Build(deps): Bump @anthropic-ai/claude-agent-sdk from 0.3.221 to 0.3.238

[dependabot]

Bumps @anthropic-ai/claude-agent-sdk from 0.3.221 to 0.3.238.

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.238

What's changed

• Added is_backgrounded and spawn_depth to task_started events for subagent tasks (is_backgrounded also on background Bash tasks)
• Added suppressOriginalPrompt to UserPromptExpansion hook output, matching UserPromptSubmit
• Added command_lifecycle state refused: a cross-session peer message the session's receive-side policy declines now reports this terminal state instead of producing no lifecycle frames
• Fixed SDK hook callbacks silently not applying after a host re-sends initialize to an already-running CLI; the response now reports hooks_applied
• Fixed CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION=true not keeping prompt_suggestion messages on when the account is near, but not over, its usage limit
• Changed vcs_state_changed push events to emit one event per pushed branch

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.238
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.238
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.238
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.238

v0.3.237

What's changed

• Updated to parity with Claude Code v2.1.237

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.237
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.237
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.237
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.237

v0.3.236

What's changed

• PostToolUse hooks can return hookSpecificOutput.classifierContext, a short host-asserted note about a tool call's result that the auto mode permission classifier reads alongside that result

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.236
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.236
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.238

• Added is_backgrounded and spawn_depth to task_started events for subagent tasks (is_backgrounded also on background Bash tasks)
• Added suppressOriginalPrompt to UserPromptExpansion hook output, matching UserPromptSubmit
• Added command_lifecycle state refused: a cross-session peer message the session's receive-side policy declines now reports this terminal state instead of producing no lifecycle frames
• Fixed SDK hook callbacks silently not applying after a host re-sends initialize to an already-running CLI; the response now reports hooks_applied
• Fixed CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION=true not keeping prompt_suggestion messages on when the account is near, but not over, its usage limit
• Changed vcs_state_changed push events to emit one event per pushed branch

0.3.237

• Updated to parity with Claude Code v2.1.237

0.3.236

• PostToolUse hooks can return hookSpecificOutput.classifierContext, a short host-asserted note about a tool call's result that the auto mode permission classifier reads alongside that result

0.3.235

• Updated to parity with Claude Code v2.1.235

0.3.234

• Removed unused bypass_permissions_disabled from ExitReason type; the value was never emitted — TypeScript consumers with an explicit case branch get a compile error on upgrade (runtime unaffected)
• Updated the ApiKeySource type to include the values system/init actually reports (ANTHROPIC_API_KEY, apiKeyHelper, /login managed key, none)
• vcs_state_changed events report the directory the shell finished in (an inner cd is reflected)
• A peer origin injected by the host may declare the sending session's permission class (fromMode) so a same-class message is delivered to a recipient that runs without asking
• SDKSystemMessage (system/init) gains an optional effort field: the session's applied effort level, or null when none is sent. Set on Remote Control bridge init frames

0.3.233

• Notification hooks now fire for pending permission prompts on the SDK path, matching the interactive REPL behavior
• Todo/task-tracking tools (TaskCreate/TaskGet/TaskUpdate/TaskList, TodoWrite) are no longer in the default tool surface on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; name them in the tools option or reference them in allowedTools (or set CLAUDE_CODE_ENABLE_TODO_TOOLS=1) to keep them

0.3.232

• Subagent MCP tool_result frames whose result carries _meta now emit tool_use_result as { content, _meta } (matching main-loop frames) instead of a bare value
• /context result messages now carry a structured context_usage payload (new SDKContextUsage type), so consumers can render the context-usage card without parsing the markdown table
• vcs_state_changed events now populate the branch field for push operations, sourced from the pushed ref

0.3.231

• Updated to parity with Claude Code v2.1.231

0.3.230

• Updated to parity with Claude Code v2.1.230

0.3.229

... (truncated)

Commits

• c4fdbe3 chore: Update CHANGELOG.md
• 591a180 chore: Update CHANGELOG.md
• d933c99 chore: Update CHANGELOG.md
• 076593f chore: Update CHANGELOG.md
• a616205 chore: Update CHANGELOG.md
• 73a28ab chore: Update CHANGELOG.md
• 8716a39 chore: Update CHANGELOG.md
• b5321a4 chore: Update CHANGELOG.md
• 71dfabb chore: Update CHANGELOG.md
• 0a2639d chore: Update CHANGELOG.md
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)