@onkernel/sdk 0.75.0 → 0.78.0

package/src/resources/credentials.ts

@@ -202,6 +202,13 @@ export interface Credential {
    * When the totp_code expires. Only included when totp_code is present.
    */
   totp_code_expires_at?: string;
+
+  /**
+   * The field names stored in this credential's values (e.g., username, password).
+   * Values themselves are never returned. Included on single-credential responses
+   * (create, get by id or name, update); omitted from list responses.
+   */
+  value_keys?: Array<string>;
 }
 
 /**
@@ -213,6 +220,12 @@ export interface UpdateCredentialRequest {
    */
   name?: string;
 
+  /**
+   * Field names to remove from the credential's stored values. Removals are applied
+   * before `values` are merged, so a key present in both is kept with its new value.
+   */
+  remove_value_keys?: Array<string>;
+
   /**
    * If set, indicates this credential should be used with the specified SSO
    * provider. Set to empty string or null to remove.
@@ -281,6 +294,12 @@ export interface CredentialUpdateParams {
    */
   name?: string;
 
+  /**
+   * Field names to remove from the credential's stored values. Removals are applied
+   * before `values` are merged, so a key present in both is kept with its new value.
+   */
+  remove_value_keys?: Array<string>;
+
   /**
    * If set, indicates this credential should be used with the specified SSO
    * provider. Set to empty string or null to remove.
@@ -307,7 +326,8 @@ export interface CredentialListParams extends OffsetPaginationParams {
   domain?: string;
 
   /**
-   * Search credentials by name, domain, or ID.
+   * Case-insensitive substring match against credential name or domain. IDs match by
+   * exact value.
    */
   query?: string;
 }

package/src/resources/deployments.ts

@@ -165,6 +165,39 @@ export namespace DeploymentStateEvent {
      */
     env_vars?: { [key: string]: string };
 
+    /**
+     * Hex-encoded SHA-256 checksum of the source archive. For file uploads, this
+     * hashes the uploaded archive; for GitHub-sourced deployments, this hashes the
+     * GitHub archive downloaded by the API. Omitted for deployments created before
+     * this field was recorded.
+     */
+    source_checksum?: string;
+
+    /**
+     * For GitHub-sourced deployments, the subpath within the repository that was used
+     * as the deploy root. Omitted when the repo root was used or for file uploads.
+     */
+    source_path?: string;
+
+    /**
+     * For GitHub-sourced deployments, the git ref as requested at deploy time (branch,
+     * tag, or commit SHA — not resolved to a commit). Omitted for file uploads.
+     */
+    source_ref?: string;
+
+    /**
+     * Origin of the deployed source code. This is read-only response provenance;
+     * `file` indicates an uploaded archive and `github` indicates a repository fetched
+     * by the API.
+     */
+    source_type?: 'file' | 'github';
+
+    /**
+     * For GitHub-sourced deployments, the repository URL that was fetched. Omitted for
+     * file uploads.
+     */
+    source_url?: string;
+
     /**
      * Status reason
      */
@@ -213,6 +246,39 @@ export interface DeploymentCreateResponse {
    */
   env_vars?: { [key: string]: string };
 
+  /**
+   * Hex-encoded SHA-256 checksum of the source archive. For file uploads, this
+   * hashes the uploaded archive; for GitHub-sourced deployments, this hashes the
+   * GitHub archive downloaded by the API. Omitted for deployments created before
+   * this field was recorded.
+   */
+  source_checksum?: string;
+
+  /**
+   * For GitHub-sourced deployments, the subpath within the repository that was used
+   * as the deploy root. Omitted when the repo root was used or for file uploads.
+   */
+  source_path?: string;
+
+  /**
+   * For GitHub-sourced deployments, the git ref as requested at deploy time (branch,
+   * tag, or commit SHA — not resolved to a commit). Omitted for file uploads.
+   */
+  source_ref?: string;
+
+  /**
+   * Origin of the deployed source code. This is read-only response provenance;
+   * `file` indicates an uploaded archive and `github` indicates a repository fetched
+   * by the API.
+   */
+  source_type?: 'file' | 'github';
+
+  /**
+   * For GitHub-sourced deployments, the repository URL that was fetched. Omitted for
+   * file uploads.
+   */
+  source_url?: string;
+
   /**
    * Status reason
    */
@@ -260,6 +326,39 @@ export interface DeploymentRetrieveResponse {
    */
   env_vars?: { [key: string]: string };
 
+  /**
+   * Hex-encoded SHA-256 checksum of the source archive. For file uploads, this
+   * hashes the uploaded archive; for GitHub-sourced deployments, this hashes the
+   * GitHub archive downloaded by the API. Omitted for deployments created before
+   * this field was recorded.
+   */
+  source_checksum?: string;
+
+  /**
+   * For GitHub-sourced deployments, the subpath within the repository that was used
+   * as the deploy root. Omitted when the repo root was used or for file uploads.
+   */
+  source_path?: string;
+
+  /**
+   * For GitHub-sourced deployments, the git ref as requested at deploy time (branch,
+   * tag, or commit SHA — not resolved to a commit). Omitted for file uploads.
+   */
+  source_ref?: string;
+
+  /**
+   * Origin of the deployed source code. This is read-only response provenance;
+   * `file` indicates an uploaded archive and `github` indicates a repository fetched
+   * by the API.
+   */
+  source_type?: 'file' | 'github';
+
+  /**
+   * For GitHub-sourced deployments, the repository URL that was fetched. Omitted for
+   * file uploads.
+   */
+  source_url?: string;
+
   /**
    * Status reason
    */
@@ -307,6 +406,39 @@ export interface DeploymentListResponse {
    */
   env_vars?: { [key: string]: string };
 
+  /**
+   * Hex-encoded SHA-256 checksum of the source archive. For file uploads, this
+   * hashes the uploaded archive; for GitHub-sourced deployments, this hashes the
+   * GitHub archive downloaded by the API. Omitted for deployments created before
+   * this field was recorded.
+   */
+  source_checksum?: string;
+
+  /**
+   * For GitHub-sourced deployments, the subpath within the repository that was used
+   * as the deploy root. Omitted when the repo root was used or for file uploads.
+   */
+  source_path?: string;
+
+  /**
+   * For GitHub-sourced deployments, the git ref as requested at deploy time (branch,
+   * tag, or commit SHA — not resolved to a commit). Omitted for file uploads.
+   */
+  source_ref?: string;
+
+  /**
+   * Origin of the deployed source code. This is read-only response provenance;
+   * `file` indicates an uploaded archive and `github` indicates a repository fetched
+   * by the API.
+   */
+  source_type?: 'file' | 'github';
+
+  /**
+   * For GitHub-sourced deployments, the repository URL that was fetched. Omitted for
+   * file uploads.
+   */
+  source_url?: string;
+
   /**
    * Status reason
    */

package/src/resources/extensions.ts

@@ -250,7 +250,16 @@ export interface ExtensionUploadResponse {
 
 export interface ExtensionListParams extends OffsetPaginationParams {
   /**
-   * Search extensions by name or ID.
+   * Exact-match filter on extension name using the database collation. In
+   * production, matching is case- and accent-insensitive. During the default-project
+   * migration, unscoped requests prefer a concrete default-project extension over a
+   * legacy unscoped extension with the same name.
+   */
+  name?: string;
+
+  /**
+   * Case-insensitive substring match against extension name. IDs match by exact
+   * value.
    */
   query?: string;
 }

package/src/resources/index.ts

@@ -120,7 +120,12 @@ export {
   type InvocationListResponsesOffsetPagination,
 } from './invocations';
 export { Organization } from './organization/organization';
-export { Profiles, type ProfileCreateParams, type ProfileListParams } from './profiles';
+export {
+  Profiles,
+  type ProfileCreateParams,
+  type ProfileUpdateParams,
+  type ProfileListParams,
+} from './profiles';
 export {
   Projects,
   type CreateProjectRequest,
@@ -135,9 +140,11 @@ export {
   Proxies,
   type ProxyCreateResponse,
   type ProxyRetrieveResponse,
+  type ProxyUpdateResponse,
   type ProxyListResponse,
   type ProxyCheckResponse,
   type ProxyCreateParams,
+  type ProxyUpdateParams,
   type ProxyListParams,
   type ProxyCheckParams,
   type ProxyListResponsesOffsetPagination,

package/src/resources/organization/limits.ts

@@ -9,8 +9,9 @@ import { RequestOptions } from '../../internal/request-options';
  */
 export class Limits extends APIResource {
   /**
-   * Get the organization's concurrent session ceiling and the default per-project
-   * concurrency cap applied to projects without an explicit override.
+   * Get the organization's concurrency limit — the maximum browsers running at once
+   * across on-demand sessions and browser pool reservations — and the default
+   * per-project concurrency cap applied to projects without an explicit override.
    */
   retrieve(options?: RequestOptions): APIPromise<OrgLimits> {
     return this._client.get('/org/limits', options);
@@ -19,8 +20,7 @@ export class Limits extends APIResource {
   /**
    * Set the default per-project concurrency cap applied to projects without an
    * explicit override. Set the value to 0 to remove the default; omit to leave it
-   * unchanged. The default cannot exceed the organization's concurrent session
-   * ceiling.
+   * unchanged. The default cannot exceed the organization's concurrency limit.
    */
   update(body: LimitUpdateParams, options?: RequestOptions): APIPromise<OrgLimits> {
     return this._client.patch('/org/limits', { body, ...options });
@@ -29,7 +29,7 @@ export class Limits extends APIResource {
 
 export interface OrgLimits {
   /**
-   * Default maximum concurrent browser sessions applied to every project that has no
+   * Default maximum concurrent browsers applied to every project that has no
    * explicit per-project override. Null means no org-level default, so such projects
    * are uncapped (only the org-wide limit applies). Applies to existing and newly
    * created projects.
@@ -37,8 +37,9 @@ export interface OrgLimits {
   default_project_max_concurrent_sessions?: number | null;
 
   /**
-   * The organization's effective concurrent browser session ceiling, from its plan
-   * or an override. Read-only and shared across all projects in the org; a
+   * The organization's effective concurrency limit — the maximum browsers running at
+   * once, covering both on-demand sessions and browser pool reservations — from its
+   * plan or an override. Read-only and shared across all projects in the org; a
    * per-project default cannot exceed it.
    */
   max_concurrent_sessions?: number;
@@ -46,18 +47,18 @@ export interface OrgLimits {
 
 export interface UpdateOrgLimitsRequest {
   /**
-   * Default maximum concurrent browser sessions for projects without an explicit
-   * override. Set to 0 to remove the default; omit to leave unchanged. Cannot exceed
-   * the organization's concurrent session ceiling.
+   * Default maximum concurrent browsers for projects without an explicit override.
+   * Set to 0 to remove the default; omit to leave unchanged. Cannot exceed the
+   * organization's concurrency limit.
    */
   default_project_max_concurrent_sessions?: number | null;
 }
 
 export interface LimitUpdateParams {
   /**
-   * Default maximum concurrent browser sessions for projects without an explicit
-   * override. Set to 0 to remove the default; omit to leave unchanged. Cannot exceed
-   * the organization's concurrent session ceiling.
+   * Default maximum concurrent browsers for projects without an explicit override.
+   * Set to 0 to remove the default; omit to leave unchanged. Cannot exceed the
+   * organization's concurrency limit.
    */
   default_project_max_concurrent_sessions?: number | null;
 }

package/src/resources/profiles.ts

@@ -16,6 +16,11 @@ export class Profiles extends APIResource {
   /**
    * Create a browser profile that can be used to load state into future browser
    * sessions.
+   *
+   * @example
+   * ```ts
+   * const profile = await client.profiles.create();
+   * ```
    */
   create(body: ProfileCreateParams, options?: RequestOptions): APIPromise<BrowsersAPI.Profile> {
     return this._client.post('/profiles', { body, ...options });
@@ -23,13 +28,52 @@ export class Profiles extends APIResource {
 
   /**
    * Retrieve details for a single profile by its ID or name.
+   *
+   * @example
+   * ```ts
+   * const profile = await client.profiles.retrieve(
+   *   'id_or_name',
+   * );
+   * ```
    */
   retrieve(idOrName: string, options?: RequestOptions): APIPromise<BrowsersAPI.Profile> {
     return this._client.get(path`/profiles/${idOrName}`, options);
   }
 
+  /**
+   * Update a profile's name. Names must be unique within the logical project; during
+   * the default-project migration, unscoped profiles and profiles in the org default
+   * project are treated as the same project. Duplicate-name conflicts are checked
+   * before update but are best-effort because there is no backing unique index.
+   * Renaming a profile while a browser session references it by name may prevent
+   * that session's changes from saving; prefer renaming when the profile is not in
+   * use.
+   *
+   * @example
+   * ```ts
+   * const profile = await client.profiles.update('id_or_name', {
+   *   name: 'my-renamed-profile',
+   * });
+   * ```
+   */
+  update(
+    idOrName: string,
+    body: ProfileUpdateParams,
+    options?: RequestOptions,
+  ): APIPromise<BrowsersAPI.Profile> {
+    return this._client.patch(path`/profiles/${idOrName}`, { body, ...options });
+  }
+
   /**
    * List profiles with optional filtering and pagination.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const profile of client.profiles.list()) {
+   *   // ...
+   * }
+   * ```
    */
   list(
     query: ProfileListParams | null | undefined = {},
@@ -40,6 +84,11 @@ export class Profiles extends APIResource {
 
   /**
    * Delete a profile by its ID or by its name.
+   *
+   * @example
+   * ```ts
+   * await client.profiles.delete('id_or_name');
+   * ```
    */
   delete(idOrName: string, options?: RequestOptions): APIPromise<void> {
     return this._client.delete(path`/profiles/${idOrName}`, {
@@ -50,6 +99,16 @@ export class Profiles extends APIResource {
 
   /**
    * Returns a zstd-compressed tar file of the full user-data directory.
+   *
+   * @example
+   * ```ts
+   * const response = await client.profiles.download(
+   *   'id_or_name',
+   * );
+   *
+   * const content = await response.blob();
+   * console.log(content);
+   * ```
    */
   download(idOrName: string, options?: RequestOptions): APIPromise<Response> {
     return this._client.get(path`/profiles/${idOrName}/download`, {
@@ -62,20 +121,43 @@ export class Profiles extends APIResource {
 
 export interface ProfileCreateParams {
   /**
-   * Optional name of the profile. Must be unique within the project.
+   * Optional name of the profile. Must be unique within the logical project; during
+   * the default-project migration, unscoped profiles and profiles in the org default
+   * project are treated as the same project.
    */
   name?: string;
 }
 
+export interface ProfileUpdateParams {
+  /**
+   * New profile name. Must be unique within the logical project; during the
+   * default-project migration, unscoped profiles and profiles in the org default
+   * project are treated as the same project.
+   */
+  name: string;
+}
+
 export interface ProfileListParams extends OffsetPaginationParams {
   /**
-   * Search profiles by name or ID.
+   * Exact-match filter on profile name using the database collation. In production,
+   * matching is case- and accent-insensitive. During the default-project migration,
+   * unscoped requests prefer a concrete default-project profile over a legacy
+   * unscoped profile with the same name.
+   */
+  name?: string;
+
+  /**
+   * Case-insensitive substring match against profile name or ID.
    */
   query?: string;
 }
 
 export declare namespace Profiles {
-  export { type ProfileCreateParams as ProfileCreateParams, type ProfileListParams as ProfileListParams };
+  export {
+    type ProfileCreateParams as ProfileCreateParams,
+    type ProfileUpdateParams as ProfileUpdateParams,
+    type ProfileListParams as ProfileListParams,
+  };
 }
 
 export { type ProfilesOffsetPagination };

package/src/resources/projects/limits.ts

@@ -49,14 +49,16 @@ export interface ProjectLimits {
   max_concurrent_invocations?: number | null;
 
   /**
-   * Maximum concurrent browser sessions for this project. Null means no
-   * project-level cap.
+   * Maximum concurrent browsers for this project, covering both on-demand sessions
+   * (`browsers.create()`) and browser pool reservations. Null means no project-level
+   * cap.
    */
   max_concurrent_sessions?: number | null;
 
   /**
-   * Maximum pooled sessions capacity for this project. Null means no project-level
-   * cap.
+   * @deprecated Deprecated: pooled browsers now count toward
+   * `max_concurrent_sessions`. Always null once the unified concurrency limit is
+   * enabled for your organization.
    */
   max_pooled_sessions?: number | null;
 }
@@ -69,14 +71,16 @@ export interface UpdateProjectLimitsRequest {
   max_concurrent_invocations?: number | null;
 
   /**
-   * Maximum concurrent browser sessions for this project. Set to 0 to remove the
-   * cap; omit to leave unchanged.
+   * Maximum concurrent browsers for this project, covering both on-demand sessions
+   * and browser pool reservations. Set to 0 to remove the cap; omit to leave
+   * unchanged.
    */
   max_concurrent_sessions?: number | null;
 
   /**
-   * Maximum pooled sessions capacity for this project. Set to 0 to remove the cap;
-   * omit to leave unchanged.
+   * @deprecated Deprecated: pooled browsers now count toward
+   * `max_concurrent_sessions`. Requests that set this field are rejected with a 400
+   * once the unified concurrency limit is enabled for your organization.
    */
   max_pooled_sessions?: number | null;
 }
@@ -89,14 +93,16 @@ export interface LimitUpdateParams {
   max_concurrent_invocations?: number | null;
 
   /**
-   * Maximum concurrent browser sessions for this project. Set to 0 to remove the
-   * cap; omit to leave unchanged.
+   * Maximum concurrent browsers for this project, covering both on-demand sessions
+   * and browser pool reservations. Set to 0 to remove the cap; omit to leave
+   * unchanged.
    */
   max_concurrent_sessions?: number | null;
 
   /**
-   * Maximum pooled sessions capacity for this project. Set to 0 to remove the cap;
-   * omit to leave unchanged.
+   * @deprecated Deprecated: pooled browsers now count toward
+   * `max_concurrent_sessions`. Requests that set this field are rejected with a 400
+   * once the unified concurrency limit is enabled for your organization.
    */
   max_pooled_sessions?: number | null;
 }

package/src/resources/projects/projects.ts

@@ -155,6 +155,12 @@ export interface ProjectUpdateParams {
 }
 
 export interface ProjectListParams extends OffsetPaginationParams {
+  /**
+   * Exact-match filter on project name using the database collation. In production,
+   * matching is case- and accent-insensitive.
+   */
+  name?: string;
+
   /**
    * Case-insensitive substring match against project name
    */