feat(agent-sdk): migrate to 0.3.198 - #229
Merged
Merged
Conversation
- bump Claude Agent SDK bridge packages and expected SDK version - pass through MCP request_timeout_ms in bridge, wire, config, and status paths - preserve Fable model metadata and artifact descriptions from SDK updates - avoid canUseTool shadow warnings when startup bypass permissions are active - reserve app-owned slash commands so SDK /config cannot override local settings
- Replace the combined model/effort overlay with separate model and thinking effort overlays - Remove tab-based switching inside the dialog - Show the model-dependency note only in the thinking effort dialog - Persist model and effort independently without rewriting the other setting - Add tests for filtered effort levels and separate persistence behavior
- Exclude `[` from the model-id context-suffix regex in model_metadata.ts, removing the polynomial-ReDoS backtracking flagged by js/polynomial-redos - Add least-privilege top-level `permissions: contents: read` to the ci, agent-sdk, and release-dryrun workflows - Scope commit-lint to `pull-requests: read` and grant the security-audit workflow `issues: write` + `checks: write` for issue/check creation - Clears the high-severity ReDoS alert and all nine actions/missing-workflow-permissions findings
- Add Fable 5 and Agent SDK 0.3.198 as the top feature entry - Document the split model and thinking effort config dialogs - Note MCP request timeout metadata preservation - Include workflow permission hardening and SDK dependency update entries
srothgan
enabled auto-merge (squash)
July 2, 2026 06:02
srothgan
disabled auto-merge
July 2, 2026 06:02
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
@anthropic-ai/claude-agent-sdkfrom0.3.193to0.3.198in the root package and bridge package locks.request_timeout_ms./configmodel and thinking effort picker into separate dialogs, with effort options filtered by the selected model.Why
The SDK migration exposes newer model and MCP metadata that the bridge needs to preserve for accurate runtime state, config display, and MCP server updates. The config screen also had too much behavior in one shared model/effort dialog; splitting it makes model selection and effort selection independent while still showing that effort availability depends on the selected model.
Closes #225
Validation
cargo fmt --all -- --checkcargo check --offlinecargo clippy --all-targets --all-features -- -D warningscargo testnpm.cmd --prefix agent-sdk testmainand confirmed the PR body covers all three branch commits.Notes