@onkernel/sdk 0.103.0 → 0.106.0

package/src/resources/config-registry/analyses.ts

@@ -47,6 +47,22 @@ export class Analyses extends APIResource {
       { query, ...options },
     );
   }
+
+  /**
+   * Requests cancellation of a running project-scoped analysis. Cancellation is
+   * asynchronous; poll the analysis until its status becomes canceled. Repeating the
+   * request after the analysis reaches a terminal state returns the existing
+   * outcome.
+   *
+   * @example
+   * ```ts
+   * const configRegistryResponse =
+   *   await client.configRegistry.analyses.cancel('id');
+   * ```
+   */
+  cancel(id: string, options?: RequestOptions): APIPromise<ConfigRegistryAPI.ConfigRegistryResponse> {
+    return this._client.post(path`/config-registry/analyses/${id}/cancel`, options);
+  }
 }
 
 export interface AnalysisListParams extends OffsetPaginationParams {

package/src/resources/config-registry/config-registry.ts

@@ -104,6 +104,12 @@ export interface Analysis {
    * Lifecycle status of a background analysis.
    */
   status: 'running' | 'completed' | 'failed' | 'canceled' | 'expired';
+
+  /**
+   * The workload description supplied for this analysis. Null when the analysis only
+   * tested connectivity.
+   */
+  intent?: string | null;
 }
 
 export interface AnalysisSummary {
@@ -208,11 +214,11 @@ export interface Evidence {
   success_rate: number;
 
   /**
-   * Most recent contributing run where this config met the success threshold.
-   * Omitted for knowledge assembled from runs that did not independently meet the
-   * threshold.
+   * Most recent contributing run whose evidence supported recommending this
+   * configuration. Omitted when no individual run independently met the
+   * recommendation threshold.
    */
-  last_verified_at?: string | null;
+  last_supported_at?: string | null;
 }
 
 export interface LookupRequest {
@@ -453,7 +459,9 @@ export interface Recommendation {
   evidence: Evidence;
 
   /**
-   * Specificity of knowledge matched for this recommendation.
+   * Specificity of knowledge matched for this recommendation. Exact matches use
+   * knowledge for the requested target; host and domain matches use broader fallback
+   * knowledge.
    */
   match_scope: 'exact' | 'host' | 'domain';
 
@@ -468,13 +476,6 @@ export interface Recommendation {
   proxy: Proxy;
 
   type: 'recommendation';
-
-  /**
-   * Exact matches meet the evidence threshold; host and domain fallbacks are
-   * inferred. Check evidence.last_verified_at for successful verification age and
-   * last_observed_at for the latest evidence.
-   */
-  verification: 'verified' | 'inferred';
 }
 
 /**
@@ -542,8 +543,9 @@ export interface ResolveRequest {
    * any non-HTTPS destination as off-site and will not drive an http one. Kernel
    * uses it to drive the browser further into the site, where it can observe
    * protections that only appear once a session interacts. When this target already
-   * has a verified configuration, the run confirms that one instead of re-deriving
-   * the whole matrix, so supplying an intent narrows what can be recommended.
+   * has a recommended configuration, the run confirms that one instead of
+   * re-deriving the whole matrix, so supplying an intent narrows what can be
+   * recommended.
    */
   intent?: string;
 }
@@ -609,8 +611,9 @@ export interface ConfigRegistryResolveParams {
    * any non-HTTPS destination as off-site and will not drive an http one. Kernel
    * uses it to drive the browser further into the site, where it can observe
    * protections that only appear once a session interacts. When this target already
-   * has a verified configuration, the run confirms that one instead of re-deriving
-   * the whole matrix, so supplying an intent narrows what can be recommended.
+   * has a recommended configuration, the run confirms that one instead of
+   * re-deriving the whole matrix, so supplying an intent narrows what can be
+   * recommended.
    */
   intent?: string;
 }

package/src/resources/invocations.ts

@@ -566,7 +566,7 @@ export namespace InvocationListBrowsersResponse {
     proxy_id?: string;
 
     /**
-     * URL the session was asked to navigate to on creation, if any. Recorded for
+     * URL the session was most recently asked to navigate to, if any. Recorded for
      * debugging. Navigation is fire-and-forget — the URL is dispatched to the browser
      * without waiting for it to load, and any errors (DNS failure, bad status,
      * timeout) are silently dropped. Captures what was requested, not what the browser

package/src/resources/vaults/index.ts

@@ -4,6 +4,7 @@ export {
   Items,
   type AgentcardCheckoutAuthorization,
   type AgentcardCheckoutPreparation,
+  type AgentcardPreparedProcessor,
   type AuthorizeVaultItemOperationRequest,
   type CardVaultItemSpec,
   type CardVaultItemState,

package/src/resources/vaults/items.ts

@@ -256,19 +256,21 @@ export interface AgentcardCheckoutAuthorization {
 }
 
 /**
- * One-use Square checkout preparation. Keep the approval page open through token
- * handoff. The amount is display-only and does not constrain the merchant's
- * eventual charge.
+ * One-use processor-bound checkout preparation. Keep the approval page open
+ * through token handoff. The amount is display-only and does not constrain the
+ * merchant's eventual charge.
  */
 export interface AgentcardCheckoutPreparation {
   browser_id: string;
 
   created_at: string;
 
-  environment: 'production' | 'sandbox';
+  environment: 'production' | 'sandbox' | 'shared';
 
   merchant_origin: string;
 
+  psp: AgentcardPreparedProcessor;
+
   /**
    * Preparation consumed means egress claimed the preparation and it cannot be
    * reused. It does not mean the attempt settled. Use the enclosing item's status as
@@ -289,6 +291,8 @@ export interface AgentcardCheckoutPreparation {
   expires_at?: string;
 }
 
+export type AgentcardPreparedProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago';
+
 /**
  * Authorize a Link card using its existing purchase specification. Use only after
  * explicit user approval and when the item advertises authorize. Do not
@@ -429,9 +433,17 @@ export namespace CardVaultItemSpec {
   }
 }
 
+/**
+ * Issued Link cards retain encrypted card material for the fill operation. Link
+ * cards do not expose aliases or support egress substitution.
+ */
 export type CardVaultItemState = CardVaultItemState.LinkCardState | CardVaultItemState.AgentCardCardState;
 
 export namespace CardVaultItemState {
+  /**
+   * Issued Link cards retain encrypted card material for the fill operation. Link
+   * cards do not expose aliases or support egress substitution.
+   */
   export interface LinkCardState {
     provider: 'link';
 
@@ -451,8 +463,6 @@ export namespace CardVaultItemState {
       | 'declined'
       | 'recovery_required';
 
-    aliases?: ItemsAPI.VaultCardAliases;
-
     domains?: Array<string>;
 
     masks?: LinkCardState.Masks;
@@ -507,9 +517,9 @@ export namespace CardVaultItemState {
     masks?: AgentCardCardState.Masks;
 
     /**
-     * One-use Square checkout preparation. Keep the approval page open through token
-     * handoff. The amount is display-only and does not constrain the merchant's
-     * eventual charge.
+     * One-use processor-bound checkout preparation. Keep the approval page open
+     * through token handoff. The amount is display-only and does not constrain the
+     * merchant's eventual charge.
      */
     preparation?: ItemsAPI.AgentcardCheckoutPreparation;
 
@@ -891,10 +901,9 @@ export interface CredentialVaultItemUpdateRequest {
  *
  * Fill in request order and stop on the first failure. This operation is not
  * atomic: previously filled fields are not rolled back. Never submit the form or
- * click buttons, though input/change events may trigger site behavior. Fill is the
- * preferred browser-checkout path. Aliases remain an alternative for explicitly
- * chosen egress-substitution integrations. Do not automatically retry or fall back
- * to aliases after a failed or indeterminate operation.
+ * click buttons, though input/change events may trigger site behavior. Link cards
+ * use fill for browser checkout and do not expose aliases or support egress
+ * substitution. Do not automatically retry a failed or indeterminate operation.
  *
  * Secret values are never returned or included in operation logs, traces, audit
  * events, or error details. This does not prevent an agent with unrestricted
@@ -947,8 +956,8 @@ export interface FillVaultItemOperationResult {
 }
 
 /**
- * Prepare an unused AgentCard card for Square checkout. Deliver the returned
- * approval URL and keep the approval page open. Poll the item until
+ * Prepare an unused AgentCard card for a supported tokenization checkout. Deliver
+ * the returned approval URL and keep the approval page open. Poll the item until
  * ready_to_submit, then submit native Pay before preparation.expires_at. Readiness
  * lasts at most 30 seconds. Unused preparations expire automatically. Preparations
  * are single-use even after failure or expiry; do not automatically retry and
@@ -956,11 +965,11 @@ export interface FillVaultItemOperationResult {
  */
 export interface PrepareCheckoutVaultItemOperationRequest {
   /**
-   * Required when preparing an unused AgentCard card for Square. Consent is bound to
-   * this browser and declared merchant origin, not a tab. Wait for the item's
-   * ready_to_submit status before native Pay and submit within its readiness
-   * deadline. Unused preparations expire automatically; every preparation is
-   * single-use, including after failure or expiry.
+   * Required when preparing an unused AgentCard card for a supported tokenization
+   * processor. Consent is bound to this browser and declared merchant origin, not a
+   * tab. Wait for the item's ready_to_submit status before native Pay and submit
+   * within its readiness deadline. Unused preparations expire automatically; every
+   * preparation is single-use, including after failure or expiry.
    */
   checkout: VaultCheckoutContext;
 
@@ -1033,11 +1042,11 @@ export namespace VaultCardFillField {
 }
 
 /**
- * Required when preparing an unused AgentCard card for Square. Consent is bound to
- * this browser and declared merchant origin, not a tab. Wait for the item's
- * ready_to_submit status before native Pay and submit within its readiness
- * deadline. Unused preparations expire automatically; every preparation is
- * single-use, including after failure or expiry.
+ * Required when preparing an unused AgentCard card for a supported tokenization
+ * processor. Consent is bound to this browser and declared merchant origin, not a
+ * tab. Wait for the item's ready_to_submit status before native Pay and submit
+ * within its readiness deadline. Unused preparations expire automatically; every
+ * preparation is single-use, including after failure or expiry.
  */
 export interface VaultCheckoutContext {
   /**
@@ -1046,15 +1055,24 @@ export interface VaultCheckoutContext {
   browser_id: string;
 
   /**
-   * Square environment, independent of the AgentCard credential mode.
+   * Use production or sandbox for Square, Braintree and Worldpay; shared for Bambora
+   * and Mercado Pago. Shared endpoints do not establish test mode. Merchant
+   * credentials/configuration determine processor test mode, independently of the
+   * AgentCard credential mode.
    */
-  environment: 'production' | 'sandbox';
+  environment: 'production' | 'sandbox' | 'shared';
 
   /**
-   * Canonical HTTPS origin of the top-level merchant document, not the Square
+   * Canonical HTTPS origin of the top-level merchant document, not a processor
    * iframe. HTTP localhost is accepted for tests.
    */
   merchant_origin: string;
+
+  /**
+   * Tokenization processor. Omit for Square compatibility. Non-Square processors
+   * require multi-processor preparation enablement.
+   */
+  psp?: AgentcardPreparedProcessor;
 }
 
 export interface VaultFillField {
@@ -1190,6 +1208,10 @@ export namespace VaultItem {
      */
     spec: ItemsAPI.CardVaultItemSpec;
 
+    /**
+     * Issued Link cards retain encrypted card material for the fill operation. Link
+     * cards do not expose aliases or support egress substitution.
+     */
     state: ItemsAPI.CardVaultItemState;
 
     type: 'card';
@@ -1384,6 +1406,10 @@ export namespace VaultItemOperationResponse {
      */
     spec: ItemsAPI.CardVaultItemSpec;
 
+    /**
+     * Issued Link cards retain encrypted card material for the fill operation. Link
+     * cards do not expose aliases or support egress substitution.
+     */
     state: ItemsAPI.CardVaultItemState;
 
     type: 'card';
@@ -1723,11 +1749,12 @@ export declare namespace ItemPerformOperationParams {
     id_or_name: string;
 
     /**
-     * Body param: Required when preparing an unused AgentCard card for Square. Consent
-     * is bound to this browser and declared merchant origin, not a tab. Wait for the
-     * item's ready_to_submit status before native Pay and submit within its readiness
-     * deadline. Unused preparations expire automatically; every preparation is
-     * single-use, including after failure or expiry.
+     * Body param: Required when preparing an unused AgentCard card for a supported
+     * tokenization processor. Consent is bound to this browser and declared merchant
+     * origin, not a tab. Wait for the item's ready_to_submit status before native Pay
+     * and submit within its readiness deadline. Unused preparations expire
+     * automatically; every preparation is single-use, including after failure or
+     * expiry.
      */
     checkout: VaultCheckoutContext;
 
@@ -1990,6 +2017,7 @@ export declare namespace Items {
   export {
     type AgentcardCheckoutAuthorization as AgentcardCheckoutAuthorization,
     type AgentcardCheckoutPreparation as AgentcardCheckoutPreparation,
+    type AgentcardPreparedProcessor as AgentcardPreparedProcessor,
     type AuthorizeVaultItemOperationRequest as AuthorizeVaultItemOperationRequest,
     type CardVaultItemSpec as CardVaultItemSpec,
     type CardVaultItemState as CardVaultItemState,

package/src/resources/vaults/vaults.ts

@@ -5,6 +5,7 @@ import * as ItemsAPI from './items';
 import {
   AgentcardCheckoutAuthorization,
   AgentcardCheckoutPreparation,
+  AgentcardPreparedProcessor,
   AuthorizeVaultItemOperationRequest,
   CardVaultItemSpec,
   CardVaultItemState,
@@ -158,6 +159,7 @@ export declare namespace Vaults {
     Items as Items,
     type AgentcardCheckoutAuthorization as AgentcardCheckoutAuthorization,
     type AgentcardCheckoutPreparation as AgentcardCheckoutPreparation,
+    type AgentcardPreparedProcessor as AgentcardPreparedProcessor,
     type AuthorizeVaultItemOperationRequest as AuthorizeVaultItemOperationRequest,
     type CardVaultItemSpec as CardVaultItemSpec,
     type CardVaultItemState as CardVaultItemState,

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.103.0'; // x-release-please-version
+export const VERSION = '0.106.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.103.0";
+export declare const VERSION = "0.106.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.103.0";
+export declare const VERSION = "0.106.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.103.0'; // x-release-please-version
+exports.VERSION = '0.106.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.103.0'; // x-release-please-version
+export const VERSION = '0.106.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map