kernel 0.107.0__tar.gz → 0.109.0__tar.gz

kernel-0.109.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.109.0"
+}

{kernel-0.107.0 → kernel-0.109.0}/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.109.0](https://github.com/kernel/kernel-python-sdk/compare/v0.108.0...v0.109.0) (2026-09-17)
+
+
+### Features
+
+* Accept opaque AgentCard vaulted card IDs ([569a604](https://github.com/kernel/kernel-python-sdk/commit/569a604ad58c278c83bda5068c8a6080334d085f))
+* Expose organization-wide concurrent browser capacity ([8b22180](https://github.com/kernel/kernel-python-sdk/commit/8b22180766c592d1480e26fc781ffd5e1b623051))
+* Preserve credential field order ([1a408c4](https://github.com/kernel/kernel-python-sdk/commit/1a408c41c0fd043ff69187f7d62bc721f9e5f867))
+
+## [0.108.0](https://github.com/kernel/kernel-python-sdk/compare/v0.107.0...v0.108.0) (2026-09-17)
+
+
+### Features
+
+* feat: add config registry analysis waiter ([e38c887](https://github.com/kernel/kernel-python-sdk/commit/e38c8878f9f80f5d28fce9f92df6f0a18a48e2bb))
+
 ## [0.107.0](https://github.com/kernel/kernel-python-sdk/compare/v0.106.0...v0.107.0) (2026-09-16)
 
 

{kernel-0.107.0 → kernel-0.109.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.107.0
+Version: 0.109.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.107.0 → kernel-0.109.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.107.0"
+version = "0.109.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.107.0"  # x-release-please-version
+__version__ = "0.109.0"  # x-release-please-version

kernel-0.109.0/src/kernel/lib/config_registry_wait.py

@@ -0,0 +1,63 @@
+from __future__ import annotations
+
+import math
+import time
+import random
+from datetime import datetime
+
+from .._types import Omit, Headers
+from .._exceptions import KernelError
+from ..types.config_registry_response import ConfigRegistryResponse
+
+DEFAULT_CONFIG_REGISTRY_POLL_INTERVAL = 5.0
+_TERMINAL_STATUSES = frozenset({"completed", "failed", "canceled", "expired"})
+
+
+def validate_wait_options(poll_interval: float, max_wait_seconds: float | None) -> None:
+    if not math.isfinite(poll_interval) or poll_interval <= 0:
+        raise ValueError("Expected a finite, positive value for `poll_interval`")
+    if max_wait_seconds is not None and (not math.isfinite(max_wait_seconds) or max_wait_seconds < 0):
+        raise ValueError("Expected a finite, non-negative value for `max_wait_seconds`")
+
+
+def poll_headers(extra_headers: Headers | None) -> Headers:
+    headers: dict[str, str | Omit] = dict(extra_headers or {})
+    headers["X-Stainless-Poll-Helper"] = "true"
+    return headers
+
+
+def poll_delay(poll_interval: float) -> float:
+    return poll_interval * random.uniform(0.9, 1.1)
+
+
+def wait_timeout_error(id: str, polls: int, last_status: str | None, started_at: float) -> TimeoutError:
+    elapsed = time.monotonic() - started_at
+    return TimeoutError(
+        f"Timed out waiting for config registry analysis {id!r} after {elapsed:.1f}s "
+        f"and {polls} polls; last status was {last_status!r}"
+    )
+
+
+def analysis_finished(response: ConfigRegistryResponse, requested_id: str) -> tuple[bool, str]:
+    analysis = response.analysis
+    if analysis is None:
+        raise KernelError(f"Config registry response for {requested_id!r} is missing an analysis")
+
+    analysis_id = getattr(analysis, "id", None)
+    if not isinstance(analysis_id, str) or not analysis_id:
+        raise KernelError(f"Config registry response for {requested_id!r} has no valid analysis ID")
+    if analysis_id != requested_id:
+        raise KernelError(f"Config registry response for {requested_id!r} returned analysis {analysis_id!r}")
+
+    status = getattr(analysis, "status", None)
+    if not isinstance(status, str) or not status:
+        raise KernelError(f"Config registry analysis {requested_id!r} has no valid status")
+
+    if "finished_at" not in analysis.model_fields_set:
+        raise KernelError(f"Config registry analysis {requested_id!r} is missing `finished_at`")
+
+    finished_at = getattr(analysis, "finished_at", None)
+    if finished_at is not None and not isinstance(finished_at, datetime):
+        raise KernelError(f"Config registry analysis {requested_id!r} has an invalid `finished_at`")
+
+    return finished_at is not None or status in _TERMINAL_STATUSES, status

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/resources/config_registry/analyses.py

@@ -2,6 +2,8 @@
 
 from __future__ import annotations
 
+import time
+
 import httpx
 
 from ..._types import Body, Omit, Query, Headers, NotGiven, omit, not_given
@@ -18,6 +20,14 @@ from ...pagination import SyncOffsetPagination, AsyncOffsetPagination
 from ..._base_client import AsyncPaginator, make_request_options
 from ...types.config_registry import analysis_list_params
 from ...types.analysis_summary import AnalysisSummary
+from ...lib.config_registry_wait import (
+    DEFAULT_CONFIG_REGISTRY_POLL_INTERVAL,
+    poll_delay,
+    poll_headers,
+    analysis_finished,
+    wait_timeout_error,
+    validate_wait_options,
+)
 from ...types.config_registry_response import ConfigRegistryResponse
 
 __all__ = ["AnalysesResource", "AsyncAnalysesResource"]
@@ -79,6 +89,54 @@ class AnalysesResource(SyncAPIResource):
             cast_to=ConfigRegistryResponse,
         )
 
+    def wait_for_result(
+        self,
+        id: str,
+        *,
+        poll_interval: float = DEFAULT_CONFIG_REGISTRY_POLL_INTERVAL,
+        max_wait_seconds: float | None = None,
+        extra_headers: Headers | None = None,
+        extra_query: Query | None = None,
+        extra_body: Body | None = None,
+        timeout: float | httpx.Timeout | None | NotGiven = not_given,
+    ) -> ConfigRegistryResponse:
+        """Wait for an analysis to finish and return its complete result.
+
+        The first retrieval happens immediately. ``max_wait_seconds`` is a soft
+        polling deadline: an in-flight request and its normal retries may finish
+        after it. Timing out does not cancel the remote analysis.
+        """
+        validate_wait_options(poll_interval, max_wait_seconds)
+        started_at = time.monotonic()
+        deadline = started_at + max_wait_seconds if max_wait_seconds is not None else None
+        headers = poll_headers(extra_headers)
+        polls = 0
+        last_status: str | None = None
+
+        while True:
+            if polls > 0 and deadline is not None and time.monotonic() >= deadline:
+                raise wait_timeout_error(id, polls, last_status, started_at)
+
+            response = self.retrieve(
+                id,
+                extra_headers=headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+            )
+            polls += 1
+            finished, last_status = analysis_finished(response, id)
+            if finished:
+                return response
+
+            delay = poll_delay(poll_interval)
+            if deadline is not None:
+                remaining = deadline - time.monotonic()
+                if remaining <= 0:
+                    raise wait_timeout_error(id, polls, last_status, started_at)
+                delay = min(delay, remaining)
+            self._sleep(delay)
+
     def list(
         self,
         *,
@@ -220,6 +278,55 @@ class AsyncAnalysesResource(AsyncAPIResource):
             cast_to=ConfigRegistryResponse,
         )
 
+    async def wait_for_result(
+        self,
+        id: str,
+        *,
+        poll_interval: float = DEFAULT_CONFIG_REGISTRY_POLL_INTERVAL,
+        max_wait_seconds: float | None = None,
+        extra_headers: Headers | None = None,
+        extra_query: Query | None = None,
+        extra_body: Body | None = None,
+        timeout: float | httpx.Timeout | None | NotGiven = not_given,
+    ) -> ConfigRegistryResponse:
+        """Wait for an analysis to finish and return its complete result.
+
+        The first retrieval happens immediately. ``max_wait_seconds`` is a soft
+        polling deadline: an in-flight request and its normal retries may finish
+        after it. Timing out does not cancel the remote analysis. Cancelling the
+        calling task stops the wait without cancelling the remote analysis.
+        """
+        validate_wait_options(poll_interval, max_wait_seconds)
+        started_at = time.monotonic()
+        deadline = started_at + max_wait_seconds if max_wait_seconds is not None else None
+        headers = poll_headers(extra_headers)
+        polls = 0
+        last_status: str | None = None
+
+        while True:
+            if polls > 0 and deadline is not None and time.monotonic() >= deadline:
+                raise wait_timeout_error(id, polls, last_status, started_at)
+
+            response = await self.retrieve(
+                id,
+                extra_headers=headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+            )
+            polls += 1
+            finished, last_status = analysis_finished(response, id)
+            if finished:
+                return response
+
+            delay = poll_delay(poll_interval)
+            if deadline is not None:
+                remaining = deadline - time.monotonic()
+                if remaining <= 0:
+                    raise wait_timeout_error(id, polls, last_status, started_at)
+                delay = min(delay, remaining)
+            await self._sleep(delay)
+
     def list(
         self,
         *,

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/resources/organization/limits.py

@@ -55,7 +55,10 @@ class LimitsResource(SyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> OrgLimits:
-        """Get the organization's effective limits and managed auth and vault usage."""
+        """
+        Get the organization's effective limits and current concurrency, managed auth,
+        and vault usage.
+        """
         return self._get(
             "/org/limits",
             options=make_request_options(
@@ -138,7 +141,10 @@ class AsyncLimitsResource(AsyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> OrgLimits:
-        """Get the organization's effective limits and managed auth and vault usage."""
+        """
+        Get the organization's effective limits and current concurrency, managed auth,
+        and vault usage.
+        """
         return await self._get(
             "/org/limits",
             options=make_request_options(

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/resources/vaults/items.py

@@ -757,7 +757,9 @@ class ItemsResource(SyncAPIResource):
         Args:
           spec: Credential fields are for login and other non-payment credentials. Do not store,
               collect, or fill credit card data in credential items. Use wallet and card item
-              types for credit cards and payment checkout instead.
+              types for credit cards and payment checkout instead. Field order is preserved in
+              the user-facing collection form, so list fields in the same top-to-bottom order
+              as the website.
 
           extra_headers: Send extra headers
 
@@ -1528,7 +1530,9 @@ class AsyncItemsResource(AsyncAPIResource):
         Args:
           spec: Credential fields are for login and other non-payment credentials. Do not store,
               collect, or fill credit card data in credential items. Use wallet and card item
-              types for credit cards and payment checkout instead.
+              types for credit cards and payment checkout instead. Field order is preserved in
+              the user-facing collection form, so list fields in the same top-to-bottom order
+              as the website.
 
           extra_headers: Send extra headers
 

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/organization/org_limits.py

@@ -15,6 +15,19 @@ class OrgLimits(BaseModel):
     remaining capacity before a create is rejected with 403 insufficient_plan.
     """
 
+    concurrent_sessions_available: Optional[int] = None
+    """Number of concurrent browser slots currently available to the organization.
+
+    This is the effective concurrency limit minus active on-demand sessions and
+    browser pool reservations, floored at zero. Null when usage cannot be read.
+    """
+
+    concurrent_sessions_used: Optional[int] = None
+    """
+    Current organization-wide concurrent browser usage, including active on-demand
+    sessions and browser pool reservations. Null when usage cannot be read.
+    """
+
     max_auth_connections: Optional[int] = None
     """Maximum managed auth connections the organization's plan allows.
 

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/card_vault_item_spec.py

@@ -113,9 +113,10 @@ class AgentCardCardVaultItemSpec(BaseModel):
     """Wallet item key used to authorize checkouts."""
 
     card_id: Optional[str] = None
-    """AgentCard vaulted card to pay with.
+    """Opaque card ID returned by AgentCard for a card in the connected wallet.
 
-    Omitted, the cardholder picks on the approval screen.
+    Pass it through unchanged without assuming a prefix or format. Omitted, the
+    cardholder picks on the approval screen.
     """
 
 

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/card_vault_item_spec_param.py

@@ -112,9 +112,10 @@ class AgentCardCardVaultItemSpec(TypedDict, total=False):
     """Wallet item key used to authorize checkouts."""
 
     card_id: str
-    """AgentCard vaulted card to pay with.
+    """Opaque card ID returned by AgentCard for a card in the connected wallet.
 
-    Omitted, the cardholder picks on the approval screen.
+    Pass it through unchanged without assuming a prefix or format. Omitted, the
+    cardholder picks on the approval screen.
     """
 
 

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/credential_vault_field_definition.py

@@ -7,6 +7,9 @@ __all__ = ["CredentialVaultFieldDefinition"]
 
 
 class CredentialVaultFieldDefinition(BaseModel):
+    name: str
+    """Stable field name used to key values, updates, and browser fills."""
+
     required: bool
     """Whether a nonempty value is required for readiness and form submission."""
 

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/credential_vault_field_input_param.py

@@ -10,6 +10,9 @@ __all__ = ["CredentialVaultFieldInputParam"]
 
 
 class CredentialVaultFieldInputParam(TypedDict, total=False):
+    name: Required[str]
+    """Unique stable field name used to key values, updates, and browser fills."""
+
     type: Required[CredentialVaultFieldType]
     """
     Text, email, and password have form inputs; totp does not and is omitted from

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/credential_vault_item_request_param.py

@@ -30,7 +30,9 @@ class CredentialVaultItemRequestParam(TypedDict, total=False):
     """Credential fields are for login and other non-payment credentials.
 
     Do not store, collect, or fill credit card data in credential items. Use wallet
-    and card item types for credit cards and payment checkout instead.
+    and card item types for credit cards and payment checkout instead. Field order
+    is preserved in the user-facing collection form, so list fields in the same
+    top-to-bottom order as the website.
     """
 
     type: Required[Literal["credential"]]

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/credential_vault_item_spec.py

@@ -1,6 +1,6 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
-from typing import Dict, Optional
+from typing import List, Optional
 
 from ..._models import BaseModel
 from .credential_vault_field_definition import CredentialVaultFieldDefinition
@@ -9,7 +9,10 @@ __all__ = ["CredentialVaultItemSpec"]
 
 
 class CredentialVaultItemSpec(BaseModel):
-    fields: Dict[str, CredentialVaultFieldDefinition]
+    fields: List[CredentialVaultFieldDefinition]
+    """
+    Ordered field definitions rendered in this order by credential collection forms.
+    """
 
     description: Optional[str] = None
     """

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/credential_vault_item_spec_input_param.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from typing import Dict
+from typing import Iterable
 from typing_extensions import Required, TypedDict
 
 from .credential_vault_field_input_param import CredentialVaultFieldInputParam
@@ -13,10 +13,15 @@ __all__ = ["CredentialVaultItemSpecInputParam"]
 class CredentialVaultItemSpecInputParam(TypedDict, total=False):
     """Credential fields are for login and other non-payment credentials.
 
-    Do not store, collect, or fill credit card data in credential items. Use wallet and card item types for credit cards and payment checkout instead.
+    Do not store, collect, or fill credit card data in credential items. Use wallet and card item types for credit cards and payment checkout instead. Field order is preserved in the user-facing collection form, so list fields in the same top-to-bottom order as the website.
     """
 
-    fields: Required[Dict[str, CredentialVaultFieldInputParam]]
+    fields: Required[Iterable[CredentialVaultFieldInputParam]]
+    """Ordered field definitions.
+
+    Use the website's top-to-bottom field order; the collection form renders this
+    order unchanged.
+    """
 
     description: str
     """

{kernel-0.107.0 → kernel-0.109.0}/src/kernel/types/vaults/item_upsert_params.py

@@ -194,7 +194,9 @@ class CredentialVaultItemRequest(TypedDict, total=False):
     """Credential fields are for login and other non-payment credentials.
 
     Do not store, collect, or fill credit card data in credential items. Use wallet
-    and card item types for credit cards and payment checkout instead.
+    and card item types for credit cards and payment checkout instead. Field order
+    is preserved in the user-facing collection form, so list fields in the same
+    top-to-bottom order as the website.
     """
 
     type: Required[Literal["credential"]]

{kernel-0.107.0 → kernel-0.109.0}/tests/api_resources/vaults/test_items.py

@@ -1144,7 +1144,14 @@ class TestItems:
         item = client.vaults.items.upsert(
             key="x",
             id_or_name="id_or_name",
-            spec={"fields": {"foo": {"type": "text"}}},
+            spec={
+                "fields": [
+                    {
+                        "name": "name",
+                        "type": "text",
+                    }
+                ]
+            },
             type="credential",
         )
         assert_matches_type(VaultItem, item, path=["response"])
@@ -1156,14 +1163,15 @@ class TestItems:
             key="x",
             id_or_name="id_or_name",
             spec={
-                "fields": {
-                    "foo": {
+                "fields": [
+                    {
+                        "name": "name",
                         "type": "text",
                         "required": True,
                         "sensitive": True,
                         "value": "x",
                     }
-                },
+                ],
                 "description": "description",
             },
             type="credential",
@@ -1176,7 +1184,14 @@ class TestItems:
         response = client.vaults.items.with_raw_response.upsert(
             key="x",
             id_or_name="id_or_name",
-            spec={"fields": {"foo": {"type": "text"}}},
+            spec={
+                "fields": [
+                    {
+                        "name": "name",
+                        "type": "text",
+                    }
+                ]
+            },
             type="credential",
         )
 
@@ -1191,7 +1206,14 @@ class TestItems:
         with client.vaults.items.with_streaming_response.upsert(
             key="x",
             id_or_name="id_or_name",
-            spec={"fields": {"foo": {"type": "text"}}},
+            spec={
+                "fields": [
+                    {
+                        "name": "name",
+                        "type": "text",
+                    }
+                ]
+            },
             type="credential",
         ) as response:
             assert not response.is_closed
@@ -1209,7 +1231,14 @@ class TestItems:
             client.vaults.items.with_raw_response.upsert(
                 key="x",
                 id_or_name="",
-                spec={"fields": {"foo": {"type": "text"}}},
+                spec={
+                    "fields": [
+                        {
+                            "name": "name",
+                            "type": "text",
+                        }
+                    ]
+                },
                 type="credential",
             )
 
@@ -1217,7 +1246,14 @@ class TestItems:
             client.vaults.items.with_raw_response.upsert(
                 key="",
                 id_or_name="id_or_name",
-                spec={"fields": {"foo": {"type": "text"}}},
+                spec={
+                    "fields": [
+                        {
+                            "name": "name",
+                            "type": "text",
+                        }
+                    ]
+                },
                 type="credential",
             )
 
@@ -2349,7 +2385,14 @@ class TestAsyncItems:
         item = await async_client.vaults.items.upsert(
             key="x",
             id_or_name="id_or_name",
-            spec={"fields": {"foo": {"type": "text"}}},
+            spec={
+                "fields": [
+                    {
+                        "name": "name",
+                        "type": "text",
+                    }
+                ]
+            },
             type="credential",
         )
         assert_matches_type(VaultItem, item, path=["response"])
@@ -2361,14 +2404,15 @@ class TestAsyncItems:
             key="x",
             id_or_name="id_or_name",
             spec={
-                "fields": {
-                    "foo": {
+                "fields": [
+                    {
+                        "name": "name",
                         "type": "text",
                         "required": True,
                         "sensitive": True,
                         "value": "x",
                     }
-                },
+                ],
                 "description": "description",
             },
             type="credential",
@@ -2381,7 +2425,14 @@ class TestAsyncItems:
         response = await async_client.vaults.items.with_raw_response.upsert(
             key="x",
             id_or_name="id_or_name",
-            spec={"fields": {"foo": {"type": "text"}}},
+            spec={
+                "fields": [
+                    {
+                        "name": "name",
+                        "type": "text",
+                    }
+                ]
+            },
             type="credential",
         )
 
@@ -2396,7 +2447,14 @@ class TestAsyncItems:
         async with async_client.vaults.items.with_streaming_response.upsert(
             key="x",
             id_or_name="id_or_name",
-            spec={"fields": {"foo": {"type": "text"}}},
+            spec={
+                "fields": [
+                    {
+                        "name": "name",
+                        "type": "text",
+                    }
+                ]
+            },
             type="credential",
         ) as response:
             assert not response.is_closed
@@ -2414,7 +2472,14 @@ class TestAsyncItems:
             await async_client.vaults.items.with_raw_response.upsert(
                 key="x",
                 id_or_name="",
-                spec={"fields": {"foo": {"type": "text"}}},
+                spec={
+                    "fields": [
+                        {
+                            "name": "name",
+                            "type": "text",
+                        }
+                    ]
+                },
                 type="credential",
             )
 
@@ -2422,6 +2487,13 @@ class TestAsyncItems:
             await async_client.vaults.items.with_raw_response.upsert(
                 key="",
                 id_or_name="id_or_name",
-                spec={"fields": {"foo": {"type": "text"}}},
+                spec={
+                    "fields": [
+                        {
+                            "name": "name",
+                            "type": "text",
+                        }
+                    ]
+                },
                 type="credential",
             )