@onkernel/sdk 0.114.0 → 0.116.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.116.0](https://github.com/kernel/kernel-node-sdk/compare/v0.115.0...v0.116.0) (2026-10-01)
+
+
+### Features
+
+* chore(stlc): seal custom-code tracking files ([4616669](https://github.com/kernel/kernel-node-sdk/commit/461666905f32dd676b482af118c0e1bdf8d70f07))
+
+## [0.115.0](https://github.com/kernel/kernel-node-sdk/compare/v0.114.0...v0.115.0) (2026-09-30)
+
+
+### Features
+
+* Fetch content for selected results from retained searches ([kernel/kernel#3978](https://github.com/kernel/kernel/pull/3978))
+
 ## [0.114.0](https://github.com/kernel/kernel-node-sdk/compare/v0.113.0...v0.114.0) (2026-09-30)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.114.0",
+  "version": "0.116.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "./index.d.ts",

package/resources/credentials.d.mts

@@ -107,8 +107,26 @@ export interface CreateCredentialRequest {
      */
     sso_provider?: string;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Used for automatic
-     * 2FA during login.
+     * HMAC algorithm used to generate TOTP codes. Defaults to SHA1 and is ignored when
+     * an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Defaults to 6 and is ignored when an
+     * `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Defaults to 30 and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. The range accepts existing shorter seeds and longer seeds regardless of
+     * HMAC algorithm; RFC 6238 recommends unpadded base32 lengths of 32/52/103 for
+     * SHA1/SHA256/SHA512. Only URI parameters present override the corresponding
+     * explicit TOTP fields. Used for automatic 2FA during login.
      */
     totp_secret?: string;
 }
@@ -152,14 +170,29 @@ export interface Credential {
      */
     sso_provider?: string | null;
     /**
-     * Current 6-digit TOTP code. Only included in create/update responses when
-     * totp_secret was just set.
+     * HMAC algorithm used to generate TOTP codes. Defaults to SHA1 for credentials
+     * created before this metadata was stored.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Current TOTP code. Only included in create/update responses when totp_secret was
+     * just set.
      */
     totp_code?: string;
     /**
      * When the totp_code expires. Only included when totp_code is present.
      */
     totp_code_expires_at?: string;
+    /**
+     * Number of digits in generated TOTP codes. Defaults to 6 for credentials created
+     * before this metadata was stored.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Defaults to 30 for credentials created before
+     * this metadata was stored.
+     */
+    totp_period?: number;
     /**
      * The field names stored in this credential's values (e.g., username, password).
      * Values themselves are never returned. Included on single-credential responses
@@ -186,8 +219,26 @@ export interface UpdateCredentialRequest {
      */
     sso_provider?: string | null;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Spaces and
-     * formatting are automatically normalized. Set to empty string to remove.
+     * HMAC algorithm used to generate TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Requires totp_secret and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. Only URI parameters present override the corresponding explicit TOTP
+     * fields. When rotating a raw secret, omitted fields preserve their existing
+     * values; a new URI defaults unspecified fields to SHA1/6/30. Set to empty string
+     * to remove the secret and its metadata.
      */
     totp_secret?: string;
     /**
@@ -231,8 +282,26 @@ export interface CredentialCreateParams {
      */
     sso_provider?: string;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Used for automatic
-     * 2FA during login.
+     * HMAC algorithm used to generate TOTP codes. Defaults to SHA1 and is ignored when
+     * an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Defaults to 6 and is ignored when an
+     * `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Defaults to 30 and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. The range accepts existing shorter seeds and longer seeds regardless of
+     * HMAC algorithm; RFC 6238 recommends unpadded base32 lengths of 32/52/103 for
+     * SHA1/SHA256/SHA512. Only URI parameters present override the corresponding
+     * explicit TOTP fields. Used for automatic 2FA during login.
      */
     totp_secret?: string;
 }
@@ -252,8 +321,26 @@ export interface CredentialUpdateParams {
      */
     sso_provider?: string | null;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Spaces and
-     * formatting are automatically normalized. Set to empty string to remove.
+     * HMAC algorithm used to generate TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Requires totp_secret and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. Only URI parameters present override the corresponding explicit TOTP
+     * fields. When rotating a raw secret, omitted fields preserve their existing
+     * values; a new URI defaults unspecified fields to SHA1/6/30. Set to empty string
+     * to remove the secret and its metadata.
      */
     totp_secret?: string;
     /**

package/resources/credentials.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.mts","sourceRoot":"","sources":["../src/resources/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,+BAA2B;AAEhG,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAG7D;;GAEG;AACH,qBAAa,WAAY,SAAQ,WAAW;IAC1C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAItF;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAI5E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAIxG;;;;;;;;;;OAUG;IACH,IAAI,CACF,KAAK,GAAE,oBAAoB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,2BAA2B,EAAE,UAAU,CAAC;IAIvD;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAOpE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,0BAA0B,CAAC;CAG7F;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;OAIG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAClE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,CAAC,OAAO,WAAW,WAAW,CAAC;IACnC,OAAO,EACL,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,oBAAoB,IAAI,oBAAoB,GAClD,CAAC;CACH"}
+{"version":3,"file":"credentials.d.mts","sourceRoot":"","sources":["../src/resources/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,+BAA2B;AAEhG,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAG7D;;GAEG;AACH,qBAAa,WAAY,SAAQ,WAAW;IAC1C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAItF;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAI5E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAIxG;;;;;;;;;;OAUG;IACH,IAAI,CACF,KAAK,GAAE,oBAAoB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,2BAA2B,EAAE,UAAU,CAAC;IAIvD;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAOpE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,0BAA0B,CAAC;CAG7F;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAClE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,CAAC,OAAO,WAAW,WAAW,CAAC;IACnC,OAAO,EACL,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,oBAAoB,IAAI,oBAAoB,GAClD,CAAC;CACH"}

package/resources/credentials.d.ts

@@ -107,8 +107,26 @@ export interface CreateCredentialRequest {
      */
     sso_provider?: string;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Used for automatic
-     * 2FA during login.
+     * HMAC algorithm used to generate TOTP codes. Defaults to SHA1 and is ignored when
+     * an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Defaults to 6 and is ignored when an
+     * `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Defaults to 30 and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. The range accepts existing shorter seeds and longer seeds regardless of
+     * HMAC algorithm; RFC 6238 recommends unpadded base32 lengths of 32/52/103 for
+     * SHA1/SHA256/SHA512. Only URI parameters present override the corresponding
+     * explicit TOTP fields. Used for automatic 2FA during login.
      */
     totp_secret?: string;
 }
@@ -152,14 +170,29 @@ export interface Credential {
      */
     sso_provider?: string | null;
     /**
-     * Current 6-digit TOTP code. Only included in create/update responses when
-     * totp_secret was just set.
+     * HMAC algorithm used to generate TOTP codes. Defaults to SHA1 for credentials
+     * created before this metadata was stored.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Current TOTP code. Only included in create/update responses when totp_secret was
+     * just set.
      */
     totp_code?: string;
     /**
      * When the totp_code expires. Only included when totp_code is present.
      */
     totp_code_expires_at?: string;
+    /**
+     * Number of digits in generated TOTP codes. Defaults to 6 for credentials created
+     * before this metadata was stored.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Defaults to 30 for credentials created before
+     * this metadata was stored.
+     */
+    totp_period?: number;
     /**
      * The field names stored in this credential's values (e.g., username, password).
      * Values themselves are never returned. Included on single-credential responses
@@ -186,8 +219,26 @@ export interface UpdateCredentialRequest {
      */
     sso_provider?: string | null;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Spaces and
-     * formatting are automatically normalized. Set to empty string to remove.
+     * HMAC algorithm used to generate TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Requires totp_secret and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. Only URI parameters present override the corresponding explicit TOTP
+     * fields. When rotating a raw secret, omitted fields preserve their existing
+     * values; a new URI defaults unspecified fields to SHA1/6/30. Set to empty string
+     * to remove the secret and its metadata.
      */
     totp_secret?: string;
     /**
@@ -231,8 +282,26 @@ export interface CredentialCreateParams {
      */
     sso_provider?: string;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Used for automatic
-     * 2FA during login.
+     * HMAC algorithm used to generate TOTP codes. Defaults to SHA1 and is ignored when
+     * an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Defaults to 6 and is ignored when an
+     * `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Defaults to 30 and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. The range accepts existing shorter seeds and longer seeds regardless of
+     * HMAC algorithm; RFC 6238 recommends unpadded base32 lengths of 32/52/103 for
+     * SHA1/SHA256/SHA512. Only URI parameters present override the corresponding
+     * explicit TOTP fields. Used for automatic 2FA during login.
      */
     totp_secret?: string;
 }
@@ -252,8 +321,26 @@ export interface CredentialUpdateParams {
      */
     sso_provider?: string | null;
     /**
-     * Base32-encoded TOTP secret for generating one-time passwords. Spaces and
-     * formatting are automatically normalized. Set to empty string to remove.
+     * HMAC algorithm used to generate TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the algorithm.
+     */
+    totp_algorithm?: 'SHA1' | 'SHA256' | 'SHA512';
+    /**
+     * Number of digits in generated TOTP codes. Requires totp_secret and is ignored
+     * when an `otpauth://` URI supplies the digit count.
+     */
+    totp_digits?: number;
+    /**
+     * TOTP rotation period in seconds. Requires totp_secret and is ignored when an
+     * `otpauth://` URI supplies the period.
+     */
+    totp_period?: number;
+    /**
+     * Accepts a 16-128 character base32-encoded TOTP secret or an `otpauth://totp/...`
+     * URI. Only URI parameters present override the corresponding explicit TOTP
+     * fields. When rotating a raw secret, omitted fields preserve their existing
+     * values; a new URI defaults unspecified fields to SHA1/6/30. Set to empty string
+     * to remove the secret and its metadata.
      */
     totp_secret?: string;
     /**

package/resources/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/resources/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,8BAA2B;AAEhG,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAG7D;;GAEG;AACH,qBAAa,WAAY,SAAQ,WAAW;IAC1C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAItF;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAI5E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAIxG;;;;;;;;;;OAUG;IACH,IAAI,CACF,KAAK,GAAE,oBAAoB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,2BAA2B,EAAE,UAAU,CAAC;IAIvD;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAOpE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,0BAA0B,CAAC;CAG7F;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;OAIG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAClE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,CAAC,OAAO,WAAW,WAAW,CAAC;IACnC,OAAO,EACL,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,oBAAoB,IAAI,oBAAoB,GAClD,CAAC;CACH"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/resources/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,8BAA2B;AAEhG,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAG7D;;GAEG;AACH,qBAAa,WAAY,SAAQ,WAAW;IAC1C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAItF;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAI5E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAIxG;;;;;;;;;;OAUG;IACH,IAAI,CACF,KAAK,GAAE,oBAAoB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,2BAA2B,EAAE,UAAU,CAAC;IAIvD;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAOpE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,0BAA0B,CAAC;CAG7F;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAClE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,CAAC,OAAO,WAAW,WAAW,CAAC;IACnC,OAAO,EACL,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,oBAAoB,IAAI,oBAAoB,GAClD,CAAC;CACH"}

package/resources/search/contents.d.mts

@@ -7,16 +7,24 @@ import { RequestOptions } from "../../internal/request-options.mjs";
  */
 export declare class Contents extends APIResource {
     /**
-     * Deferred result-content retrieval is reserved but not available in this release.
-     * Requests return 404 until the retrieval implementation is shipped. X-Request-Id
-     * identifies this request separately from the search resource.
+     * Retrieves selected results from a retained search. Provide exactly one of
+     * result_ids or limit; the latter fetches the top results. Content defaults to
+     * source:auto. Responses preserve result_ids order. Unknown result IDs are
+     * rejected before retrieval starts. Missing, expired, or inaccessible searches
+     * return 404. Once retrieval begins, return one outcome per selected result,
+     * including timeout entries for work unfinished at the overall deadline. Browser
+     * retrievals run sequentially in result order, so later results may time out when
+     * earlier pages are slow. X-Request-Id identifies this request separately from the
+     * search resource.
      *
      * @example
      * ```ts
-     * await client.search.contents.fetch('srch_abc123');
+     * const response = await client.search.contents.fetch(
+     *   'srch_abc123',
+     * );
      * ```
      */
-    fetch(id: string, body: ContentFetchParams, options?: RequestOptions): APIPromise<void>;
+    fetch(id: string, body: ContentFetchParams, options?: RequestOptions): APIPromise<Response>;
 }
 export interface FetchRequest {
     /**
@@ -44,32 +52,33 @@ export declare namespace FetchRequest {
      */
     interface Content {
         /**
-         * Invalid with source=provider. Supplying browser_id requires source=browser so
-         * the chosen identity is not bypassed.
+         * Requires source=auto or source=browser in deferred retrieval.
          */
         browser?: Content.Browser;
         format?: 'markdown' | 'text';
         /**
-         * Maximum acceptable age of cached page content, measured from origin retrieval. 0
-         * forces a live fetch. Governs the Kernel content cache, which is scoped to the
-         * caller organization and project and separated by retrieval context; fetches
-         * through a caller-supplied browser_id bypass that cache. Mapped to the provider
-         * freshness control when source is provider and the provider supports one;
-         * otherwise provider content age is reported as unknown via fetched_at.
+         * For source=auto, maximum acceptable age of retained provider content, measured
+         * from when the search received it from the provider. A value of 0 disables reuse
+         * of retained content, so every result is fetched through a browser.
+         * source=provider reuses retained provider content without freshness validation.
+         * source=browser always fetches through a browser and does not use this age limit.
          */
         max_age_hours?: number;
         /**
-         * Per-result Unicode character limit after extraction.
+         * Per-result Unicode character limit after extraction. Retained provider content
+         * cannot exceed what was stored at search time; such results report truncated when
+         * the stored text was already truncated.
          */
         max_chars?: number;
         /**
-         * provider uses the search provider's native content retrieval; browser fetches
-         * each URL through a Kernel browser; auto prefers Kernel browser retrieval and
-         * falls back to provider-native content when browser retrieval is unavailable or
-         * unsuitable. Defaults to auto for both inline and deferred retrieval. Deferred
-         * provider retrieval requires post_hoc capability; an explicit provider source
-         * without it is a 400. Missing documents produce per-result unavailable outcomes,
-         * not request failures.
+         * auto uses retained provider content within max_age_hours; for deferred retrieval
+         * it falls back to a Kernel browser (caller-supplied or temporary) for results
+         * without it. Inline retrieval never uses a browser. provider reuses retained
+         * provider content when available, without freshness validation, and never
+         * provisions a browser. browser fetches each URL through a Kernel browser, either
+         * caller-supplied or temporary. No option makes a new provider request. Defaults
+         * to auto for both inline and deferred retrieval. Missing documents produce
+         * per-result unavailable outcomes, not request failures.
          */
         source?: 'auto' | 'provider' | 'browser';
         /**
@@ -80,17 +89,22 @@ export declare namespace FetchRequest {
     }
     namespace Content {
         /**
-         * Invalid with source=provider. Supplying browser_id requires source=browser so
-         * the chosen identity is not bypassed.
+         * Requires source=auto or source=browser in deferred retrieval.
          */
         interface Browser {
             /**
              * Existing browser session ID authorized for the caller and selected project.
-             * Reuses its cookies, proxy, and browser configuration. Kernel does not delete a
-             * caller-supplied browser. Render mode uses a temporary tab; website activity may
-             * still change shared cookies and storage. When omitted, Kernel obtains isolated
-             * browser capacity in the caller's account and releases it after retrieval. That
-             * capacity is not retained for later interaction. Existing browser quotas apply.
+             * Reuses its cookies, proxy, and browser configuration; requests follow that
+             * browser's existing network access behavior, with no additional destination
+             * allowlist in this endpoint. Kernel does not delete a caller-supplied browser.
+             * Render mode uses a temporary tab; website activity may still change shared
+             * cookies and storage. When omitted and any result needs browser retrieval, Kernel
+             * creates one temporary browser for the request using the dashboard launch
+             * defaults (headful, stealth, default proxy), tags it with search_id, and deletes
+             * it when the request finishes. It is billed and counts toward browser concurrency
+             * like any other browser. A concurrency rejection returns 429 for source=browser;
+             * for source=auto, results with retained content are still returned and the rest
+             * report the rejection.
              */
             browser_id?: string;
             /**
@@ -123,7 +137,9 @@ export declare namespace Response {
          */
         url: string;
         /**
-         * Kernel cache outcome. Provider-internal cache behavior may be unknown.
+         * Kernel content cache outcome. Kernel has no content cache yet: responses report
+         * bypass or unknown, and hit and miss are reserved. Provider-internal cache
+         * behavior may be unknown.
          */
         cache_status?: 'hit' | 'miss' | 'bypass' | 'unknown';
         /**
@@ -137,20 +153,26 @@ export declare namespace Response {
          */
         extractor_version?: string;
         /**
-         * Origin retrieval time when known, not cache read time.
+         * When Kernel fetched the content, or received it from the provider for retained
+         * content.
          */
         fetched_at?: string | null;
         /**
-         * Final retrieval URL when known.
+         * Final retrieval URL after redirects when known. Curl mode follows up to 5
+         * redirects.
          */
         final_url?: string;
+        /**
+         * Format of text. Plain-text and JSON pages are returned unchanged as text even
+         * when markdown was requested.
+         */
         format?: 'markdown' | 'text';
         /**
          * Final target HTTP status when known.
          */
         http_status?: number;
         /**
-         * Original retrieval method, including on cache hits.
+         * Original retrieval method.
          */
         method?: 'provider' | 'browser_curl' | 'browser_render';
         /**
@@ -159,7 +181,8 @@ export declare namespace Response {
          */
         text?: string;
         /**
-         * Whether max_chars truncated the extracted content.
+         * Whether the content was cut short, by max_chars or because the page exceeded the
+         * 1 MiB read limit.
          */
         truncated?: boolean;
     }
@@ -203,32 +226,33 @@ export declare namespace ContentFetchParams {
      */
     interface Content {
         /**
-         * Invalid with source=provider. Supplying browser_id requires source=browser so
-         * the chosen identity is not bypassed.
+         * Requires source=auto or source=browser in deferred retrieval.
          */
         browser?: Content.Browser;
         format?: 'markdown' | 'text';
         /**
-         * Maximum acceptable age of cached page content, measured from origin retrieval. 0
-         * forces a live fetch. Governs the Kernel content cache, which is scoped to the
-         * caller organization and project and separated by retrieval context; fetches
-         * through a caller-supplied browser_id bypass that cache. Mapped to the provider
-         * freshness control when source is provider and the provider supports one;
-         * otherwise provider content age is reported as unknown via fetched_at.
+         * For source=auto, maximum acceptable age of retained provider content, measured
+         * from when the search received it from the provider. A value of 0 disables reuse
+         * of retained content, so every result is fetched through a browser.
+         * source=provider reuses retained provider content without freshness validation.
+         * source=browser always fetches through a browser and does not use this age limit.
          */
         max_age_hours?: number;
         /**
-         * Per-result Unicode character limit after extraction.
+         * Per-result Unicode character limit after extraction. Retained provider content
+         * cannot exceed what was stored at search time; such results report truncated when
+         * the stored text was already truncated.
          */
         max_chars?: number;
         /**
-         * provider uses the search provider's native content retrieval; browser fetches
-         * each URL through a Kernel browser; auto prefers Kernel browser retrieval and
-         * falls back to provider-native content when browser retrieval is unavailable or
-         * unsuitable. Defaults to auto for both inline and deferred retrieval. Deferred
-         * provider retrieval requires post_hoc capability; an explicit provider source
-         * without it is a 400. Missing documents produce per-result unavailable outcomes,
-         * not request failures.
+         * auto uses retained provider content within max_age_hours; for deferred retrieval
+         * it falls back to a Kernel browser (caller-supplied or temporary) for results
+         * without it. Inline retrieval never uses a browser. provider reuses retained
+         * provider content when available, without freshness validation, and never
+         * provisions a browser. browser fetches each URL through a Kernel browser, either
+         * caller-supplied or temporary. No option makes a new provider request. Defaults
+         * to auto for both inline and deferred retrieval. Missing documents produce
+         * per-result unavailable outcomes, not request failures.
          */
         source?: 'auto' | 'provider' | 'browser';
         /**
@@ -239,17 +263,22 @@ export declare namespace ContentFetchParams {
     }
     namespace Content {
         /**
-         * Invalid with source=provider. Supplying browser_id requires source=browser so
-         * the chosen identity is not bypassed.
+         * Requires source=auto or source=browser in deferred retrieval.
          */
         interface Browser {
             /**
              * Existing browser session ID authorized for the caller and selected project.
-             * Reuses its cookies, proxy, and browser configuration. Kernel does not delete a
-             * caller-supplied browser. Render mode uses a temporary tab; website activity may
-             * still change shared cookies and storage. When omitted, Kernel obtains isolated
-             * browser capacity in the caller's account and releases it after retrieval. That
-             * capacity is not retained for later interaction. Existing browser quotas apply.
+             * Reuses its cookies, proxy, and browser configuration; requests follow that
+             * browser's existing network access behavior, with no additional destination
+             * allowlist in this endpoint. Kernel does not delete a caller-supplied browser.
+             * Render mode uses a temporary tab; website activity may still change shared
+             * cookies and storage. When omitted and any result needs browser retrieval, Kernel
+             * creates one temporary browser for the request using the dashboard launch
+             * defaults (headful, stealth, default proxy), tags it with search_id, and deletes
+             * it when the request finishes. It is billed and counts toward browser concurrency
+             * like any other browser. A concurrency rejection returns 429 for source=browser;
+             * for source=auto, results with retained content are still returned and the rest
+             * report the rejection.
              */
             browser_id?: string;
             /**

package/resources/search/contents.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"contents.d.mts","sourceRoot":"","sources":["../../src/resources/search/contents.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAClD,OAAO,KAAK,SAAS,qBAAiB;AACtC,OAAO,EAAE,UAAU,EAAE,mCAA+B;AAEpD,OAAO,EAAE,cAAc,EAAE,2CAAuC;AAGhE;;GAEG;AACH,qBAAa,QAAS,SAAQ,WAAW;IACvC;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;CAOxF;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC;IAE/B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yBAAiB,YAAY,CAAC;IAC5B;;OAEG;IACH,UAAiB,OAAO;QACtB;;;WAGG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QAE1B,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAE7B;;;;;;;WAOG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QAEvB;;WAEG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QAEnB;;;;;;;;WAQG;QACH,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;QAEzC;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;IAED,UAAiB,OAAO,CAAC;QACvB;;;WAGG;QACH,UAAiB,OAAO;YACtB;;;;;;;eAOG;YACH,UAAU,CAAC,EAAE,MAAM,CAAC;YAEpB;;;;eAIG;YACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;SAC1B;KACF;CACF;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAElC,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;IAEvB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;CACpC;AAED,yBAAiB,QAAQ,CAAC;IACxB,UAAiB,OAAO;QACtB,SAAS,EAAE,MAAM,CAAC;QAElB;;;;;WAKG;QACH,MAAM,EAAE,IAAI,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,OAAO,CAAC;QAE1G;;WAEG;QACH,GAAG,EAAE,MAAM,CAAC;QAEZ;;WAEG;QACH,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAErD;;;WAGG;QACH,YAAY,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;QAEnD,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC;QAEtB;;WAEG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAE3B;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAE3B;;WAEG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QAEnB,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAE7B;;WAEG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QAErB;;WAEG;QACH,MAAM,CAAC,EAAE,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAC;QAExD;;;WAGG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QAEd;;WAEG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB;IAED,UAAiB,OAAO,CAAC;QACvB,UAAiB,KAAK;YACpB;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,OAAO,EAAE,MAAM,CAAC;YAEhB,SAAS,EAAE,OAAO,CAAC;SACpB;KACF;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC;IAErC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;OAEG;IACH,UAAiB,OAAO;QACtB;;;WAGG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QAE1B,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAE7B;;;;;;;WAOG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QAEvB;;WAEG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QAEnB;;;;;;;;WAQG;QACH,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;QAEzC;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;IAED,UAAiB,OAAO,CAAC;QACvB;;;WAGG;QACH,UAAiB,OAAO;YACtB;;;;;;;eAOG;YACH,UAAU,CAAC,EAAE,MAAM,CAAC;YAEpB;;;;eAIG;YACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;SAC1B;KACF;CACF;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC,OAAO,EACL,KAAK,YAAY,IAAI,YAAY,EACjC,KAAK,QAAQ,IAAI,QAAQ,EACzB,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}
+{"version":3,"file":"contents.d.mts","sourceRoot":"","sources":["../../src/resources/search/contents.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAClD,OAAO,KAAK,SAAS,qBAAiB;AACtC,OAAO,EAAE,UAAU,EAAE,mCAA+B;AACpD,OAAO,EAAE,cAAc,EAAE,2CAAuC;AAGhE;;GAEG;AACH,qBAAa,QAAS,SAAQ,WAAW;IACvC;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;CAG5F;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC;IAE/B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yBAAiB,YAAY,CAAC;IAC5B;;OAEG;IACH,UAAiB,OAAO;QACtB;;WAEG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QAE1B,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAE7B;;;;;;WAMG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QAEvB;;;;WAIG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QAEnB;;;;;;;;;WASG;QACH,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;QAEzC;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;IAED,UAAiB,OAAO,CAAC;QACvB;;WAEG;QACH,UAAiB,OAAO;YACtB;;;;;;;;;;;;;eAaG;YACH,UAAU,CAAC,EAAE,MAAM,CAAC;YAEpB;;;;eAIG;YACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;SAC1B;KACF;CACF;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAElC,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;IAEvB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;CACpC;AAED,yBAAiB,QAAQ,CAAC;IACxB,UAAiB,OAAO;QACtB,SAAS,EAAE,MAAM,CAAC;QAElB;;;;;WAKG;QACH,MAAM,EAAE,IAAI,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,OAAO,CAAC;QAE1G;;WAEG;QACH,GAAG,EAAE,MAAM,CAAC;QAEZ;;;;WAIG;QACH,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAErD;;;WAGG;QACH,YAAY,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;QAEnD,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC;QAEtB;;WAEG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAE3B;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAE3B;;;WAGG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QAEnB;;;WAGG;QACH,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAE7B;;WAEG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QAErB;;WAEG;QACH,MAAM,CAAC,EAAE,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAC;QAExD;;;WAGG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QAEd;;;WAGG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB;IAED,UAAiB,OAAO,CAAC;QACvB,UAAiB,KAAK;YACpB;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,OAAO,EAAE,MAAM,CAAC;YAEhB,SAAS,EAAE,OAAO,CAAC;SACpB;KACF;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC;IAErC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yBAAiB,kBAAkB,CAAC;IAClC;;OAEG;IACH,UAAiB,OAAO;QACtB;;WAEG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QAE1B,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAE7B;;;;;;WAMG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QAEvB;;;;WAIG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QAEnB;;;;;;;;;WASG;QACH,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;QAEzC;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;IAED,UAAiB,OAAO,CAAC;QACvB;;WAEG;QACH,UAAiB,OAAO;YACtB;;;;;;;;;;;;;eAaG;YACH,UAAU,CAAC,EAAE,MAAM,CAAC;YAEpB;;;;eAIG;YACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;SAC1B;KACF;CACF;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC,OAAO,EACL,KAAK,YAAY,IAAI,YAAY,EACjC,KAAK,QAAQ,IAAI,QAAQ,EACzB,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}