Claude Agent SDK server

The default ApprovalStore: this process's memory. Answered and closed requests are forgotten after keepMs (10 minutes), so it doesn't grow without bound.

A wait for stores that can't push: reads the request every intervalMs (1s) until it's answered or closed.

A canUseTool that keeps each request in an ApprovalStore and waits for its answer from wherever it's given: your route, a queue, a workflow signal (approvals.answer(id, { approved: true })). Use it on its own when your agent runs somewhere other than streamClaudeAgent. When the SDK stops waiting, the request is closed, so a late answer is refused rather than lost.

The default ClaudeRunStore: this process's memory. It keeps at most maxRuns finished runs (100), forgetting the oldest finished one first; a run still going is never forgotten. Each run keeps at most maxEvents events (5,000): past that, partial-text events are no longer kept (the finished message still is), so a re-attached browser sees text arrive a message at a time instead of as it streams.

Run an agent and stream it to useClaudeAgent.

// app/api/agent/route.ts export async function POST(request: Request) { const { prompt, sessionId } = await request.json() return streamClaudeAgent( ({ canUseTool, abortController }) => query({ prompt, options: { canUseTool, abortController, resume: sessionId, includePartialMessages: true } }), { signal: request.signal, owner: userId, onMessage: (m) => m.type === "result" && recordCost(m.total_cost_usd) } ) }

Stream a run's events again, from index from, then live until it ends: for a browser re-attaching after a reload. 404 when the store doesn't know the run, 403 when owner isn't who started it.

// app/api/agent/[runId]/route.ts export async function GET(request: Request, { params }) { const from = Number(new URL(request.url).searchParams.get("from") ?? 0) return attachClaudeAgentRun(runs, (await params).runId, { from, owner: userId, signal: request.signal }) }

Stop a run this process is running. False when it isn't running here, or owner didn't start it.

Change a running agent's permission mode (the SDK's setPermissionMode), and tell the browser. Only for a query in streaming input mode, as the SDK requires. False when the run isn't here, owner didn't start it, the mode isn't allowed, or the SDK refused. The route is where policy is enforced: a mode PermissionMode shows as locked must be left out of allowed (or the run's modes) too, since anyone can post to the route directly.

Check an answer from the browser against the request it answers, and record it. False when there's no such request, it's already settled, owner isn't the run's owner, or the answer doesn't fit the request (an edited input that isn't an object, answers to a request that isn't a question, a suggestion that wasn't offered).

// app/api/agent/approve/route.ts export async function POST(request: Request) { const { id, ...answer } = await request.json() return Response.json({ ok: await answerClaudeApproval(approvals, id, answer, { owner: userId }) }) }

Answer a waiting permission request in the default, in-memory store. Kept from 1.4; answerClaudeApproval takes a store and the full answer (an edited input, answers to questions, "always allow"). Returns false when there's no such request, or owner doesn't match the run's owner.