@onkernel/sdk 0.122.0 → 0.124.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (82) hide show
  1. package/CHANGELOG.md +23 -0
  2. package/client.d.mts +2 -2
  3. package/client.d.mts.map +1 -1
  4. package/client.d.ts +2 -2
  5. package/client.d.ts.map +1 -1
  6. package/client.js.map +1 -1
  7. package/client.mjs.map +1 -1
  8. package/package.json +1 -1
  9. package/resources/browser-pools.d.mts +21 -11
  10. package/resources/browser-pools.d.mts.map +1 -1
  11. package/resources/browser-pools.d.ts +21 -11
  12. package/resources/browser-pools.d.ts.map +1 -1
  13. package/resources/browsers/browsers.d.mts +37 -6
  14. package/resources/browsers/browsers.d.mts.map +1 -1
  15. package/resources/browsers/browsers.d.ts +37 -6
  16. package/resources/browsers/browsers.d.ts.map +1 -1
  17. package/resources/browsers/browsers.js.map +1 -1
  18. package/resources/browsers/browsers.mjs.map +1 -1
  19. package/resources/browsers/index.d.mts +1 -1
  20. package/resources/browsers/index.d.mts.map +1 -1
  21. package/resources/browsers/index.d.ts +1 -1
  22. package/resources/browsers/index.d.ts.map +1 -1
  23. package/resources/browsers/index.js.map +1 -1
  24. package/resources/browsers/index.mjs.map +1 -1
  25. package/resources/browsers/playwright/playwright.d.mts +0 -4
  26. package/resources/browsers/playwright/playwright.d.mts.map +1 -1
  27. package/resources/browsers/playwright/playwright.d.ts +0 -4
  28. package/resources/browsers/playwright/playwright.d.ts.map +1 -1
  29. package/resources/browsers/playwright/playwright.js +0 -4
  30. package/resources/browsers/playwright/playwright.js.map +1 -1
  31. package/resources/browsers/playwright/playwright.mjs +0 -4
  32. package/resources/browsers/playwright/playwright.mjs.map +1 -1
  33. package/resources/browsers/telemetry.d.mts +14 -1
  34. package/resources/browsers/telemetry.d.mts.map +1 -1
  35. package/resources/browsers/telemetry.d.ts +14 -1
  36. package/resources/browsers/telemetry.d.ts.map +1 -1
  37. package/resources/browsers/telemetry.js +4 -1
  38. package/resources/browsers/telemetry.js.map +1 -1
  39. package/resources/browsers/telemetry.mjs +4 -1
  40. package/resources/browsers/telemetry.mjs.map +1 -1
  41. package/resources/index.d.mts +1 -1
  42. package/resources/index.d.mts.map +1 -1
  43. package/resources/index.d.ts +1 -1
  44. package/resources/index.d.ts.map +1 -1
  45. package/resources/index.js.map +1 -1
  46. package/resources/index.mjs.map +1 -1
  47. package/resources/invocations.d.mts +4 -0
  48. package/resources/invocations.d.mts.map +1 -1
  49. package/resources/invocations.d.ts +4 -0
  50. package/resources/invocations.d.ts.map +1 -1
  51. package/resources/vaults/index.d.mts +1 -1
  52. package/resources/vaults/index.d.mts.map +1 -1
  53. package/resources/vaults/index.d.ts +1 -1
  54. package/resources/vaults/index.d.ts.map +1 -1
  55. package/resources/vaults/index.js.map +1 -1
  56. package/resources/vaults/index.mjs.map +1 -1
  57. package/resources/vaults/items.d.mts +122 -27
  58. package/resources/vaults/items.d.mts.map +1 -1
  59. package/resources/vaults/items.d.ts +122 -27
  60. package/resources/vaults/items.d.ts.map +1 -1
  61. package/resources/vaults/vaults.d.mts +2 -2
  62. package/resources/vaults/vaults.d.mts.map +1 -1
  63. package/resources/vaults/vaults.d.ts +2 -2
  64. package/resources/vaults/vaults.d.ts.map +1 -1
  65. package/resources/vaults/vaults.js.map +1 -1
  66. package/resources/vaults/vaults.mjs.map +1 -1
  67. package/src/client.ts +2 -0
  68. package/src/resources/browser-pools.ts +22 -11
  69. package/src/resources/browsers/browsers.ts +43 -5
  70. package/src/resources/browsers/index.ts +1 -0
  71. package/src/resources/browsers/playwright/playwright.ts +0 -4
  72. package/src/resources/browsers/telemetry.ts +15 -1
  73. package/src/resources/index.ts +1 -0
  74. package/src/resources/invocations.ts +5 -0
  75. package/src/resources/vaults/index.ts +2 -0
  76. package/src/resources/vaults/items.ts +164 -19
  77. package/src/resources/vaults/vaults.ts +4 -0
  78. package/src/version.ts +1 -1
  79. package/version.d.mts +1 -1
  80. package/version.d.ts +1 -1
  81. package/version.js +1 -1
  82. package/version.mjs +1 -1
@@ -119,7 +119,7 @@ export class BrowserPools extends APIResource {
119
119
  idOrName: string,
120
120
  body: BrowserPoolAcquireParams,
121
121
  options?: RequestOptions,
122
- ): APIPromise<BrowserPoolAcquireResponse> {
122
+ ): APIPromise<BrowserPoolAcquireResponse | null> {
123
123
  return this._client.post(path`/browser_pools/${idOrName}/acquire`, { body, ...options });
124
124
  }
125
125
 
@@ -517,6 +517,11 @@ export interface BrowserPoolAcquireResponse {
517
517
  */
518
518
  vaults?: Array<BrowsersAPI.VaultReference>;
519
519
 
520
+ /**
521
+ * Video memory (VRAM) of the GPU browser session. Only present when gpu is true.
522
+ */
523
+ video_memory?: BrowsersAPI.BrowserVideoMemory;
524
+
520
525
  /**
521
526
  * Initial browser window size in pixels with optional refresh rate. If omitted,
522
527
  * image defaults apply (1920x1080@25). For GPU images, the default is
@@ -585,9 +590,9 @@ export interface BrowserPoolCreateParams {
585
590
  name?: string;
586
591
 
587
592
  /**
588
- * Network configuration applied to browsers in this pool. Proxy routes require
589
- * proxy-v3; the pool will not provision browsers through Envoy if proxy-v3 is
590
- * unavailable.
593
+ * Network configuration applied to browsers in this pool. Egress allowlists and
594
+ * proxy routes require proxy-v3; the pool will not provision browsers through
595
+ * Envoy if proxy-v3 is unavailable.
591
596
  */
592
597
  network?: BrowsersAPI.BrowserNetworkConfig;
593
598
 
@@ -814,9 +819,11 @@ export interface BrowserPoolUpdateParams {
814
819
  * Whether to discard all idle browsers and rebuild them immediately with the new
815
820
  * configuration. Defaults to false. Only browsers that are idle when the update
816
821
  * runs are rebuilt. A browser that is in use during the update keeps its original
817
- * configuration, and if it is later released with `reuse: true` it returns to the
818
- * pool with that stale configuration until it is discarded (by this flag on a
819
- * later update, or by flushing the pool).
822
+ * configuration, except that its allowlist is reset to the current pool baseline
823
+ * on release or the browser is replaced. For other configuration fields, if it is
824
+ * later released with `reuse: true` it returns to the pool with that stale
825
+ * configuration until it is discarded (by this flag on a later update, or by
826
+ * flushing the pool).
820
827
  */
821
828
  discard_all_idle?: boolean;
822
829
 
@@ -860,10 +867,14 @@ export interface BrowserPoolUpdateParams {
860
867
  * If provided, replaces the pool's network configuration. Omit to leave the
861
868
  * existing configuration unchanged; an empty object ({}) removes it, while
862
869
  * network: {private_hosts: []} or network: {proxy_routes: []} sets an explicit
863
- * empty list. Proxy routes require proxy-v3; the pool will not provision browsers
864
- * through Envoy if proxy-v3 is unavailable. Only applied to browsers created in
865
- * the pool after the update; browsers already in the pool keep their configuration
866
- * until discarded (see discard_all_idle).
870
+ * empty list; allowed_hosts must be non-empty when supplied. Egress allowlists and
871
+ * proxy routes require proxy-v3; the pool will not provision browsers through
872
+ * Envoy if proxy-v3 is unavailable. Changing allowed_hosts automatically replaces
873
+ * idle browsers. Leased browsers retain their allowlist until release, when it is
874
+ * reset to the current pool baseline or the browser is replaced if it cannot
875
+ * safely receive that baseline. Stale browsers cannot be acquired. Other network
876
+ * fields only apply to browsers created after the update; existing browsers keep
877
+ * those fields until discarded (see discard_all_idle).
867
878
  */
868
879
  network?: BrowsersAPI.BrowserNetworkConfig;
869
880
 
@@ -349,7 +349,7 @@ export type ProfilesOffsetPagination = OffsetPagination<Profile>;
349
349
  /**
350
350
  * Memory allocated to the browser session.
351
351
  */
352
- export type BrowserMemory = '1GiB' | '2GiB' | '6GiB' | '8GiB' | '16GiB';
352
+ export type BrowserMemory = '1GiB' | '2GiB' | '6GiB' | '8GiB' | '12GiB' | '16GiB';
353
353
 
354
354
  /**
355
355
  * Memory requested for a headful, non-GPU browser session.
@@ -380,8 +380,10 @@ export interface BrowserNetworkConfig {
380
380
  * processes in the browser VM that do not use the browser's proxy, are not
381
381
  * filtered, and Kernel's own control traffic is always allowed. Can be replaced or
382
382
  * removed while the session runs with PATCH /browsers/{id_or_name}, but not added
383
- * to a browser created without one. Requires proxy v3. Not supported on browser
384
- * pools.
383
+ * to a browser created without one. Supported on browser pools and their leased
384
+ * browsers. Per-lease changes are reset to the pool's allowlist on release. If a
385
+ * lessee removes the allowlist and the pool still requires one, the browser is
386
+ * replaced on release rather than given an allowlist again. Requires proxy v3.
385
387
  */
386
388
  allowed_hosts?: Array<string>;
387
389
 
@@ -475,8 +477,10 @@ export interface BrowserNetworkUpdate {
475
477
  * minutes during a Kernel deploy. Connections to destinations it still allows,
476
478
  * such as WebSockets, stay open. A start_url in the same request must be allowed
477
479
  * by the updated list, and is loaded only after the list takes effect. Requires a
478
- * browser created with proxy v3, and not supported on pooled browsers. If the
479
- * request fails, retry it: the new list may already apply to some requests.
480
+ * browser created with proxy v3. Supported on leased pooled browsers; the pool's
481
+ * allowlist is restored before reuse, or the browser is destroyed if it cannot be
482
+ * safely restored. If the request fails, retry it: the new list may already apply
483
+ * to some requests.
480
484
  */
481
485
  allowed_hosts?: Array<string> | null;
482
486
  }
@@ -670,6 +674,12 @@ export interface BrowserUsage {
670
674
  uptime_ms: number;
671
675
  }
672
676
 
677
+ /**
678
+ * Video memory (VRAM) of a GPU browser session. 2GiB sessions have 4 vCPU and 6GiB
679
+ * memory. 4GiB sessions have 8 vCPU and 12GiB memory.
680
+ */
681
+ export type BrowserVideoMemory = '2GiB' | '4GiB';
682
+
673
683
  /**
674
684
  * Browser profile metadata.
675
685
  */
@@ -868,6 +878,11 @@ export interface BrowserCreateResponse {
868
878
  */
869
879
  vaults?: Array<VaultReference>;
870
880
 
881
+ /**
882
+ * Video memory (VRAM) of the GPU browser session. Only present when gpu is true.
883
+ */
884
+ video_memory?: BrowserVideoMemory;
885
+
871
886
  /**
872
887
  * Initial browser window size in pixels with optional refresh rate. If omitted,
873
888
  * image defaults apply (1920x1080@25). For GPU images, the default is
@@ -1039,6 +1054,11 @@ export interface BrowserRetrieveResponse {
1039
1054
  */
1040
1055
  vaults?: Array<VaultReference>;
1041
1056
 
1057
+ /**
1058
+ * Video memory (VRAM) of the GPU browser session. Only present when gpu is true.
1059
+ */
1060
+ video_memory?: BrowserVideoMemory;
1061
+
1042
1062
  /**
1043
1063
  * Initial browser window size in pixels with optional refresh rate. If omitted,
1044
1064
  * image defaults apply (1920x1080@25). For GPU images, the default is
@@ -1210,6 +1230,11 @@ export interface BrowserUpdateResponse {
1210
1230
  */
1211
1231
  vaults?: Array<VaultReference>;
1212
1232
 
1233
+ /**
1234
+ * Video memory (VRAM) of the GPU browser session. Only present when gpu is true.
1235
+ */
1236
+ video_memory?: BrowserVideoMemory;
1237
+
1213
1238
  /**
1214
1239
  * Initial browser window size in pixels with optional refresh rate. If omitted,
1215
1240
  * image defaults apply (1920x1080@25). For GPU images, the default is
@@ -1381,6 +1406,11 @@ export interface BrowserListResponse {
1381
1406
  */
1382
1407
  vaults?: Array<VaultReference>;
1383
1408
 
1409
+ /**
1410
+ * Video memory (VRAM) of the GPU browser session. Only present when gpu is true.
1411
+ */
1412
+ video_memory?: BrowserVideoMemory;
1413
+
1384
1414
  /**
1385
1415
  * Initial browser window size in pixels with optional refresh rate. If omitted,
1386
1416
  * image defaults apply (1920x1080@25). For GPU images, the default is
@@ -1556,6 +1586,13 @@ export interface BrowserCreateParams {
1556
1586
  */
1557
1587
  vaults?: Array<VaultReference>;
1558
1588
 
1589
+ /**
1590
+ * Video memory (VRAM) for a GPU browser session. Requires gpu=true. Defaults to
1591
+ * 2GiB, which comes with 4 vCPU and 6GiB memory. 4GiB comes with 8 vCPU and 12GiB
1592
+ * memory.
1593
+ */
1594
+ video_memory?: BrowserVideoMemory;
1595
+
1559
1596
  /**
1560
1597
  * Initial browser window size in pixels with optional refresh rate. If omitted,
1561
1598
  * image defaults apply (1920x1080@25). For GPU images, the default is
@@ -2016,6 +2053,7 @@ export declare namespace Browsers {
2016
2053
  type BrowserReplResult as BrowserReplResult,
2017
2054
  type BrowserReplTextContent as BrowserReplTextContent,
2018
2055
  type BrowserUsage as BrowserUsage,
2056
+ type BrowserVideoMemory as BrowserVideoMemory,
2019
2057
  type Profile as Profile,
2020
2058
  type Tags as Tags,
2021
2059
  type VaultReference as VaultReference,
@@ -16,6 +16,7 @@ export {
16
16
  type BrowserReplResult,
17
17
  type BrowserReplTextContent,
18
18
  type BrowserUsage,
19
+ type BrowserVideoMemory,
19
20
  type Profile,
20
21
  type Tags,
21
22
  type VaultReference,
@@ -53,10 +53,6 @@ export class Playwright extends APIResource {
53
53
  * executors are not removed automatically while the browser runs; when it shuts
54
54
  * down, they are removed and their tabs closed.
55
55
  *
56
- * A named call to a browser whose image predates executors fails with 400 instead
57
- * of running on the active tab; calls without 'executor' keep working on every
58
- * image.
59
- *
60
56
  * @example
61
57
  * ```ts
62
58
  * const response = await client.browsers.playwright.execute(
@@ -47,7 +47,10 @@ export class Telemetry extends APIResource {
47
47
  * stream closes when the browser session terminates. Each event frame includes an
48
48
  * id: field containing a monotonically increasing sequence number; pass it as
49
49
  * Last-Event-ID on reconnect to resume without gaps. The event: field is never
50
- * set; all frames carry JSON in the data: field. A keepalive comment frame is sent
50
+ * set; event frames carry JSON in the data: field. A frame with an id: field and
51
+ * no data: field moves Last-Event-ID past events that were not delivered, because
52
+ * a type filter excluded them or they could not be decoded or exceeded the size
53
+ * limit; SSE clients dispatch no event for it. A keepalive comment frame is sent
51
54
  * every 15 seconds when no events arrive. Returns 404 if the browser session does
52
55
  * not exist. If telemetry was not enabled on the session, the stream opens but no
53
56
  * events are delivered. Fresh connections only see new events; pass replay=all to
@@ -4996,6 +4999,17 @@ export interface TelemetryStreamParams {
4996
4999
  */
4997
5000
  replay?: string;
4998
5001
 
5002
+ /**
5003
+ * Query param: Deliver only these event types, such as captcha_solve_started or
5004
+ * captcha_challenge_result. Repeat the parameter or pass comma-separated values
5005
+ * for multiple types. Keepalive frames are always delivered. Filtered-out events
5006
+ * are not sent. An id-only frame carrying the latest skipped id is sent about
5007
+ * every 15 seconds while skipped events keep arriving, and otherwise with the next
5008
+ * keepalive or when the stream ends, so the connection stays active and
5009
+ * Last-Event-ID moves past them; a reconnect resumes after the skipped events.
5010
+ */
5011
+ type?: Array<string>;
5012
+
4999
5013
  /**
5000
5014
  * Header param: Last event sequence number for SSE reconnection (sent by SSE
5001
5015
  * clients on reconnect). Takes precedence over replay when both are present, so
@@ -54,6 +54,7 @@ export {
54
54
  type BrowserReplResult,
55
55
  type BrowserReplTextContent,
56
56
  type BrowserUsage,
57
+ type BrowserVideoMemory,
57
58
  type Profile,
58
59
  type Tags,
59
60
  type VaultReference,
@@ -601,6 +601,11 @@ export namespace InvocationListBrowsersResponse {
601
601
  */
602
602
  vaults?: Array<BrowsersAPI.VaultReference>;
603
603
 
604
+ /**
605
+ * Video memory (VRAM) of the GPU browser session. Only present when gpu is true.
606
+ */
607
+ video_memory?: BrowsersAPI.BrowserVideoMemory;
608
+
604
609
  /**
605
610
  * Initial browser window size in pixels with optional refresh rate. If omitted,
606
611
  * image defaults apply (1920x1080@25). For GPU images, the default is
@@ -9,6 +9,7 @@ export {
9
9
  type CardVaultItemSpec,
10
10
  type CardVaultItemState,
11
11
  type CollectVaultItemOperationRequest,
12
+ type ConfirmTransactionVaultItemOperationRequest,
12
13
  type CredentialAccountVaultItem,
13
14
  type CredentialAccountVaultItemRequest,
14
15
  type CredentialCollectionAction,
@@ -48,6 +49,7 @@ export {
48
49
  type OnePasswordRecoverVaultItemOperationRequest,
49
50
  type OnePasswordRequestAccessVaultItemOperationRequest,
50
51
  type PrepareCheckoutVaultItemOperationRequest,
52
+ type RestartVerificationVaultItemOperationRequest,
51
53
  type VaultCardAliases,
52
54
  type VaultCardFillField,
53
55
  type VaultCheckoutContext,
@@ -600,6 +600,44 @@ export interface CollectVaultItemOperationRequest {
600
600
  type: 'collect';
601
601
  }
602
602
 
603
+ /**
604
+ * Report a real merchant transaction outcome for an issued Kernel Visa credential.
605
+ * Never infer success from filling checkout or receiving a credential. Supply the
606
+ * observed status, transaction type, actual amount, currency and timestamp.
607
+ * Unknown outcomes require manual reconciliation, not retry. Each purchase accepts
608
+ * one report.
609
+ */
610
+ export interface ConfirmTransactionVaultItemOperationRequest {
611
+ /**
612
+ * Actual transaction amount in minor units, no greater than the approved limit.
613
+ */
614
+ amount: number;
615
+
616
+ /**
617
+ * Must match the approved purchase currency.
618
+ */
619
+ currency: string;
620
+
621
+ /**
622
+ * Time the merchant outcome was observed.
623
+ */
624
+ occurred_at: string;
625
+
626
+ status: 'APPROVED' | 'DECLINED' | 'PENDING' | 'ERROR' | 'CANCELLED';
627
+
628
+ transaction_type:
629
+ | 'PURCHASE'
630
+ | 'AUTHORIZATION'
631
+ | 'CAPTURE'
632
+ | 'REFUND'
633
+ | 'REVERSAL'
634
+ | 'VERIFICATION'
635
+ | 'CHARGEBACK'
636
+ | 'FRAUD';
637
+
638
+ type: 'confirm_transaction';
639
+ }
640
+
603
641
  export interface CredentialAccountVaultItem {
604
642
  id: string;
605
643
 
@@ -652,6 +690,8 @@ export namespace CredentialAccountVaultItem {
652
690
 
653
691
  type:
654
692
  | 'authorize'
693
+ | 'restart_verification'
694
+ | 'confirm_transaction'
655
695
  | 'collect'
656
696
  | 'prepare_checkout'
657
697
  | 'fill'
@@ -960,6 +1000,8 @@ export namespace CredentialVaultItem {
960
1000
 
961
1001
  type:
962
1002
  | 'authorize'
1003
+ | 'restart_verification'
1004
+ | 'confirm_transaction'
963
1005
  | 'collect'
964
1006
  | 'prepare_checkout'
965
1007
  | 'fill'
@@ -993,14 +1035,15 @@ export namespace CredentialVaultItem {
993
1035
  * they choose 1Password, connect their account and request access to a login in
994
1036
  * their own non-shared vault; passkeys are not supported. If they decline or that
995
1037
  * path fails, collect a Kernel-hosted credential item instead. Never automatically
996
- * retry an uncertain 1Password request or fill. Do not use credential items for
997
- * credit card data. Use wallet and card item types instead. Kernel credentials
998
- * declare fields and may enter pending_collection. 1Password credentials either
999
- * reference a connected credential_account or store a supplied access token and
1000
- * integration key encrypted on the item. They store no login values or selectors.
1001
- * Managed auth credentials reference a managed auth connection in the same project
1002
- * that already has a saved credential, and read it at fill time; they store no
1003
- * values. Repeating the original creation request returns the current item without
1038
+ * retry an uncertain 1Password request. After an uncertain fill, inspect the page
1039
+ * to see the result of the fill. Do not use credential items for credit card data.
1040
+ * Use wallet and card item types instead. Kernel credentials declare fields and
1041
+ * may enter pending_collection. 1Password credentials either reference a connected
1042
+ * credential_account or store a supplied access token and integration key
1043
+ * encrypted on the item. They store no login values or selectors. Managed auth
1044
+ * credentials reference a managed auth connection in the same project that already
1045
+ * has a saved credential, and read it at fill time; they store no values.
1046
+ * Repeating the original creation request returns the current item without
1004
1047
  * overwriting later state. A different request at the same key returns 409.
1005
1048
  */
1006
1049
  export interface CredentialVaultItemRequest {
@@ -1176,12 +1219,16 @@ export interface KernelCardState {
1176
1219
  /**
1177
1220
  * pending_authorization on a Visa purchase waits for the cardholder to approve it
1178
1221
  * through the spend_approval action; an unused link expires after 30 minutes.
1179
- * recovery_required means approving the purchase or issuing the one-time code has
1180
- * an unresolved outcome. Kernel never approves again or issues another code for
1181
- * the item automatically, and the item cannot be deleted or replaced until the
1182
- * original attempt is reconciled with support. When status_reason says the
1183
- * provider refused retrieval before acceptance, no code was issued and a later
1184
- * read retries. declined means the card network refused to issue a code.
1222
+ * recovery_required means verification, approving the purchase or issuing the
1223
+ * one-time code has an unresolved outcome. A server-classified initial attestation
1224
+ * failure before intent dispatch may advertise restart_verification to prepare a
1225
+ * fresh local verification link; this does not approve spending or replay any
1226
+ * provider request. Unclassified legacy recovery and uncertain intent creation
1227
+ * cannot restart. Kernel never approves again or issues another code for the item
1228
+ * automatically, and the item cannot be deleted or replaced until the original
1229
+ * attempt is reconciled with support. When status_reason says the provider refused
1230
+ * retrieval before acceptance, no code was issued and a later read retries.
1231
+ * declined means the card network refused to issue a code.
1185
1232
  */
1186
1233
  status:
1187
1234
  | 'requested'
@@ -1256,6 +1303,17 @@ export interface KernelCardVaultItemSpec {
1256
1303
  */
1257
1304
  wallet: string;
1258
1305
 
1306
+ /**
1307
+ * Actual merchant category when known. Omit rather than invent a category.
1308
+ */
1309
+ merchant_category?: string;
1310
+
1311
+ /**
1312
+ * Actual merchant MCC when known. Omit rather than invent a code. 0000 is not
1313
+ * accepted.
1314
+ */
1315
+ merchant_category_code?: string;
1316
+
1259
1317
  /**
1260
1318
  * The merchant's ISO 3166-1 alpha-2 country code. Required for Visa cards, whose
1261
1319
  * one-time code is issued for the merchant's country.
@@ -1774,17 +1832,19 @@ export interface OnePasswordFillVaultItemOperationResult {
1774
1832
  /**
1775
1833
  * Kernel's outcome of the extension call. fill_submitted means the extension
1776
1834
  * reported submission, not website authentication. fill_failed means the extension
1777
- * returned a known failure and may include error_code. fill_unknown means
1778
- * submission may have happened without a conclusive response; it has no error_code
1779
- * and must not be retried in the same browser.
1835
+ * returned a known failure and includes error_code. fill_unknown means the form
1836
+ * may have been filled or submitted without a conclusive result; inspect the page
1837
+ * to see the result of the fill.
1780
1838
  */
1781
1839
  status: 'fill_submitted' | 'fill_failed' | 'fill_unknown';
1782
1840
 
1783
1841
  type: '1pw_fill';
1784
1842
 
1785
1843
  /**
1786
- * Present only for a conclusive fill_failed response. These are allowlisted
1787
- * 1Password extension codes, never raw errors, secrets, or page content.
1844
+ * Present for fill_failed, and for fill_unknown when the extension reported
1845
+ * autosubmitFailed (it filled and submitted the form but could not confirm the
1846
+ * fill finished). These are allowlisted 1Password extension codes, never raw
1847
+ * errors, secrets, or page content.
1788
1848
  */
1789
1849
  error_code?: 'fillFailed' | 'autosubmitFailed' | 'noExistingCredentials' | 'authenticationFailed';
1790
1850
  }
@@ -1844,6 +1904,21 @@ export interface PrepareCheckoutVaultItemOperationRequest {
1844
1904
  type: 'prepare_checkout';
1845
1905
  }
1846
1906
 
1907
+ /**
1908
+ * Explicitly prepare a fresh local verification session for the same Kernel Visa
1909
+ * purchase and connected wallet, only when restart_verification is advertised.
1910
+ * Kernel must have durable proof of an initial attestation failure before intent
1911
+ * dispatch. Replaces the spend_approval capability and discards session-bound
1912
+ * verification data without calling the provider or granting spend consent. The
1913
+ * cardholder must use the new link, verify again and explicitly approve the
1914
+ * purchase. Unknown intent creation, legacy unclassified recovery, enrollment
1915
+ * completion, issuance and confirmation cannot restart. Do not automatically retry
1916
+ * this operation.
1917
+ */
1918
+ export interface RestartVerificationVaultItemOperationRequest {
1919
+ type: 'restart_verification';
1920
+ }
1921
+
1847
1922
  export interface VaultCardAliases {
1848
1923
  cvc: string;
1849
1924
 
@@ -2056,6 +2131,8 @@ export namespace VaultItem {
2056
2131
 
2057
2132
  type:
2058
2133
  | 'authorize'
2134
+ | 'restart_verification'
2135
+ | 'confirm_transaction'
2059
2136
  | 'collect'
2060
2137
  | 'prepare_checkout'
2061
2138
  | 'fill'
@@ -2129,6 +2206,8 @@ export namespace VaultItem {
2129
2206
 
2130
2207
  type:
2131
2208
  | 'authorize'
2209
+ | 'restart_verification'
2210
+ | 'confirm_transaction'
2132
2211
  | 'collect'
2133
2212
  | 'prepare_checkout'
2134
2213
  | 'fill'
@@ -2278,6 +2357,8 @@ export namespace VaultItemOperationResponse {
2278
2357
 
2279
2358
  type:
2280
2359
  | 'authorize'
2360
+ | 'restart_verification'
2361
+ | 'confirm_transaction'
2281
2362
  | 'collect'
2282
2363
  | 'prepare_checkout'
2283
2364
  | 'fill'
@@ -2351,6 +2432,8 @@ export namespace VaultItemOperationResponse {
2351
2432
 
2352
2433
  type:
2353
2434
  | 'authorize'
2435
+ | 'restart_verification'
2436
+ | 'confirm_transaction'
2354
2437
  | 'collect'
2355
2438
  | 'prepare_checkout'
2356
2439
  | 'fill'
@@ -2736,6 +2819,8 @@ export interface ItemEventsParams {
2736
2819
 
2737
2820
  export type ItemPerformOperationParams =
2738
2821
  | ItemPerformOperationParams.AuthorizeVaultItemOperationRequest
2822
+ | ItemPerformOperationParams.RestartVerificationVaultItemOperationRequest
2823
+ | ItemPerformOperationParams.ConfirmTransactionVaultItemOperationRequest
2739
2824
  | ItemPerformOperationParams.CollectVaultItemOperationRequest
2740
2825
  | ItemPerformOperationParams.PrepareCheckoutVaultItemOperationRequest
2741
2826
  | ItemPerformOperationParams.FillVaultItemOperationRequest
@@ -2759,6 +2844,64 @@ export declare namespace ItemPerformOperationParams {
2759
2844
  type: 'authorize';
2760
2845
  }
2761
2846
 
2847
+ export interface RestartVerificationVaultItemOperationRequest {
2848
+ /**
2849
+ * Path param
2850
+ */
2851
+ id_or_name: string;
2852
+
2853
+ /**
2854
+ * Body param
2855
+ */
2856
+ type: 'restart_verification';
2857
+ }
2858
+
2859
+ export interface ConfirmTransactionVaultItemOperationRequest {
2860
+ /**
2861
+ * Path param
2862
+ */
2863
+ id_or_name: string;
2864
+
2865
+ /**
2866
+ * Body param: Actual transaction amount in minor units, no greater than the
2867
+ * approved limit.
2868
+ */
2869
+ amount: number;
2870
+
2871
+ /**
2872
+ * Body param: Must match the approved purchase currency.
2873
+ */
2874
+ currency: string;
2875
+
2876
+ /**
2877
+ * Body param: Time the merchant outcome was observed.
2878
+ */
2879
+ occurred_at: string;
2880
+
2881
+ /**
2882
+ * Body param
2883
+ */
2884
+ status: 'APPROVED' | 'DECLINED' | 'PENDING' | 'ERROR' | 'CANCELLED';
2885
+
2886
+ /**
2887
+ * Body param
2888
+ */
2889
+ transaction_type:
2890
+ | 'PURCHASE'
2891
+ | 'AUTHORIZATION'
2892
+ | 'CAPTURE'
2893
+ | 'REFUND'
2894
+ | 'REVERSAL'
2895
+ | 'VERIFICATION'
2896
+ | 'CHARGEBACK'
2897
+ | 'FRAUD';
2898
+
2899
+ /**
2900
+ * Body param
2901
+ */
2902
+ type: 'confirm_transaction';
2903
+ }
2904
+
2762
2905
  export interface CollectVaultItemOperationRequest {
2763
2906
  /**
2764
2907
  * Path param
@@ -3230,6 +3373,7 @@ export declare namespace Items {
3230
3373
  type CardVaultItemSpec as CardVaultItemSpec,
3231
3374
  type CardVaultItemState as CardVaultItemState,
3232
3375
  type CollectVaultItemOperationRequest as CollectVaultItemOperationRequest,
3376
+ type ConfirmTransactionVaultItemOperationRequest as ConfirmTransactionVaultItemOperationRequest,
3233
3377
  type CredentialAccountVaultItem as CredentialAccountVaultItem,
3234
3378
  type CredentialAccountVaultItemRequest as CredentialAccountVaultItemRequest,
3235
3379
  type CredentialCollectionAction as CredentialCollectionAction,
@@ -3269,6 +3413,7 @@ export declare namespace Items {
3269
3413
  type OnePasswordRecoverVaultItemOperationRequest as OnePasswordRecoverVaultItemOperationRequest,
3270
3414
  type OnePasswordRequestAccessVaultItemOperationRequest as OnePasswordRequestAccessVaultItemOperationRequest,
3271
3415
  type PrepareCheckoutVaultItemOperationRequest as PrepareCheckoutVaultItemOperationRequest,
3416
+ type RestartVerificationVaultItemOperationRequest as RestartVerificationVaultItemOperationRequest,
3272
3417
  type VaultCardAliases as VaultCardAliases,
3273
3418
  type VaultCardFillField as VaultCardFillField,
3274
3419
  type VaultCheckoutContext as VaultCheckoutContext,
@@ -10,6 +10,7 @@ import {
10
10
  CardVaultItemSpec,
11
11
  CardVaultItemState,
12
12
  CollectVaultItemOperationRequest,
13
+ ConfirmTransactionVaultItemOperationRequest,
13
14
  CredentialAccountVaultItem,
14
15
  CredentialAccountVaultItemRequest,
15
16
  CredentialCollectionAction,
@@ -58,6 +59,7 @@ import {
58
59
  OnePasswordRecoverVaultItemOperationRequest,
59
60
  OnePasswordRequestAccessVaultItemOperationRequest,
60
61
  PrepareCheckoutVaultItemOperationRequest,
62
+ RestartVerificationVaultItemOperationRequest,
61
63
  VaultCardAliases,
62
64
  VaultCardFillField,
63
65
  VaultCheckoutContext,
@@ -270,6 +272,7 @@ export declare namespace Vaults {
270
272
  type CardVaultItemSpec as CardVaultItemSpec,
271
273
  type CardVaultItemState as CardVaultItemState,
272
274
  type CollectVaultItemOperationRequest as CollectVaultItemOperationRequest,
275
+ type ConfirmTransactionVaultItemOperationRequest as ConfirmTransactionVaultItemOperationRequest,
273
276
  type CredentialAccountVaultItem as CredentialAccountVaultItem,
274
277
  type CredentialAccountVaultItemRequest as CredentialAccountVaultItemRequest,
275
278
  type CredentialCollectionAction as CredentialCollectionAction,
@@ -309,6 +312,7 @@ export declare namespace Vaults {
309
312
  type OnePasswordRecoverVaultItemOperationRequest as OnePasswordRecoverVaultItemOperationRequest,
310
313
  type OnePasswordRequestAccessVaultItemOperationRequest as OnePasswordRequestAccessVaultItemOperationRequest,
311
314
  type PrepareCheckoutVaultItemOperationRequest as PrepareCheckoutVaultItemOperationRequest,
315
+ type RestartVerificationVaultItemOperationRequest as RestartVerificationVaultItemOperationRequest,
312
316
  type VaultCardAliases as VaultCardAliases,
313
317
  type VaultCardFillField as VaultCardFillField,
314
318
  type VaultCheckoutContext as VaultCheckoutContext,
package/src/version.ts CHANGED
@@ -1 +1 @@
1
- export const VERSION = '0.122.0'; // x-release-please-version
1
+ export const VERSION = '0.124.0'; // x-release-please-version
package/version.d.mts CHANGED
@@ -1,2 +1,2 @@
1
- export declare const VERSION = "0.122.0";
1
+ export declare const VERSION = "0.124.0";
2
2
  //# sourceMappingURL=version.d.mts.map
package/version.d.ts CHANGED
@@ -1,2 +1,2 @@
1
- export declare const VERSION = "0.122.0";
1
+ export declare const VERSION = "0.124.0";
2
2
  //# sourceMappingURL=version.d.ts.map
package/version.js CHANGED
@@ -1,5 +1,5 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.VERSION = void 0;
4
- exports.VERSION = '0.122.0'; // x-release-please-version
4
+ exports.VERSION = '0.124.0'; // x-release-please-version
5
5
  //# sourceMappingURL=version.js.map
package/version.mjs CHANGED
@@ -1,2 +1,2 @@
1
- export const VERSION = '0.122.0'; // x-release-please-version
1
+ export const VERSION = '0.124.0'; // x-release-please-version
2
2
  //# sourceMappingURL=version.mjs.map