kernel 0.126.0__tar.gz → 0.127.0__tar.gz

kernel-0.127.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.127.0"
+}

{kernel-0.126.0 → kernel-0.127.0}/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.127.0](https://github.com/kernel/kernel-python-sdk/compare/v0.126.0...v0.127.0) (2026-10-16)
+
+
+### Features
+
+* Add atomic preconditions to pool network updates ([9869c91](https://github.com/kernel/kernel-python-sdk/commit/9869c911414a8be186a1a64682487fd38423fb92))
+* Add passkey credential fields and PATCH field add/remove ([84a69ad](https://github.com/kernel/kernel-python-sdk/commit/84a69ad74c46ddcdd87acd88a23dd5330adf555b))
+* Allow replacing vault cards whose provider outcome is unknown ([30f88e1](https://github.com/kernel/kernel-python-sdk/commit/30f88e18b045f3fedbe1bd79d3125db105dd725f))
+* chore(stlc): seal custom-code tracking files ([5a62113](https://github.com/kernel/kernel-python-sdk/commit/5a621135bad2661c79068027773ff32b4e14e0c9))
+* Classify text captchas as token tasks and Binance as a provider ([84f71b8](https://github.com/kernel/kernel-python-sdk/commit/84f71b89f84dea25464cbc22ed92786d73083419))
+* Deliver Kernel card details through fill ([eed3e7b](https://github.com/kernel/kernel-python-sdk/commit/eed3e7ba06c46d3cfa6048d9f02c3d8fff6046e6))
+* Raise Kernel card amount cap to $10,000 ([483f331](https://github.com/kernel/kernel-python-sdk/commit/483f3312824d07e5f315afe0ce5058d4fc4a6e99))
+* Remove Link expires_at, return 400 for missing credential values, and log fill failures ([766dd6e](https://github.com/kernel/kernel-python-sdk/commit/766dd6e961fd36f580540a535cad76e659ecafee))
+
 ## [0.126.0](https://github.com/kernel/kernel-python-sdk/compare/v0.125.0...v0.126.0) (2026-10-14)
 
 

{kernel-0.126.0 → kernel-0.127.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.126.0
+Version: 0.127.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.126.0 → kernel-0.127.0}/api.md

@@ -576,6 +576,7 @@ from kernel.types.vaults import (
     CredentialAccountVaultItemRequest,
     CredentialCollectionAction,
     CredentialVaultFieldDefinition,
+    CredentialVaultFieldDefinitionInput,
     CredentialVaultFieldInput,
     CredentialVaultFieldState,
     CredentialVaultFieldType,

{kernel-0.126.0 → kernel-0.127.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.126.0"
+version = "0.127.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.126.0"  # x-release-please-version
+__version__ = "0.127.0"  # x-release-please-version

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/resources/browser_pools.py

@@ -119,7 +119,8 @@ class BrowserPoolsResource(SyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view. Defaults to false.
 
-          memory: Memory requested for headful browsers in this pool.
+          memory: Memory for browsers in this pool. Headless: 1GiB (default), 2GiB, or 4GiB.
+              Headful: 8GiB (default) or 16GiB.
 
           name: Optional name for the browser pool. Must be unique within the project.
 
@@ -254,11 +255,12 @@ class BrowserPoolsResource(SyncAPIResource):
         *,
         chrome_policy: Dict[str, object] | Omit = omit,
         discard_all_idle: bool | Omit = omit,
+        expected_network: BrowserNetworkConfigParam | Omit = omit,
         extensions: Iterable[BrowserExtension] | Omit = omit,
         fill_rate_per_minute: int | Omit = omit,
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
-        memory: Literal["8GiB", "16GiB"] | Omit = omit,
+        memory: Literal["1GiB", "2GiB", "4GiB", "8GiB", "16GiB"] | Omit = omit,
         name: str | Omit = omit,
         network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
@@ -302,6 +304,13 @@ class BrowserPoolsResource(SyncAPIResource):
               configuration until it is discarded (by this flag on a later update, or by
               flushing the pool).
 
+          expected_network: Optional optimistic concurrency precondition. Send the network configuration
+              from the last pool response, or {} when it has no network configuration. The
+              entire update is rejected with 409 stale_network if the saved network differs,
+              checked atomically with the write. Omit for unconditional updates. Explicit
+              empty lists differ from omitted lists; route targets must match the saved
+              references (resolved IDs, not equivalent proxy names).
+
           extensions: If provided, replaces the extension list. Empty array clears all
               previously-selected extensions. Omit this field to leave extensions unchanged.
 
@@ -313,9 +322,9 @@ class BrowserPoolsResource(SyncAPIResource):
 
           kiosk_mode: If provided, replaces whether browsers launch in kiosk mode.
 
-          memory: Memory requested for newly-warmed headful browsers in this pool. Existing
-              browsers retain their original allocation. Use discard_all_idle to replace idle
-              browsers.
+          memory: Memory requested for newly-warmed browsers in this pool: 1GiB, 2GiB, or 4GiB for
+              headless, 8GiB or 16GiB for headful. Existing browsers retain their original
+              allocation. Use discard_all_idle to replace idle browsers.
 
           name: If provided, replaces the pool name. Empty string is a no-op; the pool name
               cannot be cleared or reset to empty once assigned.
@@ -397,6 +406,7 @@ class BrowserPoolsResource(SyncAPIResource):
                 {
                     "chrome_policy": chrome_policy,
                     "discard_all_idle": discard_all_idle,
+                    "expected_network": expected_network,
                     "extensions": extensions,
                     "fill_rate_per_minute": fill_rate_per_minute,
                     "headless": headless,
@@ -776,7 +786,8 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view. Defaults to false.
 
-          memory: Memory requested for headful browsers in this pool.
+          memory: Memory for browsers in this pool. Headless: 1GiB (default), 2GiB, or 4GiB.
+              Headful: 8GiB (default) or 16GiB.
 
           name: Optional name for the browser pool. Must be unique within the project.
 
@@ -911,11 +922,12 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         *,
         chrome_policy: Dict[str, object] | Omit = omit,
         discard_all_idle: bool | Omit = omit,
+        expected_network: BrowserNetworkConfigParam | Omit = omit,
         extensions: Iterable[BrowserExtension] | Omit = omit,
         fill_rate_per_minute: int | Omit = omit,
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
-        memory: Literal["8GiB", "16GiB"] | Omit = omit,
+        memory: Literal["1GiB", "2GiB", "4GiB", "8GiB", "16GiB"] | Omit = omit,
         name: str | Omit = omit,
         network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
@@ -959,6 +971,13 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
               configuration until it is discarded (by this flag on a later update, or by
               flushing the pool).
 
+          expected_network: Optional optimistic concurrency precondition. Send the network configuration
+              from the last pool response, or {} when it has no network configuration. The
+              entire update is rejected with 409 stale_network if the saved network differs,
+              checked atomically with the write. Omit for unconditional updates. Explicit
+              empty lists differ from omitted lists; route targets must match the saved
+              references (resolved IDs, not equivalent proxy names).
+
           extensions: If provided, replaces the extension list. Empty array clears all
               previously-selected extensions. Omit this field to leave extensions unchanged.
 
@@ -970,9 +989,9 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           kiosk_mode: If provided, replaces whether browsers launch in kiosk mode.
 
-          memory: Memory requested for newly-warmed headful browsers in this pool. Existing
-              browsers retain their original allocation. Use discard_all_idle to replace idle
-              browsers.
+          memory: Memory requested for newly-warmed browsers in this pool: 1GiB, 2GiB, or 4GiB for
+              headless, 8GiB or 16GiB for headful. Existing browsers retain their original
+              allocation. Use discard_all_idle to replace idle browsers.
 
           name: If provided, replaces the pool name. Empty string is a no-op; the pool name
               cannot be cleared or reset to empty once assigned.
@@ -1054,6 +1073,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                 {
                     "chrome_policy": chrome_policy,
                     "discard_all_idle": discard_all_idle,
+                    "expected_network": expected_network,
                     "extensions": extensions,
                     "fill_rate_per_minute": fill_rate_per_minute,
                     "headless": headless,

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/resources/browsers/browsers.py

@@ -239,7 +239,9 @@ class BrowsersResource(SyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view.
 
-          memory: Memory for a headful, non-GPU browser session. Defaults to 8GiB.
+          memory:
+              Memory for a non-GPU browser. Headless: 1GiB (default), 2GiB, or 4GiB. Headful:
+              8GiB (default) or 16GiB.
 
           name: Optional human-readable name for the browser session, used to find it later in
               the dashboard. Must be unique among active sessions within the project. Can be
@@ -954,7 +956,9 @@ class AsyncBrowsersResource(AsyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view.
 
-          memory: Memory for a headful, non-GPU browser session. Defaults to 8GiB.
+          memory:
+              Memory for a non-GPU browser. Headless: 1GiB (default), 2GiB, or 4GiB. Headful:
+              8GiB (default) or 16GiB.
 
           name: Optional human-readable name for the browser session, used to find it later in
               the dashboard. Must be unique among active sessions within the project. Can be

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/resources/vaults/items.py

@@ -154,10 +154,10 @@ class ItemsResource(SyncAPIResource):
         request, subject to atomic provider approval checks; omitted optional fields
         remain unchanged and explicit empty lists clear them. Wallet/provider binding
         and unsupported fields cannot change after authorization starts. An uncertain
-        update enters recovery_required and must not be retried. Checkout cards may be
-        edited between authorizations. A Link card authorized with browser_id and
-        page_url cannot be changed; delete it and create a new card with the updated
-        details.
+        update enters recovery_required; delete the card and create a new one rather
+        than retrying the update. Checkout cards may be edited between authorizations. A
+        Link card authorized with browser_id and page_url cannot be changed; delete it
+        and create a new card with the updated details.
 
         Args:
           spec: Live Link card request. Test-mode card creation is not supported. The spec can
@@ -205,10 +205,10 @@ class ItemsResource(SyncAPIResource):
         request, subject to atomic provider approval checks; omitted optional fields
         remain unchanged and explicit empty lists clear them. Wallet/provider binding
         and unsupported fields cannot change after authorization starts. An uncertain
-        update enters recovery_required and must not be retried. Checkout cards may be
-        edited between authorizations. A Link card authorized with browser_id and
-        page_url cannot be changed; delete it and create a new card with the updated
-        details.
+        update enters recovery_required; delete the card and create a new one rather
+        than retrying the update. Checkout cards may be edited between authorizations. A
+        Link card authorized with browser_id and page_url cannot be changed; delete it
+        and create a new card with the updated details.
 
         Args:
           version: Expected current item version from the latest read.
@@ -321,11 +321,12 @@ class ItemsResource(SyncAPIResource):
         Unresolved payment operations normally block deletion, including operations on
         child cards of a wallet. Deleting a connected Kernel wallet first blocks new
         payments on it, then removes its enrolled card. If that fails, the wallet is
-        kept and keeps refusing payments; retry the deletion. An AgentCard card in
-        recovery_required whose checkout create response returned no authorization ID
-        may be explicitly abandoned by deleting that card directly; deleting its wallet
-        or vault remains blocked. Deleting or recreating an item is not proof that a
-        payment did not occur. Deleting a managed auth credential item leaves the
+        kept and keeps refusing payments; retry the deletion. A Link or Kernel card in
+        recovery_required for issuance, or an AgentCard card in recovery_required whose
+        checkout create response returned no authorization ID, may be explicitly
+        abandoned by deleting that card directly; deleting its wallet or vault remains
+        blocked until the card is deleted. Deleting or recreating an item is not proof
+        that a payment did not occur. Deleting a managed auth credential item leaves the
         connection and its saved credential unchanged.
 
         Args:
@@ -434,6 +435,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -487,6 +491,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -542,6 +549,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -596,6 +606,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -645,6 +658,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -703,6 +719,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -772,6 +791,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -821,6 +843,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -873,6 +898,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -929,6 +957,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -979,6 +1010,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -1035,6 +1069,9 @@ class ItemsResource(SyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -1490,10 +1527,10 @@ class AsyncItemsResource(AsyncAPIResource):
         request, subject to atomic provider approval checks; omitted optional fields
         remain unchanged and explicit empty lists clear them. Wallet/provider binding
         and unsupported fields cannot change after authorization starts. An uncertain
-        update enters recovery_required and must not be retried. Checkout cards may be
-        edited between authorizations. A Link card authorized with browser_id and
-        page_url cannot be changed; delete it and create a new card with the updated
-        details.
+        update enters recovery_required; delete the card and create a new one rather
+        than retrying the update. Checkout cards may be edited between authorizations. A
+        Link card authorized with browser_id and page_url cannot be changed; delete it
+        and create a new card with the updated details.
 
         Args:
           spec: Live Link card request. Test-mode card creation is not supported. The spec can
@@ -1541,10 +1578,10 @@ class AsyncItemsResource(AsyncAPIResource):
         request, subject to atomic provider approval checks; omitted optional fields
         remain unchanged and explicit empty lists clear them. Wallet/provider binding
         and unsupported fields cannot change after authorization starts. An uncertain
-        update enters recovery_required and must not be retried. Checkout cards may be
-        edited between authorizations. A Link card authorized with browser_id and
-        page_url cannot be changed; delete it and create a new card with the updated
-        details.
+        update enters recovery_required; delete the card and create a new one rather
+        than retrying the update. Checkout cards may be edited between authorizations. A
+        Link card authorized with browser_id and page_url cannot be changed; delete it
+        and create a new card with the updated details.
 
         Args:
           version: Expected current item version from the latest read.
@@ -1657,11 +1694,12 @@ class AsyncItemsResource(AsyncAPIResource):
         Unresolved payment operations normally block deletion, including operations on
         child cards of a wallet. Deleting a connected Kernel wallet first blocks new
         payments on it, then removes its enrolled card. If that fails, the wallet is
-        kept and keeps refusing payments; retry the deletion. An AgentCard card in
-        recovery_required whose checkout create response returned no authorization ID
-        may be explicitly abandoned by deleting that card directly; deleting its wallet
-        or vault remains blocked. Deleting or recreating an item is not proof that a
-        payment did not occur. Deleting a managed auth credential item leaves the
+        kept and keeps refusing payments; retry the deletion. A Link or Kernel card in
+        recovery_required for issuance, or an AgentCard card in recovery_required whose
+        checkout create response returned no authorization ID, may be explicitly
+        abandoned by deleting that card directly; deleting its wallet or vault remains
+        blocked until the card is deleted. Deleting or recreating an item is not proof
+        that a payment did not occur. Deleting a managed auth credential item leaves the
         connection and its saved credential unchanged.
 
         Args:
@@ -1770,6 +1808,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -1823,6 +1864,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -1878,6 +1922,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -1932,6 +1979,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -1981,6 +2031,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -2039,6 +2092,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -2108,6 +2164,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -2157,6 +2216,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -2209,6 +2271,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -2265,6 +2330,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -2315,6 +2383,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
@@ -2371,6 +2442,9 @@ class AsyncItemsResource(AsyncAPIResource):
         return HTTP 429 and retain the card item; stop, back off, and retry the same
         authorize operation.
 
+        Ready Kernel cards advertise fill. Fill delivers card details for a few minutes;
+        submit checkout promptly after filling. A repeated fill is safe.
+
         Fill returns a value-free execution result. Validation failures before writing
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/types/browser_create_params.py

@@ -63,7 +63,10 @@ class BrowserCreateParams(TypedDict, total=False):
     """
 
     memory: BrowserMemoryRequest
-    """Memory for a headful, non-GPU browser session. Defaults to 8GiB."""
+    """Memory for a non-GPU browser.
+
+    Headless: 1GiB (default), 2GiB, or 4GiB. Headful: 8GiB (default) or 16GiB.
+    """
 
     name: str
     """

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/types/browser_memory.py

@@ -4,4 +4,4 @@ from typing_extensions import Literal, TypeAlias
 
 __all__ = ["BrowserMemory"]
 
-BrowserMemory: TypeAlias = Literal["1GiB", "2GiB", "6GiB", "8GiB", "12GiB", "16GiB"]
+BrowserMemory: TypeAlias = Literal["1GiB", "2GiB", "4GiB", "6GiB", "8GiB", "12GiB", "16GiB"]

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/types/browser_memory_request.py

@@ -4,4 +4,4 @@ from typing_extensions import Literal, TypeAlias
 
 __all__ = ["BrowserMemoryRequest"]
 
-BrowserMemoryRequest: TypeAlias = Literal["8GiB", "16GiB"]
+BrowserMemoryRequest: TypeAlias = Literal["1GiB", "2GiB", "4GiB", "8GiB", "16GiB"]

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/types/browser_pool_create_params.py

@@ -62,7 +62,10 @@ class BrowserPoolCreateParams(TypedDict, total=False):
     """
 
     memory: BrowserMemoryRequest
-    """Memory requested for headful browsers in this pool."""
+    """Memory for browsers in this pool.
+
+    Headless: 1GiB (default), 2GiB, or 4GiB. Headful: 8GiB (default) or 16GiB.
+    """
 
     name: str
     """Optional name for the browser pool. Must be unique within the project."""

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/types/browser_pool_update_params.py

@@ -44,6 +44,17 @@ class BrowserPoolUpdateParams(TypedDict, total=False):
     flushing the pool).
     """
 
+    expected_network: BrowserNetworkConfigParam
+    """Optional optimistic concurrency precondition.
+
+    Send the network configuration from the last pool response, or {} when it has no
+    network configuration. The entire update is rejected with 409 stale_network if
+    the saved network differs, checked atomically with the write. Omit for
+    unconditional updates. Explicit empty lists differ from omitted lists; route
+    targets must match the saved references (resolved IDs, not equivalent proxy
+    names).
+    """
+
     extensions: Iterable[BrowserExtension]
     """If provided, replaces the extension list.
 
@@ -64,11 +75,11 @@ class BrowserPoolUpdateParams(TypedDict, total=False):
     kiosk_mode: bool
     """If provided, replaces whether browsers launch in kiosk mode."""
 
-    memory: Literal["8GiB", "16GiB"]
-    """Memory requested for newly-warmed headful browsers in this pool.
-
-    Existing browsers retain their original allocation. Use discard_all_idle to
-    replace idle browsers.
+    memory: Literal["1GiB", "2GiB", "4GiB", "8GiB", "16GiB"]
+    """
+    Memory requested for newly-warmed browsers in this pool: 1GiB, 2GiB, or 4GiB for
+    headless, 8GiB or 16GiB for headful. Existing browsers retain their original
+    allocation. Use discard_all_idle to replace idle browsers.
     """
 
     name: str

{kernel-0.126.0 → kernel-0.127.0}/src/kernel/types/browsers/browser_captcha_challenge_result_event.py

@@ -43,14 +43,16 @@ class Data(BaseModel):
     """
 
     captcha_provider: Optional[
-        Literal["hcaptcha", "recaptcha_v2", "recaptcha_v3", "turnstile", "geetest", "arkose", "human", "other"]
+        Literal[
+            "hcaptcha", "recaptcha_v2", "recaptcha_v3", "turnstile", "geetest", "arkose", "human", "binance", "other"
+        ]
     ] = None
     """Captcha product the challenge belongs to, not the service that solved it.
 
     Enterprise reCAPTCHA variants are grouped into their version bucket
     (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
     challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
-    products use other.
+    products, including text captchas a site draws itself, use other.
     """
 
     challenge_id: Optional[str] = None