chore(deps): bump the npm-production group across 1 directory with 4 updates

[dependabot]

Bumps the npm-production group with 4 updates in the / directory: @anthropic-ai/claude-agent-sdk, ink, react and smol-toml.

Updates @anthropic-ai/claude-agent-sdk from 0.3.193 to 0.3.240

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.240

What's changed

• Updated to parity with Claude Code v2.1.240

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.240
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.240
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.240
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.240

v0.3.239

What's changed

• total_cost_usd / modelUsage.costUSD now include the 1.1× US-only-inference (data residency) multiplier when the response reports inference_geo: "us"
• A result held back for background subagents in one-shot mode now reports total_cost_usd, duration_api_ms and modelUsage as of its release, not the turn-end snapshot
• Fixed SYSTEM_PROMPT_DYNAMIC_BOUNDARY in an array systemPrompt being sent to the model as literal text on Bedrock, Vertex, Foundry, and gateway providers
• A repeated initialize on a running process is now followed by a background_tasks_changed snapshot of the live background tasks, so reconnecting hosts see work that is still running

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.239
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.239
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.239
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.239

v0.3.238

What's changed

• Added is_backgrounded and spawn_depth to task_started events for subagent tasks (is_backgrounded also on background Bash tasks)
• Added suppressOriginalPrompt to UserPromptExpansion hook output, matching UserPromptSubmit
• Added command_lifecycle state refused: a cross-session peer message the session's receive-side policy declines now reports this terminal state instead of producing no lifecycle frames
• Fixed SDK hook callbacks silently not applying after a host re-sends initialize to an already-running CLI; the response now reports hooks_applied
• Fixed CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION=true not keeping prompt_suggestion messages on when the account is near, but not over, its usage limit
• Changed vcs_state_changed push events to emit one event per pushed branch

Update

</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.240

• Updated to parity with Claude Code v2.1.240

0.3.239

• total_cost_usd / modelUsage.costUSD now include the 1.1× US-only-inference (data residency) multiplier when the response reports inference_geo: "us"
• A result held back for background subagents in one-shot mode now reports total_cost_usd, duration_api_ms and modelUsage as of its release, not the turn-end snapshot
• Fixed SYSTEM_PROMPT_DYNAMIC_BOUNDARY in an array systemPrompt being sent to the model as literal text on Bedrock, Vertex, Foundry, and gateway providers
• A repeated initialize on a running process is now followed by a background_tasks_changed snapshot of the live background tasks, so reconnecting hosts see work that is still running

0.3.238

• Added is_backgrounded and spawn_depth to task_started events for subagent tasks (is_backgrounded also on background Bash tasks)
• Added suppressOriginalPrompt to UserPromptExpansion hook output, matching UserPromptSubmit
• Added command_lifecycle state refused: a cross-session peer message the session's receive-side policy declines now reports this terminal state instead of producing no lifecycle frames
• Fixed SDK hook callbacks silently not applying after a host re-sends initialize to an already-running CLI; the response now reports hooks_applied
• Fixed CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION=true not keeping prompt_suggestion messages on when the account is near, but not over, its usage limit
• Changed vcs_state_changed push events to emit one event per pushed branch

0.3.237

• Updated to parity with Claude Code v2.1.237

0.3.236

• PostToolUse hooks can return hookSpecificOutput.classifierContext, a short host-asserted note about a tool call's result that the auto mode permission classifier reads alongside that result

0.3.235

• Updated to parity with Claude Code v2.1.235

0.3.234

• Removed unused bypass_permissions_disabled from ExitReason type; the value was never emitted — TypeScript consumers with an explicit case branch get a compile error on upgrade (runtime unaffected)
• Updated the ApiKeySource type to include the values system/init actually reports (ANTHROPIC_API_KEY, apiKeyHelper, /login managed key, none)
• vcs_state_changed events report the directory the shell finished in (an inner cd is reflected)
• A peer origin injected by the host may declare the sending session's permission class (fromMode) so a same-class message is delivered to a recipient that runs without asking
• SDKSystemMessage (system/init) gains an optional effort field: the session's applied effort level, or null when none is sent. Set on Remote Control bridge init frames

0.3.233

• Notification hooks now fire for pending permission prompts on the SDK path, matching the interactive REPL behavior
• Todo/task-tracking tools (TaskCreate/TaskGet/TaskUpdate/TaskList, TodoWrite) are no longer in the default tool surface on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; name them in the tools option or reference them in allowedTools (or set CLAUDE_CODE_ENABLE_TODO_TOOLS=1) to keep them

0.3.232

• Subagent MCP tool_result frames whose result carries _meta now emit tool_use_result as { content, _meta } (matching main-loop frames) instead of a bare value
• /context result messages now carry a structured context_usage payload (new SDKContextUsage type), so consumers can render the context-usage card without parsing the markdown table
• vcs_state_changed events now populate the branch field for push operations, sourced from the pushed ref

... (truncated)

Commits

• bfa6b84 chore: Update CHANGELOG.md
• ae7e3dd chore: Update CHANGELOG.md
• c4fdbe3 chore: Update CHANGELOG.md
• 591a180 chore: Update CHANGELOG.md
• d933c99 chore: Update CHANGELOG.md
• 076593f chore: Update CHANGELOG.md
• a616205 chore: Update CHANGELOG.md
• 73a28ab chore: Update CHANGELOG.md
• 8716a39 chore: Update CHANGELOG.md
• b5321a4 chore: Update CHANGELOG.md
• Additional commits viewable in compare view

Updates ink from 7.0.1 to 7.1.1

Release notes

Sourced from ink's releases.

v7.1.1

• Fix: Preserve last <Static> line erased after a full-clear frame (#974) e51dfdd
• Make measureElement() also return position coordinates (#968) c073b27

---

vadimdemedes/ink@v7.1.0...v7.1.1

v7.1.0

• Add suspendTerminal() to hand the terminal to a child process (#972) 9e8ed1f

---

vadimdemedes/ink@v7.0.6...v7.1.0

v7.0.6

• Fix stale frames on Windows when output exactly fills the terminal (#971) 2c08d55

---

vadimdemedes/ink@v7.0.5...v7.0.6

v7.0.5

• Fix: Handle incomplete stack frames in error overview (#965) b2350c1

---

vadimdemedes/ink@v7.0.4...v7.0.5

v7.0.4

• Fix: Share resize listener via emitLayoutListeners instead of per-hook listeners (#952) 89d43d8
• Fix: Remove useEffectEvent functions from useEffect dependency arrays (#960) 9d534f7

---

vadimdemedes/ink@v7.0.3...v7.0.4

v7.0.3

• Fix: Drop stale <Static> output from fullStaticOutput on identity change (#950) 669c438
• Fix: <Static> remount via key change drops new items (#948) be9f44c
• Fix useBoxMetrics not accepting ref objects with an initial null value (#945) 7c2267c

---

vadimdemedes/ink@v7.0.2...v7.0.3

v7.0.2

• Fix: Defer raw mode disable to prevent process hang on component swap dd052ea

---

... (truncated)

Commits

• 70af033 7.1.1
• e51dfdd Fix: Preserve last \<Static> line erased after a full-clear frame (#974)
• 665eb44 Fix docs
• c073b27 Make measureElement() also return position coordinates (#968)
• 25766ae 7.1.0
• 9e8ed1f Add suspendTerminal() to hand the terminal to a child process (#972)
• c41a7a0 7.0.6
• 2c08d55 Fix stale frames on Windows when output exactly fills the terminal (#971)
• cb222fe 7.0.5
• dca5c06 Fix: Update to xo 2 (#962)
• Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates smol-toml from 1.7.0 to 1.8.0

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

• feat: stringify temporal objects by @​Gouvernathor and @​cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

• refactor: improve performance of the parser by @​cyyynthia
• chore: revert sourcemap publishing by @​cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

⚠️ Includes a fix for GHSA-7w5x-hrqm-74c2

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

Commits

• 6d0f477 chore: bump version
• 97e9713 docs: mention temporal api
• 7a3068d perf: ubench opt for instanceof Date
• 7e8c09a feat: stringify temporal
• 19239d0 chore: bump version
• 5f55c3a chore: revert sourcemap publishing
• 5c26f1b chore: update benchmarks
• 92832d2 refactor: better logic orchestration in structs
• 2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
• e6017c4 ci: use staged publish
• Additional commits viewable in compare view

[jonathansantilli]

@dependabot rebase

[dependabot]

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇