@onkernel/sdk 0.114.0 → 0.116.0

package/src/resources/search/search.ts

@@ -938,36 +938,37 @@ export interface Request {
 export namespace Request {
   export interface SearchContentOptions {
     /**
-     * Invalid with source=provider. Supplying browser_id requires source=browser so
-     * the chosen identity is not bypassed.
+     * Requires source=auto or source=browser in deferred retrieval.
      */
     browser?: SearchContentOptions.Browser;
 
     format?: 'markdown' | 'text';
 
     /**
-     * Maximum acceptable age of cached page content, measured from origin retrieval. 0
-     * forces a live fetch. Governs the Kernel content cache, which is scoped to the
-     * caller organization and project and separated by retrieval context; fetches
-     * through a caller-supplied browser_id bypass that cache. Mapped to the provider
-     * freshness control when source is provider and the provider supports one;
-     * otherwise provider content age is reported as unknown via fetched_at.
+     * For source=auto, maximum acceptable age of retained provider content, measured
+     * from when the search received it from the provider. A value of 0 disables reuse
+     * of retained content, so every result is fetched through a browser.
+     * source=provider reuses retained provider content without freshness validation.
+     * source=browser always fetches through a browser and does not use this age limit.
      */
     max_age_hours?: number;
 
     /**
-     * Per-result Unicode character limit after extraction.
+     * Per-result Unicode character limit after extraction. Retained provider content
+     * cannot exceed what was stored at search time; such results report truncated when
+     * the stored text was already truncated.
      */
     max_chars?: number;
 
     /**
-     * provider uses the search provider's native content retrieval; browser fetches
-     * each URL through a Kernel browser; auto prefers Kernel browser retrieval and
-     * falls back to provider-native content when browser retrieval is unavailable or
-     * unsuitable. Defaults to auto for both inline and deferred retrieval. Deferred
-     * provider retrieval requires post_hoc capability; an explicit provider source
-     * without it is a 400. Missing documents produce per-result unavailable outcomes,
-     * not request failures.
+     * auto uses retained provider content within max_age_hours; for deferred retrieval
+     * it falls back to a Kernel browser (caller-supplied or temporary) for results
+     * without it. Inline retrieval never uses a browser. provider reuses retained
+     * provider content when available, without freshness validation, and never
+     * provisions a browser. browser fetches each URL through a Kernel browser, either
+     * caller-supplied or temporary. No option makes a new provider request. Defaults
+     * to auto for both inline and deferred retrieval. Missing documents produce
+     * per-result unavailable outcomes, not request failures.
      */
     source?: 'auto' | 'provider' | 'browser';
 
@@ -980,17 +981,22 @@ export namespace Request {
 
   export namespace SearchContentOptions {
     /**
-     * Invalid with source=provider. Supplying browser_id requires source=browser so
-     * the chosen identity is not bypassed.
+     * Requires source=auto or source=browser in deferred retrieval.
      */
     export interface Browser {
       /**
        * Existing browser session ID authorized for the caller and selected project.
-       * Reuses its cookies, proxy, and browser configuration. Kernel does not delete a
-       * caller-supplied browser. Render mode uses a temporary tab; website activity may
-       * still change shared cookies and storage. When omitted, Kernel obtains isolated
-       * browser capacity in the caller's account and releases it after retrieval. That
-       * capacity is not retained for later interaction. Existing browser quotas apply.
+       * Reuses its cookies, proxy, and browser configuration; requests follow that
+       * browser's existing network access behavior, with no additional destination
+       * allowlist in this endpoint. Kernel does not delete a caller-supplied browser.
+       * Render mode uses a temporary tab; website activity may still change shared
+       * cookies and storage. When omitted and any result needs browser retrieval, Kernel
+       * creates one temporary browser for the request using the dashboard launch
+       * defaults (headful, stealth, default proxy), tags it with search_id, and deletes
+       * it when the request finishes. It is billed and counts toward browser concurrency
+       * like any other browser. A concurrency rejection returns 429 for source=browser;
+       * for source=auto, results with retained content are still returned and the rest
+       * report the rejection.
        */
       browser_id?: string;
 
@@ -1070,7 +1076,9 @@ export namespace Result {
     status: 'ok' | 'unavailable' | 'blocked' | 'timeout' | 'unsupported_type' | 'extraction_failed' | 'error';
 
     /**
-     * Kernel cache outcome. Provider-internal cache behavior may be unknown.
+     * Kernel content cache outcome. Kernel has no content cache yet: responses report
+     * bypass or unknown, and hit and miss are reserved. Provider-internal cache
+     * behavior may be unknown.
      */
     cache_status?: 'hit' | 'miss' | 'bypass' | 'unknown';
 
@@ -1088,7 +1096,7 @@ export namespace Result {
     extractor_version?: string;
 
     /**
-     * Origin retrieval time when known, not cache read time.
+     * When Kernel received the content from the provider.
      */
     fetched_at?: string | null;
 
@@ -1105,7 +1113,7 @@ export namespace Result {
     http_status?: number;
 
     /**
-     * Original retrieval method, including on cache hits.
+     * Original retrieval method.
      */
     method?: 'provider' | 'browser_curl' | 'browser_render';
 
@@ -1254,8 +1262,8 @@ export namespace Strategy {
 
 export interface Usage {
   /**
-   * Number of result URLs for which a Kernel browser retrieval was attempted,
-   * excluding cache-only hits.
+   * Number of result URLs for which a Kernel browser retrieval received a response
+   * from the target, excluding cache-only hits.
    */
   content_fetches: number;
 
@@ -1398,36 +1406,37 @@ export interface SearchCreateParams {
 export namespace SearchCreateParams {
   export interface SearchContentOptions {
     /**
-     * Invalid with source=provider. Supplying browser_id requires source=browser so
-     * the chosen identity is not bypassed.
+     * Requires source=auto or source=browser in deferred retrieval.
      */
     browser?: SearchContentOptions.Browser;
 
     format?: 'markdown' | 'text';
 
     /**
-     * Maximum acceptable age of cached page content, measured from origin retrieval. 0
-     * forces a live fetch. Governs the Kernel content cache, which is scoped to the
-     * caller organization and project and separated by retrieval context; fetches
-     * through a caller-supplied browser_id bypass that cache. Mapped to the provider
-     * freshness control when source is provider and the provider supports one;
-     * otherwise provider content age is reported as unknown via fetched_at.
+     * For source=auto, maximum acceptable age of retained provider content, measured
+     * from when the search received it from the provider. A value of 0 disables reuse
+     * of retained content, so every result is fetched through a browser.
+     * source=provider reuses retained provider content without freshness validation.
+     * source=browser always fetches through a browser and does not use this age limit.
      */
     max_age_hours?: number;
 
     /**
-     * Per-result Unicode character limit after extraction.
+     * Per-result Unicode character limit after extraction. Retained provider content
+     * cannot exceed what was stored at search time; such results report truncated when
+     * the stored text was already truncated.
      */
     max_chars?: number;
 
     /**
-     * provider uses the search provider's native content retrieval; browser fetches
-     * each URL through a Kernel browser; auto prefers Kernel browser retrieval and
-     * falls back to provider-native content when browser retrieval is unavailable or
-     * unsuitable. Defaults to auto for both inline and deferred retrieval. Deferred
-     * provider retrieval requires post_hoc capability; an explicit provider source
-     * without it is a 400. Missing documents produce per-result unavailable outcomes,
-     * not request failures.
+     * auto uses retained provider content within max_age_hours; for deferred retrieval
+     * it falls back to a Kernel browser (caller-supplied or temporary) for results
+     * without it. Inline retrieval never uses a browser. provider reuses retained
+     * provider content when available, without freshness validation, and never
+     * provisions a browser. browser fetches each URL through a Kernel browser, either
+     * caller-supplied or temporary. No option makes a new provider request. Defaults
+     * to auto for both inline and deferred retrieval. Missing documents produce
+     * per-result unavailable outcomes, not request failures.
      */
     source?: 'auto' | 'provider' | 'browser';
 
@@ -1440,17 +1449,22 @@ export namespace SearchCreateParams {
 
   export namespace SearchContentOptions {
     /**
-     * Invalid with source=provider. Supplying browser_id requires source=browser so
-     * the chosen identity is not bypassed.
+     * Requires source=auto or source=browser in deferred retrieval.
      */
     export interface Browser {
       /**
        * Existing browser session ID authorized for the caller and selected project.
-       * Reuses its cookies, proxy, and browser configuration. Kernel does not delete a
-       * caller-supplied browser. Render mode uses a temporary tab; website activity may
-       * still change shared cookies and storage. When omitted, Kernel obtains isolated
-       * browser capacity in the caller's account and releases it after retrieval. That
-       * capacity is not retained for later interaction. Existing browser quotas apply.
+       * Reuses its cookies, proxy, and browser configuration; requests follow that
+       * browser's existing network access behavior, with no additional destination
+       * allowlist in this endpoint. Kernel does not delete a caller-supplied browser.
+       * Render mode uses a temporary tab; website activity may still change shared
+       * cookies and storage. When omitted and any result needs browser retrieval, Kernel
+       * creates one temporary browser for the request using the dashboard launch
+       * defaults (headful, stealth, default proxy), tags it with search_id, and deletes
+       * it when the request finishes. It is billed and counts toward browser concurrency
+       * like any other browser. A concurrency rejection returns 429 for source=browser;
+       * for source=auto, results with retained content are still returned and the rest
+       * report the rejection.
        */
       browser_id?: string;
 

package/src/resources/vaults/items.ts

@@ -413,8 +413,9 @@ export namespace CardVaultItemSpec {
 
   /**
    * AgentCard reusable live payment card. Test-mode card creation is not supported.
-   * Each checkout creates an approval-gated authorization for spec.merchant /
-   * spec.amount. The card stays ready after each authorization.
+   * Each checkout creates an authorization for spec.merchant / spec.amount that the
+   * cardholder approves, unless AgentCard runs it under one of the cardholder's
+   * autopilot rules. The card stays ready after each authorization.
    */
   export interface AgentCardCardVaultItemSpec {
     /**
@@ -442,6 +443,18 @@ export namespace CardVaultItemSpec {
      * picks on the approval screen.
      */
     card_id?: string;
+
+    /**
+     * Origin of the top-level checkout page, such as https://shop.example.com: https,
+     * a lowercase host, a port only when it is not 443, and no path. http is accepted
+     * only for localhost test pages. Checkouts without a preparation send it to
+     * AgentCard, which uses it to match the cardholder's autopilot rules; prepared
+     * checkouts send the preparation's merchant_origin instead. Kernel sends the
+     * declared value and does not compare it with the page the browser has open.
+     * Omitted, those checkouts ask the cardholder to approve. Card updates replace the
+     * whole spec, so an update that omits it removes it.
+     */
+    checkout_origin?: string;
   }
 }
 

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.114.0'; // x-release-please-version
+export const VERSION = '0.116.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.114.0";
+export declare const VERSION = "0.116.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.114.0";
+export declare const VERSION = "0.116.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.114.0'; // x-release-please-version
+exports.VERSION = '0.116.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.114.0'; // x-release-please-version
+export const VERSION = '0.116.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map