@onkernel/sdk 0.96.0 → 0.98.0

package/src/resources/browsers/replays.ts

@@ -15,11 +15,13 @@ export class Replays extends APIResource {
    *
    * @example
    * ```ts
-   * const replays = await client.browsers.replays.list('id');
+   * const replays = await client.browsers.replays.list(
+   *   'htzv5orfit78e1m2biiifpbv',
+   * );
    * ```
    */
-  list(id: string, options?: RequestOptions): APIPromise<ReplayListResponse> {
-    return this._client.get(path`/browsers/${id}/replays`, options);
+  list(idOrName: string, options?: RequestOptions): APIPromise<ReplayListResponse> {
+    return this._client.get(path`/browsers/${idOrName}/replays`, options);
   }
 
   /**
@@ -29,7 +31,7 @@ export class Replays extends APIResource {
    * ```ts
    * const response = await client.browsers.replays.download(
    *   'replay_id',
-   *   { id: 'id' },
+   *   { id_or_name: 'htzv5orfit78e1m2biiifpbv' },
    * );
    *
    * const content = await response.blob();
@@ -37,8 +39,8 @@ export class Replays extends APIResource {
    * ```
    */
   download(replayID: string, params: ReplayDownloadParams, options?: RequestOptions): APIPromise<Response> {
-    const { id } = params;
-    return this._client.get(path`/browsers/${id}/replays/${replayID}`, {
+    const { id_or_name } = params;
+    return this._client.get(path`/browsers/${id_or_name}/replays/${replayID}`, {
       ...options,
       headers: buildHeaders([{ Accept: 'video/mp4' }, options?.headers]),
       __binaryResponse: true,
@@ -50,15 +52,17 @@ export class Replays extends APIResource {
    *
    * @example
    * ```ts
-   * const response = await client.browsers.replays.start('id');
+   * const response = await client.browsers.replays.start(
+   *   'htzv5orfit78e1m2biiifpbv',
+   * );
    * ```
    */
   start(
-    id: string,
+    idOrName: string,
     body: ReplayStartParams | null | undefined = {},
     options?: RequestOptions,
   ): APIPromise<ReplayStartResponse> {
-    return this._client.post(path`/browsers/${id}/replays`, { body, ...options });
+    return this._client.post(path`/browsers/${idOrName}/replays`, { body, ...options });
   }
 
   /**
@@ -67,13 +71,13 @@ export class Replays extends APIResource {
    * @example
    * ```ts
    * await client.browsers.replays.stop('replay_id', {
-   *   id: 'id',
+   *   id_or_name: 'htzv5orfit78e1m2biiifpbv',
    * });
    * ```
    */
   stop(replayID: string, params: ReplayStopParams, options?: RequestOptions): APIPromise<void> {
-    const { id } = params;
-    return this._client.post(path`/browsers/${id}/replays/${replayID}/stop`, {
+    const { id_or_name } = params;
+    return this._client.post(path`/browsers/${id_or_name}/replays/${replayID}/stop`, {
       ...options,
       headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
     });
@@ -136,9 +140,9 @@ export interface ReplayStartResponse {
 
 export interface ReplayDownloadParams {
   /**
-   * Browser session ID
+   * Browser session ID or name
    */
-  id: string;
+  id_or_name: string;
 }
 
 export interface ReplayStartParams {
@@ -162,9 +166,9 @@ export interface ReplayStartParams {
 
 export interface ReplayStopParams {
   /**
-   * Browser session ID
+   * Browser session ID or name
    */
-  id: string;
+  id_or_name: string;
 }
 
 export declare namespace Replays {

package/src/resources/browsers/telemetry.ts

@@ -23,19 +23,19 @@ export class Telemetry extends APIResource {
    * ```ts
    * // Automatically fetches more pages as needed.
    * for await (const telemetryEventsResponse of client.browsers.telemetry.events(
-   *   'id',
+   *   'htzv5orfit78e1m2biiifpbv',
    * )) {
    *   // ...
    * }
    * ```
    */
   events(
-    id: string,
+    idOrName: string,
     query: TelemetryEventsParams | null | undefined = {},
     options?: RequestOptions,
   ): PagePromise<TelemetryEventsResponsesOffsetPagination, TelemetryEventsResponse> {
     return this._client.getAPIList(
-      path`/browsers/${id}/telemetry/events`,
+      path`/browsers/${idOrName}/telemetry/events`,
       OffsetPagination<TelemetryEventsResponse>,
       { query, ...options },
     );
@@ -55,17 +55,17 @@ export class Telemetry extends APIResource {
    * @example
    * ```ts
    * const response = await client.browsers.telemetry.stream(
-   *   'id',
+   *   'htzv5orfit78e1m2biiifpbv',
    * );
    * ```
    */
   stream(
-    id: string,
+    idOrName: string,
     params: TelemetryStreamParams | undefined = {},
     options?: RequestOptions,
   ): APIPromise<Stream<TelemetryStreamResponse>> {
     const { 'Last-Event-ID': lastEventID, ...query } = params ?? {};
-    return this._client.get(path`/browsers/${id}/telemetry/stream`, {
+    return this._client.get(path`/browsers/${idOrName}/telemetry/stream`, {
       query,
       ...options,
       headers: buildHeaders([
@@ -192,6 +192,99 @@ export namespace BrowserCallStack {
   }
 }
 
+/**
+ * A visible captcha challenge reached a terminal outcome.
+ */
+export interface BrowserCaptchaChallengeResultEvent {
+  category: 'captcha';
+
+  /**
+   * Per-challenge payload. This event is emitted once per challenge and determines
+   * its overall outcome; captcha_solve_started and captcha_solve_result describe
+   * individual tasks and may occur multiple times within the challenge.
+   */
+  data: BrowserCaptchaChallengeResultEvent.Data;
+
+  /**
+   * Provenance metadata identifying which producer emitted the event.
+   */
+  source: BrowserEventSource;
+
+  /**
+   * Event timestamp in Unix microseconds.
+   */
+  ts: number;
+
+  type: 'captcha_challenge_result';
+
+  /**
+   * True if the data field was truncated due to size limits.
+   */
+  truncated?: boolean;
+}
+
+export namespace BrowserCaptchaChallengeResultEvent {
+  /**
+   * Per-challenge payload. This event is emitted once per challenge and determines
+   * its overall outcome; captcha_solve_started and captcha_solve_result describe
+   * individual tasks and may occur multiple times within the challenge.
+   */
+  export interface Data {
+    /**
+     * Captcha kind. Enterprise reCAPTCHA variants are grouped into their version
+     * bucket (recaptcha_v2 or recaptcha_v3), press-and-hold challenges use
+     * press_and_hold, and unlisted kinds use other.
+     */
+    captcha_type:
+      | 'hcaptcha'
+      | 'recaptcha_v2'
+      | 'recaptcha_v3'
+      | 'turnstile'
+      | 'geetest'
+      | 'press_and_hold'
+      | 'other';
+
+    /**
+     * Opaque identifier shared by events for one visible challenge. An image-grid
+     * captcha may create multiple task_id values for one challenge_id. The same value
+     * may continue across a page reload when the challenge episode continues. It does
+     * not indicate task ordering or challenge completion.
+     */
+    challenge_id: string;
+
+    /**
+     * Wall-clock duration from the challenge appearing to its terminal outcome,
+     * covering every solver attempt in between.
+     */
+    duration_ms: number;
+
+    /**
+     * Terminal outcome of the visible challenge. solved: the page observed the
+     * challenge clear after a solver attempt. failure: a terminal solver failure
+     * occurred, or all attempts ended while the challenge remained. timeout: the
+     * challenge-level wait budget expired while the challenge remained. abandoned:
+     * observation ended without an attributable terminal challenge outcome. This
+     * includes a dismissed widget or page unload without a solved signal or terminal
+     * solver outcome, and a token appearing while multiple same-provider challenges
+     * are open, because the producer cannot attribute that token to this visible
+     * challenge. A captcha_solve_result with the same challenge_id may therefore
+     * report success while the challenge result reports abandoned. A solved challenge
+     * does not prove the site accepted the token or that the guarded action succeeded.
+     */
+    status: 'solved' | 'failure' | 'timeout' | 'abandoned';
+
+    /**
+     * Host of the page where the challenge appeared.
+     */
+    website_host?: string;
+
+    /**
+     * Path of the page where the challenge appeared. Query string excluded.
+     */
+    website_path?: string;
+  }
+}
+
 /**
  * A captcha solve attempt reached a terminal outcome.
  */
@@ -221,13 +314,23 @@ export interface BrowserCaptchaSolveResultEvent {
 export namespace BrowserCaptchaSolveResultEvent {
   export interface Data {
     /**
-     * Captcha vendor family. Provider-specific task names are normalized into this
-     * set; anything not covered is reported as other.
-     */
-    captcha_type: 'hcaptcha' | 'recaptcha_v2' | 'recaptcha_v3' | 'turnstile' | 'geetest' | 'other';
+     * Captcha kind. Enterprise reCAPTCHA variants are grouped into their version
+     * bucket (recaptcha_v2 or recaptcha_v3), press-and-hold challenges use
+     * press_and_hold, and unlisted kinds use other.
+     */
+    captcha_type:
+      | 'hcaptcha'
+      | 'recaptcha_v2'
+      | 'recaptcha_v3'
+      | 'turnstile'
+      | 'geetest'
+      | 'press_and_hold'
+      | 'other';
 
     /**
-     * Wall-clock duration from solve start to terminal outcome.
+     * Wall-clock duration from solve start to terminal outcome. Authoritative solve
+     * timing; do not derive it from the gap to a captcha_solve_started event, whose
+     * delivery and ordering are not guaranteed.
      */
     duration_ms: number;
 
@@ -239,6 +342,14 @@ export namespace BrowserCaptchaSolveResultEvent {
      */
     status: 'success' | 'failure' | 'timeout' | 'abandoned';
 
+    /**
+     * Opaque identifier shared by events for one visible challenge. An image-grid
+     * captcha may create multiple task_id values for one challenge_id. The same value
+     * may continue across a page reload when the challenge episode continues. It does
+     * not indicate task ordering or challenge completion.
+     */
+    challenge_id?: string;
+
     /**
      * Solver-specific error code on failure (e.g. ERROR_CAPTCHA_UNSOLVABLE). Absent on
      * success.
@@ -246,7 +357,7 @@ export namespace BrowserCaptchaSolveResultEvent {
     error_code?: string;
 
     /**
-     * Solver-assigned identifier. Opaque, useful for support cross-references.
+     * Opaque identifier shared with the matching captcha_solve_started.
      */
     task_id?: string;
 
@@ -262,6 +373,86 @@ export namespace BrowserCaptchaSolveResultEvent {
   }
 }
 
+/**
+ * A captcha solver accepted a task.
+ */
+export interface BrowserCaptchaSolveStartedEvent {
+  category: 'captcha';
+
+  /**
+   * Per-task payload. A visible challenge may create multiple tasks. When present,
+   * task_id correlates this event with a captcha_solve_result, while challenge_id
+   * groups tasks from the same challenge. Events may arrive out of order or be
+   * absent, so their arrival does not indicate current solve state.
+   */
+  data: BrowserCaptchaSolveStartedEvent.Data;
+
+  /**
+   * Provenance metadata identifying which producer emitted the event.
+   */
+  source: BrowserEventSource;
+
+  /**
+   * Event timestamp in Unix microseconds.
+   */
+  ts: number;
+
+  type: 'captcha_solve_started';
+
+  /**
+   * True if the data field was truncated due to size limits.
+   */
+  truncated?: boolean;
+}
+
+export namespace BrowserCaptchaSolveStartedEvent {
+  /**
+   * Per-task payload. A visible challenge may create multiple tasks. When present,
+   * task_id correlates this event with a captcha_solve_result, while challenge_id
+   * groups tasks from the same challenge. Events may arrive out of order or be
+   * absent, so their arrival does not indicate current solve state.
+   */
+  export interface Data {
+    /**
+     * Captcha kind. Enterprise reCAPTCHA variants are grouped into their version
+     * bucket (recaptcha_v2 or recaptcha_v3), press-and-hold challenges use
+     * press_and_hold, and unlisted kinds use other.
+     */
+    captcha_type:
+      | 'hcaptcha'
+      | 'recaptcha_v2'
+      | 'recaptcha_v3'
+      | 'turnstile'
+      | 'geetest'
+      | 'press_and_hold'
+      | 'other';
+
+    /**
+     * Opaque identifier shared by events for one visible challenge. An image-grid
+     * captcha may create multiple task_id values for one challenge_id. The same value
+     * may continue across a page reload when the challenge episode continues. It does
+     * not indicate task ordering or challenge completion.
+     */
+    challenge_id?: string;
+
+    /**
+     * Opaque identifier shared with the matching captcha_solve_result.
+     */
+    task_id?: string;
+
+    /**
+     * Host of the page where the captcha is being solved. May be empty for solver
+     * tasks that carry no page URL.
+     */
+    website_host?: string;
+
+    /**
+     * Path of the page where the captcha is being solved. Query string excluded.
+     */
+    website_path?: string;
+  }
+}
+
 /**
  * A browser-control command a client sent over the CDP WebSocket proxy: input
  * gestures, navigation, dialog handling, file selection and screenshots.
@@ -4346,7 +4537,7 @@ export namespace BrowserSystemOomKillEvent {
  */
 export interface BrowserTelemetryCategoriesConfig {
   /**
-   * Captcha solve attempt outcomes. On by default.
+   * Captcha solver tasks and visible challenge outcomes. On by default.
    */
   captcha?: BrowserTelemetryCategoryConfig;
 
@@ -4516,7 +4707,9 @@ export type BrowserTelemetryEvent =
   | BrowserCdpDisconnectEvent
   | BrowserLiveViewConnectEvent
   | BrowserLiveViewDisconnectEvent
+  | BrowserCaptchaSolveStartedEvent
   | BrowserCaptchaSolveResultEvent
+  | BrowserCaptchaChallengeResultEvent
   | BrowserSystemOomKillEvent
   | BrowserServiceCrashedEvent;
 
@@ -4660,7 +4853,9 @@ export declare namespace Telemetry {
   export {
     type BrowserAPICallEvent as BrowserAPICallEvent,
     type BrowserCallStack as BrowserCallStack,
+    type BrowserCaptchaChallengeResultEvent as BrowserCaptchaChallengeResultEvent,
     type BrowserCaptchaSolveResultEvent as BrowserCaptchaSolveResultEvent,
+    type BrowserCaptchaSolveStartedEvent as BrowserCaptchaSolveStartedEvent,
     type BrowserCdpCommandEvent as BrowserCdpCommandEvent,
     type BrowserCdpCommandMethod as BrowserCdpCommandMethod,
     type BrowserCdpConnectEvent as BrowserCdpConnectEvent,

package/src/resources/browsers/webmcp.ts

@@ -0,0 +1,196 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../core/resource';
+import { APIPromise } from '../../core/api-promise';
+import { RequestOptions } from '../../internal/request-options';
+import { path } from '../../internal/utils/path';
+
+/**
+ * Discover and invoke native page tools across the browser instance.
+ */
+export class Webmcp extends APIResource {
+  /**
+   * Invokes the exact live registration identified by tool_ref and waits
+   * synchronously for its result. Navigation during execution is allowed. If the tab
+   * or embedded frame disappears, or the request times out after invocation begins,
+   * the response reports outcome_unknown and the tool is not retried.
+   *
+   * @example
+   * ```ts
+   * const invocationResult =
+   *   await client.browsers.webmcp.invokeTool(
+   *     'htzv5orfit78e1m2biiifpbv',
+   *     {
+   *       input: { foo: 'bar' },
+   *       tool_ref: 'x',
+   *     },
+   *   );
+   * ```
+   */
+  invokeTool(
+    idOrName: string,
+    body: WebmcpInvokeToolParams,
+    options?: RequestOptions,
+  ): APIPromise<InvocationResult> {
+    return this._client.post(path`/browsers/${idOrName}/webmcp/invoke`, { body, ...options });
+  }
+
+  /**
+   * Returns a snapshot of native WebMCP tools available across every open tab and
+   * embedded frame in the browser. Each tool includes an opaque tool_ref for
+   * invoking that exact live registration. Tools disappear when their document
+   * closes or navigates away.
+   *
+   * @example
+   * ```ts
+   * const toolsResponse =
+   *   await client.browsers.webmcp.listTools(
+   *     'htzv5orfit78e1m2biiifpbv',
+   *   );
+   * ```
+   */
+  listTools(idOrName: string, options?: RequestOptions): APIPromise<ToolsResponse> {
+    return this._client.get(path`/browsers/${idOrName}/webmcp/tools`, options);
+  }
+}
+
+export interface InvocationFailure {
+  code: 'outcome_unknown';
+
+  message: string;
+
+  invocation_id?: string;
+}
+
+export interface InvocationResult {
+  invocation_id: string;
+
+  status: 'completed' | 'canceled' | 'error';
+
+  error_text?: string;
+
+  /**
+   * Untrusted page-provided output. Callers must treat it as potentially malicious
+   * input.
+   */
+  output?: unknown;
+}
+
+export interface InvokeRequest {
+  /**
+   * Tool input, limited to 1 MiB after JSON serialization.
+   */
+  input: { [key: string]: unknown };
+
+  tool_ref: string;
+
+  timeout_sec?: number;
+}
+
+export interface Tool {
+  description: string;
+
+  input_schema: { [key: string]: unknown };
+
+  name: string;
+
+  source: ToolSource;
+
+  /**
+   * Opaque reference for invoking this exact live registration. It becomes invalid
+   * when its document or browser process is replaced.
+   */
+  tool_ref: string;
+
+  /**
+   * Page-provided behavioral hints. These values are untrusted and are not enforced
+   * by Kernel.
+   */
+  annotations?: ToolAnnotations;
+}
+
+/**
+ * Page-provided behavioral hints. These values are untrusted and are not enforced
+ * by Kernel.
+ */
+export interface ToolAnnotations {
+  autosubmit: boolean;
+
+  consequential: boolean;
+
+  read_only: boolean;
+
+  untrusted_content: boolean;
+}
+
+export interface ToolFrame {
+  /**
+   * Monotonically increasing identifier for this embedded frame during the current
+   * browser process.
+   */
+  frame_id: number;
+
+  /**
+   * Current frame URL with the fragment omitted.
+   */
+  url: string;
+}
+
+export interface ToolSource {
+  /**
+   * Embedded frame that registered the tool, or null when the top-level page
+   * registered it.
+   */
+  frame: ToolFrame | null;
+
+  /**
+   * Current title of the top-level page.
+   */
+  page_title: string;
+
+  /**
+   * Current URL of the top-level page with the fragment omitted.
+   */
+  page_url: string;
+
+  /**
+   * Monotonically increasing identifier for the tab during the current browser
+   * process.
+   */
+  tab_id: number;
+
+  /**
+   * Monotonically increasing identifier for the browser window during the current
+   * browser process.
+   */
+  window_id: number;
+}
+
+export interface ToolsResponse {
+  tools: Array<Tool>;
+}
+
+export interface WebmcpInvokeToolParams {
+  /**
+   * Tool input, limited to 1 MiB after JSON serialization.
+   */
+  input: { [key: string]: unknown };
+
+  tool_ref: string;
+
+  timeout_sec?: number;
+}
+
+export declare namespace Webmcp {
+  export {
+    type InvocationFailure as InvocationFailure,
+    type InvocationResult as InvocationResult,
+    type InvokeRequest as InvokeRequest,
+    type Tool as Tool,
+    type ToolAnnotations as ToolAnnotations,
+    type ToolFrame as ToolFrame,
+    type ToolSource as ToolSource,
+    type ToolsResponse as ToolsResponse,
+    type WebmcpInvokeToolParams as WebmcpInvokeToolParams,
+  };
+}

package/src/resources/telemetry/destinations.ts

@@ -12,15 +12,19 @@ import { path } from '../../internal/utils/path';
  */
 export class Destinations extends APIResource {
   /**
-   * Create an OTLP export destination in the resolved project. Names must be unique
-   * within the project.
+   * Create an OTLP export destination in the authenticated organization. Names must
+   * be unique within the organization. Requires an organization-scoped credential or
+   * dashboard authentication; project-scoped credentials receive a 403.
    */
   create(body: DestinationCreateParams, options?: RequestOptions): APIPromise<OtlpDestination> {
     return this._client.post('/telemetry/destinations', { body, ...options });
   }
 
   /**
-   * Retrieve a single OTLP destination in the resolved project by its ID or name.
+   * Retrieve a customer-visible OTLP destination in the authenticated organization
+   * by its ID or name. Project-scoped credentials can retrieve these destinations
+   * for selection by workloads in their project. Non-dashboard reads return header
+   * values redacted.
    */
   retrieve(idOrName: string, options?: RequestOptions): APIPromise<OtlpDestination> {
     return this._client.get(path`/telemetry/destinations/${idOrName}`, options);
@@ -31,10 +35,11 @@ export class Destinations extends APIResource {
    * values without restarting, which makes this the way to rotate credentials
    * without interrupting export.
    *
-   * Names must be unique within the project. Renaming is refused with a 409 while a
-   * managed auth connection selects this destination by name, since that connection
-   * resolves the name on every login. Every other field, including `headers`, stays
-   * editable.
+   * Names must be unique within the organization. Renaming is refused with a 409
+   * while a managed auth connection selects this destination by name, since that
+   * connection resolves the name on every login. Every other field, including
+   * `headers`, stays editable. Requires an organization-scoped credential or
+   * dashboard authentication; project-scoped credentials receive a 403.
    */
   update(
     idOrName: string,
@@ -45,7 +50,10 @@ export class Destinations extends APIResource {
   }
 
   /**
-   * List OTLP export destinations in the resolved project.
+   * List customer-visible OTLP export destinations in the authenticated
+   * organization. Project-scoped credentials can list these destinations for
+   * selection by workloads in their project. Non-dashboard reads return header
+   * values redacted.
    */
   list(
     query: DestinationListParams | null | undefined = {},
@@ -63,6 +71,8 @@ export class Destinations extends APIResource {
    * end or delete them first. It is refused the same way while a managed auth
    * connection still selects it, because that connection re-resolves the destination
    * on every login, and while a managed auth login using it is still in progress.
+   * Requires an organization-scoped credential or dashboard authentication;
+   * project-scoped credentials receive a 403.
    */
   delete(idOrName: string, options?: RequestOptions): APIPromise<void> {
     return this._client.delete(path`/telemetry/destinations/${idOrName}`, {
@@ -91,13 +101,14 @@ export interface OtlpDestination {
 
   /**
    * Headers sent with each export request. Names are returned in canonical form
-   * (`Authorization`, not `authorization`). Values are returned redacted as empty
-   * strings, so the keys are visible but the credentials are not.
+   * (`Authorization`, not `authorization`). Non-dashboard reads return values
+   * redacted as empty strings, so the keys are visible but the credentials are not.
+   * Dashboard reads return the stored values.
    */
   headers: { [key: string]: string };
 
   /**
-   * Unique within the project. Usable in place of the ID when selecting a
+   * Unique within the organization. Usable in place of the ID when selecting a
    * destination, so it cannot be shaped like an ID.
    */
   name: string;
@@ -124,7 +135,7 @@ export interface DestinationCreateParams {
   endpoint: string;
 
   /**
-   * Unique within the project.
+   * Unique within the organization.
    */
   name: string;
 

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.96.0'; // x-release-please-version
+export const VERSION = '0.98.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.96.0";
+export declare const VERSION = "0.98.0";
 //# sourceMappingURL=version.d.mts.map