Build(deps): Update claude-agent-sdk requirement from <0.3,>=0.2.136 to >=0.2.160,<0.3

[dependabot]

Updates the requirements on claude-agent-sdk to permit the latest version.

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.160

Bug Fixes

• Fixed follow-up turns failing after background subagents: When using query() with hooks, can_use_tool, or SDK MCP servers, stdin was closed too early if a subagent finished just before the turn's result arrived. Follow-up turns would then fail with "Stream closed" and the model would report the tool as refused. The SDK now listens for the CLI's session_state_changed messages and keeps stdin open until the CLI reports idle, matching the TypeScript SDK's behavior. A bounded wait ceiling (configurable via CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS, default 10 minutes) prevents indefinite hangs. Older CLIs without state events fall back to the previous close-at-first-result behavior. (#1190, #1279)

Documentation

• Aligned docstrings with the code and fixed docstring formatting (#1293)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.283
• CI: skip wheels over PyPI's per-file limit instead of failing the release (#1309)

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.160/

pip install claude-agent-sdk==0.2.160

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.160

Bug Fixes

• Fixed follow-up turns failing after background subagents: When using query() with hooks, can_use_tool, or SDK MCP servers, stdin was closed too early if a subagent finished just before the turn's result arrived. Follow-up turns would then fail with "Stream closed" and the model would report the tool as refused. The SDK now listens for the CLI's session_state_changed messages and keeps stdin open until the CLI reports idle, matching the TypeScript SDK's behavior. A bounded wait ceiling (configurable via CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS, default 10 minutes) prevents indefinite hangs. Older CLIs without state events fall back to the previous close-at-first-result behavior. (#1190, #1279)

Documentation

• Aligned docstrings with the code and fixed docstring formatting (#1293)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.283
• CI: skip wheels over PyPI's per-file limit instead of failing the release (#1309)

0.2.159

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.281
• Pinned default model for e2e tests to claude-opus-5 to work around CI failures with the CLI's new default model (#1287)

0.2.158

New Features

• verbatim_prompts option: Added ClaudeAgentOptions.verbatim_prompts (default False). When True, user messages are delivered to the CLI exactly as written — no @path file expansion and no slash-command dispatch. This prevents untrusted text inlined into prompts from triggering unintended file reads or command execution. Works with query(), ClaudeSDKClient.connect(), and ClaudeSDKClient.query() for both string and async-iterable prompts. Requires CLI 2.1.248+; a warning is logged on older CLIs. (#1269)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.280
• CI improvements: recompressed wheels and raised the PyPI pre-flight threshold (#1283)

0.2.156

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.276

0.2.155

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.275

0.2.154

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.274

... (truncated)

Commits

• 36f9548 docs: update changelog for v0.2.160
• a076a6a chore: release v0.2.160
• 0615c04 chore: bump bundled CLI version to 2.1.283
• dbc975e fix: keep stdin open until the CLI reports idle so follow-up turns are served...
• 6c3df98 ci: skip wheels over PyPI's per-file limit instead of failing the release (#1...
• 5889056 docs: align docstrings with the code and fix docstring formatting (#1293)
• 3aeceed chore: bump bundled CLI version to 2.1.282
• 2b87034 docs: update changelog for v0.2.159
• 0606b85 chore: release v0.2.159
• 479a65b chore: bump bundled CLI version to 2.1.281
• Additional commits viewable in compare view

[pengfei-threemoonslab]

Held open on purpose. harness/requirements.txt says to raise this floor only after re-running the smoke and a paid Sonnet cell against the new release, and no such run is recorded yet. Fresh installs already resolve to the newest <0.3, so leaving this open costs nothing. Merge it once the paid cell has been run.

Note from a coding agent (Claude Code) during an open-PR review pass.

[pengfei-threemoonslab]

Reviewed commit 4a2c319cf9fc4c129c168d0c1e7e3f7fb7de5574 and the existing hold note.

The diff only raises the developer harness SDK floor from 0.2.136 to 0.2.160, retaining <0.3; it does not change the packaged scanner's dependencies. I found no additional defect in that one-line change. Recommendation: keep the documented hold until the smoke and one paid Sonnet cell have been recorded against the target SDK.

The 0.2.160 upstream release changes stream lifetime around background subagents and follow-up turns, which is relevant to the harness driver. GitHub's CI jobs passed, but the job/step list does not establish that the required paid cell ran. Locally, the 7 mock smoke/Claude-driver tests passed; these do not exercise the real 0.2.160 streaming behavior, and the available environment has SDK 0.2.95. I did not run a paid cell. The existing hold note therefore remains unresolved by this review.

Local advisory verification of the pinned base/head returned control_state=complete, decision=passed; that static result is separate from live SDK compatibility evidence. Before merge, attach the SDK version, smoke result and paid-cell run/result, including usable tool-event and usage capture.

Posted by Codex at the repository owner's request.