kernel 0.91.0__tar.gz → 0.93.0__tar.gz

kernel-0.93.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.93.0"
+}

{kernel-0.91.0 → kernel-0.93.0}/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.93.0](https://github.com/kernel/kernel-python-sdk/compare/v0.92.0...v0.93.0) (2026-08-19)
+
+
+### Features
+
+* Add proxy_error to browser telemetry event schema ([5973ab6](https://github.com/kernel/kernel-python-sdk/commit/5973ab6c766ee31929a523e3ea21fb000bc6879a))
+* Bind managed auth submissions to interactions ([63fb060](https://github.com/kernel/kernel-python-sdk/commit/63fb0606910b17a99f7a584e425fbd77e2d562e5))
+* Harden canonical managed auth interactions ([3522fcb](https://github.com/kernel/kernel-python-sdk/commit/3522fcb9e70854ad2900585f5b37222e7f0e1b26))
+
+## [0.92.0](https://github.com/kernel/kernel-python-sdk/compare/v0.91.0...v0.92.0) (2026-08-17)
+
+
+### Features
+
+* chore(stlc): seal custom-code tracking files ([5b74e46](https://github.com/kernel/kernel-python-sdk/commit/5b74e460198b174e69f0bf690b01f216e89b3dd0))
+
 ## [0.91.0](https://github.com/kernel/kernel-python-sdk/compare/v0.90.0...v0.91.0) (2026-08-14)
 
 

{kernel-0.91.0 → kernel-0.93.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.91.0
+Version: 0.93.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.91.0 → kernel-0.93.0}/api.md

@@ -146,6 +146,7 @@ from kernel.types.browsers import (
     BrowserPageNavigationEvent,
     BrowserPageNavigationSettledEvent,
     BrowserPageTabOpenedEvent,
+    BrowserProxyErrorEvent,
     BrowserServiceCrashedEvent,
     BrowserSystemOomKillEvent,
     BrowserTelemetryCategoriesConfig,
@@ -472,6 +473,18 @@ Methods:
 
 # Organization
 
+## Entitlements
+
+Types:
+
+```python
+from kernel.types.organization import OrgEntitlements
+```
+
+Methods:
+
+- <code title="get /org/entitlements">client.organization.entitlements.<a href="./src/kernel/resources/organization/entitlements.py">retrieve</a>() -> <a href="./src/kernel/types/organization/org_entitlements.py">OrgEntitlements</a></code>
+
 ## Limits
 
 Types:

{kernel-0.91.0 → kernel-0.93.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.91.0"
+version = "0.93.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.91.0"  # x-release-please-version
+__version__ = "0.93.0"  # x-release-please-version

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/resources/auth/connections.py

@@ -530,6 +530,7 @@ class ConnectionsResource(SyncAPIResource):
         *,
         field_values: Dict[str, str] | Omit = omit,
         fields: Dict[str, str] | Omit = omit,
+        interaction_id: str | Omit = omit,
         mfa_option_id: str | Omit = omit,
         selected_choice_id: str | Omit = omit,
         sign_in_option_id: str | Omit = omit,
@@ -552,6 +553,9 @@ class ConnectionsResource(SyncAPIResource):
 
           fields: Map of field name to value
 
+          interaction_id: Opaque interaction ID returned with canonical fields and choices. Required for
+              canonical submissions.
+
           mfa_option_id: The MFA method type to select (when mfa_options were returned)
 
           selected_choice_id: Canonical choice ID selected by the user.
@@ -580,6 +584,7 @@ class ConnectionsResource(SyncAPIResource):
                 {
                     "field_values": field_values,
                     "fields": fields,
+                    "interaction_id": interaction_id,
                     "mfa_option_id": mfa_option_id,
                     "selected_choice_id": selected_choice_id,
                     "sign_in_option_id": sign_in_option_id,
@@ -1143,6 +1148,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
         *,
         field_values: Dict[str, str] | Omit = omit,
         fields: Dict[str, str] | Omit = omit,
+        interaction_id: str | Omit = omit,
         mfa_option_id: str | Omit = omit,
         selected_choice_id: str | Omit = omit,
         sign_in_option_id: str | Omit = omit,
@@ -1165,6 +1171,9 @@ class AsyncConnectionsResource(AsyncAPIResource):
 
           fields: Map of field name to value
 
+          interaction_id: Opaque interaction ID returned with canonical fields and choices. Required for
+              canonical submissions.
+
           mfa_option_id: The MFA method type to select (when mfa_options were returned)
 
           selected_choice_id: Canonical choice ID selected by the user.
@@ -1193,6 +1202,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
                 {
                     "field_values": field_values,
                     "fields": fields,
+                    "interaction_id": interaction_id,
                     "mfa_option_id": mfa_option_id,
                     "selected_choice_id": selected_choice_id,
                     "sign_in_option_id": sign_in_option_id,

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/resources/organization/__init__.py

@@ -8,6 +8,14 @@ from .limits import (
     LimitsResourceWithStreamingResponse,
     AsyncLimitsResourceWithStreamingResponse,
 )
+from .entitlements import (
+    EntitlementsResource,
+    AsyncEntitlementsResource,
+    EntitlementsResourceWithRawResponse,
+    AsyncEntitlementsResourceWithRawResponse,
+    EntitlementsResourceWithStreamingResponse,
+    AsyncEntitlementsResourceWithStreamingResponse,
+)
 from .organization import (
     OrganizationResource,
     AsyncOrganizationResource,
@@ -18,6 +26,12 @@ from .organization import (
 )
 
 __all__ = [
+    "EntitlementsResource",
+    "AsyncEntitlementsResource",
+    "EntitlementsResourceWithRawResponse",
+    "AsyncEntitlementsResourceWithRawResponse",
+    "EntitlementsResourceWithStreamingResponse",
+    "AsyncEntitlementsResourceWithStreamingResponse",
     "LimitsResource",
     "AsyncLimitsResource",
     "LimitsResourceWithRawResponse",

kernel-0.93.0/src/kernel/resources/organization/entitlements.py

@@ -0,0 +1,147 @@
+# File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+from __future__ import annotations
+
+import httpx
+
+from ..._types import Body, Query, Headers, NotGiven, not_given
+from ..._compat import cached_property
+from ..._resource import SyncAPIResource, AsyncAPIResource
+from ..._response import (
+    to_raw_response_wrapper,
+    to_streamed_response_wrapper,
+    async_to_raw_response_wrapper,
+    async_to_streamed_response_wrapper,
+)
+from ..._base_client import make_request_options
+from ...types.organization.org_entitlements import OrgEntitlements
+
+__all__ = ["EntitlementsResource", "AsyncEntitlementsResource"]
+
+
+class EntitlementsResource(SyncAPIResource):
+    """Read and manage organization-level limits."""
+
+    @cached_property
+    def with_raw_response(self) -> EntitlementsResourceWithRawResponse:
+        """
+        This property can be used as a prefix for any HTTP method call to return
+        the raw response object instead of the parsed content.
+
+        For more information, see https://www.github.com/kernel/kernel-python-sdk#accessing-raw-response-data-eg-headers
+        """
+        return EntitlementsResourceWithRawResponse(self)
+
+    @cached_property
+    def with_streaming_response(self) -> EntitlementsResourceWithStreamingResponse:
+        """
+        An alternative to `.with_raw_response` that doesn't eagerly read the response body.
+
+        For more information, see https://www.github.com/kernel/kernel-python-sdk#with_streaming_response
+        """
+        return EntitlementsResourceWithStreamingResponse(self)
+
+    def retrieve(
+        self,
+        *,
+        # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
+        # The extra values given here take precedence over values defined on the client or passed to this method.
+        extra_headers: Headers | None = None,
+        extra_query: Query | None = None,
+        extra_body: Body | None = None,
+        timeout: float | httpx.Timeout | None | NotGiven = not_given,
+    ) -> OrgEntitlements:
+        """
+        Get the authenticated organization's effective feature access and constraints
+        after applying its plan, active trial treatment, plan status, and
+        organization-specific overrides. Null constraint values mean unlimited.
+        """
+        return self._get(
+            "/org/entitlements",
+            options=make_request_options(
+                extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+            ),
+            cast_to=OrgEntitlements,
+        )
+
+
+class AsyncEntitlementsResource(AsyncAPIResource):
+    """Read and manage organization-level limits."""
+
+    @cached_property
+    def with_raw_response(self) -> AsyncEntitlementsResourceWithRawResponse:
+        """
+        This property can be used as a prefix for any HTTP method call to return
+        the raw response object instead of the parsed content.
+
+        For more information, see https://www.github.com/kernel/kernel-python-sdk#accessing-raw-response-data-eg-headers
+        """
+        return AsyncEntitlementsResourceWithRawResponse(self)
+
+    @cached_property
+    def with_streaming_response(self) -> AsyncEntitlementsResourceWithStreamingResponse:
+        """
+        An alternative to `.with_raw_response` that doesn't eagerly read the response body.
+
+        For more information, see https://www.github.com/kernel/kernel-python-sdk#with_streaming_response
+        """
+        return AsyncEntitlementsResourceWithStreamingResponse(self)
+
+    async def retrieve(
+        self,
+        *,
+        # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
+        # The extra values given here take precedence over values defined on the client or passed to this method.
+        extra_headers: Headers | None = None,
+        extra_query: Query | None = None,
+        extra_body: Body | None = None,
+        timeout: float | httpx.Timeout | None | NotGiven = not_given,
+    ) -> OrgEntitlements:
+        """
+        Get the authenticated organization's effective feature access and constraints
+        after applying its plan, active trial treatment, plan status, and
+        organization-specific overrides. Null constraint values mean unlimited.
+        """
+        return await self._get(
+            "/org/entitlements",
+            options=make_request_options(
+                extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+            ),
+            cast_to=OrgEntitlements,
+        )
+
+
+class EntitlementsResourceWithRawResponse:
+    def __init__(self, entitlements: EntitlementsResource) -> None:
+        self._entitlements = entitlements
+
+        self.retrieve = to_raw_response_wrapper(
+            entitlements.retrieve,
+        )
+
+
+class AsyncEntitlementsResourceWithRawResponse:
+    def __init__(self, entitlements: AsyncEntitlementsResource) -> None:
+        self._entitlements = entitlements
+
+        self.retrieve = async_to_raw_response_wrapper(
+            entitlements.retrieve,
+        )
+
+
+class EntitlementsResourceWithStreamingResponse:
+    def __init__(self, entitlements: EntitlementsResource) -> None:
+        self._entitlements = entitlements
+
+        self.retrieve = to_streamed_response_wrapper(
+            entitlements.retrieve,
+        )
+
+
+class AsyncEntitlementsResourceWithStreamingResponse:
+    def __init__(self, entitlements: AsyncEntitlementsResource) -> None:
+        self._entitlements = entitlements
+
+        self.retrieve = async_to_streamed_response_wrapper(
+            entitlements.retrieve,
+        )

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/resources/organization/organization.py

@@ -12,11 +12,24 @@ from .limits import (
 )
 from ..._compat import cached_property
 from ..._resource import SyncAPIResource, AsyncAPIResource
+from .entitlements import (
+    EntitlementsResource,
+    AsyncEntitlementsResource,
+    EntitlementsResourceWithRawResponse,
+    AsyncEntitlementsResourceWithRawResponse,
+    EntitlementsResourceWithStreamingResponse,
+    AsyncEntitlementsResourceWithStreamingResponse,
+)
 
 __all__ = ["OrganizationResource", "AsyncOrganizationResource"]
 
 
 class OrganizationResource(SyncAPIResource):
+    @cached_property
+    def entitlements(self) -> EntitlementsResource:
+        """Read and manage organization-level limits."""
+        return EntitlementsResource(self._client)
+
     @cached_property
     def limits(self) -> LimitsResource:
         """Read and manage organization-level limits."""
@@ -43,6 +56,11 @@ class OrganizationResource(SyncAPIResource):
 
 
 class AsyncOrganizationResource(AsyncAPIResource):
+    @cached_property
+    def entitlements(self) -> AsyncEntitlementsResource:
+        """Read and manage organization-level limits."""
+        return AsyncEntitlementsResource(self._client)
+
     @cached_property
     def limits(self) -> AsyncLimitsResource:
         """Read and manage organization-level limits."""
@@ -72,6 +90,11 @@ class OrganizationResourceWithRawResponse:
     def __init__(self, organization: OrganizationResource) -> None:
         self._organization = organization
 
+    @cached_property
+    def entitlements(self) -> EntitlementsResourceWithRawResponse:
+        """Read and manage organization-level limits."""
+        return EntitlementsResourceWithRawResponse(self._organization.entitlements)
+
     @cached_property
     def limits(self) -> LimitsResourceWithRawResponse:
         """Read and manage organization-level limits."""
@@ -82,6 +105,11 @@ class AsyncOrganizationResourceWithRawResponse:
     def __init__(self, organization: AsyncOrganizationResource) -> None:
         self._organization = organization
 
+    @cached_property
+    def entitlements(self) -> AsyncEntitlementsResourceWithRawResponse:
+        """Read and manage organization-level limits."""
+        return AsyncEntitlementsResourceWithRawResponse(self._organization.entitlements)
+
     @cached_property
     def limits(self) -> AsyncLimitsResourceWithRawResponse:
         """Read and manage organization-level limits."""
@@ -92,6 +120,11 @@ class OrganizationResourceWithStreamingResponse:
     def __init__(self, organization: OrganizationResource) -> None:
         self._organization = organization
 
+    @cached_property
+    def entitlements(self) -> EntitlementsResourceWithStreamingResponse:
+        """Read and manage organization-level limits."""
+        return EntitlementsResourceWithStreamingResponse(self._organization.entitlements)
+
     @cached_property
     def limits(self) -> LimitsResourceWithStreamingResponse:
         """Read and manage organization-level limits."""
@@ -102,6 +135,11 @@ class AsyncOrganizationResourceWithStreamingResponse:
     def __init__(self, organization: AsyncOrganizationResource) -> None:
         self._organization = organization
 
+    @cached_property
+    def entitlements(self) -> AsyncEntitlementsResourceWithStreamingResponse:
+        """Read and manage organization-level limits."""
+        return AsyncEntitlementsResourceWithStreamingResponse(self._organization.entitlements)
+
     @cached_property
     def limits(self) -> AsyncLimitsResourceWithStreamingResponse:
         """Read and manage organization-level limits."""

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/types/auth/connection_follow_response.py

@@ -97,6 +97,9 @@ class ManagedAuthStateEventField(BaseModel):
     id: str
     """Stable field identifier for canonical submit."""
 
+    reason: Literal["missing", "rejected"]
+    """Why the field requires user input."""
+
     ref: str
     """Credential reference name to store the submitted value under."""
 
@@ -112,12 +115,6 @@ class ManagedAuthStateEventField(BaseModel):
     observed_selector: Optional[str] = None
     """Selector for the visible field, when available."""
 
-    replace_existing: Optional[bool] = None
-    """
-    Whether the submitted value must replace an existing credential after explicit
-    rejection.
-    """
-
     required: Optional[bool] = None
     """Whether this field is required."""
 
@@ -224,6 +221,13 @@ class ManagedAuthStateEvent(BaseModel):
     hosted_url: Optional[str] = None
     """URL to redirect user to for hosted login."""
 
+    interaction_id: Optional[str] = None
+    """Opaque identifier for the current canonical interaction.
+
+    Required when submitting fields or choices and changes for each new actionable
+    pause.
+    """
+
     live_view_url: Optional[str] = None
     """Browser live view URL for debugging."""
 

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/types/auth/connection_submit_params.py

@@ -15,6 +15,12 @@ class ConnectionSubmitParams(TypedDict, total=False):
     fields: Dict[str, str]
     """Map of field name to value"""
 
+    interaction_id: str
+    """Opaque interaction ID returned with canonical fields and choices.
+
+    Required for canonical submissions.
+    """
+
     mfa_option_id: str
     """The MFA method type to select (when mfa_options were returned)"""
 

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/types/auth/managed_auth.py

@@ -206,6 +206,9 @@ class Field(BaseModel):
     id: str
     """Stable field identifier for canonical submit."""
 
+    reason: Literal["missing", "rejected"]
+    """Why the field requires user input."""
+
     ref: str
     """Credential reference name to store the submitted value under."""
 
@@ -221,12 +224,6 @@ class Field(BaseModel):
     observed_selector: Optional[str] = None
     """Selector for the visible field, when available."""
 
-    replace_existing: Optional[bool] = None
-    """
-    Whether the submitted value must replace an existing credential after explicit
-    rejection.
-    """
-
     required: Optional[bool] = None
     """Whether this field is required."""
 
@@ -504,6 +501,13 @@ class ManagedAuth(BaseModel):
     hosted_url: Optional[str] = None
     """URL to redirect user to for hosted login (present when flow in progress)"""
 
+    interaction_id: Optional[str] = None
+    """Opaque identifier for the current canonical interaction.
+
+    Required when submitting fields or choices and changes for each new actionable
+    pause.
+    """
+
     last_auth_at: Optional[datetime] = None
     """Deprecated alias for `last_auth_check_at`.
 

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/types/browsers/__init__.py

@@ -42,6 +42,7 @@ from .telemetry_stream_params import TelemetryStreamParams as TelemetryStreamPar
 from .browser_telemetry_config import BrowserTelemetryConfig as BrowserTelemetryConfig
 from .browser_cdp_connect_event import BrowserCdpConnectEvent as BrowserCdpConnectEvent
 from .browser_console_log_event import BrowserConsoleLogEvent as BrowserConsoleLogEvent
+from .browser_proxy_error_event import BrowserProxyErrorEvent as BrowserProxyErrorEvent
 from .computer_press_key_params import ComputerPressKeyParams as ComputerPressKeyParams
 from .computer_type_text_params import ComputerTypeTextParams as ComputerTypeTextParams
 from .f_create_directory_params import FCreateDirectoryParams as FCreateDirectoryParams

kernel-0.93.0/src/kernel/types/browsers/browser_proxy_error_event.py

@@ -0,0 +1,73 @@
+# File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+from typing import Optional
+from typing_extensions import Literal
+
+from ..._models import BaseModel
+from .browser_event_source import BrowserEventSource
+from .browser_event_context import BrowserEventContext
+
+__all__ = ["BrowserProxyErrorEvent", "Data"]
+
+
+class Data(BrowserEventContext):
+    """Browser event context stamped by the browser monitor onto all CDP-sourced events.
+
+    Identifies the target, frame, and navigation epoch in which the event occurred.
+    """
+
+    code: Literal[
+        "destination_blocked",
+        "provider_blacklisted",
+        "provider_unreachable",
+        "proxy_unavailable",
+        "upstream_timeout",
+        "upstream_dns_failure",
+        "upstream_connect_failed",
+    ]
+    """
+    Proxy-layer error code: the X-Kernel-Proxy-Error response header value from a
+    branded 5xx error page served by the metro egress host-proxy. Values mirror what
+    the proxy emits: destination_blocked, provider_blacklisted,
+    provider_unreachable, proxy_unavailable, upstream_timeout, upstream_dns_failure,
+    upstream_connect_failed. Unknown header values are dropped.
+    """
+
+    request_id: str
+    """CDP request identifier matching the originating request."""
+
+    status: int
+    """HTTP response status of the branded error page (502)."""
+
+    method: Optional[str] = None
+    """HTTP method of the failed request, when known."""
+
+    resource_type: Optional[str] = None
+    """CDP Network.ResourceType for the request, when known."""
+
+
+class BrowserProxyErrorEvent(BaseModel):
+    """A branded proxy-layer failure observed by the browser.
+
+    Emitted when the metro egress host-proxy serves a branded 5xx error page whose response carries the X-Kernel-Proxy-Error header. Low-volume and carries a typed code. Its value is per-session and per-URL attribution for sessions that already capture the network stream: proxy failures are only observable while the CDP network collector is running, so this is an opt-in refinement of the raw network events rather than a default-on alerting signal.
+    """
+
+    category: Literal["network"]
+
+    source: BrowserEventSource
+    """Provenance metadata identifying which producer emitted the event."""
+
+    ts: int
+    """Event timestamp in Unix microseconds."""
+
+    type: Literal["proxy_error"]
+
+    data: Optional[Data] = None
+    """Browser event context stamped by the browser monitor onto all CDP-sourced
+    events.
+
+    Identifies the target, frame, and navigation epoch in which the event occurred.
+    """
+
+    truncated: Optional[bool] = None
+    """True if the data field was truncated due to size limits."""

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/types/browsers/browser_telemetry_event.py

@@ -11,6 +11,7 @@ from .browser_page_lcp_event import BrowserPageLcpEvent
 from .browser_page_load_event import BrowserPageLoadEvent
 from .browser_cdp_connect_event import BrowserCdpConnectEvent
 from .browser_console_log_event import BrowserConsoleLogEvent
+from .browser_proxy_error_event import BrowserProxyErrorEvent
 from .browser_network_idle_event import BrowserNetworkIdleEvent
 from .browser_console_error_event import BrowserConsoleErrorEvent
 from .browser_cdp_disconnect_event import BrowserCdpDisconnectEvent
@@ -47,6 +48,7 @@ BrowserTelemetryEvent: TypeAlias = Annotated[
         BrowserNetworkResponseEvent,
         BrowserNetworkLoadingFailedEvent,
         BrowserNetworkIdleEvent,
+        BrowserProxyErrorEvent,
         BrowserPageNavigationEvent,
         BrowserPageDomContentLoadedEvent,
         BrowserPageLoadEvent,

{kernel-0.91.0 → kernel-0.93.0}/src/kernel/types/organization/__init__.py

@@ -3,4 +3,5 @@
 from __future__ import annotations
 
 from .org_limits import OrgLimits as OrgLimits
+from .org_entitlements import OrgEntitlements as OrgEntitlements
 from .limit_update_params import LimitUpdateParams as LimitUpdateParams