@onkernel/sdk 0.120.0 → 0.122.0

package/src/resources/browsers/telemetry.ts

@@ -194,15 +194,19 @@ export namespace BrowserCallStack {
 }
 
 /**
- * A visible captcha challenge reached a terminal outcome.
+ * A captcha challenge reached an observed or inferred terminal outcome.
  */
 export interface BrowserCaptchaChallengeResultEvent {
   category: 'captcha';
 
   /**
-   * Per-challenge payload. This event is emitted once per challenge and determines
-   * its overall outcome; captcha_solve_started and captcha_solve_result describe
-   * individual tasks and may occur multiple times within the challenge.
+   * An observed challenge emits one outcome across any number of solver tasks. For
+   * eligible providers without a widget observer, each successful token task emits
+   * an inferred solved result instead; multiple such results may belong to one
+   * challenge. Failed tasks and image_challenge rounds produce no inferred result.
+   * Exactly one of challenge_id or task_id is present: challenge_id on an observed
+   * result, task_id on an inferred one. A challenge whose tasks all fail produces
+   * task events only, so consumers fall back to captcha_solve_result for it.
    */
   data: BrowserCaptchaChallengeResultEvent.Data;
 
@@ -226,15 +230,17 @@ export interface BrowserCaptchaChallengeResultEvent {
 
 export namespace BrowserCaptchaChallengeResultEvent {
   /**
-   * Per-challenge payload. This event is emitted once per challenge and determines
-   * its overall outcome; captcha_solve_started and captcha_solve_result describe
-   * individual tasks and may occur multiple times within the challenge.
+   * An observed challenge emits one outcome across any number of solver tasks. For
+   * eligible providers without a widget observer, each successful token task emits
+   * an inferred solved result instead; multiple such results may belong to one
+   * challenge. Failed tasks and image_challenge rounds produce no inferred result.
+   * Exactly one of challenge_id or task_id is present: challenge_id on an observed
+   * result, task_id on an inferred one. A challenge whose tasks all fail produces
+   * task events only, so consumers fall back to captcha_solve_result for it.
    */
   export interface Data {
     /**
-     * Captcha kind. Enterprise reCAPTCHA variants are grouped into their version
-     * bucket (recaptcha_v2 or recaptcha_v3), press-and-hold challenges use
-     * press_and_hold, and unlisted kinds use other.
+     * @deprecated Deprecated: use captcha_provider.
      */
     captcha_type:
       | 'hcaptcha'
@@ -245,34 +251,67 @@ export namespace BrowserCaptchaChallengeResultEvent {
       | 'press_and_hold'
       | 'other';
 
+    /**
+     * Wall-clock duration from the challenge appearing to its terminal outcome,
+     * covering every solver attempt in between. For an inferred result, the duration
+     * of its solver task.
+     */
+    duration_ms: number;
+
+    /**
+     * Terminal outcome of a challenge. solved: the page observed the challenge clear
+     * after a solver attempt, or an inferred result reports a token for the whole
+     * widget without page observation. failure: a terminal solver failure occurred, or
+     * all attempts ended while the challenge remained. timeout: the challenge-level
+     * wait budget expired while the challenge remained. abandoned: observation ended
+     * without an attributable terminal challenge outcome. This includes a dismissed
+     * widget or page unload without a solved signal or terminal solver outcome, and a
+     * token appearing while multiple same-provider challenges are open, because the
+     * producer cannot attribute that token to this visible challenge. A
+     * captcha_solve_result with the same challenge_id may therefore report success
+     * while the challenge result reports abandoned. A solved challenge does not prove
+     * the site accepted the token or that the guarded action succeeded.
+     */
+    status: 'solved' | 'failure' | 'timeout' | 'abandoned';
+
+    /**
+     * Captcha product the challenge belongs to, not the service that solved it.
+     * Enterprise reCAPTCHA variants are grouped into their version bucket
+     * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
+     * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
+     * products use other.
+     */
+    captcha_provider?:
+      | 'hcaptcha'
+      | 'recaptcha_v2'
+      | 'recaptcha_v3'
+      | 'turnstile'
+      | 'geetest'
+      | 'arkose'
+      | 'human'
+      | 'other';
+
     /**
      * Opaque identifier shared by events for one visible challenge. An image-grid
      * captcha may create multiple task_id values for one challenge_id. The same value
      * may continue across a page reload when the challenge episode continues. It does
      * not indicate task ordering or challenge completion.
      */
-    challenge_id: string;
+    challenge_id?: string;
 
     /**
-     * Wall-clock duration from the challenge appearing to its terminal outcome,
-     * covering every solver attempt in between.
+     * True when the relay derived this result from a successful token task without
+     * observing the page. An inferred result has task_id instead of challenge_id.
+     * Absent on page-observed results.
      */
-    duration_ms: number;
+    inferred?: boolean;
 
     /**
-     * Terminal outcome of the visible challenge. solved: the page observed the
-     * challenge clear after a solver attempt. failure: a terminal solver failure
-     * occurred, or all attempts ended while the challenge remained. timeout: the
-     * challenge-level wait budget expired while the challenge remained. abandoned:
-     * observation ended without an attributable terminal challenge outcome. This
-     * includes a dismissed widget or page unload without a solved signal or terminal
-     * solver outcome, and a token appearing while multiple same-provider challenges
-     * are open, because the producer cannot attribute that token to this visible
-     * challenge. A captcha_solve_result with the same challenge_id may therefore
-     * report success while the challenge result reports abandoned. A solved challenge
-     * does not prove the site accepted the token or that the guarded action succeeded.
+     * The task_id of the solver task an inferred result was derived from. Join on it
+     * to pair the result with that task's captcha_solve_started and
+     * captcha_solve_result. Present only when inferred is true.
      */
-    status: 'solved' | 'failure' | 'timeout' | 'abandoned';
+    task_id?: string;
 
     /**
      * Host of the page where the challenge appeared.
@@ -315,9 +354,7 @@ export interface BrowserCaptchaSolveResultEvent {
 export namespace BrowserCaptchaSolveResultEvent {
   export interface Data {
     /**
-     * Captcha kind. Enterprise reCAPTCHA variants are grouped into their version
-     * bucket (recaptcha_v2 or recaptcha_v3), press-and-hold challenges use
-     * press_and_hold, and unlisted kinds use other.
+     * @deprecated Deprecated: use captcha_provider and task_kind.
      */
     captcha_type:
       | 'hcaptcha'
@@ -343,6 +380,23 @@ export namespace BrowserCaptchaSolveResultEvent {
      */
     status: 'success' | 'failure' | 'timeout' | 'abandoned';
 
+    /**
+     * Captcha product the challenge belongs to, not the service that solved it.
+     * Enterprise reCAPTCHA variants are grouped into their version bucket
+     * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
+     * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
+     * products use other.
+     */
+    captcha_provider?:
+      | 'hcaptcha'
+      | 'recaptcha_v2'
+      | 'recaptcha_v3'
+      | 'turnstile'
+      | 'geetest'
+      | 'arkose'
+      | 'human'
+      | 'other';
+
     /**
      * Opaque identifier shared by events for one visible challenge. An image-grid
      * captcha may create multiple task_id values for one challenge_id. The same value
@@ -362,6 +416,11 @@ export namespace BrowserCaptchaSolveResultEvent {
      */
     task_id?: string;
 
+    /**
+     * What the solver task produces. Absent when the producer cannot tell.
+     */
+    task_kind?: 'token' | 'image_challenge' | 'press_and_hold';
+
     /**
      * Host of the page where the captcha was solved.
      */
@@ -415,9 +474,7 @@ export namespace BrowserCaptchaSolveStartedEvent {
    */
   export interface Data {
     /**
-     * Captcha kind. Enterprise reCAPTCHA variants are grouped into their version
-     * bucket (recaptcha_v2 or recaptcha_v3), press-and-hold challenges use
-     * press_and_hold, and unlisted kinds use other.
+     * @deprecated Deprecated: use captcha_provider and task_kind.
      */
     captcha_type:
       | 'hcaptcha'
@@ -428,6 +485,23 @@ export namespace BrowserCaptchaSolveStartedEvent {
       | 'press_and_hold'
       | 'other';
 
+    /**
+     * Captcha product the challenge belongs to, not the service that solved it.
+     * Enterprise reCAPTCHA variants are grouped into their version bucket
+     * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
+     * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
+     * products use other.
+     */
+    captcha_provider?:
+      | 'hcaptcha'
+      | 'recaptcha_v2'
+      | 'recaptcha_v3'
+      | 'turnstile'
+      | 'geetest'
+      | 'arkose'
+      | 'human'
+      | 'other';
+
     /**
      * Opaque identifier shared by events for one visible challenge. An image-grid
      * captcha may create multiple task_id values for one challenge_id. The same value
@@ -441,6 +515,11 @@ export namespace BrowserCaptchaSolveStartedEvent {
      */
     task_id?: string;
 
+    /**
+     * What the solver task produces. Absent when the producer cannot tell.
+     */
+    task_kind?: 'token' | 'image_challenge' | 'press_and_hold';
+
     /**
      * Host of the page where the captcha is being solved. May be empty for solver
      * tasks that carry no page URL.

package/src/resources/config-registry/config-registry.ts

@@ -303,11 +303,7 @@ export namespace Proxy {
      * Configuration for routing traffic through a proxy.
      */
     export interface Create {
-      /**
-       * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-       * worst: `mobile` > `residential` > `isp` > `datacenter`.
-       */
-      type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+      type: 'isp' | 'residential' | 'mobile' | 'custom';
 
       /**
        * Hostnames that should bypass the parent proxy and connect directly.
@@ -315,10 +311,9 @@ export namespace Proxy {
       bypass_hosts?: Array<string>;
 
       /**
-       * Configuration specific to the selected proxy `type`.
+       * Configuration for an ISP proxy.
        */
       config?:
-        | Create.DatacenterProxyConfig
         | Create.IspProxyConfig
         | Create.ResidentialProxyConfig
         | Create.MobileProxyConfig
@@ -336,23 +331,13 @@ export namespace Proxy {
     }
 
     export namespace Create {
-      /**
-       * Configuration for a datacenter proxy.
-       */
-      export interface DatacenterProxyConfig {
-        /**
-         * ISO 3166 country code. Defaults to US if not provided.
-         */
-        country?: string;
-      }
-
       /**
        * Configuration for an ISP proxy.
        */
       export interface IspProxyConfig {
         /**
-         * ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults
-         * to US if not provided.
+         * ISO 3166 country code. Supported countries are US, GB, FR, DE, SG, and KR.
+         * Defaults to US if not provided.
          */
         country?: string;
       }

package/src/resources/index.ts

@@ -43,6 +43,7 @@ export {
   type BrowserMemory,
   type BrowserMemoryRequest,
   type BrowserNetworkConfig,
+  type BrowserNetworkUpdate,
   type BrowserPoolRef,
   type BrowserProxy,
   type BrowserProxyConfig,
@@ -209,6 +210,7 @@ export {
 export {
   Vaults,
   type Vault,
+  type VaultEncryptionKey,
   type VaultListParams,
   type VaultUpsertParams,
   type VaultsOffsetPagination,

package/src/resources/proxies.ts

@@ -16,9 +16,7 @@ export class Proxies extends APIResource {
    *
    * @example
    * ```ts
-   * const proxy = await client.proxies.create({
-   *   type: 'datacenter',
-   * });
+   * const proxy = await client.proxies.create({ type: 'isp' });
    * ```
    */
   create(body: ProxyCreateParams, options?: RequestOptions): APIPromise<ProxyCreateResponse> {
@@ -92,11 +90,11 @@ export class Proxies extends APIResource {
 
   /**
    * Run a health check on the proxy to verify it's working. Optionally specify a URL
-   * to test reachability against a specific target. For ISP and datacenter proxies,
-   * this reliably tests whether the target site is reachable from the proxy's stable
-   * exit IP. For residential and mobile proxies, the exit node varies between
-   * requests, so this validates proxy configuration and connectivity rather than
-   * guaranteeing site-specific reachability.
+   * to test reachability against a specific target. For ISP proxies, this reliably
+   * tests whether the target site is reachable from the proxy's stable exit IP. For
+   * residential and mobile proxies, the exit node varies between requests, so this
+   * validates proxy configuration and connectivity rather than guaranteeing
+   * site-specific reachability.
    *
    * @example
    * ```ts
@@ -118,11 +116,7 @@ export type ProxyListResponsesOffsetPagination = OffsetPagination<ProxyListRespo
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyCreateResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -132,10 +126,9 @@ export interface ProxyCreateResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyCreateResponse.DatacenterProxyConfig
     | ProxyCreateResponse.IspProxyConfig
     | ProxyCreateResponse.ResidentialProxyConfig
     | ProxyCreateResponse.MobileProxyConfig
@@ -168,23 +161,13 @@ export interface ProxyCreateResponse {
 }
 
 export namespace ProxyCreateResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
   export interface IspProxyConfig {
     /**
-     * ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults
-     * to US if not provided.
+     * ISO 3166 country code. Supported countries are US, GB, FR, DE, SG, and KR.
+     * Defaults to US if not provided.
      */
     country?: string;
   }
@@ -282,11 +265,7 @@ export namespace ProxyCreateResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyRetrieveResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -296,10 +275,9 @@ export interface ProxyRetrieveResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyRetrieveResponse.DatacenterProxyConfig
     | ProxyRetrieveResponse.IspProxyConfig
     | ProxyRetrieveResponse.ResidentialProxyConfig
     | ProxyRetrieveResponse.MobileProxyConfig
@@ -332,23 +310,13 @@ export interface ProxyRetrieveResponse {
 }
 
 export namespace ProxyRetrieveResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
   export interface IspProxyConfig {
     /**
-     * ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults
-     * to US if not provided.
+     * ISO 3166 country code. Supported countries are US, GB, FR, DE, SG, and KR.
+     * Defaults to US if not provided.
      */
     country?: string;
   }
@@ -446,11 +414,7 @@ export namespace ProxyRetrieveResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyUpdateResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -460,10 +424,9 @@ export interface ProxyUpdateResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyUpdateResponse.DatacenterProxyConfig
     | ProxyUpdateResponse.IspProxyConfig
     | ProxyUpdateResponse.ResidentialProxyConfig
     | ProxyUpdateResponse.MobileProxyConfig
@@ -496,23 +459,13 @@ export interface ProxyUpdateResponse {
 }
 
 export namespace ProxyUpdateResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
   export interface IspProxyConfig {
     /**
-     * ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults
-     * to US if not provided.
+     * ISO 3166 country code. Supported countries are US, GB, FR, DE, SG, and KR.
+     * Defaults to US if not provided.
      */
     country?: string;
   }
@@ -610,11 +563,7 @@ export namespace ProxyUpdateResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyListResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -624,10 +573,9 @@ export interface ProxyListResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyListResponse.DatacenterProxyConfig
     | ProxyListResponse.IspProxyConfig
     | ProxyListResponse.ResidentialProxyConfig
     | ProxyListResponse.MobileProxyConfig
@@ -660,23 +608,13 @@ export interface ProxyListResponse {
 }
 
 export namespace ProxyListResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
   export interface IspProxyConfig {
     /**
-     * ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults
-     * to US if not provided.
+     * ISO 3166 country code. Supported countries are US, GB, FR, DE, SG, and KR.
+     * Defaults to US if not provided.
      */
     country?: string;
   }
@@ -774,11 +712,7 @@ export namespace ProxyListResponse {
  * Configuration for routing traffic through a proxy.
  */
 export interface ProxyCheckResponse {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   id?: string;
 
@@ -788,10 +722,9 @@ export interface ProxyCheckResponse {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyCheckResponse.DatacenterProxyConfig
     | ProxyCheckResponse.IspProxyConfig
     | ProxyCheckResponse.ResidentialProxyConfig
     | ProxyCheckResponse.MobileProxyConfig
@@ -824,23 +757,13 @@ export interface ProxyCheckResponse {
 }
 
 export namespace ProxyCheckResponse {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
   export interface IspProxyConfig {
     /**
-     * ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults
-     * to US if not provided.
+     * ISO 3166 country code. Supported countries are US, GB, FR, DE, SG, and KR.
+     * Defaults to US if not provided.
      */
     country?: string;
   }
@@ -935,11 +858,7 @@ export namespace ProxyCheckResponse {
 }
 
 export interface ProxyCreateParams {
-  /**
-   * Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-   * worst: `mobile` > `residential` > `isp` > `datacenter`.
-   */
-  type: 'datacenter' | 'isp' | 'residential' | 'mobile' | 'custom';
+  type: 'isp' | 'residential' | 'mobile' | 'custom';
 
   /**
    * Hostnames that should bypass the parent proxy and connect directly.
@@ -947,10 +866,9 @@ export interface ProxyCreateParams {
   bypass_hosts?: Array<string>;
 
   /**
-   * Configuration specific to the selected proxy `type`.
+   * Configuration for an ISP proxy.
    */
   config?:
-    | ProxyCreateParams.DatacenterProxyConfig
     | ProxyCreateParams.IspProxyConfig
     | ProxyCreateParams.ResidentialProxyConfig
     | ProxyCreateParams.MobileProxyConfig
@@ -968,23 +886,13 @@ export interface ProxyCreateParams {
 }
 
 export namespace ProxyCreateParams {
-  /**
-   * Configuration for a datacenter proxy.
-   */
-  export interface DatacenterProxyConfig {
-    /**
-     * ISO 3166 country code. Defaults to US if not provided.
-     */
-    country?: string;
-  }
-
   /**
    * Configuration for an ISP proxy.
    */
   export interface IspProxyConfig {
     /**
-     * ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults
-     * to US if not provided.
+     * ISO 3166 country code. Supported countries are US, GB, FR, DE, SG, and KR.
+     * Defaults to US if not provided.
      */
     country?: string;
   }
@@ -1108,15 +1016,15 @@ export interface ProxyCheckParams {
    * An optional URL to test reachability against. If provided, the proxy check will
    * test connectivity to this URL instead of the default test URLs. Only HTTP and
    * HTTPS schemes are allowed, and the URL must resolve to a public IP address. For
-   * ISP and datacenter proxies, the exit IP is stable, so a successful check
-   * reliably indicates that subsequent browser sessions will reach the target site
-   * with the same IP. For residential and mobile proxies, the exit node changes
-   * between requests, so a successful check validates proxy configuration but does
-   * not guarantee that a subsequent browser session will use the same exit IP or
-   * reach the same site — it is useful for verifying credentials and connectivity,
-   * not for predicting site-specific behavior. When provided, the check result does
-   * not update the proxy's health status, since a failure may indicate a problem
-   * with the target site rather than the proxy itself.
+   * ISP proxies, the exit IP is stable, so a successful check reliably indicates
+   * that subsequent browser sessions will reach the target site with the same IP.
+   * For residential and mobile proxies, the exit node changes between requests, so a
+   * successful check validates proxy configuration but does not guarantee that a
+   * subsequent browser session will use the same exit IP or reach the same site — it
+   * is useful for verifying credentials and connectivity, not for predicting
+   * site-specific behavior. When provided, the check result does not update the
+   * proxy's health status, since a failure may indicate a problem with the target
+   * site rather than the proxy itself.
    */
   url?: string;
 }

package/src/resources/vaults/index.ts

@@ -75,6 +75,7 @@ export {
 export {
   Vaults,
   type Vault,
+  type VaultEncryptionKey,
   type VaultListParams,
   type VaultUpsertParams,
   type VaultsOffsetPagination,