kernel 0.134.0__tar.gz → 0.136.0__tar.gz

kernel-0.136.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.136.0"
+}

{kernel-0.134.0 → kernel-0.136.0}/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.136.0](https://github.com/kernel/kernel-python-sdk/compare/v0.135.0...v0.136.0) (2026-10-28)
+
+
+### Features
+
+* Import approved 1Password logins onto stored-token credentials ([279faa3](https://github.com/kernel/kernel-python-sdk/commit/279faa380ab039e8dea75b553cae18d70157bf7c))
+
+## [0.135.0](https://github.com/kernel/kernel-python-sdk/compare/v0.134.0...v0.135.0) (2026-10-28)
+
+
+### Features
+
+* api: sort API keys by last_used_at ([3501230](https://github.com/kernel/kernel-python-sdk/commit/3501230a16dd8fddf7cc29a1595a68d793fb44ef))
+
 ## [0.134.0](https://github.com/kernel/kernel-python-sdk/compare/v0.133.0...v0.134.0) (2026-10-28)
 
 

{kernel-0.134.0 → kernel-0.136.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.134.0
+Version: 0.136.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.134.0 → kernel-0.136.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.134.0"
+version = "0.136.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.134.0 → kernel-0.136.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.134.0"  # x-release-please-version
+__version__ = "0.136.0"  # x-release-please-version

{kernel-0.134.0 → kernel-0.136.0}/src/kernel/resources/api_keys.py

@@ -219,7 +219,7 @@ class APIKeysResource(SyncAPIResource):
         name: str | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
-        sort_by: Literal["created_at", "name", "expires_at"] | Omit = omit,
+        sort_by: Literal["created_at", "name", "expires_at", "last_used_at"] | Omit = omit,
         sort_direction: Literal["asc", "desc"] | Omit = omit,
         status: Literal["active", "deleted", "all"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -249,7 +249,8 @@ class APIKeysResource(SyncAPIResource):
           query: Case-insensitive substring match against API key name, creator, and project. API
               key identifiers and masked keys match by exact value or prefix.
 
-          sort_by: Field to sort API keys by.
+          sort_by: Field to sort API keys by. Keys with no expiry or no recorded use sort last for
+              expires_at and last_used_at in either direction.
 
           sort_direction: Sort direction for API keys.
 
@@ -578,7 +579,7 @@ class AsyncAPIKeysResource(AsyncAPIResource):
         name: str | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
-        sort_by: Literal["created_at", "name", "expires_at"] | Omit = omit,
+        sort_by: Literal["created_at", "name", "expires_at", "last_used_at"] | Omit = omit,
         sort_direction: Literal["asc", "desc"] | Omit = omit,
         status: Literal["active", "deleted", "all"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -608,7 +609,8 @@ class AsyncAPIKeysResource(AsyncAPIResource):
           query: Case-insensitive substring match against API key name, creator, and project. API
               key identifiers and masked keys match by exact value or prefix.
 
-          sort_by: Field to sort API keys by.
+          sort_by: Field to sort API keys by. Keys with no expiry or no recorded use sort last for
+              expires_at and last_used_at in either direction.
 
           sort_direction: Sort direction for API keys.
 

{kernel-0.134.0 → kernel-0.136.0}/src/kernel/types/api_key_list_params.py

@@ -36,8 +36,12 @@ class APIKeyListParams(TypedDict, total=False):
     API key identifiers and masked keys match by exact value or prefix.
     """
 
-    sort_by: Literal["created_at", "name", "expires_at"]
-    """Field to sort API keys by."""
+    sort_by: Literal["created_at", "name", "expires_at", "last_used_at"]
+    """Field to sort API keys by.
+
+    Keys with no expiry or no recorded use sort last for expires_at and last_used_at
+    in either direction.
+    """
 
     sort_direction: Literal["asc", "desc"]
     """Sort direction for API keys."""

{kernel-0.134.0 → kernel-0.136.0}/src/kernel/types/vaults/one_password_credential_vault_item_spec.py

@@ -19,6 +19,12 @@ class RequestsEntry(BaseModel):
     type: str
     """Must be login."""
 
+    id: Optional[str] = None
+    """1Password's ID for this entry in an access request you created.
+
+    Supply it only with resolved.
+    """
+
     keywords: Optional[List[str]] = None
 
     reason: Optional[str] = None

{kernel-0.134.0 → kernel-0.136.0}/src/kernel/types/vaults/one_password_credential_vault_item_spec_input_param.py

@@ -9,7 +9,13 @@ from typing_extensions import Literal, Required, Annotated, TypedDict
 from ..._types import SequenceNotStr
 from ..._utils import PropertyInfo
 
-__all__ = ["OnePasswordCredentialVaultItemSpecInputParam", "Requests", "RequestsEntry", "RequestsEntryParameters"]
+__all__ = [
+    "OnePasswordCredentialVaultItemSpecInputParam",
+    "Requests",
+    "RequestsEntry",
+    "RequestsEntryParameters",
+    "Resolved",
+]
 
 
 class RequestsEntryParameters(TypedDict, total=False):
@@ -22,6 +28,12 @@ class RequestsEntry(TypedDict, total=False):
     type: Required[str]
     """Must be login."""
 
+    id: str
+    """1Password's ID for this entry in an access request you created.
+
+    Supply it only with resolved.
+    """
+
     keywords: SequenceNotStr[str]
 
     reason: str
@@ -41,13 +53,31 @@ class Requests(TypedDict, total=False):
     goal: str
 
 
+class Resolved(TypedDict, total=False):
+    reference: Required[str]
+    """1Password credential reference.
+
+    Pass it unchanged as resourcePath to the extension's fillCredential or to the
+    1Password SDK.
+    """
+
+    entry_id: Annotated[str, PropertyInfo(alias="entryId")]
+    """The requested entry this login satisfies, when known."""
+
+
 class OnePasswordCredentialVaultItemSpecInputParam(TypedDict, total=False):
     """
-    A login request backed by a connected 1Password account or by a customer-supplied access token and matching integration key. Supply either account or both secrets, never both. Supplied secrets are write-only and never returned. Supply requests for new items; website remains supported for existing account-backed callers.
+    A login request backed by a connected 1Password account or by a customer-supplied access token and matching integration key. Supply either account or both secrets, never both. Supplied secrets are write-only and never returned. Supply requests for new items; website remains supported for existing account-backed callers. To use an access request you already created and the user approved with the same access token and integration key, also supply access_request_id, resolved, and each requests entry's id; the item is created ready and Kernel doesn't create an access request.
     """
 
     provider: Required[Literal["1password"]]
 
+    access_request_id: str
+    """
+    ID of an approved access request you created with this access_token and
+    integration_key. Requires resolved.
+    """
+
     access_token: str
     """Customer-supplied 1Password broker token.
 
@@ -80,5 +110,13 @@ class OnePasswordCredentialVaultItemSpecInputParam(TypedDict, total=False):
     A credential item may request up to five login entries.
     """
 
+    resolved: Iterable[Resolved]
+    """
+    Granted logins from 1Password's status for access_request_id, as returned by the
+    1Password SDK or extension. Requires access_request_id and an id on every
+    requests entry. entryId may be omitted only when requests has one entry. Kernel
+    doesn't verify the references; 1Password checks them when filling.
+    """
+
     website: str
     """Legacy single-login shorthand. Supply requests instead."""

kernel-0.134.0/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "0.134.0"
-}