@onkernel/sdk 0.116.0 → 0.118.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +15 -0
- package/package.json +1 -1
- package/resources/vaults/index.d.mts +1 -1
- package/resources/vaults/index.d.mts.map +1 -1
- package/resources/vaults/index.d.ts +1 -1
- package/resources/vaults/index.d.ts.map +1 -1
- package/resources/vaults/index.js.map +1 -1
- package/resources/vaults/index.mjs.map +1 -1
- package/resources/vaults/items.d.mts +264 -31
- package/resources/vaults/items.d.mts.map +1 -1
- package/resources/vaults/items.d.ts +264 -31
- package/resources/vaults/items.d.ts.map +1 -1
- package/resources/vaults/items.js +7 -4
- package/resources/vaults/items.js.map +1 -1
- package/resources/vaults/items.mjs +7 -4
- package/resources/vaults/items.mjs.map +1 -1
- package/resources/vaults/vaults.d.mts +11 -5
- package/resources/vaults/vaults.d.mts.map +1 -1
- package/resources/vaults/vaults.d.ts +11 -5
- package/resources/vaults/vaults.d.ts.map +1 -1
- package/resources/vaults/vaults.js +5 -3
- package/resources/vaults/vaults.js.map +1 -1
- package/resources/vaults/vaults.mjs +5 -3
- package/resources/vaults/vaults.mjs.map +1 -1
- package/src/resources/vaults/index.ts +7 -0
- package/src/resources/vaults/items.ts +332 -30
- package/src/resources/vaults/vaults.ts +25 -4
- package/src/version.ts +1 -1
- package/version.d.mts +1 -1
- package/version.d.ts +1 -1
- package/version.js +1 -1
- package/version.mjs +1 -1
|
@@ -87,10 +87,13 @@ export class Items extends APIResource {
|
|
|
87
87
|
|
|
88
88
|
/**
|
|
89
89
|
* Unresolved payment operations normally block deletion, including operations on
|
|
90
|
-
* child cards of a wallet.
|
|
91
|
-
*
|
|
92
|
-
*
|
|
93
|
-
*
|
|
90
|
+
* child cards of a wallet. Deleting a connected Kernel wallet first blocks new
|
|
91
|
+
* payments on it, then removes its enrolled card. If that fails, the wallet is
|
|
92
|
+
* kept and keeps refusing payments; retry the deletion. An AgentCard card in
|
|
93
|
+
* recovery_required whose checkout create response returned no authorization ID
|
|
94
|
+
* may be explicitly abandoned by deleting that card directly; deleting its wallet
|
|
95
|
+
* or vault remains blocked. Deleting or recreating an item is not proof that a
|
|
96
|
+
* payment did not occur.
|
|
94
97
|
*
|
|
95
98
|
* @example
|
|
96
99
|
* ```ts
|
|
@@ -304,8 +307,8 @@ export type AgentcardPreparedProcessor =
|
|
|
304
307
|
| 'adyen';
|
|
305
308
|
|
|
306
309
|
/**
|
|
307
|
-
* Authorize a Link card using its existing purchase specification. Use
|
|
308
|
-
* explicit user approval and when the item advertises authorize. Do not
|
|
310
|
+
* Authorize a Link or Kernel card using its existing purchase specification. Use
|
|
311
|
+
* only after explicit user approval and when the item advertises authorize. Do not
|
|
309
312
|
* automatically retry provider failures or indeterminate outcomes. Checkout
|
|
310
313
|
* context is not accepted.
|
|
311
314
|
*/
|
|
@@ -318,7 +321,8 @@ export interface AuthorizeVaultItemOperationRequest {
|
|
|
318
321
|
*/
|
|
319
322
|
export type CardVaultItemSpec =
|
|
320
323
|
| CardVaultItemSpec.LinkCardVaultItemSpec
|
|
321
|
-
| CardVaultItemSpec.AgentCardCardVaultItemSpec
|
|
324
|
+
| CardVaultItemSpec.AgentCardCardVaultItemSpec
|
|
325
|
+
| KernelCardVaultItemSpec;
|
|
322
326
|
|
|
323
327
|
export namespace CardVaultItemSpec {
|
|
324
328
|
/**
|
|
@@ -462,7 +466,10 @@ export namespace CardVaultItemSpec {
|
|
|
462
466
|
* Issued Link cards retain encrypted card material for the fill operation. Link
|
|
463
467
|
* cards do not expose aliases or support egress substitution.
|
|
464
468
|
*/
|
|
465
|
-
export type CardVaultItemState =
|
|
469
|
+
export type CardVaultItemState =
|
|
470
|
+
| CardVaultItemState.LinkCardState
|
|
471
|
+
| CardVaultItemState.AgentCardCardState
|
|
472
|
+
| KernelCardState;
|
|
466
473
|
|
|
467
474
|
export namespace CardVaultItemState {
|
|
468
475
|
/**
|
|
@@ -501,6 +508,11 @@ export namespace CardVaultItemState {
|
|
|
501
508
|
|
|
502
509
|
last4?: string;
|
|
503
510
|
|
|
511
|
+
/**
|
|
512
|
+
* Last four digits of the network token presented to the merchant.
|
|
513
|
+
*/
|
|
514
|
+
token_last4?: string;
|
|
515
|
+
|
|
504
516
|
[k: string]: string | undefined;
|
|
505
517
|
}
|
|
506
518
|
}
|
|
@@ -559,6 +571,11 @@ export namespace CardVaultItemState {
|
|
|
559
571
|
|
|
560
572
|
last4?: string;
|
|
561
573
|
|
|
574
|
+
/**
|
|
575
|
+
* Last four digits of the network token presented to the merchant.
|
|
576
|
+
*/
|
|
577
|
+
token_last4?: string;
|
|
578
|
+
|
|
562
579
|
[k: string]: string | undefined;
|
|
563
580
|
}
|
|
564
581
|
}
|
|
@@ -641,7 +658,8 @@ export namespace CredentialAccountVaultItem {
|
|
|
641
658
|
| '1pw_access_request_status'
|
|
642
659
|
| '1pw_fill'
|
|
643
660
|
| '1pw_recover'
|
|
644
|
-
| '1pw_update_access_token'
|
|
661
|
+
| '1pw_update_access_token'
|
|
662
|
+
| 'webmcp_invoke';
|
|
645
663
|
}
|
|
646
664
|
}
|
|
647
665
|
|
|
@@ -907,7 +925,8 @@ export namespace CredentialVaultItem {
|
|
|
907
925
|
| '1pw_access_request_status'
|
|
908
926
|
| '1pw_fill'
|
|
909
927
|
| '1pw_recover'
|
|
910
|
-
| '1pw_update_access_token'
|
|
928
|
+
| '1pw_update_access_token'
|
|
929
|
+
| 'webmcp_invoke';
|
|
911
930
|
}
|
|
912
931
|
|
|
913
932
|
export interface OnePasswordAccessApprovalAction {
|
|
@@ -1013,11 +1032,11 @@ export interface CredentialVaultItemUpdateRequest {
|
|
|
1013
1032
|
}
|
|
1014
1033
|
|
|
1015
1034
|
/**
|
|
1016
|
-
* Fill selected fields from one ready credential or ready, unexpired Link
|
|
1017
|
-
* into a browser linked to its vault. Only invoke when the item
|
|
1018
|
-
* Browser and vault must belong to the same project. Kernel
|
|
1019
|
-
* allowed destinations before filling; providing a page URL does
|
|
1020
|
-
* destination.
|
|
1035
|
+
* Fill selected fields from one ready credential or ready, unexpired Link or
|
|
1036
|
+
* Kernel card into a browser linked to its vault. Only invoke when the item
|
|
1037
|
+
* advertises `fill`. Browser and vault must belong to the same project. Kernel
|
|
1038
|
+
* checks access and allowed destinations before filling; providing a page URL does
|
|
1039
|
+
* not authorize a destination.
|
|
1021
1040
|
*
|
|
1022
1041
|
* Find exactly one open page matching `page_url`. Credential items may omit
|
|
1023
1042
|
* `page_url` to require exactly one open page; cards require an HTTPS page URL.
|
|
@@ -1033,9 +1052,10 @@ export interface CredentialVaultItemUpdateRequest {
|
|
|
1033
1052
|
*
|
|
1034
1053
|
* Fill in request order and stop on the first failure. This operation is not
|
|
1035
1054
|
* atomic: previously filled fields are not rolled back. Never submit the form or
|
|
1036
|
-
* click buttons, though input/change events may trigger site behavior. Link
|
|
1037
|
-
* use fill for browser checkout and do not expose aliases or support
|
|
1038
|
-
* substitution. Do not automatically retry a failed or indeterminate
|
|
1055
|
+
* click buttons, though input/change events may trigger site behavior. Link and
|
|
1056
|
+
* Kernel cards use fill for browser checkout and do not expose aliases or support
|
|
1057
|
+
* egress substitution. Do not automatically retry a failed or indeterminate
|
|
1058
|
+
* operation.
|
|
1039
1059
|
*
|
|
1040
1060
|
* Secret values are never returned or included in operation logs, traces, audit
|
|
1041
1061
|
* events, or error details. This does not prevent an agent with unrestricted
|
|
@@ -1087,6 +1107,98 @@ export interface FillVaultItemOperationResult {
|
|
|
1087
1107
|
type: 'fill';
|
|
1088
1108
|
}
|
|
1089
1109
|
|
|
1110
|
+
/**
|
|
1111
|
+
* A ready Kernel card retains its encrypted network token and one-time code for
|
|
1112
|
+
* the fill operation until the item's expires_at. Fill and submit checkout before
|
|
1113
|
+
* then. Visa cards can be enrolled, but Visa purchases are not yet supported and
|
|
1114
|
+
* authorize returns 400; supported Mastercard purchases need no cardholder
|
|
1115
|
+
* approval. masks.last4 is the enrolled card's last four digits; masks.token_last4
|
|
1116
|
+
* is the network token's last four digits shown to the merchant. Kernel cards do
|
|
1117
|
+
* not expose aliases or support egress substitution. Kernel does not observe
|
|
1118
|
+
* whether the merchant charged the card.
|
|
1119
|
+
*/
|
|
1120
|
+
export interface KernelCardState {
|
|
1121
|
+
provider: 'kernel';
|
|
1122
|
+
|
|
1123
|
+
/**
|
|
1124
|
+
* recovery_required means issuing the one-time code has an unresolved outcome.
|
|
1125
|
+
* Kernel never issues another code for the item automatically, and the item cannot
|
|
1126
|
+
* be deleted or replaced until the original attempt is reconciled with support.
|
|
1127
|
+
* When status_reason says the provider refused retrieval before acceptance, no
|
|
1128
|
+
* code was issued and a later read retries.
|
|
1129
|
+
*/
|
|
1130
|
+
status:
|
|
1131
|
+
| 'requested'
|
|
1132
|
+
| 'pending_authorization'
|
|
1133
|
+
| 'ready'
|
|
1134
|
+
| 'consumed'
|
|
1135
|
+
| 'expired'
|
|
1136
|
+
| 'declined'
|
|
1137
|
+
| 'recovery_required';
|
|
1138
|
+
|
|
1139
|
+
/**
|
|
1140
|
+
* Informational registrable domain. Fill is locked to merchant_url's exact origin.
|
|
1141
|
+
*/
|
|
1142
|
+
domains?: Array<string>;
|
|
1143
|
+
|
|
1144
|
+
masks?: KernelCardState.Masks;
|
|
1145
|
+
|
|
1146
|
+
status_reason?: string;
|
|
1147
|
+
}
|
|
1148
|
+
|
|
1149
|
+
export namespace KernelCardState {
|
|
1150
|
+
export interface Masks {
|
|
1151
|
+
brand?: string;
|
|
1152
|
+
|
|
1153
|
+
last4?: string;
|
|
1154
|
+
|
|
1155
|
+
/**
|
|
1156
|
+
* Last four digits of the network token presented to the merchant.
|
|
1157
|
+
*/
|
|
1158
|
+
token_last4?: string;
|
|
1159
|
+
|
|
1160
|
+
[k: string]: string | undefined;
|
|
1161
|
+
}
|
|
1162
|
+
}
|
|
1163
|
+
|
|
1164
|
+
/**
|
|
1165
|
+
* One live purchase with a Kernel-enrolled card. Authorization obtains an agentic
|
|
1166
|
+
* network token number, expiry and one-time 3-digit code. They are stored
|
|
1167
|
+
* encrypted for the fill operation, which types them only on merchant_url's
|
|
1168
|
+
* origin; the merchant's own checkout submits the payment. The one-time code is
|
|
1169
|
+
* valid until the item's expires_at; fill and submit checkout before then. Visa
|
|
1170
|
+
* cards can be enrolled, but Visa purchases are not yet supported: authorize
|
|
1171
|
+
* returns 400. Supported Mastercard purchases need no cardholder approval. Card
|
|
1172
|
+
* updates are not supported; delete and create a new item instead.
|
|
1173
|
+
*/
|
|
1174
|
+
export interface KernelCardVaultItemSpec {
|
|
1175
|
+
/**
|
|
1176
|
+
* Integer amount in minor currency units (at most 50000), bound to the one-time
|
|
1177
|
+
* code.
|
|
1178
|
+
*/
|
|
1179
|
+
amount: number;
|
|
1180
|
+
|
|
1181
|
+
/**
|
|
1182
|
+
* ISO 4217 code. Supported: aud, brl, cad, chf, czk, dkk, eur, gbp, hkd, inr, jpy,
|
|
1183
|
+
* krw, mxn, nok, nzd, pln, sek, sgd, usd, zar.
|
|
1184
|
+
*/
|
|
1185
|
+
currency: string;
|
|
1186
|
+
|
|
1187
|
+
merchant_name: string;
|
|
1188
|
+
|
|
1189
|
+
/**
|
|
1190
|
+
* Merchant checkout URL. Fill is allowed only on this URL's origin.
|
|
1191
|
+
*/
|
|
1192
|
+
merchant_url: string;
|
|
1193
|
+
|
|
1194
|
+
provider: 'kernel';
|
|
1195
|
+
|
|
1196
|
+
/**
|
|
1197
|
+
* Key of the Kernel wallet item whose enrolled card pays.
|
|
1198
|
+
*/
|
|
1199
|
+
wallet: string;
|
|
1200
|
+
}
|
|
1201
|
+
|
|
1090
1202
|
export interface KernelCredentialVaultItemSpec {
|
|
1091
1203
|
/**
|
|
1092
1204
|
* Ordered field definitions rendered in this order by credential collection forms.
|
|
@@ -1143,6 +1255,34 @@ export interface KernelCredentialVaultItemState {
|
|
|
1143
1255
|
status: 'pending_collection' | 'ready';
|
|
1144
1256
|
}
|
|
1145
1257
|
|
|
1258
|
+
export interface KernelWalletState {
|
|
1259
|
+
provider: 'kernel';
|
|
1260
|
+
|
|
1261
|
+
/**
|
|
1262
|
+
* pending_authorization asks the cardholder to use the card_enrollment action.
|
|
1263
|
+
* connected is ready for supported purchases. reconnect_required asks the
|
|
1264
|
+
* cardholder to use a new card_enrollment action after an uncertain enrollment was
|
|
1265
|
+
* safely removed. degraded means the enrollment outcome is unknown and the wallet
|
|
1266
|
+
* must be deleted before adding another card.
|
|
1267
|
+
*/
|
|
1268
|
+
status: 'pending_authorization' | 'connected' | 'reconnect_required' | 'degraded';
|
|
1269
|
+
|
|
1270
|
+
status_reason?: string;
|
|
1271
|
+
}
|
|
1272
|
+
|
|
1273
|
+
/**
|
|
1274
|
+
* One card Kernel enrolls for Visa or Mastercard agentic network tokens using
|
|
1275
|
+
* Kernel-managed credentials. Creation returns a card_enrollment action: the
|
|
1276
|
+
* cardholder enters the card and their email on a Kernel-hosted page, then Kernel
|
|
1277
|
+
* enrolls the securely stored card. The card number never reaches Kernel. The
|
|
1278
|
+
* connected wallet's payment_methods expansion lists the enrolled card. Visa cards
|
|
1279
|
+
* can be enrolled, but Visa purchases are not yet supported: authorize
|
|
1280
|
+
* returns 400.
|
|
1281
|
+
*/
|
|
1282
|
+
export interface KernelWalletVaultItemSpec {
|
|
1283
|
+
provider: 'kernel';
|
|
1284
|
+
}
|
|
1285
|
+
|
|
1146
1286
|
export interface OnePasswordCredentialAccountSpec {
|
|
1147
1287
|
authorization: OnePasswordCredentialAccountSpec.Authorization;
|
|
1148
1288
|
|
|
@@ -1772,7 +1912,8 @@ export namespace VaultItem {
|
|
|
1772
1912
|
| '1pw_access_request_status'
|
|
1773
1913
|
| '1pw_fill'
|
|
1774
1914
|
| '1pw_recover'
|
|
1775
|
-
| '1pw_update_access_token'
|
|
1915
|
+
| '1pw_update_access_token'
|
|
1916
|
+
| 'webmcp_invoke';
|
|
1776
1917
|
}
|
|
1777
1918
|
|
|
1778
1919
|
/**
|
|
@@ -1844,7 +1985,8 @@ export namespace VaultItem {
|
|
|
1844
1985
|
| '1pw_access_request_status'
|
|
1845
1986
|
| '1pw_fill'
|
|
1846
1987
|
| '1pw_recover'
|
|
1847
|
-
| '1pw_update_access_token'
|
|
1988
|
+
| '1pw_update_access_token'
|
|
1989
|
+
| 'webmcp_invoke';
|
|
1848
1990
|
}
|
|
1849
1991
|
}
|
|
1850
1992
|
}
|
|
@@ -1911,9 +2053,9 @@ export interface VaultItemEvent {
|
|
|
1911
2053
|
}
|
|
1912
2054
|
|
|
1913
2055
|
/**
|
|
1914
|
-
*
|
|
1915
|
-
*
|
|
1916
|
-
*
|
|
2056
|
+
* Authorization and preparation return the existing item shape. Fill returns a
|
|
2057
|
+
* value-free result; WebMCP invocation returns the tool's output. Neither persists
|
|
2058
|
+
* transient outcomes on the item.
|
|
1917
2059
|
*/
|
|
1918
2060
|
export type VaultItemOperationResponse =
|
|
1919
2061
|
| VaultItemOperationResponse.WalletVaultItem
|
|
@@ -1921,7 +2063,8 @@ export type VaultItemOperationResponse =
|
|
|
1921
2063
|
| CredentialAccountVaultItem
|
|
1922
2064
|
| CredentialVaultItem
|
|
1923
2065
|
| FillVaultItemOperationResult
|
|
1924
|
-
| OnePasswordFillVaultItemOperationResult
|
|
2066
|
+
| OnePasswordFillVaultItemOperationResult
|
|
2067
|
+
| WebmcpInvokeVaultItemOperationResult;
|
|
1925
2068
|
|
|
1926
2069
|
export namespace VaultItemOperationResponse {
|
|
1927
2070
|
export interface WalletVaultItem {
|
|
@@ -1991,7 +2134,8 @@ export namespace VaultItemOperationResponse {
|
|
|
1991
2134
|
| '1pw_access_request_status'
|
|
1992
2135
|
| '1pw_fill'
|
|
1993
2136
|
| '1pw_recover'
|
|
1994
|
-
| '1pw_update_access_token'
|
|
2137
|
+
| '1pw_update_access_token'
|
|
2138
|
+
| 'webmcp_invoke';
|
|
1995
2139
|
}
|
|
1996
2140
|
|
|
1997
2141
|
/**
|
|
@@ -2063,7 +2207,8 @@ export namespace VaultItemOperationResponse {
|
|
|
2063
2207
|
| '1pw_access_request_status'
|
|
2064
2208
|
| '1pw_fill'
|
|
2065
2209
|
| '1pw_recover'
|
|
2066
|
-
| '1pw_update_access_token'
|
|
2210
|
+
| '1pw_update_access_token'
|
|
2211
|
+
| 'webmcp_invoke';
|
|
2067
2212
|
}
|
|
2068
2213
|
}
|
|
2069
2214
|
}
|
|
@@ -2118,6 +2263,27 @@ export namespace VaultPaymentMethod {
|
|
|
2118
2263
|
}
|
|
2119
2264
|
}
|
|
2120
2265
|
|
|
2266
|
+
export interface VaultWebmcpBinding {
|
|
2267
|
+
/**
|
|
2268
|
+
* A declared, populated credential field or supported card field. A TOTP field
|
|
2269
|
+
* supplies a fresh code, never its seed.
|
|
2270
|
+
*/
|
|
2271
|
+
field: string;
|
|
2272
|
+
|
|
2273
|
+
/**
|
|
2274
|
+
* RFC 6901 JSON Pointer to an existing null value in input. Object keys are exact;
|
|
2275
|
+
* array indices must be canonical and in range. No root or array-append paths.
|
|
2276
|
+
* Each path and each field may occur only once.
|
|
2277
|
+
*/
|
|
2278
|
+
input_path: string;
|
|
2279
|
+
|
|
2280
|
+
/**
|
|
2281
|
+
* Required for card expiration (MM/YY or MM/YYYY), forbidden for other fields.
|
|
2282
|
+
* Invalid formats are rejected before invocation.
|
|
2283
|
+
*/
|
|
2284
|
+
format?: string;
|
|
2285
|
+
}
|
|
2286
|
+
|
|
2121
2287
|
/**
|
|
2122
2288
|
* AgentCard wallet. Omit provider_config to use Kernel-managed credentials, or
|
|
2123
2289
|
* select a customer-owned configuration. Mode (sandbox vs live) is determined by
|
|
@@ -2128,7 +2294,8 @@ export namespace VaultPaymentMethod {
|
|
|
2128
2294
|
*/
|
|
2129
2295
|
export type WalletVaultItemSpec =
|
|
2130
2296
|
| WalletVaultItemSpec.LinkWalletVaultItemSpec
|
|
2131
|
-
| WalletVaultItemSpec.AgentCardWalletVaultItemSpec
|
|
2297
|
+
| WalletVaultItemSpec.AgentCardWalletVaultItemSpec
|
|
2298
|
+
| KernelWalletVaultItemSpec;
|
|
2132
2299
|
|
|
2133
2300
|
export namespace WalletVaultItemSpec {
|
|
2134
2301
|
export interface LinkWalletVaultItemSpec {
|
|
@@ -2210,7 +2377,8 @@ export namespace WalletVaultItemSpec {
|
|
|
2210
2377
|
|
|
2211
2378
|
export type WalletVaultItemState =
|
|
2212
2379
|
| WalletVaultItemState.LinkWalletState
|
|
2213
|
-
| WalletVaultItemState.AgentCardWalletState
|
|
2380
|
+
| WalletVaultItemState.AgentCardWalletState
|
|
2381
|
+
| KernelWalletState;
|
|
2214
2382
|
|
|
2215
2383
|
export namespace WalletVaultItemState {
|
|
2216
2384
|
export interface LinkWalletState {
|
|
@@ -2235,6 +2403,85 @@ export namespace WalletVaultItemState {
|
|
|
2235
2403
|
}
|
|
2236
2404
|
}
|
|
2237
2405
|
|
|
2406
|
+
/**
|
|
2407
|
+
* Invoke a WebMCP tool using values from a vaulted item. The browser must be
|
|
2408
|
+
* attached to the item's vault. Discover the tool_ref, inputSchema, and source
|
|
2409
|
+
* with GET /browsers/{id_or_name}/webmcp/tools or webmcp.listTools() in the
|
|
2410
|
+
* Browser REPL (POST /browsers/{id_or_name}/repl) before invoking it. Input paths
|
|
2411
|
+
* replace existing null slots in input. Tool output is returned without redaction
|
|
2412
|
+
* and may include the supplied values. The tool may submit or perform other side
|
|
2413
|
+
* effects. Any item destination restrictions apply to the tool's top-level page
|
|
2414
|
+
* and registering frame (if any).
|
|
2415
|
+
*/
|
|
2416
|
+
export interface WebmcpInvokeVaultItemOperationRequest {
|
|
2417
|
+
bindings: Array<VaultWebmcpBinding>;
|
|
2418
|
+
|
|
2419
|
+
/**
|
|
2420
|
+
* Browser session ID, not a reusable browser name.
|
|
2421
|
+
*/
|
|
2422
|
+
browser_id: string;
|
|
2423
|
+
|
|
2424
|
+
/**
|
|
2425
|
+
* Public tool arguments with an existing null slot at each binding path. At most
|
|
2426
|
+
* 64 KiB after JSON serialization, including substituted values. Never include
|
|
2427
|
+
* vault values here.
|
|
2428
|
+
*/
|
|
2429
|
+
input: { [key: string]: unknown };
|
|
2430
|
+
|
|
2431
|
+
/**
|
|
2432
|
+
* Exact top-level URL from the discovered tool source (fragment omitted). This
|
|
2433
|
+
* pins the target page; it does not authorize a destination.
|
|
2434
|
+
*/
|
|
2435
|
+
page_url: string;
|
|
2436
|
+
|
|
2437
|
+
/**
|
|
2438
|
+
* Opaque reference to the exact live WebMCP registration.
|
|
2439
|
+
*/
|
|
2440
|
+
tool_ref: string;
|
|
2441
|
+
|
|
2442
|
+
type: 'webmcp_invoke';
|
|
2443
|
+
|
|
2444
|
+
/**
|
|
2445
|
+
* Tool invocation timeout in seconds; preflight and response handling have an
|
|
2446
|
+
* additional bounded allowance. An indeterminate outcome is not retried.
|
|
2447
|
+
*/
|
|
2448
|
+
timeout_sec?: number;
|
|
2449
|
+
}
|
|
2450
|
+
|
|
2451
|
+
/**
|
|
2452
|
+
* Returns the same tool result fields as the browser WebMCP invoke API, plus the
|
|
2453
|
+
* vault operation discriminator. Output and error text are untrusted page-provided
|
|
2454
|
+
* data, returned without redaction; tools may include supplied vault values.
|
|
2455
|
+
* Inspect the browser page to determine whether the intended site action
|
|
2456
|
+
* succeeded.
|
|
2457
|
+
*/
|
|
2458
|
+
export interface WebmcpInvokeVaultItemOperationResult {
|
|
2459
|
+
/**
|
|
2460
|
+
* Unknown means invocation may have run; do not retry automatically. No status
|
|
2461
|
+
* confirms that the website accepted the action.
|
|
2462
|
+
*/
|
|
2463
|
+
status: 'completed' | 'canceled' | 'error' | 'awaiting_submission' | 'unknown';
|
|
2464
|
+
|
|
2465
|
+
type: 'webmcp_invoke';
|
|
2466
|
+
|
|
2467
|
+
/**
|
|
2468
|
+
* Untrusted page-provided error text, returned without redaction. May contain
|
|
2469
|
+
* supplied vault values.
|
|
2470
|
+
*/
|
|
2471
|
+
error_text?: string;
|
|
2472
|
+
|
|
2473
|
+
/**
|
|
2474
|
+
* Present when the browser reported one.
|
|
2475
|
+
*/
|
|
2476
|
+
invocation_id?: string;
|
|
2477
|
+
|
|
2478
|
+
/**
|
|
2479
|
+
* Untrusted page-provided output, returned without redaction. May contain supplied
|
|
2480
|
+
* vault values.
|
|
2481
|
+
*/
|
|
2482
|
+
output?: unknown;
|
|
2483
|
+
}
|
|
2484
|
+
|
|
2238
2485
|
export type ItemListResponse = Array<VaultItem>;
|
|
2239
2486
|
|
|
2240
2487
|
export type ItemEventsResponse = Array<VaultItemEvent>;
|
|
@@ -2344,7 +2591,8 @@ export type ItemPerformOperationParams =
|
|
|
2344
2591
|
| ItemPerformOperationParams.OnePasswordPollAccessVaultItemOperationRequest
|
|
2345
2592
|
| ItemPerformOperationParams.OnePasswordFillVaultItemOperationRequest
|
|
2346
2593
|
| ItemPerformOperationParams.OnePasswordRecoverVaultItemOperationRequest
|
|
2347
|
-
| ItemPerformOperationParams.OnePasswordUpdateAccessTokenVaultItemOperationRequest
|
|
2594
|
+
| ItemPerformOperationParams.OnePasswordUpdateAccessTokenVaultItemOperationRequest
|
|
2595
|
+
| ItemPerformOperationParams.WebmcpInvokeVaultItemOperationRequest;
|
|
2348
2596
|
|
|
2349
2597
|
export declare namespace ItemPerformOperationParams {
|
|
2350
2598
|
export interface AuthorizeVaultItemOperationRequest {
|
|
@@ -2551,6 +2799,52 @@ export declare namespace ItemPerformOperationParams {
|
|
|
2551
2799
|
*/
|
|
2552
2800
|
access_token_expires_at?: string;
|
|
2553
2801
|
}
|
|
2802
|
+
|
|
2803
|
+
export interface WebmcpInvokeVaultItemOperationRequest {
|
|
2804
|
+
/**
|
|
2805
|
+
* Path param
|
|
2806
|
+
*/
|
|
2807
|
+
id_or_name: string;
|
|
2808
|
+
|
|
2809
|
+
/**
|
|
2810
|
+
* Body param
|
|
2811
|
+
*/
|
|
2812
|
+
bindings: Array<VaultWebmcpBinding>;
|
|
2813
|
+
|
|
2814
|
+
/**
|
|
2815
|
+
* Body param: Browser session ID, not a reusable browser name.
|
|
2816
|
+
*/
|
|
2817
|
+
browser_id: string;
|
|
2818
|
+
|
|
2819
|
+
/**
|
|
2820
|
+
* Body param: Public tool arguments with an existing null slot at each binding
|
|
2821
|
+
* path. At most 64 KiB after JSON serialization, including substituted values.
|
|
2822
|
+
* Never include vault values here.
|
|
2823
|
+
*/
|
|
2824
|
+
input: { [key: string]: unknown };
|
|
2825
|
+
|
|
2826
|
+
/**
|
|
2827
|
+
* Body param: Exact top-level URL from the discovered tool source (fragment
|
|
2828
|
+
* omitted). This pins the target page; it does not authorize a destination.
|
|
2829
|
+
*/
|
|
2830
|
+
page_url: string;
|
|
2831
|
+
|
|
2832
|
+
/**
|
|
2833
|
+
* Body param: Opaque reference to the exact live WebMCP registration.
|
|
2834
|
+
*/
|
|
2835
|
+
tool_ref: string;
|
|
2836
|
+
|
|
2837
|
+
/**
|
|
2838
|
+
* Body param
|
|
2839
|
+
*/
|
|
2840
|
+
type: 'webmcp_invoke';
|
|
2841
|
+
|
|
2842
|
+
/**
|
|
2843
|
+
* Body param: Tool invocation timeout in seconds; preflight and response handling
|
|
2844
|
+
* have an additional bounded allowance. An indeterminate outcome is not retried.
|
|
2845
|
+
*/
|
|
2846
|
+
timeout_sec?: number;
|
|
2847
|
+
}
|
|
2554
2848
|
}
|
|
2555
2849
|
|
|
2556
2850
|
export type ItemUpsertParams =
|
|
@@ -2576,7 +2870,8 @@ export declare namespace ItemUpsertParams {
|
|
|
2576
2870
|
*/
|
|
2577
2871
|
spec:
|
|
2578
2872
|
| WalletVaultItemRequest.LinkWalletVaultItemRequestSpec
|
|
2579
|
-
| WalletVaultItemRequest.AgentCardWalletVaultItemSpec
|
|
2873
|
+
| WalletVaultItemRequest.AgentCardWalletVaultItemSpec
|
|
2874
|
+
| KernelWalletVaultItemSpec;
|
|
2580
2875
|
|
|
2581
2876
|
/**
|
|
2582
2877
|
* Body param
|
|
@@ -2810,9 +3105,13 @@ export declare namespace Items {
|
|
|
2810
3105
|
type CredentialVaultItemUpdateRequest as CredentialVaultItemUpdateRequest,
|
|
2811
3106
|
type FillVaultItemOperationRequest as FillVaultItemOperationRequest,
|
|
2812
3107
|
type FillVaultItemOperationResult as FillVaultItemOperationResult,
|
|
3108
|
+
type KernelCardState as KernelCardState,
|
|
3109
|
+
type KernelCardVaultItemSpec as KernelCardVaultItemSpec,
|
|
2813
3110
|
type KernelCredentialVaultItemSpec as KernelCredentialVaultItemSpec,
|
|
2814
3111
|
type KernelCredentialVaultItemSpecInput as KernelCredentialVaultItemSpecInput,
|
|
2815
3112
|
type KernelCredentialVaultItemState as KernelCredentialVaultItemState,
|
|
3113
|
+
type KernelWalletState as KernelWalletState,
|
|
3114
|
+
type KernelWalletVaultItemSpec as KernelWalletVaultItemSpec,
|
|
2816
3115
|
type OnePasswordCredentialAccountSpec as OnePasswordCredentialAccountSpec,
|
|
2817
3116
|
type OnePasswordCredentialAccountState as OnePasswordCredentialAccountState,
|
|
2818
3117
|
type OnePasswordCredentialVaultItemSpec as OnePasswordCredentialVaultItemSpec,
|
|
@@ -2834,8 +3133,11 @@ export declare namespace Items {
|
|
|
2834
3133
|
type VaultItemEvent as VaultItemEvent,
|
|
2835
3134
|
type VaultItemOperationResponse as VaultItemOperationResponse,
|
|
2836
3135
|
type VaultPaymentMethod as VaultPaymentMethod,
|
|
3136
|
+
type VaultWebmcpBinding as VaultWebmcpBinding,
|
|
2837
3137
|
type WalletVaultItemSpec as WalletVaultItemSpec,
|
|
2838
3138
|
type WalletVaultItemState as WalletVaultItemState,
|
|
3139
|
+
type WebmcpInvokeVaultItemOperationRequest as WebmcpInvokeVaultItemOperationRequest,
|
|
3140
|
+
type WebmcpInvokeVaultItemOperationResult as WebmcpInvokeVaultItemOperationResult,
|
|
2839
3141
|
type ItemListResponse as ItemListResponse,
|
|
2840
3142
|
type ItemEventsResponse as ItemEventsResponse,
|
|
2841
3143
|
type ItemRetrieveParams as ItemRetrieveParams,
|
|
@@ -36,9 +36,13 @@ import {
|
|
|
36
36
|
ItemUpdateParams,
|
|
37
37
|
ItemUpsertParams,
|
|
38
38
|
Items,
|
|
39
|
+
KernelCardState,
|
|
40
|
+
KernelCardVaultItemSpec,
|
|
39
41
|
KernelCredentialVaultItemSpec,
|
|
40
42
|
KernelCredentialVaultItemSpecInput,
|
|
41
43
|
KernelCredentialVaultItemState,
|
|
44
|
+
KernelWalletState,
|
|
45
|
+
KernelWalletVaultItemSpec,
|
|
42
46
|
OnePasswordCredentialAccountSpec,
|
|
43
47
|
OnePasswordCredentialAccountState,
|
|
44
48
|
OnePasswordCredentialVaultItemSpec,
|
|
@@ -60,8 +64,11 @@ import {
|
|
|
60
64
|
VaultItemEvent,
|
|
61
65
|
VaultItemOperationResponse,
|
|
62
66
|
VaultPaymentMethod,
|
|
67
|
+
VaultWebmcpBinding,
|
|
63
68
|
WalletVaultItemSpec,
|
|
64
69
|
WalletVaultItemState,
|
|
70
|
+
WebmcpInvokeVaultItemOperationRequest,
|
|
71
|
+
WebmcpInvokeVaultItemOperationResult,
|
|
65
72
|
} from './items';
|
|
66
73
|
import { APIPromise } from '../../core/api-promise';
|
|
67
74
|
import { OffsetPagination, type OffsetPaginationParams, PagePromise } from '../../core/pagination';
|
|
@@ -103,9 +110,11 @@ export class Vaults extends APIResource {
|
|
|
103
110
|
}
|
|
104
111
|
|
|
105
112
|
/**
|
|
106
|
-
* Unresolved payment operations block deletion.
|
|
107
|
-
*
|
|
108
|
-
*
|
|
113
|
+
* Unresolved payment operations block deletion. Deleting a connected Kernel wallet
|
|
114
|
+
* first blocks new payments on it, then removes its enrolled card. If that fails,
|
|
115
|
+
* the wallet is kept and keeps refusing payments; retry the deletion. Reconcile
|
|
116
|
+
* the original attempt with the provider or support first; deleting or recreating
|
|
117
|
+
* an item is not proof that a payment did not occur.
|
|
109
118
|
*
|
|
110
119
|
* @example
|
|
111
120
|
* ```ts
|
|
@@ -151,7 +160,12 @@ export interface Vault {
|
|
|
151
160
|
updated_at: string;
|
|
152
161
|
}
|
|
153
162
|
|
|
154
|
-
export interface VaultListParams extends OffsetPaginationParams {
|
|
163
|
+
export interface VaultListParams extends OffsetPaginationParams {
|
|
164
|
+
/**
|
|
165
|
+
* Case-insensitive substring match against vault name. IDs match by exact value.
|
|
166
|
+
*/
|
|
167
|
+
query?: string;
|
|
168
|
+
}
|
|
155
169
|
|
|
156
170
|
export interface VaultUpsertParams {
|
|
157
171
|
/**
|
|
@@ -196,9 +210,13 @@ export declare namespace Vaults {
|
|
|
196
210
|
type CredentialVaultItemUpdateRequest as CredentialVaultItemUpdateRequest,
|
|
197
211
|
type FillVaultItemOperationRequest as FillVaultItemOperationRequest,
|
|
198
212
|
type FillVaultItemOperationResult as FillVaultItemOperationResult,
|
|
213
|
+
type KernelCardState as KernelCardState,
|
|
214
|
+
type KernelCardVaultItemSpec as KernelCardVaultItemSpec,
|
|
199
215
|
type KernelCredentialVaultItemSpec as KernelCredentialVaultItemSpec,
|
|
200
216
|
type KernelCredentialVaultItemSpecInput as KernelCredentialVaultItemSpecInput,
|
|
201
217
|
type KernelCredentialVaultItemState as KernelCredentialVaultItemState,
|
|
218
|
+
type KernelWalletState as KernelWalletState,
|
|
219
|
+
type KernelWalletVaultItemSpec as KernelWalletVaultItemSpec,
|
|
202
220
|
type OnePasswordCredentialAccountSpec as OnePasswordCredentialAccountSpec,
|
|
203
221
|
type OnePasswordCredentialAccountState as OnePasswordCredentialAccountState,
|
|
204
222
|
type OnePasswordCredentialVaultItemSpec as OnePasswordCredentialVaultItemSpec,
|
|
@@ -220,8 +238,11 @@ export declare namespace Vaults {
|
|
|
220
238
|
type VaultItemEvent as VaultItemEvent,
|
|
221
239
|
type VaultItemOperationResponse as VaultItemOperationResponse,
|
|
222
240
|
type VaultPaymentMethod as VaultPaymentMethod,
|
|
241
|
+
type VaultWebmcpBinding as VaultWebmcpBinding,
|
|
223
242
|
type WalletVaultItemSpec as WalletVaultItemSpec,
|
|
224
243
|
type WalletVaultItemState as WalletVaultItemState,
|
|
244
|
+
type WebmcpInvokeVaultItemOperationRequest as WebmcpInvokeVaultItemOperationRequest,
|
|
245
|
+
type WebmcpInvokeVaultItemOperationResult as WebmcpInvokeVaultItemOperationResult,
|
|
225
246
|
type ItemListResponse as ItemListResponse,
|
|
226
247
|
type ItemEventsResponse as ItemEventsResponse,
|
|
227
248
|
type ItemRetrieveParams as ItemRetrieveParams,
|
package/src/version.ts
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
export const VERSION = '0.
|
|
1
|
+
export const VERSION = '0.118.0'; // x-release-please-version
|
package/version.d.mts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export declare const VERSION = "0.
|
|
1
|
+
export declare const VERSION = "0.118.0";
|
|
2
2
|
//# sourceMappingURL=version.d.mts.map
|
package/version.d.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export declare const VERSION = "0.
|
|
1
|
+
export declare const VERSION = "0.118.0";
|
|
2
2
|
//# sourceMappingURL=version.d.ts.map
|
package/version.js
CHANGED
package/version.mjs
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export const VERSION = '0.
|
|
1
|
+
export const VERSION = '0.118.0'; // x-release-please-version
|
|
2
2
|
//# sourceMappingURL=version.mjs.map
|