude Desktop, Cursor, etc.):
 claude mcp add --transport stdio claude-code -- npx -y @leo000001/claude-code-mcp
 ```
 
+### OpenCode
+
+Add a local MCP entry in `opencode.json` / `opencode.jsonc` (project) or the global OpenCode config under `~/.config/opencode/`:
+
+```json
+{
+  "mcp": {
+    "claude-code": {
+      "type": "local",
+      "command": ["npx", "-y", "@leo000001/claude-code-mcp"],
+      "enabled": true
+    }
+  }
+}
+```
+
+OpenCode tip: start with `claude_code`, keep the returned `sessionId`, then background-poll with `claude_code_check`. When approvals appear, `decision: "allow_for_session"` is usually the best UX because it reduces repeated prompts for the same tool in a session.
+
+> OpenCode project configs can launch local commands. Only enable repository-level MCP configs in repos you trust.
+
 ### OpenAI Codex CLI
 
 ```bash
@@ -117,7 +137,7 @@ Start a new Claude Code session. The agent autonomously performs coding tasks: r
 | `advanced`                   | object           | No       | Advanced/low-frequency parameters (see below)                                                                                                                                                                 |
 
 <details>
-<summary><code>advanced</code> object parameters (21 low-frequency parameters)</summary>
+<summary><code>advanced</code> object parameters (24 low-frequency parameters)</summary>
 
 | Parameter                             | Type               | Description                                                                                                                                                                                                                            |
 | ------------------------------------- | ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -135,9 +155,12 @@ Start a new Claude Code session. The agent autonomously performs coding tasks: r
 | `advanced.sandbox`                    | object             | Sandbox configuration for isolating shell command execution (e.g., Docker container settings). Default: SDK/Claude Code default                                                                                                        |
 | `advanced.fallbackModel`              | string             | Fallback model if the primary model fails or is unavailable. Default: none                                                                                                                                                             |
 | `advanced.enableFileCheckpointing`    | boolean            | Enable file checkpointing to track file changes during the session. Default: `false`                                                                                                                                                   |
+| `advanced.toolConfig`                 | object             | Per-tool built-in configuration. Example: `{ askUserQuestion: { previewFormat: "html" } }`. Default: none                                                                                                                              |
 | `advanced.includePartialMessages`     | boolean            | When true, includes intermediate streaming messages in the response. Useful for real-time progress monitoring. Default: false                                                                                                          |
 | `advanced.promptSuggestions`          | boolean            | When true, emits post-turn prompt suggestion events (`prompt_suggestion`). Default: `false`                                                                                                                                            |
+| `advanced.agentProgressSummaries`     | boolean            | When true, emits AI-generated summaries on `system/task_progress` events for running subagents. Default: `false`                                                                                                                       |
 | `advanced.strictMcpConfig`            | boolean            | Enforce strict validation of MCP server configurations. Default: `false`                                                                                                                                                               |
+| `advanced.settings`                   | string \| object   | Extra Claude Code flag settings. Pass either a path to a settings JSON file or an inline settings object. Default: none                                                                                                                |
 | `advanced.settingSources`             | string[]           | Which filesystem settings to load. Defaults to `["user", "project", "local"]` (loads all settings and CLAUDE.md). Pass `[]` for SDK isolation mode                                                                                     |
 | `advanced.debug`                      | boolean            | Enable debug mode for verbose logging. Default: `false`                                                                                                                                                                                |
 | `advanced.debugFile`                  | string             | Write debug logs to a specific file path (implicitly enables debug mode). Default: omitted                                                                                                                                             |
@@ -178,7 +201,7 @@ Continue an existing session by sending a follow-up message. The agent retains f
 | `diskResumeConfig`           | object  | No       | Disk resume parameters (see below). Used when `CLAUDE_CODE_MCP_ALLOW_DISK_RESUME=1` and in-memory session is missing     |
 
 <details>
-<summary><code>diskResumeConfig</code> object parameters (31 disk-resume-only parameters)</summary>
+<summary><code>diskResumeConfig</code> object parameters (34 disk-resume-only parameters)</summary>
 
 | Parameter                                     | Type               | Description                                                                                     |
 | --------------------------------------------- | ------------------ | ----------------------------------------------------------------------------------------------- |
@@ -206,9 +229,12 @@ Continue an existing session by sending a follow-up message. The agent retains f
 | `diskResumeConfig.sandbox`                    | object             | Sandbox config for command isolation. Default: SDK/Claude Code default                          |
 | `diskResumeConfig.fallbackModel`              | string             | Fallback model. Default: none                                                                   |
 | `diskResumeConfig.enableFileCheckpointing`    | boolean            | Enable file checkpointing. Default: `false`                                                     |
+| `diskResumeConfig.toolConfig`                 | object             | Per-tool built-in configuration. Default: none                                                  |
 | `diskResumeConfig.includePartialMessages`     | boolean            | Include intermediate streaming messages. Default: `false`                                       |
 | `diskResumeConfig.promptSuggestions`          | boolean            | Emit post-turn prompt suggestion events (`prompt_suggestion`). Default: `false`                 |
+| `diskResumeConfig.agentProgressSummaries`     | boolean            | Emit AI-generated subagent progress summaries. Default: `false`                                 |
 | `diskResumeConfig.strictMcpConfig`            | boolean            | Strict MCP config validation. Default: `false`                                                  |
+| `diskResumeConfig.settings`                   | string \| object   | Extra Claude Code flag settings (path or inline object). Default: none                          |
 | `diskResumeConfig.settingSources`             | string[]           | Which filesystem settings to load. Default: `["user", "project", "local"]`                      |
 | `diskResumeConfig.debug`                      | boolean            | Debug mode. Default: `false`                                                                    |
 | `diskResumeConfig.debugFile`                  | string             | Debug log file path. Default: omitted                                                           |
@@ -260,15 +286,15 @@ Resource templates:
 
 List, inspect, cancel, or interrupt sessions.
 
-| Parameter          | Type    | Required                 | Description                                                                    |
-| ------------------ | ------- | ------------------------ | ------------------------------------------------------------------------------ |
-| `action`           | string  | Yes                      | `"list"`, `"get"`, `"cancel"`, or `"interrupt"`                                |
-| `sessionId`        | string  | For get/cancel/interrupt | Target session ID                                                              |
-| `includeSensitive` | boolean | No                       | Include `cwd`/`systemPrompt`/`agents`/`additionalDirectories` (default: false) |
+| Parameter          | Type    | Required                 | Description                                                                                                          |
+| ------------------ | ------- | ------------------------ | -------------------------------------------------------------------------------------------------------------------- |
+| `action`           | string  | Yes                      | `"list"`, `"get"`, `"cancel"`, or `"interrupt"`                                                                      |
+| `sessionId`        | string  | For get/cancel/interrupt | Target session ID                                                                                                    |
+| `includeSensitive` | boolean | No                       | Include `cwd`/`systemPrompt`/`agents`/`additionalDirectories`/`toolConfig` (default: false; `settings` stays hidden) |
 
 **Returns:** `{ sessions, message?, isError? }`
 
-`sessions[]` now includes lightweight diagnostics fields: `pendingPermissionCount`, `eventCount`, `currentCursor`, `lastEventId`, `ttlMs`, `lastError?`, `lastErrorAt?`, and `redactions[]`.
+`sessions[]` now includes lightweight diagnostics fields: `pendingPermissionCount`, `eventCount`, `currentCursor`, `lastEventId`, `ttlMs`, `lastError?`, `lastErrorAt?`, `fastModeState?`, and `redactions[]`.
 
 ### `claude_code_check` — Poll events and respond to permission requests
 
@@ -291,18 +317,18 @@ Poll session events/results and approve/deny pending permission requests.
 <details>
 <summary><code>pollOptions</code> object parameters (10 fine-grained poll controls)</summary>
 
-| Parameter                             | Type    | Description                                                                                                                                                                                                                           |
-| ------------------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `pollOptions.includeTools`            | boolean | When true, includes `availableTools` (`poll` only). Default: `false` (omitted until session init is received). Derived from SDK `system/init.tools` (internal features may not appear).                                               |
-| `pollOptions.includeEvents`           | boolean | When false, omits `events` (but `nextCursor` still advances). Default: `true`                                                                                                                                                         |
-| `pollOptions.includeActions`          | boolean | When false, omits `actions[]` even if `waiting_permission`. Default: `true`                                                                                                                                                           |
-| `pollOptions.includeResult`           | boolean | When false, omits top-level `result` even when `idle`/`error`. Default: `true`                                                                                                                                                        |
-| `pollOptions.includeUsage`            | boolean | Include `result.usage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`)                                                                                                                                        |
-| `pollOptions.includeModelUsage`       | boolean | Include `result.modelUsage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`)                                                                                                                                   |
-| `pollOptions.includeStructuredOutput` | boolean | Include `result.structuredOutput` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`)                                                                                                                             |
-| `pollOptions.includeTerminalEvents`   | boolean | When true, keeps terminal `result`/`error` events in `events` even if top-level `result` is included. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"`                                                           |
-| `pollOptions.includeProgressEvents`   | boolean | When true, includes noisy SDK progress subtypes (e.g. `tool_progress`, `auth_status`, `system/task_progress`, `system/hook_progress`) as MCP `progress` events. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"` |
-| `pollOptions.maxBytes`                | number  | Approximate max JSON bytes for `events` in this response. When exceeded, events are truncated and `truncatedFields` includes `"events_bytes"`. Default: unlimited                                                                     |
+| Parameter                             | Type    | Description                                                                                                                                                                                                                                               |
+| ------------------------------------- | ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `pollOptions.includeTools`            | boolean | When true, includes `availableTools` (`poll` only). Default: `false` (omitted until session init is received). Derived from SDK `system/init.tools` (internal features may not appear).                                                                   |
+| `pollOptions.includeEvents`           | boolean | When false, omits `events` (but `nextCursor` still advances). Default: `true`                                                                                                                                                                             |
+| `pollOptions.includeActions`          | boolean | When false, omits `actions[]` even if `waiting_permission`. Default: `true`                                                                                                                                                                               |
+| `pollOptions.includeResult`           | boolean | When false, omits top-level `result` even when `idle`/`error`. Default: `true`                                                                                                                                                                            |
+| `pollOptions.includeUsage`            | boolean | Include `result.usage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`)                                                                                                                                                            |
+| `pollOptions.includeModelUsage`       | boolean | Include `result.modelUsage` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`)                                                                                                                                                       |
+| `pollOptions.includeStructuredOutput` | boolean | Include `result.structuredOutput` (default: `true` in `"full"`, `false` in `"minimal"`/`"delta_compact"`)                                                                                                                                                 |
+| `pollOptions.includeTerminalEvents`   | boolean | When true, keeps terminal `result`/`error` events in `events` even if top-level `result` is included. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"`                                                                               |
+| `pollOptions.includeProgressEvents`   | boolean | When true, includes noisy SDK progress subtypes (e.g. `tool_progress`, `auth_status`, `system/api_retry`, `system/task_progress`, `system/hook_progress`) as MCP `progress` events. Default: `false` in `"minimal"`/`"delta_compact"`, `true` in `"full"` |
+| `pollOptions.maxBytes`                | number  | Approximate max JSON bytes for `events` in this response. When exceeded, events are truncated and `truncatedFields` includes `"events_bytes"`. Default: unlimited                                                                                         |
 
 </details>
 
@@ -330,8 +356,11 @@ Notes:
 - `toolValidation` reports whether configured `allowedTools`/`disallowedTools` match runtime-discovered tool names.
 - `compatWarnings` surfaces compatibility hints (for example, unresolved tool names or path/platform mismatch signals) and is **non-blocking**; treat it as advisory unless the session actually fails.
 - Permission `actions[]` include `timeoutMs`, `expiresAt`, and best-effort `remainingMs` to help callers avoid auto-deny timeouts.
+- Permission `actions[]` may also include SDK-provided `title` / `displayName` metadata; clients should prefer those strings when rendering approval UI.
+- For `decision="allow_for_session"`, the server now prefers SDK-provided `suggestions` (for example `addDirectories`) when present, then falls back to a generic per-session tool allow rule.
 - `permission_result` event data is `{ requestId, toolName, behavior, source, message?, interrupt? }` (denial details only present for `deny`).
-- In `"minimal"` mode (default): assistant message events are slimmed (strips `usage`, `model`, `id`, `cache_control` from content blocks); noisy SDK progress subtypes (`tool_progress`, `auth_status`, `system/task_progress`, `system/hook_progress`) are filtered out; `lastEventId`/`lastToolUseId` are omitted; `AgentResult` omits `durationApiMs`/`sessionTotalTurns`/`sessionTotalCostUsd`. Use `responseMode: "full"` or individual `include*` flags to restore any of these.
+- `result.fastModeState` may be present when the SDK reports fast-mode state, and `claude_code_session` surfaces the latest known `fastModeState` for each session.
+- In `"minimal"` mode (default): assistant message events are slimmed (strips `usage`, `model`, `id`, `cache_control` from content blocks); noisy SDK progress subtypes (`tool_progress`, `auth_status`, `system/api_retry`, `system/task_progress`, `system/hook_progress`) are filtered out; `lastEventId`/`lastToolUseId` are omitted; `AgentResult` omits `durationApiMs`/`sessionTotalTurns`/`sessionTotalCostUsd`. Use `responseMode: "full"` or individual `include*` flags to restore any of these.
 - In `"delta_compact"` mode: defaults are optimized for high-frequency polling (`events` and top-level `result` omitted unless explicitly enabled via `pollOptions`), while still returning session status/actions/cursors.
 
 ## Usage Example
@@ -410,6 +439,23 @@ For JSON-based MCP clients (Claude Desktop, Cursor, etc.):
 }
 ```
 
+For OpenCode (`opencode.json` / `opencode.jsonc`):
+
+```json
+{
+  "mcp": {
+    "claude-code": {
+      "type": "local",
+      "command": ["npx", "-y", "@leo000001/claude-code-mcp"],
+      "enabled": true,
+      "environment": {
+        "CLAUDE_CODE_GIT_BASH_PATH": "C:\\Program Files\\Git\\bin\\bash.exe"
+      }
+    }
+  }
+}
+```
+
 For OpenAI Codex CLI (`~/.codex/config.toml`):
 
 ```toml
@@ -493,6 +539,24 @@ CLAUDE_CODE_MCP_ALLOW_DISK_RESUME = "1"
 CLAUDE_CODE_MCP_RESUME_SECRET = "change-me"
 ```
 
+**OpenCode** — add an `environment` block under the local MCP entry:
+
+```json
+{
+  "mcp": {
+    "claude-code": {
+      "type": "local",
+      "command": ["npx", "-y", "@leo000001/claude-code-mcp"],
+      "enabled": true,
+      "environment": {
+        "CLAUDE_CODE_MCP_ALLOW_DISK_RESUME": "1",
+        "CLAUDE_CODE_MCP_RESUME_SECRET": "change-me"
+      }
+    }
+  }
+}
+```
+
 **System-wide** — set via your shell profile or OS settings so all processes inherit them:
 
 ```bash

package/dist/index.js

@@ -231,12 +231,16 @@ var SessionManager = class _SessionManager {
       sandbox: params.sandbox,
       fallbackModel: params.fallbackModel,
       enableFileCheckpointing: params.enableFileCheckpointing,
+      toolConfig: params.toolConfig,
       includePartialMessages: params.includePartialMessages,
       promptSuggestions: params.promptSuggestions,
+      agentProgressSummaries: params.agentProgressSummaries,
       strictMcpConfig: params.strictMcpConfig,
+      settings: params.settings,
       settingSources: params.settingSources,
       debug: params.debug,
       debugFile: params.debugFile,
+      fastModeState: params.fastModeState,
       env: params.env,
       abortController: params.abortController,
       queryInterrupt: params.queryInterrupt
@@ -753,7 +757,8 @@ var SessionManager = class _SessionManager {
       cwd: info.cwd,
       systemPrompt: info.systemPrompt,
       agents: info.agents,
-      additionalDirectories: info.additionalDirectories
+      additionalDirectories: info.additionalDirectories,
+      toolConfig: info.toolConfig
     };
   }
   /** Serialize session info for listing/inspection (redacts sensitive fields) */
@@ -766,8 +771,10 @@ var SessionManager = class _SessionManager {
       agents: _agents,
       additionalDirectories: _additionalDirectories,
       pathToClaudeCodeExecutable: _pathToClaudeCodeExecutable,
+      toolConfig: _toolConfig,
       mcpServers: _mcpServers,
       sandbox: _sandbox,
+      settings: _settings,
       settingSources: _settingSources,
       debugFile: _debugFile,
       env: _env,
@@ -844,7 +851,7 @@ var SessionManager = class _SessionManager {
     const isNoisyProgressEvent = (event) => {
       if (event.type !== "progress") return false;
       const t = event.data?.type;
-      return t === "tool_progress" || t === "auth_status" || t === "task_progress" || t === "hook_progress";
+      return t === "tool_progress" || t === "auth_status" || t === "api_retry" || t === "task_progress" || t === "hook_progress";
     };
     let toDropForSoftLimit = remaining - buffer.maxSize;
     if (toDropForSoftLimit > 0) {
@@ -911,7 +918,6 @@ import { existsSync as existsSync2, statSync } from "fs";
 
 // src/types.ts
 var EFFORT_LEVELS = ["low", "medium", "high", "max"];
-var AGENT_MODELS = ["sonnet", "opus", "haiku", "inherit"];
 var SESSION_ACTIONS = ["list", "get", "cancel", "interrupt"];
 var DEFAULT_SETTING_SOURCES = ["user", "project", "local"];
 var CHECK_ACTIONS = ["poll", "respond_permission"];
@@ -1161,6 +1167,7 @@ function sdkResultToAgentResult(result) {
     sessionTotalTurns: typeof sessionTotalTurns === "number" ? sessionTotalTurns : void 0,
     sessionTotalCostUsd: typeof sessionTotalCostUsd === "number" ? sessionTotalCostUsd : void 0,
     stopReason: result.stop_reason,
+    fastModeState: result.fast_mode_state,
     usage: result.usage,
     modelUsage: result.modelUsage,
     permissionDenials: result.permission_denials
@@ -1204,9 +1211,28 @@ function messageToEvent(msg) {
       }
     };
   }
+  if (msg.type === "stream_event") {
+    return {
+      type: "output",
+      data: {
+        type: "stream_event",
+        event: msg.event,
+        parent_tool_use_id: msg.parent_tool_use_id
+      }
+    };
+  }
   if (msg.type === "tool_use_summary") {
     return { type: "progress", data: { type: "tool_use_summary", summary: msg.summary } };
   }
+  if (msg.type === "system" && msg.subtype === "local_command_output") {
+    return {
+      type: "output",
+      data: {
+        type: "local_command_output",
+        content: msg.content
+      }
+    };
+  }
   if (msg.type === "tool_progress") {
     return {
       type: "progress",
@@ -1237,6 +1263,15 @@ function messageToEvent(msg) {
       data: { type: "status", status: msg.status, permissionMode: msg.permissionMode }
     };
   }
+  if (msg.type === "system" && msg.subtype === "compact_boundary") {
+    return {
+      type: "progress",
+      data: {
+        type: "compact_boundary",
+        compact_metadata: msg.compact_metadata
+      }
+    };
+  }
   if (msg.type === "system" && msg.subtype === "hook_started") {
     return {
       type: "progress",
@@ -1289,6 +1324,19 @@ function messageToEvent(msg) {
       }
     };
   }
+  if (msg.type === "system" && msg.subtype === "api_retry") {
+    return {
+      type: "progress",
+      data: {
+        type: "api_retry",
+        attempt: msg.attempt,
+        max_retries: msg.max_retries,
+        retry_delay_ms: msg.retry_delay_ms,
+        error_status: msg.error_status,
+        error: msg.error
+      }
+    };
+  }
   if (msg.type === "system" && msg.subtype === "task_started") {
     return {
       type: "progress",
@@ -1297,7 +1345,8 @@ function messageToEvent(msg) {
         task_id: msg.task_id,
         tool_use_id: msg.tool_use_id,
         description: msg.description,
-        task_type: msg.task_type
+        task_type: msg.task_type,
+        prompt: msg.prompt
       }
     };
   }
@@ -1310,7 +1359,8 @@ function messageToEvent(msg) {
         tool_use_id: msg.tool_use_id,
         description: msg.description,
         usage: msg.usage,
-        last_tool_name: msg.last_tool_name
+        last_tool_name: msg.last_tool_name,
+        summary: msg.summary
       }
     };
   }
@@ -1328,7 +1378,17 @@ function messageToEvent(msg) {
       }
     };
   }
-  if (msg.type === "rate_limit" || msg.type === "prompt_suggestion") {
+  if (msg.type === "system" && msg.subtype === "elicitation_complete") {
+    return {
+      type: "progress",
+      data: {
+        type: "elicitation_complete",
+        mcp_server_name: msg.mcp_server_name,
+        elicitation_id: msg.elicitation_id
+      }
+    };
+  }
+  if (msg.type === "rate_limit_event" || msg.type === "prompt_suggestion") {
     const rest = { ...msg };
     delete rest.type;
     delete rest.uuid;
@@ -1416,8 +1476,10 @@ function consumeQuery(params) {
       requestId,
       toolName,
       input: normalizedInput,
-      summary: summarizePermission(toolName, normalizedInput),
-      description: describeTool(toolName, params.toolCache),
+      summary: options2.title ?? summarizePermission(toolName, normalizedInput),
+      title: options2.title,
+      displayName: options2.displayName,
+      description: options2.description ?? describeTool(toolName, params.toolCache),
       decisionReason: options2.decisionReason,
       blockedPath: options2.blockedPath,
       toolUseID: options2.toolUseID,
@@ -1514,6 +1576,11 @@ function consumeQuery(params) {
             params.toolCache?.updateFromInit(message.tools);
             params.onInit?.(message);
             params.sessionManager.setInitTools(message.session_id, message.tools);
+            params.sessionManager.update(message.session_id, {
+              model: message.model,
+              permissionMode: message.permissionMode,
+              fastModeState: message.fast_mode_state
+            });
             activeSessionId = message.session_id;
             if (!sessionIdResolved && shouldWaitForInit) {
               sessionIdResolved = true;
@@ -1580,6 +1647,7 @@ function consumeQuery(params) {
                 status: agentResult.isError ? "error" : "idle",
                 totalTurns: sessionTotalTurns,
                 totalCostUsd: sessionTotalCostUsd,
+                fastModeState: agentResult.fastModeState,
                 abortController: void 0,
                 queryInterrupt: void 0
               });
@@ -1587,6 +1655,7 @@ function consumeQuery(params) {
               params.sessionManager.update(sessionId2, {
                 totalTurns: sessionTotalTurns,
                 totalCostUsd: sessionTotalCostUsd,
+                fastModeState: agentResult.fastModeState,
                 abortController: void 0,
                 queryInterrupt: void 0
               });
@@ -1821,10 +1890,14 @@ function buildOptions(src) {
   if (src.fallbackModel !== void 0) opts.fallbackModel = src.fallbackModel;
   if (src.enableFileCheckpointing !== void 0)
     opts.enableFileCheckpointing = src.enableFileCheckpointing;
+  if (src.toolConfig !== void 0) opts.toolConfig = src.toolConfig;
   if (src.includePartialMessages !== void 0)
     opts.includePartialMessages = src.includePartialMessages;
   if (src.promptSuggestions !== void 0) opts.promptSuggestions = src.promptSuggestions;
+  if (src.agentProgressSummaries !== void 0)
+    opts.agentProgressSummaries = src.agentProgressSummaries;
   if (src.strictMcpConfig !== void 0) opts.strictMcpConfig = src.strictMcpConfig;
+  if (src.settings !== void 0) opts.settings = src.settings;
   if (src.settingSources !== void 0) opts.settingSources = src.settingSources;
   else opts.settingSources = DEFAULT_SETTING_SOURCES;
   if (src.debug !== void 0) opts.debug = src.debug;
@@ -1861,9 +1934,12 @@ function toSessionCreateParams(input) {
     sandbox: src.sandbox,
     fallbackModel: src.fallbackModel,
     enableFileCheckpointing: src.enableFileCheckpointing,
+    toolConfig: src.toolConfig,
     includePartialMessages: src.includePartialMessages,
     promptSuggestions: src.promptSuggestions,
+    agentProgressSummaries: src.agentProgressSummaries,
     strictMcpConfig: src.strictMcpConfig,
+    settings: src.settings,
     settingSources: src.settingSources ?? DEFAULT_SETTING_SOURCES,
     debug: src.debug,
     debugFile: src.debugFile,
@@ -2512,11 +2588,15 @@ function toPermissionResult(params) {
     interrupt: params.interrupt
   };
 }
-function appendAllowForSessionUpdate(updates, toolName) {
+function appendAllowForSessionUpdate(updates, suggestions, toolName) {
+  const merged = [...updates ?? []];
+  if (Array.isArray(suggestions) && suggestions.length > 0) {
+    return [...merged, ...suggestions];
+  }
   const normalizedToolName = toolName?.trim();
-  if (!normalizedToolName) return updates;
+  if (!normalizedToolName) return merged.length > 0 ? merged : void 0;
   return [
-    ...updates ?? [],
+    ...merged,
     {
       type: "addRules",
       behavior: "allow",
@@ -2754,7 +2834,7 @@ function buildResult(sessionManager, toolCache, input) {
         if (e.type !== "progress") return true;
         const d = e.data;
         const progressType = d?.type;
-        return progressType !== "tool_progress" && progressType !== "auth_status" && progressType !== "task_progress" && progressType !== "hook_progress";
+        return progressType !== "tool_progress" && progressType !== "auth_status" && progressType !== "api_retry" && progressType !== "task_progress" && progressType !== "hook_progress";
       });
     }
     return filtered;
@@ -2804,6 +2884,8 @@ function buildResult(sessionManager, toolCache, input) {
         toolName: req.toolName,
         input: req.input,
         summary: req.summary,
+        title: req.title,
+        displayName: req.displayName,
         decisionReason: req.decisionReason,
         blockedPath: req.blockedPath,
         toolUseID: req.toolUseID,
@@ -2897,6 +2979,7 @@ function executeClaudeCodeCheck(input, sessionManager, toolCache, requestSignal)
   const pendingRequest = input.decision === "allow_for_session" ? sessionManager.getPendingPermission(input.sessionId, input.requestId) : void 0;
   const updatedPermissions = input.decision === "allow_for_session" ? appendAllowForSessionUpdate(
     input.permissionOptions?.updatedPermissions,
+    pendingRequest?.suggestions,
     pendingRequest?.toolName
   ) : input.permissionOptions?.updatedPermissions;
   const ok = sessionManager.finishRequest(
@@ -2929,6 +3012,7 @@ var ALWAYS_REDACTED_FIELDS = [
   "env",
   "mcpServers",
   "sandbox",
+  "settings",
   "debugFile",
   "pathToClaudeCodeExecutable"
 ];
@@ -2936,7 +3020,8 @@ var CONDITIONAL_REDACTED_FIELDS = [
   "cwd",
   "systemPrompt",
   "agents",
-  "additionalDirectories"
+  "additionalDirectories",
+  "toolConfig"
 ];
 function buildRedactions(includeSensitive) {
   const redactions = [];
@@ -3121,6 +3206,7 @@ function buildSessionRedactions(includeSensitive) {
     { field: "env", reason: "secret_or_internal" },
     { field: "mcpServers", reason: "secret_or_internal" },
     { field: "sandbox", reason: "secret_or_internal" },
+    { field: "settings", reason: "secret_or_internal" },
     { field: "debugFile", reason: "secret_or_internal" },
     { field: "pathToClaudeCodeExecutable", reason: "secret_or_internal" }
   ];
@@ -3129,7 +3215,8 @@ function buildSessionRedactions(includeSensitive) {
       { field: "cwd", reason: "sensitive_by_default" },
       { field: "systemPrompt", reason: "sensitive_by_default" },
       { field: "agents", reason: "sensitive_by_default" },
-      { field: "additionalDirectories", reason: "sensitive_by_default" }
+      { field: "additionalDirectories", reason: "sensitive_by_default" },
+      { field: "toolConfig", reason: "sensitive_by_default" }
     );
   }
   return redactions;
@@ -3353,6 +3440,7 @@ function registerResources(server, deps) {
         "Notes:",
         "- `respond_user_input` is not supported on this backend.",
         "- `allowedTools` is pre-approval by default; set `strictAllowedTools=true` for strict allowlist behavior.",
+        "- OpenCode/Codex-style clients usually work best when they store `sessionId` + `nextCursor` and answer approvals with `decision=allow_for_session`.",
         "- Prefer `responseMode='delta_compact'` for high-frequency polling."
       ].join("\n"),
       "text/markdown"
@@ -3695,7 +3783,7 @@ function registerResources(server, deps) {
 }
 
 // src/server.ts
-var SERVER_VERSION = true ? "2.5.0" : "0.0.0-dev";
+var SERVER_VERSION = true ? "2.8.0" : "0.0.0-dev";
 function createServerContext(serverCwd) {
   const sessionManager = new SessionManager();
   const server = new McpServer(
@@ -3735,7 +3823,7 @@ function createServerContext(serverCwd) {
     prompt: z.string(),
     tools: z.array(z.string()).optional().describe("Default: inherit"),
     disallowedTools: z.array(z.string()).optional().describe("Default: none"),
-    model: z.enum(AGENT_MODELS).optional().describe("Default: inherit"),
+    model: z.string().optional().describe("Default: inherit"),
     maxTurns: z.number().int().positive().optional().describe("Default: none"),
     mcpServers: z.array(z.union([z.string(), z.record(z.string(), z.unknown())])).optional().describe("Default: inherit"),
     skills: z.array(z.string()).optional().describe("Default: none"),
@@ -3784,9 +3872,12 @@ function createServerContext(serverCwd) {
     sandbox: z.record(z.string(), z.unknown()).optional().describe("Default: none"),
     fallbackModel: z.string().optional().describe("Default: none"),
     enableFileCheckpointing: z.boolean().optional().describe("Default: false"),
+    toolConfig: z.record(z.string(), z.unknown()).optional().describe("Default: none"),
     includePartialMessages: z.boolean().optional().describe("Default: false"),
     promptSuggestions: z.boolean().optional().describe("Default: false"),
+    agentProgressSummaries: z.boolean().optional().describe("Default: false"),
     strictMcpConfig: z.boolean().optional().describe("Default: false"),
+    settings: z.union([z.string(), z.record(z.string(), z.unknown())]).optional().describe("Default: none"),
     settingSources: z.array(z.enum(["user", "project", "local"])).optional().describe("Default: ['user','project','local']. []=isolation"),
     debug: z.boolean().optional().describe("Default: false"),
     debugFile: z.string().optional().describe("Default: none"),