@onkernel/sdk 0.91.0 → 0.93.0

package/src/resources/auth/connections.ts

@@ -465,6 +465,12 @@ export interface ManagedAuth {
    */
   hosted_url?: string | null;
 
+  /**
+   * Opaque identifier for the current canonical interaction. Required when
+   * submitting fields or choices and changes for each new actionable pause.
+   */
+  interaction_id?: string | null;
+
   /**
    * @deprecated Deprecated alias for `last_auth_check_at`. Despite the name, this is
    * the last health-check timestamp, not the last successful authentication. Use
@@ -775,6 +781,11 @@ export namespace ManagedAuth {
      */
     id: string;
 
+    /**
+     * Why the field requires user input.
+     */
+    reason: 'missing' | 'rejected';
+
     /**
      * Credential reference name to store the submitted value under.
      */
@@ -800,12 +811,6 @@ export namespace ManagedAuth {
      */
     observed_selector?: string | null;
 
-    /**
-     * Whether the submitted value must replace an existing credential after explicit
-     * rejection.
-     */
-    replace_existing?: boolean;
-
     /**
      * Whether this field is required.
      */
@@ -1555,6 +1560,12 @@ export interface SubmitFieldsRequest {
    */
   fields?: { [key: string]: string };
 
+  /**
+   * Opaque interaction ID returned with canonical fields and choices. Required for
+   * canonical submissions.
+   */
+  interaction_id?: string;
+
   /**
    * The MFA method type to select (when mfa_options were returned)
    */
@@ -1670,6 +1681,12 @@ export namespace ConnectionFollowResponse {
      */
     hosted_url?: string;
 
+    /**
+     * Opaque identifier for the current canonical interaction. Required when
+     * submitting fields or choices and changes for each new actionable pause.
+     */
+    interaction_id?: string;
+
     /**
      * Browser live view URL for debugging.
      */
@@ -1831,6 +1848,11 @@ export namespace ConnectionFollowResponse {
        */
       id: string;
 
+      /**
+       * Why the field requires user input.
+       */
+      reason: 'missing' | 'rejected';
+
       /**
        * Credential reference name to store the submitted value under.
        */
@@ -1856,12 +1878,6 @@ export namespace ConnectionFollowResponse {
        */
       observed_selector?: string | null;
 
-      /**
-       * Whether the submitted value must replace an existing credential after explicit
-       * rejection.
-       */
-      replace_existing?: boolean;
-
       /**
        * Whether this field is required.
        */
@@ -2549,6 +2565,12 @@ export interface ConnectionSubmitParams {
    */
   fields?: { [key: string]: string };
 
+  /**
+   * Opaque interaction ID returned with canonical fields and choices. Required for
+   * canonical submissions.
+   */
+  interaction_id?: string;
+
   /**
    * The MFA method type to select (when mfa_options were returned)
    */

package/src/resources/browsers/browsers.ts

@@ -85,6 +85,7 @@ import {
   BrowserPageNavigationEvent,
   BrowserPageNavigationSettledEvent,
   BrowserPageTabOpenedEvent,
+  BrowserProxyErrorEvent,
   BrowserServiceCrashedEvent,
   BrowserSystemOomKillEvent,
   BrowserTelemetryCategoriesConfig,
@@ -1673,6 +1674,7 @@ export declare namespace Browsers {
     type BrowserPageNavigationEvent as BrowserPageNavigationEvent,
     type BrowserPageNavigationSettledEvent as BrowserPageNavigationSettledEvent,
     type BrowserPageTabOpenedEvent as BrowserPageTabOpenedEvent,
+    type BrowserProxyErrorEvent as BrowserProxyErrorEvent,
     type BrowserServiceCrashedEvent as BrowserServiceCrashedEvent,
     type BrowserSystemOomKillEvent as BrowserSystemOomKillEvent,
     type BrowserTelemetryCategoriesConfig as BrowserTelemetryCategoriesConfig,

package/src/resources/browsers/index.ts

@@ -120,6 +120,7 @@ export {
   type BrowserPageNavigationEvent,
   type BrowserPageNavigationSettledEvent,
   type BrowserPageTabOpenedEvent,
+  type BrowserProxyErrorEvent,
   type BrowserServiceCrashedEvent,
   type BrowserSystemOomKillEvent,
   type BrowserTelemetryCategoriesConfig,

package/src/resources/browsers/telemetry.ts

@@ -1725,6 +1725,88 @@ export namespace BrowserPageTabOpenedEvent {
   }
 }
 
+/**
+ * A branded proxy-layer failure observed by the browser. Emitted when the metro
+ * egress host-proxy serves a branded 5xx error page whose response carries the
+ * X-Kernel-Proxy-Error header. Low-volume and carries a typed code. Its value is
+ * per-session and per-URL attribution for sessions that already capture the
+ * network stream: proxy failures are only observable while the CDP network
+ * collector is running, so this is an opt-in refinement of the raw network events
+ * rather than a default-on alerting signal.
+ */
+export interface BrowserProxyErrorEvent {
+  category: 'network';
+
+  /**
+   * Provenance metadata identifying which producer emitted the event.
+   */
+  source: BrowserEventSource;
+
+  /**
+   * Event timestamp in Unix microseconds.
+   */
+  ts: number;
+
+  type: 'proxy_error';
+
+  /**
+   * Browser event context stamped by the browser monitor onto all CDP-sourced
+   * events. Identifies the target, frame, and navigation epoch in which the event
+   * occurred.
+   */
+  data?: BrowserProxyErrorEvent.Data;
+
+  /**
+   * True if the data field was truncated due to size limits.
+   */
+  truncated?: boolean;
+}
+
+export namespace BrowserProxyErrorEvent {
+  /**
+   * Browser event context stamped by the browser monitor onto all CDP-sourced
+   * events. Identifies the target, frame, and navigation epoch in which the event
+   * occurred.
+   */
+  export interface Data extends TelemetryAPI.BrowserEventContext {
+    /**
+     * Proxy-layer error code: the X-Kernel-Proxy-Error response header value from a
+     * branded 5xx error page served by the metro egress host-proxy. Values mirror what
+     * the proxy emits: destination_blocked, provider_blacklisted,
+     * provider_unreachable, proxy_unavailable, upstream_timeout, upstream_dns_failure,
+     * upstream_connect_failed. Unknown header values are dropped.
+     */
+    code:
+      | 'destination_blocked'
+      | 'provider_blacklisted'
+      | 'provider_unreachable'
+      | 'proxy_unavailable'
+      | 'upstream_timeout'
+      | 'upstream_dns_failure'
+      | 'upstream_connect_failed';
+
+    /**
+     * CDP request identifier matching the originating request.
+     */
+    request_id: string;
+
+    /**
+     * HTTP response status of the branded error page (502).
+     */
+    status: number;
+
+    /**
+     * HTTP method of the failed request, when known.
+     */
+    method?: string;
+
+    /**
+     * CDP Network.ResourceType for the request, when known.
+     */
+    resource_type?: string;
+  }
+}
+
 /**
  * A managed service exited unexpectedly. Intentional stops do not produce this
  * event; only unexpected exits and terminal restart-give-up transitions do.
@@ -1990,6 +2072,7 @@ export type BrowserTelemetryEvent =
   | BrowserNetworkResponseEvent
   | BrowserNetworkLoadingFailedEvent
   | BrowserNetworkIdleEvent
+  | BrowserProxyErrorEvent
   | BrowserPageNavigationEvent
   | BrowserPageDomContentLoadedEvent
   | BrowserPageLoadEvent
@@ -2184,6 +2267,7 @@ export declare namespace Telemetry {
     type BrowserPageNavigationEvent as BrowserPageNavigationEvent,
     type BrowserPageNavigationSettledEvent as BrowserPageNavigationSettledEvent,
     type BrowserPageTabOpenedEvent as BrowserPageTabOpenedEvent,
+    type BrowserProxyErrorEvent as BrowserProxyErrorEvent,
     type BrowserServiceCrashedEvent as BrowserServiceCrashedEvent,
     type BrowserSystemOomKillEvent as BrowserSystemOomKillEvent,
     type BrowserTelemetryCategoriesConfig as BrowserTelemetryCategoriesConfig,

package/src/resources/organization/entitlements.ts

@@ -0,0 +1,234 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../core/resource';
+import { APIPromise } from '../../core/api-promise';
+import { RequestOptions } from '../../internal/request-options';
+
+/**
+ * Read and manage organization-level limits.
+ */
+export class Entitlements extends APIResource {
+  /**
+   * Get the authenticated organization's effective feature access and constraints
+   * after applying its plan, active trial treatment, plan status, and
+   * organization-specific overrides. Null constraint values mean unlimited.
+   */
+  retrieve(options?: RequestOptions): APIPromise<OrgEntitlements> {
+    return this._client.get('/org/entitlements', options);
+  }
+}
+
+/**
+ * Effective feature access and constraints for the authenticated organization.
+ * Values already include trial treatment, plan status, and organization-specific
+ * overrides; consumers should use these resolved values instead of comparing plan
+ * IDs.
+ */
+export interface OrgEntitlements {
+  features: OrgEntitlements.Features;
+
+  limits: OrgEntitlements.Limits;
+
+  plan: OrgEntitlements.Plan;
+}
+
+export namespace OrgEntitlements {
+  export interface Features {
+    browser_extensions: Features.BrowserExtensions;
+
+    browser_pools: Features.BrowserPools;
+
+    browser_replays: Features.BrowserReplays;
+
+    credential_providers: Features.CredentialProviders;
+
+    credentials: Features.Credentials;
+
+    custom_proxies: Features.CustomProxies;
+
+    file_io: Features.FileIo;
+
+    gpu: Features.GPU;
+
+    managed_auth: Features.ManagedAuth;
+
+    managed_proxies: Features.ManagedProxies;
+
+    profiles: Features.Profiles;
+
+    proxy_bypass_hosts: Features.ProxyBypassHosts;
+  }
+
+  export namespace Features {
+    export interface BrowserExtensions {
+      /**
+       * Whether browser extensions are available.
+       */
+      enabled: boolean;
+
+      /**
+       * Maximum active custom extensions the organization may store. Null means
+       * unlimited. Loading stored extensions into a browser is not plan-limited.
+       */
+      max_stored_per_org: number | null;
+    }
+
+    export interface BrowserPools {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface BrowserReplays {
+      /**
+       * Whether browser replay recording is available.
+       */
+      enabled: boolean;
+
+      /**
+       * Number of days browser replays are retained, matching the replay reaper policy.
+       */
+      retention_days: number;
+    }
+
+    export interface CredentialProviders {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface Credentials {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface CustomProxies {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface FileIo {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface GPU {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface ManagedAuth {
+      /**
+       * Whether managed auth is available.
+       */
+      enabled: boolean;
+
+      /**
+       * Effective interval in seconds used when a connection is created without an
+       * explicit health-check interval.
+       */
+      health_check_interval_default_seconds: number;
+
+      /**
+       * Maximum accepted managed auth health-check interval in seconds.
+       */
+      health_check_interval_max_seconds: number;
+
+      /**
+       * Minimum accepted managed auth health-check interval in seconds.
+       */
+      health_check_interval_min_seconds: number;
+
+      /**
+       * Maximum active managed auth connections in the organization. Null means
+       * unlimited.
+       */
+      max_connections: number | null;
+    }
+
+    export interface ManagedProxies {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface Profiles {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+
+    export interface ProxyBypassHosts {
+      /**
+       * Whether the organization is entitled to use this feature.
+       */
+      enabled: boolean;
+    }
+  }
+
+  export interface Limits {
+    /**
+     * Effective org-level default concurrent invocation ceiling for apps without an
+     * app-specific override. App-specific overrides are not represented here.
+     */
+    default_max_concurrent_invocations_per_app: number;
+
+    /**
+     * Effective organization-wide ceiling shared by on-demand browsers and browser
+     * pool reservations.
+     */
+    max_concurrent_browsers: number;
+
+    /**
+     * Effective organization-wide concurrent app invocation ceiling.
+     */
+    max_concurrent_invocations: number;
+  }
+
+  export interface Plan {
+    /**
+     * The organization's contractual plan identifier. Use the resolved feature and
+     * limit values, not this field, for access decisions.
+     */
+    id: 'FREE' | 'HOBBYIST' | 'START_UP' | 'ENTERPRISE';
+
+    /**
+     * The plan used to resolve plan-based access. Active trials resolve to START_UP
+     * regardless of the contractual plan.
+     */
+    effective_id: 'FREE' | 'HOBBYIST' | 'START_UP' | 'ENTERPRISE';
+
+    /**
+     * Whether the organization is currently within its trial period.
+     */
+    is_trialing: boolean;
+
+    /**
+     * Current billing status of the contractual plan, or null when no billing status
+     * is recorded. Status-sensitive feature values already account for it.
+     */
+    status: 'NEEDS_PAYMENT_METHOD' | 'ACTIVE' | 'CANCELED' | 'UNPAID' | null;
+
+    /**
+     * Configured trial end timestamp, or null when the organization has no trial. A
+     * past timestamp may be returned when is_trialing is false.
+     */
+    trial_ends_at: string | null;
+  }
+}
+
+export declare namespace Entitlements {
+  export { type OrgEntitlements as OrgEntitlements };
+}

package/src/resources/organization/index.ts

@@ -1,4 +1,5 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
+export { Entitlements, type OrgEntitlements } from './entitlements';
 export { Limits, type OrgLimits, type UpdateOrgLimitsRequest, type LimitUpdateParams } from './limits';
 export { Organization } from './organization';

package/src/resources/organization/organization.ts

@@ -1,16 +1,22 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 import { APIResource } from '../../core/resource';
+import * as EntitlementsAPI from './entitlements';
+import { Entitlements, OrgEntitlements } from './entitlements';
 import * as LimitsAPI from './limits';
 import { LimitUpdateParams, Limits, OrgLimits, UpdateOrgLimitsRequest } from './limits';
 
 export class Organization extends APIResource {
+  entitlements: EntitlementsAPI.Entitlements = new EntitlementsAPI.Entitlements(this._client);
   limits: LimitsAPI.Limits = new LimitsAPI.Limits(this._client);
 }
 
+Organization.Entitlements = Entitlements;
 Organization.Limits = Limits;
 
 export declare namespace Organization {
+  export { Entitlements as Entitlements, type OrgEntitlements as OrgEntitlements };
+
   export {
     Limits as Limits,
     type OrgLimits as OrgLimits,

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.91.0'; // x-release-please-version
+export const VERSION = '0.93.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.91.0";
+export declare const VERSION = "0.93.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.91.0";
+export declare const VERSION = "0.93.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.91.0'; // x-release-please-version
+exports.VERSION = '0.93.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.91.0'; // x-release-please-version
+export const VERSION = '0.93.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map