What
The worker no longer exposes run_one() / runOne(). The replacement, handle_item() / handleItem() / HandleItem(), services one work item that has already been claimed and reads its identifiers from ANTHROPIC_* environment variables, so claiming is now the job of run() or the mid-level poller. The file-tool option unrestricted_paths is gone and raises if passed; use allowed_roots or read_only_roots instead.
Details
- Webhook-driven wake-up is rewritten to drain work through the poller, with a warning against awaiting that drain inside the HTTP request handler.
Evidence
The old unrestricted_paths option is no longer accepted (passing it raises); add directories to allowed_roots instead.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundlehandle_itemallowed_rootsread_only_roots