Building an agent on the Claude Agent SDK

Claude Code as a library — and the field almost everyone misreads. We ran the same agent twice: allowedTools is an auto-approve list, not a sandbox, and the first run called Bash despite Bash not being on it.