@onkernel/sdk 0.126.0 → 0.128.0

package/src/resources/browsers/browsers.ts

@@ -346,15 +346,96 @@ export type BrowserListResponsesOffsetPagination = OffsetPagination<BrowserListR
 
 export type ProfilesOffsetPagination = OffsetPagination<Profile>;
 
+export interface BrowserAllowlistState {
+  /**
+   * Opaque revision to pass as network.expected_allowlist_revision on an update.
+   */
+  revision: string;
+
+  /**
+   * Revision against which that mutation was accepted; reuse it when retrying the
+   * mutation.
+   */
+  base_revision?: string;
+
+  /**
+   * ID of the last conditional allowlist update saved on this browser.
+   */
+  mutation_id?: string;
+}
+
+export interface BrowserLocation {
+  /**
+   * Effective canonical BCP 47 formatting locale selected for the browser session.
+   */
+  locale: string;
+
+  /**
+   * Where one effective browser location field came from. `override` is set
+   * explicitly on the session; `metro` is the default for the browser's region.
+   */
+  locale_source: BrowserLocationSource;
+
+  /**
+   * Effective IANA timezone selected for the browser session.
+   */
+  timezone: string;
+
+  /**
+   * Where one effective browser location field came from. `override` is set
+   * explicitly on the session; `metro` is the default for the browser's region.
+   */
+  timezone_source: BrowserLocationSource;
+}
+
+export interface BrowserLocationRequest {
+  /**
+   * Session-only supported canonical BCP 47 locale override. Omit to use the default
+   * for the browser's region.
+   */
+  locale?: string;
+
+  /**
+   * Session-only IANA timezone override. Omit to use the default for the browser's
+   * region.
+   */
+  timezone?: string;
+}
+
+/**
+ * Where one effective browser location field came from. `override` is set
+ * explicitly on the session; `metro` is the default for the browser's region.
+ */
+export type BrowserLocationSource = 'override' | 'metro';
+
+/**
+ * Omit a field to leave it unchanged, set a string override, or set null to clear
+ * the override and use the default for the browser's region.
+ */
+export interface BrowserLocationUpdateRequest {
+  /**
+   * Session-only supported canonical BCP 47 locale override. Null clears the
+   * override and uses the browser region's default.
+   */
+  locale?: string | null;
+
+  /**
+   * Session-only IANA timezone override. Null clears the override and uses the
+   * browser region's default.
+   */
+  timezone?: string | null;
+}
+
 /**
  * Memory allocated to the browser session.
  */
-export type BrowserMemory = '1GiB' | '2GiB' | '6GiB' | '8GiB' | '12GiB' | '16GiB';
+export type BrowserMemory = '1GiB' | '2GiB' | '4GiB' | '6GiB' | '8GiB' | '12GiB' | '16GiB';
 
 /**
- * Memory requested for a headful, non-GPU browser session.
+ * Memory requested for a non-GPU browser. Headless browsers support 1GiB
+ * (default), 2GiB, or 4GiB; headful browsers support 8GiB (default) or 16GiB.
  */
-export type BrowserMemoryRequest = '8GiB' | '16GiB';
+export type BrowserMemoryRequest = '1GiB' | '2GiB' | '4GiB' | '8GiB' | '16GiB';
 
 /**
  * Network configuration for a browser session or browser pool.
@@ -387,6 +468,14 @@ export interface BrowserNetworkConfig {
    */
   allowed_hosts?: Array<string>;
 
+  /**
+   * Concurrency metadata for a browser's saved allowlist configuration. Browser
+   * pools omit it. This remains present after removal so an uncertain removal can be
+   * retried. It does not prove proxy or VM application completed. Do not include it
+   * in creation or pool updates.
+   */
+  allowlist_state?: BrowserAllowlistState;
+
   /**
    * Destinations the browser reaches directly through the session's own network
    * instead of through Kernel-managed egress — for private hosts reachable over a
@@ -483,6 +572,25 @@ export interface BrowserNetworkUpdate {
    * to some requests.
    */
   allowed_hosts?: Array<string> | null;
+
+  /**
+   * The network.allowlist_state.revision from the browser's last saved snapshot.
+   * Supply together with mutation_id to opt into conditional allowlist updates. The
+   * revision is checked atomically with the configuration write. A stale request
+   * returns 409 stale_network without changing the allowlist. A GET alone does not
+   * fence an earlier unfinished PATCH.
+   */
+  expected_allowlist_revision?: string;
+
+  /**
+   * A unique ID for this allowlist update, supplied together with
+   * expected_allowlist_revision. Reuse both values and the identical allowed_hosts
+   * payload when retrying an uncertain update. If it is still the current mutation,
+   * the retry finishes proxy and VM application without creating another revision. A
+   * superseded mutation returns 409 stale_network. These fields guard only
+   * network.allowed_hosts, not other browser update fields.
+   */
+  mutation_id?: string;
 }
 
 /**
@@ -804,6 +912,11 @@ export interface BrowserCreateResponse {
    */
   kiosk_mode?: boolean;
 
+  /**
+   * Effective browser timezone and locale with per-field provenance.
+   */
+  location?: BrowserLocation;
+
   /**
    * Human-readable name of the browser session, if one was set at creation.
    */
@@ -980,6 +1093,11 @@ export interface BrowserRetrieveResponse {
    */
   kiosk_mode?: boolean;
 
+  /**
+   * Effective browser timezone and locale with per-field provenance.
+   */
+  location?: BrowserLocation;
+
   /**
    * Human-readable name of the browser session, if one was set at creation.
    */
@@ -1156,6 +1274,11 @@ export interface BrowserUpdateResponse {
    */
   kiosk_mode?: boolean;
 
+  /**
+   * Effective browser timezone and locale with per-field provenance.
+   */
+  location?: BrowserLocation;
+
   /**
    * Human-readable name of the browser session, if one was set at creation.
    */
@@ -1332,6 +1455,11 @@ export interface BrowserListResponse {
    */
   kiosk_mode?: boolean;
 
+  /**
+   * Effective browser timezone and locale with per-field provenance.
+   */
+  location?: BrowserLocation;
+
   /**
    * Human-readable name of the browser session, if one was set at creation.
    */
@@ -1491,7 +1619,14 @@ export interface BrowserCreateParams {
   kiosk_mode?: boolean;
 
   /**
-   * Memory for a headful, non-GPU browser session. Defaults to 8GiB.
+   * Optional session-only timezone and locale overrides. Each omitted field uses the
+   * default for the browser's region. start_url opens once the location applies.
+   */
+  location?: BrowserLocationRequest;
+
+  /**
+   * Memory for a non-GPU browser. Headless: 1GiB (default), 2GiB, or 4GiB. Headful:
+   * 8GiB (default) or 16GiB.
    */
   memory?: BrowserMemoryRequest;
 
@@ -1734,6 +1869,17 @@ export interface BrowserUpdateParams {
    */
   disable_default_proxy?: boolean;
 
+  /**
+   * Session-only timezone and locale overrides. Omit the object or a field to leave
+   * it unchanged; set a string to override; set null to clear that field and use the
+   * browser region's default. A browser that cannot change location refuses the
+   * request before anything changes. The location applies after the request's other
+   * changes, and start_url opens once it has applied. If applying it fails, the
+   * other changes and the saved override remain and start_url does not open; retry
+   * the request to apply both.
+   */
+  location?: BrowserLocationUpdateRequest;
+
   /**
    * Human-readable name for the browser session. Omit to leave unchanged, set to an
    * empty string to clear the name. When set, must be unique among active sessions
@@ -2039,6 +2185,11 @@ Browsers.Webmcp = Webmcp;
 
 export declare namespace Browsers {
   export {
+    type BrowserAllowlistState as BrowserAllowlistState,
+    type BrowserLocation as BrowserLocation,
+    type BrowserLocationRequest as BrowserLocationRequest,
+    type BrowserLocationSource as BrowserLocationSource,
+    type BrowserLocationUpdateRequest as BrowserLocationUpdateRequest,
     type BrowserMemory as BrowserMemory,
     type BrowserMemoryRequest as BrowserMemoryRequest,
     type BrowserNetworkConfig as BrowserNetworkConfig,

package/src/resources/browsers/index.ts

@@ -2,6 +2,11 @@
 
 export {
   Browsers,
+  type BrowserAllowlistState,
+  type BrowserLocation,
+  type BrowserLocationRequest,
+  type BrowserLocationSource,
+  type BrowserLocationUpdateRequest,
   type BrowserMemory,
   type BrowserMemoryRequest,
   type BrowserNetworkConfig,

package/src/resources/browsers/telemetry.ts

@@ -282,7 +282,7 @@ export namespace BrowserCaptchaChallengeResultEvent {
      * Enterprise reCAPTCHA variants are grouped into their version bucket
      * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
      * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
-     * products use other.
+     * products, including text captchas a site draws itself, use other.
      */
     captcha_provider?:
       | 'hcaptcha'
@@ -292,6 +292,7 @@ export namespace BrowserCaptchaChallengeResultEvent {
       | 'geetest'
       | 'arkose'
       | 'human'
+      | 'binance'
       | 'other';
 
     /**
@@ -388,7 +389,7 @@ export namespace BrowserCaptchaSolveResultEvent {
      * Enterprise reCAPTCHA variants are grouped into their version bucket
      * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
      * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
-     * products use other.
+     * products, including text captchas a site draws itself, use other.
      */
     captcha_provider?:
       | 'hcaptcha'
@@ -398,6 +399,7 @@ export namespace BrowserCaptchaSolveResultEvent {
       | 'geetest'
       | 'arkose'
       | 'human'
+      | 'binance'
       | 'other';
 
     /**
@@ -414,6 +416,11 @@ export namespace BrowserCaptchaSolveResultEvent {
      */
     error_code?: string;
 
+    /**
+     * Captured hCaptcha recognition media, when known.
+     */
+    media?: 'image' | 'video';
+
     /**
      * Opaque identifier shared with the matching captcha_solve_started.
      */
@@ -493,7 +500,7 @@ export namespace BrowserCaptchaSolveStartedEvent {
      * Enterprise reCAPTCHA variants are grouped into their version bucket
      * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
      * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
-     * products use other.
+     * products, including text captchas a site draws itself, use other.
      */
     captcha_provider?:
       | 'hcaptcha'
@@ -503,6 +510,7 @@ export namespace BrowserCaptchaSolveStartedEvent {
       | 'geetest'
       | 'arkose'
       | 'human'
+      | 'binance'
       | 'other';
 
     /**
@@ -513,6 +521,11 @@ export namespace BrowserCaptchaSolveStartedEvent {
      */
     challenge_id?: string;
 
+    /**
+     * Captured hCaptcha recognition media, when known.
+     */
+    media?: 'image' | 'video';
+
     /**
      * Opaque identifier shared with the matching captcha_solve_result.
      */

package/src/resources/index.ts

@@ -40,6 +40,11 @@ export {
 } from './browser-pools';
 export {
   Browsers,
+  type BrowserAllowlistState,
+  type BrowserLocation,
+  type BrowserLocationRequest,
+  type BrowserLocationSource,
+  type BrowserLocationUpdateRequest,
   type BrowserMemory,
   type BrowserMemoryRequest,
   type BrowserNetworkConfig,

package/src/resources/invocations.ts

@@ -527,6 +527,11 @@ export namespace InvocationListBrowsersResponse {
      */
     kiosk_mode?: boolean;
 
+    /**
+     * Effective browser timezone and locale with per-field provenance.
+     */
+    location?: BrowsersAPI.BrowserLocation;
+
     /**
      * Human-readable name of the browser session, if one was set at creation.
      */

package/src/resources/proxies.ts

@@ -24,32 +24,37 @@ export class Proxies extends APIResource {
   }
 
   /**
-   * Retrieve a proxy in the resolved project by ID.
+   * Retrieve a proxy in the resolved project by ID or exact name using the database
+   * collation. IDs take precedence when a value matches both an ID and a name. Proxy
+   * names are not unique; an ambiguous name returns a 400 response with code
+   * ambiguous_proxy_name.
    *
    * @example
    * ```ts
-   * const proxy = await client.proxies.retrieve('id');
+   * const proxy = await client.proxies.retrieve('id_or_name');
    * ```
    */
-  retrieve(id: string, options?: RequestOptions): APIPromise<ProxyRetrieveResponse> {
-    return this._client.get(path`/proxies/${id}`, options);
+  retrieve(idOrName: string, options?: RequestOptions): APIPromise<ProxyRetrieveResponse> {
+    return this._client.get(path`/proxies/${idOrName}`, options);
   }
 
   /**
-   * Update a proxy's name. Proxy names are not unique and are not ID-or-name
-   * addressable on this endpoint; duplicate names are allowed. Name-based
-   * session-create lookups can remain ambiguous until callers resolve proxies by ID
-   * or the API adds a stronger uniqueness contract.
+   * Update a proxy's name. Proxy names are not unique and duplicate names are
+   * allowed.
    *
    * @example
    * ```ts
-   * const proxy = await client.proxies.update('id', {
+   * const proxy = await client.proxies.update('id_or_name', {
    *   name: 'my-renamed-proxy',
    * });
    * ```
    */
-  update(id: string, body: ProxyUpdateParams, options?: RequestOptions): APIPromise<ProxyUpdateResponse> {
-    return this._client.patch(path`/proxies/${id}`, { body, ...options });
+  update(
+    idOrName: string,
+    body: ProxyUpdateParams,
+    options?: RequestOptions,
+  ): APIPromise<ProxyUpdateResponse> {
+    return this._client.patch(path`/proxies/${idOrName}`, { body, ...options });
   }
 
   /**
@@ -78,11 +83,11 @@ export class Proxies extends APIResource {
    *
    * @example
    * ```ts
-   * await client.proxies.delete('id');
+   * await client.proxies.delete('id_or_name');
    * ```
    */
-  delete(id: string, options?: RequestOptions): APIPromise<void> {
-    return this._client.delete(path`/proxies/${id}`, {
+  delete(idOrName: string, options?: RequestOptions): APIPromise<void> {
+    return this._client.delete(path`/proxies/${idOrName}`, {
       ...options,
       headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
     });
@@ -98,15 +103,15 @@ export class Proxies extends APIResource {
    *
    * @example
    * ```ts
-   * const response = await client.proxies.check('id');
+   * const response = await client.proxies.check('id_or_name');
    * ```
    */
   check(
-    id: string,
+    idOrName: string,
     body: ProxyCheckParams | null | undefined = {},
     options?: RequestOptions,
   ): APIPromise<ProxyCheckResponse> {
-    return this._client.post(path`/proxies/${id}/check`, { body, ...options });
+    return this._client.post(path`/proxies/${idOrName}/check`, { body, ...options });
   }
 }
 

package/src/resources/vaults/index.ts

@@ -14,6 +14,7 @@ export {
   type CredentialAccountVaultItemRequest,
   type CredentialCollectionAction,
   type CredentialVaultFieldDefinition,
+  type CredentialVaultFieldDefinitionInput,
   type CredentialVaultFieldInput,
   type CredentialVaultFieldState,
   type CredentialVaultFieldType,