@onkernel/sdk 0.119.0 → 0.121.0

package/src/resources/config-registry/config-registry.ts

@@ -303,11 +303,7 @@ export namespace Proxy {
      * Configuration for routing traffic through a proxy.
      */
     export interface Create {
-      /**
-       * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-       * worst: `mobile` > `residential` > `isp` > `datacenter`.
-       */
-      type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+      type: 'isp' | 'residential' | 'mobile' | 'custom';
 
       /**
        * Hostnames that should bypass the parent proxy and connect directly.
@@ -315,10 +311,9 @@ export namespace Proxy {
       bypass_hosts?: Array<string>;
 
       /**
-       * Configuration specific to the selected proxy `type`.
+       * Configuration for an ISP proxy.
        */
       config?:
-        | Create.DatacenterProxyConfig
         | Create.IspProxyConfig
         | Create.ResidentialProxyConfig
         | Create.MobileProxyConfig
@@ -336,16 +331,6 @@ export namespace Proxy {
     }
 
     export namespace Create {
-      /**
-       * Configuration for a datacenter proxy.
-       */
-      export interface DatacenterProxyConfig {
-        /**
-         * ISO 3166 country code. Defaults to US if not provided.
-         */
-        country?: string;
-      }
-
       /**
        * Configuration for an ISP proxy.
        */

package/src/resources/index.ts

@@ -43,6 +43,7 @@ export {
   type BrowserMemory,
   type BrowserMemoryRequest,
   type BrowserNetworkConfig,
+  type BrowserNetworkUpdate,
   type BrowserPoolRef,
   type BrowserProxy,
   type BrowserProxyConfig,

package/src/resources/invocations.ts

@@ -471,7 +471,7 @@ export namespace InvocationListBrowsersResponse {
     /**
      * Geographic region of the browser session. Fixed once the session is created.
      */
-    region: 'us-east' | 'eu-west' | 'ap-southeast';
+    region: 'us-east' | 'us-west' | 'eu-west' | 'ap-southeast';
 
     /**
      * Unique identifier for the browser session

package/src/resources/proxies.ts

@@ -16,9 +16,7 @@ export class Proxies extends APIResource {
    *
    * @example
    * ```ts
-   * const proxy = await client.proxies.create({
-   *   type: 'datacenter',
-   * });
+   * const proxy = await client.proxies.create({ type: 'isp' });
    * ```
    */
   create(body: ProxyCreateParams, options?: RequestOptions): APIPromise<ProxyCreateResponse> {
@@ -92,11 +90,11 @@ export class Proxies extends APIResource {
 
   /**
    * Run a health check on the proxy to verify it's working. Optionally specify a URL
-   * to test reachability against a specific target. For ISP and datacenter proxies,
-   * this reliably tests whether the target site is reachable from the proxy's stable
-   * exit IP. For residential and mobile proxies, the exit node varies between
-   * requests, so this validates proxy configuration and connectivity rather than
-   * guaranteeing site-specific reachability.
+   * to test reachability against a specific target. For ISP proxies, this reliably
+   * tests whether the target site is reachable from the proxy's stable exit IP. For
+   * residential and mobile proxies, the exit node varies between requests, so this
+   * validates proxy configuration and connectivity rather than guaranteeing
+   * site-specific reachability.
    *
    * @example
    * ```ts
@@ -118,11 +116,7 @@ export type ProxyListResponsesOffsetPagination = OffsetPagination<ProxyListRespo
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyCreateResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -132,10 +126,9 @@ export interface ProxyCreateResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyCreateResponse.DatacenterProxyConfig
     | ProxyCreateResponse.IspProxyConfig
     | ProxyCreateResponse.ResidentialProxyConfig
     | ProxyCreateResponse.MobileProxyConfig
@@ -168,16 +161,6 @@ export interface ProxyCreateResponse {
 }
 
 export namespace ProxyCreateResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
@@ -282,11 +265,7 @@ export namespace ProxyCreateResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyRetrieveResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -296,10 +275,9 @@ export interface ProxyRetrieveResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyRetrieveResponse.DatacenterProxyConfig
     | ProxyRetrieveResponse.IspProxyConfig
     | ProxyRetrieveResponse.ResidentialProxyConfig
     | ProxyRetrieveResponse.MobileProxyConfig
@@ -332,16 +310,6 @@ export interface ProxyRetrieveResponse {
 }
 
 export namespace ProxyRetrieveResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
@@ -446,11 +414,7 @@ export namespace ProxyRetrieveResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyUpdateResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -460,10 +424,9 @@ export interface ProxyUpdateResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyUpdateResponse.DatacenterProxyConfig
     | ProxyUpdateResponse.IspProxyConfig
     | ProxyUpdateResponse.ResidentialProxyConfig
     | ProxyUpdateResponse.MobileProxyConfig
@@ -496,16 +459,6 @@ export interface ProxyUpdateResponse {
 }
 
 export namespace ProxyUpdateResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
@@ -610,11 +563,7 @@ export namespace ProxyUpdateResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyListResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -624,10 +573,9 @@ export interface ProxyListResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyListResponse.DatacenterProxyConfig
     | ProxyListResponse.IspProxyConfig
     | ProxyListResponse.ResidentialProxyConfig
     | ProxyListResponse.MobileProxyConfig
@@ -660,16 +608,6 @@ export interface ProxyListResponse {
 }
 
 export namespace ProxyListResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
@@ -774,11 +712,7 @@ export namespace ProxyListResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyCheckResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -788,10 +722,9 @@ export interface ProxyCheckResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyCheckResponse.DatacenterProxyConfig
     | ProxyCheckResponse.IspProxyConfig
     | ProxyCheckResponse.ResidentialProxyConfig
     | ProxyCheckResponse.MobileProxyConfig
@@ -824,16 +757,6 @@ export interface ProxyCheckResponse {
 }
 
 export namespace ProxyCheckResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
@@ -935,11 +858,7 @@ export namespace ProxyCheckResponse {
 }
 
 export interface ProxyCreateParams {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   /**
    * Hostnames that should bypass the parent proxy and connect directly.
@@ -947,10 +866,9 @@ export interface ProxyCreateParams {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyCreateParams.DatacenterProxyConfig
     | ProxyCreateParams.IspProxyConfig
     | ProxyCreateParams.ResidentialProxyConfig
     | ProxyCreateParams.MobileProxyConfig
@@ -968,16 +886,6 @@ export interface ProxyCreateParams {
 }
 
 export namespace ProxyCreateParams {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
@@ -1108,15 +1016,15 @@ export interface ProxyCheckParams {
    * An optional URL to test reachability against. If provided, the proxy check will
    * test connectivity to this URL instead of the default test URLs. Only HTTP and
    * HTTPS schemes are allowed, and the URL must resolve to a public IP address. For
-   * ISP and datacenter proxies, the exit IP is stable, so a successful check
-   * reliably indicates that subsequent browser sessions will reach the target site
-   * with the same IP. For residential and mobile proxies, the exit node changes
-   * between requests, so a successful check validates proxy configuration but does
-   * not guarantee that a subsequent browser session will use the same exit IP or
-   * reach the same site — it is useful for verifying credentials and connectivity,
-   * not for predicting site-specific behavior. When provided, the check result does
-   * not update the proxy's health status, since a failure may indicate a problem
-   * with the target site rather than the proxy itself.
+   * ISP proxies, the exit IP is stable, so a successful check reliably indicates
+   * that subsequent browser sessions will reach the target site with the same IP.
+   * For residential and mobile proxies, the exit node changes between requests, so a
+   * successful check validates proxy configuration but does not guarantee that a
+   * subsequent browser session will use the same exit IP or reach the same site — it
+   * is useful for verifying credentials and connectivity, not for predicting
+   * site-specific behavior. When provided, the check result does not update the
+   * proxy's health status, since a failure may indicate a problem with the target
+   * site rather than the proxy itself.
    */
   url?: string;
 }

package/src/resources/search/search.ts

@@ -202,7 +202,8 @@ export namespace ProviderTarget {
        */
       export interface Contents {
         /**
-         * Return query-relevant provider excerpts.
+         * Return query-relevant provider excerpts. Defaults to true for Exa search
+         * requests; set false to disable.
          */
         highlights?: boolean;
 
@@ -255,7 +256,8 @@ export namespace ProviderTarget {
       query?: Array<string>;
 
       /**
-       * Provider context size supported by the selected model.
+       * Amount of page content Perplexity extracts per result. Defaults to medium unless
+       * max_tokens or max_tokens_per_page is set.
        */
       search_context_size?: 'low' | 'medium' | 'high';
 

package/src/resources/vaults/items.ts

@@ -1123,22 +1123,24 @@ export interface FillVaultItemOperationResult {
 /**
  * A ready Kernel card retains its encrypted network token and one-time code for
  * the fill operation until the item's expires_at. Fill and submit checkout before
- * then. Visa cards can be enrolled, but Visa purchases are not yet supported and
- * authorize returns 400; supported Mastercard purchases need no cardholder
- * approval. masks.last4 is the enrolled card's last four digits; masks.token_last4
- * is the network token's last four digits shown to the merchant. Kernel cards do
- * not expose aliases or support egress substitution. Kernel does not observe
- * whether the merchant charged the card.
+ * then. Visa purchases require a spend_approval action before the code is issued;
+ * Mastercard purchases need no hosted approval. masks.last4 is the enrolled card's
+ * last four digits; masks.token_last4 is the network token's last four digits
+ * shown to the merchant. Kernel cards do not expose aliases or support egress
+ * substitution. Kernel does not observe whether the merchant charged the card.
  */
 export interface KernelCardState {
   provider: 'kernel';
 
   /**
-   * recovery_required means issuing the one-time code has an unresolved outcome.
-   * Kernel never issues another code for the item automatically, and the item cannot
-   * be deleted or replaced until the original attempt is reconciled with support.
-   * When status_reason says the provider refused retrieval before acceptance, no
-   * code was issued and a later read retries.
+   * pending_authorization on a Visa purchase waits for the cardholder to approve it
+   * through the spend_approval action; an unused link expires after 30 minutes.
+   * recovery_required means approving the purchase or issuing the one-time code has
+   * an unresolved outcome. Kernel never approves again or issues another code for
+   * the item automatically, and the item cannot be deleted or replaced until the
+   * original attempt is reconciled with support. When status_reason says the
+   * provider refused retrieval before acceptance, no code was issued and a later
+   * read retries. declined means the card network refused to issue a code.
    */
   status:
     | 'requested'
@@ -1179,10 +1181,12 @@ export namespace KernelCardState {
  * network token number, expiry and one-time 3-digit code. They are stored
  * encrypted for the fill operation, which types them only on merchant_url's
  * origin; the merchant's own checkout submits the payment. The one-time code is
- * valid until the item's expires_at; fill and submit checkout before then. Visa
- * cards can be enrolled, but Visa purchases are not yet supported: authorize
- * returns 400. Supported Mastercard purchases need no cardholder approval. Card
- * updates are not supported; delete and create a new item instead.
+ * valid until the item's expires_at; fill and submit checkout before then.
+ * Mastercard purchases need no cardholder approval. A Visa purchase returns a
+ * spend_approval action: the cardholder approves it with a Visa passkey, and
+ * Kernel registers a Visa intent for one transaction up to the amount before
+ * issuing the code. Card updates are not supported; delete and create a new item
+ * instead.
  */
 export interface KernelCardVaultItemSpec {
   /**
@@ -1210,6 +1214,12 @@ export interface KernelCardVaultItemSpec {
    * Key of the Kernel wallet item whose enrolled card pays.
    */
   wallet: string;
+
+  /**
+   * The merchant's ISO 3166-1 alpha-2 country code. Required for Visa cards, whose
+   * one-time code is issued for the merchant's country.
+   */
+  merchant_country?: string;
 }
 
 export interface KernelCredentialVaultItemSpec {
@@ -1273,10 +1283,11 @@ export interface KernelWalletState {
 
   /**
    * pending_authorization asks the cardholder to use the card_enrollment action.
-   * connected is ready for supported purchases. reconnect_required asks the
-   * cardholder to use a new card_enrollment action after an uncertain enrollment was
-   * safely removed. degraded means the enrollment outcome is unknown and the wallet
-   * must be deleted before adding another card.
+   * connected means the card is stored; it can pay once payment_methods reports
+   * capabilities.single_use_card.eligible. reconnect_required asks the cardholder to
+   * use a new card_enrollment action after an uncertain enrollment was safely
+   * removed. degraded means the enrollment outcome is unknown and the wallet must be
+   * deleted before adding another card.
    */
   status: 'pending_authorization' | 'connected' | 'reconnect_required' | 'degraded';
 
@@ -1284,13 +1295,16 @@ export interface KernelWalletState {
 }
 
 /**
- * One card Kernel enrolls for Visa or Mastercard agentic network tokens using
- * Kernel-managed credentials. Creation returns a card_enrollment action: the
- * cardholder enters the card and their email on a Kernel-hosted page, then Kernel
- * enrolls the securely stored card. The card number never reaches Kernel. The
- * connected wallet's payment_methods expansion lists the enrolled card. Visa cards
- * can be enrolled, but Visa purchases are not yet supported: authorize
- * returns 400.
+ * One card stored with Kernel-managed credentials. Creation returns a
+ * card*enrollment action: the cardholder enters the card and their email on a
+ * Kernel-hosted page, and the wallet connects once the card is stored. Kernel then
+ * enrolls it for an agentic network token when the issuer supports it. The card
+ * number never reaches Kernel. The connected wallet's payment_methods expansion
+ * lists the card; capabilities.single_use_card.eligible is false, with a
+ * network_token*\* reason, until the card has a network token, and authorize
+ * returns 400 for such a card. Visa purchases require the cardholder to complete a
+ * spend_approval action before Kernel issues a one-time code; Mastercard purchases
+ * need no hosted approval.
  */
 export interface KernelWalletVaultItemSpec {
   provider: 'kernel';
@@ -1754,17 +1768,11 @@ export interface OnePasswordRecoverVaultItemOperationRequest {
 
 /**
  * Request access to login entries in the end-user's own, non-shared 1Password
- * vault through the browser extension, auto-loaded into the browser. The end-user
- * approves access in the 1Password app. Shared-vault items and passkeys are not
- * supported. Per-entry reason and keywords overrides are only supported for a
- * single login entry.
+ * vault. No browser is needed; the end-user approves access in the 1Password app.
+ * Shared-vault items and passkeys are not supported. Per-entry reason and keywords
+ * overrides are only supported for a single login entry.
  */
 export interface OnePasswordRequestAccessVaultItemOperationRequest {
-  /**
-   * Kernel browser session used to invoke the extension.
-   */
-  browser_id: string;
-
   type: '1pw_create_access_request';
 
   goal?: string;
@@ -2787,11 +2795,6 @@ export declare namespace ItemPerformOperationParams {
      */
     id_or_name: string;
 
-    /**
-     * Body param: Kernel browser session used to invoke the extension.
-     */
-    browser_id: string;
-
     /**
      * Body param
      */
@@ -2819,11 +2822,6 @@ export declare namespace ItemPerformOperationParams {
      */
     id_or_name: string;
 
-    /**
-     * Body param
-     */
-    browser_id: string;
-
     /**
      * Body param
      */

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.119.0'; // x-release-please-version
+export const VERSION = '0.121.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.119.0";
+export declare const VERSION = "0.121.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.119.0";
+export declare const VERSION = "0.121.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.119.0'; // x-release-please-version
+exports.VERSION = '0.121.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.119.0'; // x-release-please-version
+export const VERSION = '0.121.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map