@onkernel/sdk 0.74.0 → 0.76.0

package/resources/extensions.d.ts

@@ -98,6 +98,14 @@ export interface ExtensionListResponse {
      * Size of the extension archive in bytes
      */
     size_bytes: number;
+    /**
+     * SHA-256 checksum, encoded as lowercase hexadecimal, of the exact uploaded
+     * extension archive bytes. This is not a normalized checksum of the extension
+     * contents; archive metadata, file ordering, and compression can change the
+     * checksum for otherwise identical contents. Omitted for legacy rows and
+     * server-repackaged Chrome Web Store extensions.
+     */
+    checksum?: string | null;
     /**
      * Timestamp when the extension was last used
      */
@@ -124,6 +132,14 @@ export interface ExtensionGetResponse {
      * Size of the extension archive in bytes
      */
     size_bytes: number;
+    /**
+     * SHA-256 checksum, encoded as lowercase hexadecimal, of the exact uploaded
+     * extension archive bytes. This is not a normalized checksum of the extension
+     * contents; archive metadata, file ordering, and compression can change the
+     * checksum for otherwise identical contents. Omitted for legacy rows and
+     * server-repackaged Chrome Web Store extensions.
+     */
+    checksum?: string | null;
     /**
      * Timestamp when the extension was last used
      */
@@ -150,6 +166,14 @@ export interface ExtensionUploadResponse {
      * Size of the extension archive in bytes
      */
     size_bytes: number;
+    /**
+     * SHA-256 checksum, encoded as lowercase hexadecimal, of the exact uploaded
+     * extension archive bytes. This is not a normalized checksum of the extension
+     * contents; archive metadata, file ordering, and compression can change the
+     * checksum for otherwise identical contents. Omitted for legacy rows and
+     * server-repackaged Chrome Web Store extensions.
+     */
+    checksum?: string | null;
     /**
      * Timestamp when the extension was last used
      */

package/resources/extensions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/resources/extensions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,8BAA2B;AAChG,OAAO,EAAE,KAAK,UAAU,EAAE,2BAAwB;AAElD,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAI7D;;GAEG;AACH,qBAAa,UAAW,SAAQ,WAAW;IACzC;;;;;;;;;;OAUG;IACH,IAAI,CACF,KAAK,GAAE,mBAAmB,GAAG,IAAI,GAAG,SAAc,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,sCAAsC,EAAE,qBAAqB,CAAC;IAO7E;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAOpE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;IAQ1E;;;;;;;;;;;;;;OAcG;IACH,uBAAuB,CACrB,KAAK,EAAE,sCAAsC,EAC7C,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,QAAQ,CAAC;IASvB;;;;;;;;OAQG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,oBAAoB,CAAC;IAIjF;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,uBAAuB,CAAC;CAGnG;AAED,MAAM,MAAM,sCAAsC,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;AAE7F;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,mBAAoB,SAAQ,sBAAsB;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sCAAsC;IACrD;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,OAAO,EACL,KAAK,qBAAqB,IAAI,qBAAqB,EACnD,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,sCAAsC,IAAI,sCAAsC,EACrF,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,sCAAsC,IAAI,sCAAsC,EACrF,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH"}
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/resources/extensions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,WAAW,EAAE,8BAA2B;AAChG,OAAO,EAAE,KAAK,UAAU,EAAE,2BAAwB;AAElD,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAI7D;;GAEG;AACH,qBAAa,UAAW,SAAQ,WAAW;IACzC;;;;;;;;;;OAUG;IACH,IAAI,CACF,KAAK,GAAE,mBAAmB,GAAG,IAAI,GAAG,SAAc,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,sCAAsC,EAAE,qBAAqB,CAAC;IAO7E;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IAOpE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;IAQ1E;;;;;;;;;;;;;;OAcG;IACH,uBAAuB,CACrB,KAAK,EAAE,sCAAsC,EAC7C,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,QAAQ,CAAC;IASvB;;;;;;;;OAQG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,oBAAoB,CAAC;IAIjF;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,uBAAuB,CAAC;CAGnG;AAED,MAAM,MAAM,sCAAsC,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;AAE7F;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,mBAAoB,SAAQ,sBAAsB;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sCAAsC;IACrD;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,OAAO,EACL,KAAK,qBAAqB,IAAI,qBAAqB,EACnD,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,sCAAsC,IAAI,sCAAsC,EACrF,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,sCAAsC,IAAI,sCAAsC,EACrF,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH"}

package/src/resources/api-keys.ts

@@ -75,7 +75,8 @@ export class APIKeys extends APIResource {
   }
 
   /**
-   * Delete an API key.
+   * Delete an API key. A key cannot delete itself; use a different key to delete
+   * this one.
    *
    * @example
    * ```ts

package/src/resources/apps.ts

@@ -47,7 +47,9 @@ export interface AppListResponse {
   deployment: string;
 
   /**
-   * Environment variables configured for this app version
+   * Environment variables configured for this app version. Values are redacted for
+   * API key, OAuth, and managed-auth callers, which receive every key with an empty
+   * string value. Only dashboard sessions receive the actual values.
    */
   env_vars: { [key: string]: string };
 

package/src/resources/browser-pools.ts

@@ -48,7 +48,9 @@ export class BrowserPools extends APIResource {
   /**
    * Updates the configuration used to create browsers in the pool. As with creation,
    * save_changes on the pool profile is ignored (not rejected); pooled browsers
-   * never persist changes back to the profile.
+   * never persist changes back to the profile. To clear the profile reference, send
+   * `profile: { "id": "" }`. Clearing the profile also disables
+   * `refresh_on_profile_update`.
    *
    * @example
    * ```ts
@@ -186,10 +188,26 @@ export interface BrowserPool {
    */
   created_at: string;
 
+  /**
+   * Resolved extension IDs attached to the pool, in configured load order. Empty
+   * when no extensions are attached. Authoritative for programmatic consumers; the
+   * extensions inside `browser_pool_config` reflect the configured selector (echoed
+   * as sent on create).
+   */
+  extension_ids: Array<string>;
+
   /**
    * Browser pool name, if set
    */
   name?: string;
+
+  /**
+   * Resolved profile ID the pool is attached to. Omitted when no profile is
+   * attached. Authoritative for programmatic consumers; the profile inside
+   * `browser_pool_config` reflects the configured selector (echoed as sent on
+   * create).
+   */
+  profile_id?: string;
 }
 
 export namespace BrowserPool {
@@ -241,12 +259,11 @@ export namespace BrowserPool {
     name?: string;
 
     /**
-     * Profile selection for browsers in a pool. Provide either id or name. The
-     * matching profile is loaded into every browser in the pool. Profiles must be
-     * created beforehand. Unlike single browser sessions, pools load the profile
-     * read-only and never persist changes back to it, so save_changes is omitted here.
-     * Any save_changes value sent on a pool profile is silently ignored rather than
-     * rejected, so callers reusing a single-session profile object will not error.
+     * Profile configuration for browsers in a pool. Provide either id or name.
+     * Profiles must be created beforehand. Unlike single browser sessions, pools load
+     * the profile read-only and never persist changes back to it, so save_changes is
+     * omitted here. Any save_changes value sent on a pool profile is silently ignored
+     * rather than rejected.
      */
     profile?: BrowserPoolConfig.Profile;
 
@@ -256,6 +273,13 @@ export namespace BrowserPool {
      */
     proxy_id?: string;
 
+    /**
+     * When true, flush idle browsers when the profile the pool uses is updated, so
+     * pool browsers pick up the latest profile data. Requires a profile to be set on
+     * the pool.
+     */
+    refresh_on_profile_update?: boolean;
+
     /**
      * Optional URL to navigate to when a new browser is warmed into the pool.
      * Best-effort: failures to navigate do not fail pool fill. Only applied to
@@ -296,12 +320,11 @@ export namespace BrowserPool {
 
   export namespace BrowserPoolConfig {
     /**
-     * Profile selection for browsers in a pool. Provide either id or name. The
-     * matching profile is loaded into every browser in the pool. Profiles must be
-     * created beforehand. Unlike single browser sessions, pools load the profile
-     * read-only and never persist changes back to it, so save_changes is omitted here.
-     * Any save_changes value sent on a pool profile is silently ignored rather than
-     * rejected, so callers reusing a single-session profile object will not error.
+     * Profile configuration for browsers in a pool. Provide either id or name.
+     * Profiles must be created beforehand. Unlike single browser sessions, pools load
+     * the profile read-only and never persist changes back to it, so save_changes is
+     * omitted here. Any save_changes value sent on a pool profile is silently ignored
+     * rather than rejected.
      */
     export interface Profile {
       /**
@@ -495,12 +518,11 @@ export interface BrowserPoolCreateParams {
   name?: string;
 
   /**
-   * Profile selection for browsers in a pool. Provide either id or name. The
-   * matching profile is loaded into every browser in the pool. Profiles must be
-   * created beforehand. Unlike single browser sessions, pools load the profile
-   * read-only and never persist changes back to it, so save_changes is omitted here.
-   * Any save_changes value sent on a pool profile is silently ignored rather than
-   * rejected, so callers reusing a single-session profile object will not error.
+   * Profile configuration for browsers in a pool. Provide either id or name.
+   * Profiles must be created beforehand. Unlike single browser sessions, pools load
+   * the profile read-only and never persist changes back to it, so save_changes is
+   * omitted here. Any save_changes value sent on a pool profile is silently ignored
+   * rather than rejected.
    */
   profile?: BrowserPoolCreateParams.Profile;
 
@@ -510,6 +532,13 @@ export interface BrowserPoolCreateParams {
    */
   proxy_id?: string;
 
+  /**
+   * When true, flush idle browsers when the profile the pool uses is updated, so
+   * pool browsers pick up the latest profile data. Requires a profile to be set on
+   * the pool.
+   */
+  refresh_on_profile_update?: boolean;
+
   /**
    * Optional URL to navigate to when a new browser is warmed into the pool.
    * Best-effort: failures to navigate do not fail pool fill. Only applied to
@@ -550,12 +579,11 @@ export interface BrowserPoolCreateParams {
 
 export namespace BrowserPoolCreateParams {
   /**
-   * Profile selection for browsers in a pool. Provide either id or name. The
-   * matching profile is loaded into every browser in the pool. Profiles must be
-   * created beforehand. Unlike single browser sessions, pools load the profile
-   * read-only and never persist changes back to it, so save_changes is omitted here.
-   * Any save_changes value sent on a pool profile is silently ignored rather than
-   * rejected, so callers reusing a single-session profile object will not error.
+   * Profile configuration for browsers in a pool. Provide either id or name.
+   * Profiles must be created beforehand. Unlike single browser sessions, pools load
+   * the profile read-only and never persist changes back to it, so save_changes is
+   * omitted here. Any save_changes value sent on a pool profile is silently ignored
+   * rather than rejected.
    */
   export interface Profile {
     /**
@@ -581,8 +609,12 @@ export interface BrowserPoolUpdateParams {
   chrome_policy?: { [key: string]: unknown };
 
   /**
-   * Whether to discard all idle browsers and rebuild the pool immediately. Defaults
-   * to false.
+   * Whether to discard all idle browsers and rebuild them immediately with the new
+   * configuration. Defaults to false. Only browsers that are idle when the update
+   * runs are rebuilt. A browser that is in use during the update keeps its original
+   * configuration, and if it is later released with `reuse: true` it returns to the
+   * pool with that stale configuration until it is discarded (by this flag on a
+   * later update, or by flushing the pool).
    */
   discard_all_idle?: boolean;
 
@@ -615,12 +647,11 @@ export interface BrowserPoolUpdateParams {
   name?: string;
 
   /**
-   * Profile selection for browsers in a pool. Provide either id or name. The
-   * matching profile is loaded into every browser in the pool. Profiles must be
-   * created beforehand. Unlike single browser sessions, pools load the profile
-   * read-only and never persist changes back to it, so save_changes is omitted here.
-   * Any save_changes value sent on a pool profile is silently ignored rather than
-   * rejected, so callers reusing a single-session profile object will not error.
+   * Profile configuration for browsers in a pool. Provide either id or name.
+   * Profiles must be created beforehand. Unlike single browser sessions, pools load
+   * the profile read-only and never persist changes back to it, so save_changes is
+   * omitted here. Any save_changes value sent on a pool profile is silently ignored
+   * rather than rejected.
    */
   profile?: BrowserPoolUpdateParams.Profile;
 
@@ -630,6 +661,13 @@ export interface BrowserPoolUpdateParams {
    */
   proxy_id?: string;
 
+  /**
+   * When true, flush idle browsers when the profile the pool uses is updated, so
+   * pool browsers pick up the latest profile data. Requires a profile to be set on
+   * the pool.
+   */
+  refresh_on_profile_update?: boolean;
+
   /**
    * Number of browsers to maintain in the pool. The maximum size is determined by
    * your organization's pooled sessions limit (the sum of all pool sizes cannot
@@ -677,12 +715,11 @@ export interface BrowserPoolUpdateParams {
 
 export namespace BrowserPoolUpdateParams {
   /**
-   * Profile selection for browsers in a pool. Provide either id or name. The
-   * matching profile is loaded into every browser in the pool. Profiles must be
-   * created beforehand. Unlike single browser sessions, pools load the profile
-   * read-only and never persist changes back to it, so save_changes is omitted here.
-   * Any save_changes value sent on a pool profile is silently ignored rather than
-   * rejected, so callers reusing a single-session profile object will not error.
+   * Profile configuration for browsers in a pool. Provide either id or name.
+   * Profiles must be created beforehand. Unlike single browser sessions, pools load
+   * the profile read-only and never persist changes back to it, so save_changes is
+   * omitted here. Any save_changes value sent on a pool profile is silently ignored
+   * rather than rejected.
    */
   export interface Profile {
     /**
@@ -752,7 +789,10 @@ export interface BrowserPoolReleaseParams {
 
   /**
    * Whether to reuse the browser instance or destroy it and create a new one.
-   * Defaults to true.
+   * Defaults to true. A reused browser keeps the configuration it was created with,
+   * so it does not pick up pool configuration changes made while it was in use.
+   * Release with `reuse: false`, or flush the pool afterward, to rebuild it with the
+   * current configuration.
    */
   reuse?: boolean;
 }

package/src/resources/browsers/browsers.ts

@@ -1014,18 +1014,27 @@ export namespace BrowserCreateParams {
    */
   export interface Telemetry {
     /**
-     * Per-category capture flags. Selection is opt-in: only the categories set to
-     * enabled=true are captured; anything omitted is off. If enabled is true and
-     * browser is omitted or empty, the default category set is used. A browser config
-     * that enables nothing stops capture on update and starts no capture on create.
+     * Per-category capture flags. The operational categories (control, connection,
+     * system, captcha) are captured whenever telemetry is enabled; set one to
+     * enabled=false to opt out. The CDP categories (console, network, page,
+     * interaction) and screenshot are off by default; set enabled=true to opt in. On
+     * create, provided categories layer onto the default set. On update, provided
+     * categories merge onto the session's current config; when no telemetry is active
+     * this falls back to the default set (matching create). If browser is omitted or
+     * empty, the default set is used. A browser config that disables every category
+     * stops capture on update and starts no capture on create.
      */
     browser?: TelemetryAPI.BrowserTelemetryCategoriesConfig;
 
     /**
-     * Request shortcut for browser telemetry capture. True enables capture using the
-     * default category set unless browser category settings are provided. False stops
-     * capture on update and starts no capture on create. enabled=false cannot be
-     * combined with browser category settings.
+     * Request shortcut for browser telemetry capture. True enables capture; with no
+     * browser category settings it captures the default set (control, connection,
+     * system, captcha), and any browser category settings are layered onto that
+     * default set. On update, enabled=true resolves the config fresh from the default
+     * set plus any provided categories, replacing the session's current selection
+     * rather than merging onto it; omit enabled to merge categories onto the current
+     * selection instead. False stops capture on update and starts no capture on
+     * create. enabled=false cannot be combined with browser category settings.
      */
     enabled?: boolean;
   }
@@ -1096,18 +1105,27 @@ export namespace BrowserUpdateParams {
    */
   export interface Telemetry {
     /**
-     * Per-category capture flags. Selection is opt-in: only the categories set to
-     * enabled=true are captured; anything omitted is off. If enabled is true and
-     * browser is omitted or empty, the default category set is used. A browser config
-     * that enables nothing stops capture on update and starts no capture on create.
+     * Per-category capture flags. The operational categories (control, connection,
+     * system, captcha) are captured whenever telemetry is enabled; set one to
+     * enabled=false to opt out. The CDP categories (console, network, page,
+     * interaction) and screenshot are off by default; set enabled=true to opt in. On
+     * create, provided categories layer onto the default set. On update, provided
+     * categories merge onto the session's current config; when no telemetry is active
+     * this falls back to the default set (matching create). If browser is omitted or
+     * empty, the default set is used. A browser config that disables every category
+     * stops capture on update and starts no capture on create.
      */
     browser?: TelemetryAPI.BrowserTelemetryCategoriesConfig;
 
     /**
-     * Request shortcut for browser telemetry capture. True enables capture using the
-     * default category set unless browser category settings are provided. False stops
-     * capture on update and starts no capture on create. enabled=false cannot be
-     * combined with browser category settings.
+     * Request shortcut for browser telemetry capture. True enables capture; with no
+     * browser category settings it captures the default set (control, connection,
+     * system, captcha), and any browser category settings are layered onto that
+     * default set. On update, enabled=true resolves the config fresh from the default
+     * set plus any provided categories, replacing the session's current selection
+     * rather than merging onto it; omit enabled to merge categories onto the current
+     * selection instead. False stops capture on update and starts no capture on
+     * create. enabled=false cannot be combined with browser category settings.
      */
     enabled?: boolean;
   }

package/src/resources/browsers/telemetry.ts

@@ -1879,12 +1879,11 @@ export namespace BrowserSystemOomKillEvent {
 }
 
 /**
- * Per-category telemetry capture settings. Selection is opt-in: set a category to
- * enabled=true to capture it; anything omitted is off. The default set (used by
- * enabled=true with no per-category settings) is the lightweight operational
- * signals: control, connection, system, captcha. The CDP categories (console,
- * network, page, interaction) and screenshot are off by default and must be opted
- * into.
+ * Per-category telemetry capture settings layered onto the default set. The
+ * operational signals (control, connection, system, captcha) are on by default and
+ * are opt-out: set one to enabled=false to stop capturing it. The CDP categories
+ * (console, network, page, interaction) and screenshot are off by default and are
+ * opt-in: set enabled=true to capture them.
  */
 export interface BrowserTelemetryCategoriesConfig {
   /**
@@ -1948,8 +1947,9 @@ export interface BrowserTelemetryCategoriesConfig {
  */
 export interface BrowserTelemetryCategoryConfig {
   /**
-   * Whether this category is captured. Selection is opt-in, so an omitted category
-   * is not captured.
+   * Whether this category is captured. Operational categories (control, connection,
+   * system, captcha) default to true; set false to opt out. CDP categories (console,
+   * network, page, interaction) and screenshot default to false; set true to opt in.
    */
   enabled?: boolean;
 }

package/src/resources/credentials.ts

@@ -202,6 +202,13 @@ export interface Credential {
    * When the totp_code expires. Only included when totp_code is present.
    */
   totp_code_expires_at?: string;
+
+  /**
+   * The field names stored in this credential's values (e.g., username, password).
+   * Values themselves are never returned. Included on single-credential responses
+   * (create, get by id or name, update); omitted from list responses.
+   */
+  value_keys?: Array<string>;
 }
 
 /**
@@ -213,6 +220,12 @@ export interface UpdateCredentialRequest {
    */
   name?: string;
 
+  /**
+   * Field names to remove from the credential's stored values. Removals are applied
+   * before `values` are merged, so a key present in both is kept with its new value.
+   */
+  remove_value_keys?: Array<string>;
+
   /**
    * If set, indicates this credential should be used with the specified SSO
    * provider. Set to empty string or null to remove.
@@ -281,6 +294,12 @@ export interface CredentialUpdateParams {
    */
   name?: string;
 
+  /**
+   * Field names to remove from the credential's stored values. Removals are applied
+   * before `values` are merged, so a key present in both is kept with its new value.
+   */
+  remove_value_keys?: Array<string>;
+
   /**
    * If set, indicates this credential should be used with the specified SSO
    * provider. Set to empty string or null to remove.

package/src/resources/deployments.ts

@@ -159,7 +159,9 @@ export namespace DeploymentStateEvent {
     entrypoint_rel_path?: string;
 
     /**
-     * Environment variables configured for this deployment
+     * Environment variables configured for this deployment. Values are redacted for
+     * API key, OAuth, and managed-auth callers, which receive every key with an empty
+     * string value. Only dashboard sessions receive the actual values.
      */
     env_vars?: { [key: string]: string };
 
@@ -205,7 +207,9 @@ export interface DeploymentCreateResponse {
   entrypoint_rel_path?: string;
 
   /**
-   * Environment variables configured for this deployment
+   * Environment variables configured for this deployment. Values are redacted for
+   * API key, OAuth, and managed-auth callers, which receive every key with an empty
+   * string value. Only dashboard sessions receive the actual values.
    */
   env_vars?: { [key: string]: string };
 
@@ -250,7 +254,9 @@ export interface DeploymentRetrieveResponse {
   entrypoint_rel_path?: string;
 
   /**
-   * Environment variables configured for this deployment
+   * Environment variables configured for this deployment. Values are redacted for
+   * API key, OAuth, and managed-auth callers, which receive every key with an empty
+   * string value. Only dashboard sessions receive the actual values.
    */
   env_vars?: { [key: string]: string };
 
@@ -295,7 +301,9 @@ export interface DeploymentListResponse {
   entrypoint_rel_path?: string;
 
   /**
-   * Environment variables configured for this deployment
+   * Environment variables configured for this deployment. Values are redacted for
+   * API key, OAuth, and managed-auth callers, which receive every key with an empty
+   * string value. Only dashboard sessions receive the actual values.
    */
   env_vars?: { [key: string]: string };
 
@@ -361,7 +369,8 @@ export namespace DeploymentFollowResponse {
     version: string;
 
     /**
-     * Environment variables configured for this app version
+     * Environment variables configured for this app version. Not currently populated
+     * on streamed app_version_summary events.
      */
     env_vars?: { [key: string]: string };
   }

package/src/resources/extensions.ts

@@ -147,6 +147,15 @@ export interface ExtensionListResponse {
    */
   size_bytes: number;
 
+  /**
+   * SHA-256 checksum, encoded as lowercase hexadecimal, of the exact uploaded
+   * extension archive bytes. This is not a normalized checksum of the extension
+   * contents; archive metadata, file ordering, and compression can change the
+   * checksum for otherwise identical contents. Omitted for legacy rows and
+   * server-repackaged Chrome Web Store extensions.
+   */
+  checksum?: string | null;
+
   /**
    * Timestamp when the extension was last used
    */
@@ -178,6 +187,15 @@ export interface ExtensionGetResponse {
    */
   size_bytes: number;
 
+  /**
+   * SHA-256 checksum, encoded as lowercase hexadecimal, of the exact uploaded
+   * extension archive bytes. This is not a normalized checksum of the extension
+   * contents; archive metadata, file ordering, and compression can change the
+   * checksum for otherwise identical contents. Omitted for legacy rows and
+   * server-repackaged Chrome Web Store extensions.
+   */
+  checksum?: string | null;
+
   /**
    * Timestamp when the extension was last used
    */
@@ -209,6 +227,15 @@ export interface ExtensionUploadResponse {
    */
   size_bytes: number;
 
+  /**
+   * SHA-256 checksum, encoded as lowercase hexadecimal, of the exact uploaded
+   * extension archive bytes. This is not a normalized checksum of the extension
+   * contents; archive metadata, file ordering, and compression can change the
+   * checksum for otherwise identical contents. Omitted for legacy rows and
+   * server-repackaged Chrome Web Store extensions.
+   */
+  checksum?: string | null;
+
   /**
    * Timestamp when the extension was last used
    */

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.74.0'; // x-release-please-version
+export const VERSION = '0.76.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.74.0";
+export declare const VERSION = "0.76.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.74.0";
+export declare const VERSION = "0.76.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.74.0'; // x-release-please-version
+exports.VERSION = '0.76.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.74.0'; // x-release-please-version
+export const VERSION = '0.76.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map