@onkernel/sdk 0.86.1 → 0.87.0

package/src/resources/audit-logs.ts

@@ -1,251 +1,3 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
-import { APIResource } from '../core/resource';
-import { APIPromise } from '../core/api-promise';
-import { PagePromise, PageTokenPagination, type PageTokenPaginationParams } from '../core/pagination';
-import { buildHeaders } from '../internal/headers';
-import { RequestOptions } from '../internal/request-options';
-import {
-  downloadAuditLogs,
-  type AuditLogDownloadDestination,
-  type AuditLogDownloadOptions,
-  type AuditLogDownloadParams,
-  type AuditLogDownloadProgress,
-  type AuditLogDownloadResult,
-} from '../lib/audit-log-download';
-
-export type {
-  AuditLogDownloadDestination,
-  AuditLogDownloadOptions,
-  AuditLogDownloadParams,
-  AuditLogDownloadProgress,
-  AuditLogDownloadResult,
-} from '../lib/audit-log-download';
-
-/**
- * Read audit log records for the authenticated organization.
- */
-export class AuditLogs extends APIResource {
-  /**
-   * API for searching audit logs. Limited to at most 30 day search, returns up to
-   * 100 records per page. Not recommended for bulk export.
-   */
-  list(
-    query: AuditLogListParams,
-    options?: RequestOptions,
-  ): PagePromise<AuditLogEntriesPageTokenPagination, AuditLogEntry> {
-    return this._client.getAPIList('/audit-logs', PageTokenPagination<AuditLogEntry>, { query, ...options });
-  }
-
-  /**
-   * Download an organization's audit log records for a time range as a file, for
-   * archival, compliance, or offline analysis. For interactive browsing, use GET
-   * /audit-logs.
-   */
-  exportChunk(query: AuditLogExportChunkParams, options?: RequestOptions): APIPromise<Response> {
-    return this._client.get('/audit-logs/export/chunk', {
-      query,
-      ...options,
-      headers: buildHeaders([{ Accept: 'application/octet-stream' }, options?.headers]),
-      __binaryResponse: true,
-    });
-  }
-
-  /**
-   * Download a complete gzip-compressed JSON Lines audit log export to a writable
-   * destination. The SDK verifies every chunk and retries transient transfer
-   * failures. It does not close the destination. If the download fails, the
-   * destination may contain a partial export; use a temporary file and atomic
-   * rename when the completed export must be published atomically.
-   */
-  download(
-    query: AuditLogDownloadParams,
-    destination: AuditLogDownloadDestination,
-    options?: AuditLogDownloadOptions,
-  ): Promise<AuditLogDownloadResult> {
-    return downloadAuditLogs(
-      (chunkQuery, chunkOptions) => this.exportChunk(chunkQuery, chunkOptions),
-      query,
-      destination,
-      this._client.timeout,
-      options,
-    );
-  }
-}
-
-export type AuditLogEntriesPageTokenPagination = PageTokenPagination<AuditLogEntry>;
-
-export interface AuditLogEntry {
-  /**
-   * Authentication strategy used for the request.
-   */
-  auth_strategy: string;
-
-  /**
-   * Client IP address.
-   */
-  client_ip: string;
-
-  /**
-   * Request host.
-   */
-  domain: string;
-
-  /**
-   * Request duration in milliseconds.
-   */
-  duration_ms: number;
-
-  /**
-   * Email of the authenticated user at request time, if any.
-   */
-  email: string;
-
-  /**
-   * HTTP method.
-   */
-  method: string;
-
-  /**
-   * Request path.
-   */
-  path: string;
-
-  /**
-   * Matched API route pattern, if available.
-   */
-  route: string;
-
-  /**
-   * HTTP response status code.
-   */
-  status: number;
-
-  /**
-   * UTC time when the request was received.
-   */
-  timestamp: string;
-
-  /**
-   * User agent header.
-   */
-  user_agent: string;
-
-  /**
-   * ID of the authenticated user, if any.
-   */
-  user_id: string;
-}
-
-export interface AuditLogListParams extends PageTokenPaginationParams {
-  /**
-   * Upper bound (exclusive) for the audit record timestamp.
-   */
-  end: string;
-
-  /**
-   * Lower bound (inclusive) for the audit record timestamp.
-   */
-  start: string;
-
-  /**
-   * Filter by authentication strategy.
-   */
-  auth_strategy?: string;
-
-  /**
-   * Filter out results by HTTP method.
-   */
-  exclude_method?: Array<string>;
-
-  /**
-   * Filter by HTTP method.
-   */
-  method?: string;
-
-  /**
-   * Free-text search over path, user ID, email, client IP, and status.
-   */
-  search?: string;
-
-  /**
-   * Additional user IDs to OR into free-text search.
-   */
-  search_user_id?: Array<string>;
-
-  /**
-   * Filter by service name.
-   */
-  service?: string;
-}
-
-export interface AuditLogExportChunkParams {
-  /**
-   * Upper bound (exclusive) for the audit record timestamp.
-   */
-  end: string;
-
-  /**
-   * Lower bound (inclusive) for the audit record timestamp.
-   */
-  start: string;
-
-  /**
-   * Filter by authentication strategy.
-   */
-  auth_strategy?: string;
-
-  /**
-   * Opaque cursor from X-Next-Cursor for the next chunk of older records.
-   */
-  cursor?: string;
-
-  /**
-   * Filter out results by HTTP method.
-   */
-  exclude_method?: Array<string>;
-
-  /**
-   * Encoding for the returned chunk.
-   */
-  format?: 'jsonl' | 'jsonl.gz';
-
-  /**
-   * Maximum number of records to return in this chunk.
-   */
-  limit?: number;
-
-  /**
-   * Filter by HTTP method.
-   */
-  method?: string;
-
-  /**
-   * Free-text search over path, user ID, email, client IP, and status.
-   */
-  search?: string;
-
-  /**
-   * Additional user IDs to OR into free-text search.
-   */
-  search_user_id?: Array<string>;
-
-  /**
-   * Filter by service name.
-   */
-  service?: string;
-}
-
-export declare namespace AuditLogs {
-  export {
-    type AuditLogEntry as AuditLogEntry,
-    type AuditLogEntriesPageTokenPagination as AuditLogEntriesPageTokenPagination,
-    type AuditLogListParams as AuditLogListParams,
-    type AuditLogExportChunkParams as AuditLogExportChunkParams,
-    type AuditLogDownloadDestination as AuditLogDownloadDestination,
-    type AuditLogDownloadOptions as AuditLogDownloadOptions,
-    type AuditLogDownloadParams as AuditLogDownloadParams,
-    type AuditLogDownloadProgress as AuditLogDownloadProgress,
-    type AuditLogDownloadResult as AuditLogDownloadResult,
-  };
-}
+export * from './audit-logs/index';

package/src/resources/auth/auth.ts

@@ -21,14 +21,20 @@ import {
   SubmitFieldsRequest,
   SubmitFieldsResponse,
 } from './connections';
+import * as ContextAPI from './context';
+import { AuthContext, Context } from './context';
 
 export class Auth extends APIResource {
+  context: ContextAPI.Context = new ContextAPI.Context(this._client);
   connections: ConnectionsAPI.Connections = new ConnectionsAPI.Connections(this._client);
 }
 
+Auth.Context = Context;
 Auth.Connections = Connections;
 
 export declare namespace Auth {
+  export { Context as Context, type AuthContext as AuthContext };
+
   export {
     Connections as Connections,
     type LoginResponse as LoginResponse,

package/src/resources/auth/context.ts

@@ -0,0 +1,125 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../core/resource';
+import { APIPromise } from '../../core/api-promise';
+import { RequestOptions } from '../../internal/request-options';
+
+/**
+ * Inspect the identity and authorization context for the current request.
+ */
+export class Context extends APIResource {
+  /**
+   * Returns the authenticated principal, organization, credential scope, and
+   * effective request scope. The response is derived from the verified request
+   * context and does not expose credential secrets.
+   *
+   * @example
+   * ```ts
+   * const authContext = await client.auth.context.retrieve();
+   * ```
+   */
+  retrieve(options?: RequestOptions): APIPromise<AuthContext> {
+    return this._client.get('/auth/context', options);
+  }
+}
+
+/**
+ * The identity and authorization context resolved for the current request.
+ */
+export interface AuthContext {
+  authentication: AuthContext.Authentication;
+
+  /**
+   * The credential's maximum scope and the effective scope selected for this
+   * request. Future permission data can be added without changing scope semantics.
+   */
+  authorization: AuthContext.Authorization;
+
+  organization: AuthContext.Organization;
+
+  principal: AuthContext.Principal;
+}
+
+export namespace AuthContext {
+  export interface Authentication {
+    /**
+     * The API key ID when authenticated with an API key; null for session credentials.
+     */
+    credential_id: string | null;
+
+    /**
+     * The credential format used to authenticate the request.
+     */
+    method: 'api_key' | 'jwt';
+
+    /**
+     * The source classification resolved by authentication middleware.
+     */
+    source: 'api_key' | 'oauth' | 'dashboard';
+  }
+
+  /**
+   * The credential's maximum scope and the effective scope selected for this
+   * request. Future permission data can be added without changing scope semantics.
+   */
+  export interface Authorization {
+    /**
+     * A scope within the authenticated organization. A null project_id represents
+     * organization-wide scope.
+     */
+    credential_scope: Authorization.CredentialScope;
+
+    /**
+     * A scope within the authenticated organization. A null project_id represents
+     * organization-wide scope.
+     */
+    effective_scope: Authorization.EffectiveScope;
+  }
+
+  export namespace Authorization {
+    /**
+     * A scope within the authenticated organization. A null project_id represents
+     * organization-wide scope.
+     */
+    export interface CredentialScope {
+      /**
+       * The Kernel project ID, or null when the scope is organization-wide.
+       */
+      project_id: string | null;
+    }
+
+    /**
+     * A scope within the authenticated organization. A null project_id represents
+     * organization-wide scope.
+     */
+    export interface EffectiveScope {
+      /**
+       * The Kernel project ID, or null when the scope is organization-wide.
+       */
+      project_id: string | null;
+    }
+  }
+
+  export interface Organization {
+    /**
+     * The authenticated Kernel organization ID.
+     */
+    id: string;
+  }
+
+  export interface Principal {
+    /**
+     * The API key ID for API-key principals or user ID for user principals.
+     */
+    id: string;
+
+    /**
+     * The kind of principal authenticated for the request.
+     */
+    type: 'api_key' | 'user';
+  }
+}
+
+export declare namespace Context {
+  export { type AuthContext as AuthContext };
+}

package/src/resources/auth/index.ts

@@ -20,3 +20,4 @@ export {
   type ManagedAuthsOffsetPagination,
   type ManagedAuthTimelineEventsOffsetPagination,
 } from './connections';
+export { Context, type AuthContext } from './context';

package/src/resources/browser-pools.ts

@@ -432,6 +432,12 @@ export interface BrowserPoolAcquireResponse {
    */
   profile?: BrowsersAPI.Profile;
 
+  /**
+   * Whether changes made during this browser session are saved back to its profile
+   * when the session ends. Omitted when no profile is attached.
+   */
+  profile_save_changes?: boolean;
+
   /**
    * ID of the proxy associated with this browser session, if any.
    */

package/src/resources/browsers/browsers.ts

@@ -426,6 +426,12 @@ export interface BrowserCreateResponse {
    */
   profile?: Profile;
 
+  /**
+   * Whether changes made during this browser session are saved back to its profile
+   * when the session ends. Omitted when no profile is attached.
+   */
+  profile_save_changes?: boolean;
+
   /**
    * ID of the proxy associated with this browser session, if any.
    */
@@ -558,6 +564,12 @@ export interface BrowserRetrieveResponse {
    */
   profile?: Profile;
 
+  /**
+   * Whether changes made during this browser session are saved back to its profile
+   * when the session ends. Omitted when no profile is attached.
+   */
+  profile_save_changes?: boolean;
+
   /**
    * ID of the proxy associated with this browser session, if any.
    */
@@ -690,6 +702,12 @@ export interface BrowserUpdateResponse {
    */
   profile?: Profile;
 
+  /**
+   * Whether changes made during this browser session are saved back to its profile
+   * when the session ends. Omitted when no profile is attached.
+   */
+  profile_save_changes?: boolean;
+
   /**
    * ID of the proxy associated with this browser session, if any.
    */
@@ -822,6 +840,12 @@ export interface BrowserListResponse {
    */
   profile?: Profile;
 
+  /**
+   * Whether changes made during this browser session are saved back to its profile
+   * when the session ends. Omitted when no profile is attached.
+   */
+  profile_save_changes?: boolean;
+
   /**
    * ID of the proxy associated with this browser session, if any.
    */

package/src/resources/index.ts

@@ -24,7 +24,7 @@ export {
   type AuditLogListParams,
   type AuditLogExportChunkParams,
   type AuditLogEntriesPageTokenPagination,
-} from './audit-logs';
+} from './audit-logs/audit-logs';
 export { Auth } from './auth/auth';
 export {
   BrowserPools,

package/src/resources/invocations.ts

@@ -503,6 +503,12 @@ export namespace InvocationListBrowsersResponse {
      */
     profile?: BrowsersAPI.Profile;
 
+    /**
+     * Whether changes made during this browser session are saved back to its profile
+     * when the session ends. Omitted when no profile is attached.
+     */
+    profile_save_changes?: boolean;
+
     /**
      * ID of the proxy associated with this browser session, if any.
      */

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.86.1'; // x-release-please-version
+export const VERSION = '0.87.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.86.1";
+export declare const VERSION = "0.87.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.86.1";
+export declare const VERSION = "0.87.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.86.1'; // x-release-please-version
+exports.VERSION = '0.87.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.86.1'; // x-release-please-version
+export const VERSION = '0.87.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map