kernel 0.92.0__tar.gz → 0.94.0__tar.gz

kernel-0.94.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.94.0"
+}

{kernel-0.92.0 → kernel-0.94.0}/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [0.94.0](https://github.com/kernel/kernel-python-sdk/compare/v0.93.0...v0.94.0) (2026-08-24)
+
+
+### Features
+
+* Mirror the control/platform telemetry split into the public API ([27c5a0a](https://github.com/kernel/kernel-python-sdk/commit/27c5a0a75ade568f1feb7e058070771ae1f6db60))
+* site configs: report proxy-restricted analyses ([7afcfc4](https://github.com/kernel/kernel-python-sdk/commit/7afcfc499d7008407c872d75bcc4d8a1604f7954))
+
+## [0.93.0](https://github.com/kernel/kernel-python-sdk/compare/v0.92.0...v0.93.0) (2026-08-19)
+
+
+### Features
+
+* Add proxy_error to browser telemetry event schema ([5973ab6](https://github.com/kernel/kernel-python-sdk/commit/5973ab6c766ee31929a523e3ea21fb000bc6879a))
+* Bind managed auth submissions to interactions ([63fb060](https://github.com/kernel/kernel-python-sdk/commit/63fb0606910b17a99f7a584e425fbd77e2d562e5))
+* Harden canonical managed auth interactions ([3522fcb](https://github.com/kernel/kernel-python-sdk/commit/3522fcb9e70854ad2900585f5b37222e7f0e1b26))
+
 ## [0.92.0](https://github.com/kernel/kernel-python-sdk/compare/v0.91.0...v0.92.0) (2026-08-17)
 
 

{kernel-0.92.0 → kernel-0.94.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.92.0
+Version: 0.94.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.92.0 → kernel-0.94.0}/api.md

@@ -74,6 +74,37 @@ Methods:
 - <code title="get /invocations/{id}/events">client.invocations.<a href="./src/kernel/resources/invocations.py">follow</a>(id, \*\*<a href="src/kernel/types/invocation_follow_params.py">params</a>) -> <a href="./src/kernel/types/invocation_follow_response.py">InvocationFollowResponse</a></code>
 - <code title="get /invocations/{id}/browsers">client.invocations.<a href="./src/kernel/resources/invocations.py">list_browsers</a>(id) -> <a href="./src/kernel/types/invocation_list_browsers_response.py">InvocationListBrowsersResponse</a></code>
 
+# SiteConfigs
+
+Types:
+
+```python
+from kernel.types import (
+    Analysis,
+    AnalysisSummary,
+    Browser,
+    Evidence,
+    LookupRequest,
+    LookupResponse,
+    NoRecommendation,
+    Proxy,
+    Recommendation,
+    RecommendationResult,
+    RecommendationSummary,
+    ResolveRequest,
+    SiteConfigResponse,
+    Target,
+)
+```
+
+Methods:
+
+- <code title="get /site-configs/{id}">client.site_configs.<a href="./src/kernel/resources/site_configs.py">retrieve</a>(id) -> <a href="./src/kernel/types/site_config_response.py">SiteConfigResponse</a></code>
+- <code title="get /site-configs">client.site_configs.<a href="./src/kernel/resources/site_configs.py">list</a>(\*\*<a href="src/kernel/types/site_config_list_params.py">params</a>) -> <a href="./src/kernel/types/analysis_summary.py">SyncOffsetPagination[AnalysisSummary]</a></code>
+- <code title="get /site-configs/recommendations">client.site_configs.<a href="./src/kernel/resources/site_configs.py">list_recommendations</a>(\*\*<a href="src/kernel/types/site_config_list_recommendations_params.py">params</a>) -> <a href="./src/kernel/types/recommendation_summary.py">SyncOffsetPagination[RecommendationSummary]</a></code>
+- <code title="post /site-configs/lookup">client.site_configs.<a href="./src/kernel/resources/site_configs.py">lookup</a>(\*\*<a href="src/kernel/types/site_config_lookup_params.py">params</a>) -> <a href="./src/kernel/types/lookup_response.py">LookupResponse</a></code>
+- <code title="post /site-configs/resolve">client.site_configs.<a href="./src/kernel/resources/site_configs.py">resolve</a>(\*\*<a href="src/kernel/types/site_config_resolve_params.py">params</a>) -> <a href="./src/kernel/types/site_config_response.py">SiteConfigResponse</a></code>
+
 # Browsers
 
 Types:
@@ -117,6 +148,8 @@ from kernel.types.browsers import (
     BrowserAPICallEvent,
     BrowserCallStack,
     BrowserCaptchaSolveResultEvent,
+    BrowserCdpCommandEvent,
+    BrowserCdpCommandMethod,
     BrowserCdpConnectEvent,
     BrowserCdpDisconnectEvent,
     BrowserConsoleErrorEvent,
@@ -138,6 +171,7 @@ from kernel.types.browsers import (
     BrowserNetworkLoadingFailedEvent,
     BrowserNetworkRequestEvent,
     BrowserNetworkResponseEvent,
+    BrowserPageCrashedEvent,
     BrowserPageDomContentLoadedEvent,
     BrowserPageLayoutSettledEvent,
     BrowserPageLayoutShiftEvent,
@@ -146,11 +180,15 @@ from kernel.types.browsers import (
     BrowserPageNavigationEvent,
     BrowserPageNavigationSettledEvent,
     BrowserPageTabOpenedEvent,
+    BrowserPlatformAPICallEvent,
+    BrowserProxyErrorEvent,
     BrowserServiceCrashedEvent,
     BrowserSystemOomKillEvent,
     BrowserTelemetryCategoriesConfig,
     BrowserTelemetryCategoryConfig,
+    BrowserTelemetryCdpControlConfig,
     BrowserTelemetryConfig,
+    BrowserTelemetryControlConfig,
     BrowserTelemetryEvent,
     BrowserTelemetryExportConfig,
     BrowserTelemetryOtlpExportConfig,

{kernel-0.92.0 → kernel-0.94.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.92.0"
+version = "0.94.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/_client.py

@@ -41,6 +41,7 @@ from .lib.browser_routing.routing import (
     strip_direct_vm_auth,
     rewrite_direct_vm_options,
     browser_routing_config_from_env,
+    should_retry_stale_direct_vm_auth,
     maybe_evict_browser_route_from_response,
     maybe_populate_browser_route_cache_from_response,
 )
@@ -61,6 +62,7 @@ if TYPE_CHECKING:
         deployments,
         invocations,
         organization,
+        site_configs,
         browser_pools,
         credential_providers,
     )
@@ -73,6 +75,7 @@ if TYPE_CHECKING:
     from .resources.credentials import CredentialsResource, AsyncCredentialsResource
     from .resources.deployments import DeploymentsResource, AsyncDeploymentsResource
     from .resources.invocations import InvocationsResource, AsyncInvocationsResource
+    from .resources.site_configs import SiteConfigsResource, AsyncSiteConfigsResource
     from .resources.browser_pools import BrowserPoolsResource, AsyncBrowserPoolsResource
     from .resources.browsers.browsers import BrowsersResource, AsyncBrowsersResource
     from .resources.projects.projects import ProjectsResource, AsyncProjectsResource
@@ -222,6 +225,13 @@ class Kernel(SyncAPIClient):
 
         return InvocationsResource(self)
 
+    @cached_property
+    def site_configs(self) -> SiteConfigsResource:
+        """Resolve browser and proxy recommendations for bot-protected sites."""
+        from .resources.site_configs import SiteConfigsResource
+
+        return SiteConfigsResource(self)
+
     @cached_property
     def browsers(self) -> BrowsersResource:
         """Create and manage browser sessions."""
@@ -353,6 +363,13 @@ class Kernel(SyncAPIClient):
     def _prepare_request(self, request: httpx.Request) -> None:
         strip_direct_vm_auth(request, cache=self.browser_route_cache)
 
+    @override
+    def _should_retry(self, response: httpx.Response) -> bool:
+        if should_retry_stale_direct_vm_auth(response):
+            maybe_evict_browser_route_from_response(response, cache=self.browser_route_cache)
+            return True
+        return super()._should_retry(response)
+
     @override
     def _process_response(
         self,
@@ -591,6 +608,13 @@ class AsyncKernel(AsyncAPIClient):
 
         return AsyncInvocationsResource(self)
 
+    @cached_property
+    def site_configs(self) -> AsyncSiteConfigsResource:
+        """Resolve browser and proxy recommendations for bot-protected sites."""
+        from .resources.site_configs import AsyncSiteConfigsResource
+
+        return AsyncSiteConfigsResource(self)
+
     @cached_property
     def browsers(self) -> AsyncBrowsersResource:
         """Create and manage browser sessions."""
@@ -722,6 +746,13 @@ class AsyncKernel(AsyncAPIClient):
     async def _prepare_request(self, request: httpx.Request) -> None:
         strip_direct_vm_auth(request, cache=self.browser_route_cache)
 
+    @override
+    def _should_retry(self, response: httpx.Response) -> bool:
+        if should_retry_stale_direct_vm_auth(response):
+            maybe_evict_browser_route_from_response(response, cache=self.browser_route_cache)
+            return True
+        return super()._should_retry(response)
+
     @override
     async def _process_response(
         self,
@@ -864,6 +895,13 @@ class KernelWithRawResponse:
 
         return InvocationsResourceWithRawResponse(self._client.invocations)
 
+    @cached_property
+    def site_configs(self) -> site_configs.SiteConfigsResourceWithRawResponse:
+        """Resolve browser and proxy recommendations for bot-protected sites."""
+        from .resources.site_configs import SiteConfigsResourceWithRawResponse
+
+        return SiteConfigsResourceWithRawResponse(self._client.site_configs)
+
     @cached_property
     def browsers(self) -> browsers.BrowsersResourceWithRawResponse:
         """Create and manage browser sessions."""
@@ -984,6 +1022,13 @@ class AsyncKernelWithRawResponse:
 
         return AsyncInvocationsResourceWithRawResponse(self._client.invocations)
 
+    @cached_property
+    def site_configs(self) -> site_configs.AsyncSiteConfigsResourceWithRawResponse:
+        """Resolve browser and proxy recommendations for bot-protected sites."""
+        from .resources.site_configs import AsyncSiteConfigsResourceWithRawResponse
+
+        return AsyncSiteConfigsResourceWithRawResponse(self._client.site_configs)
+
     @cached_property
     def browsers(self) -> browsers.AsyncBrowsersResourceWithRawResponse:
         """Create and manage browser sessions."""
@@ -1104,6 +1149,13 @@ class KernelWithStreamedResponse:
 
         return InvocationsResourceWithStreamingResponse(self._client.invocations)
 
+    @cached_property
+    def site_configs(self) -> site_configs.SiteConfigsResourceWithStreamingResponse:
+        """Resolve browser and proxy recommendations for bot-protected sites."""
+        from .resources.site_configs import SiteConfigsResourceWithStreamingResponse
+
+        return SiteConfigsResourceWithStreamingResponse(self._client.site_configs)
+
     @cached_property
     def browsers(self) -> browsers.BrowsersResourceWithStreamingResponse:
         """Create and manage browser sessions."""
@@ -1224,6 +1276,13 @@ class AsyncKernelWithStreamedResponse:
 
         return AsyncInvocationsResourceWithStreamingResponse(self._client.invocations)
 
+    @cached_property
+    def site_configs(self) -> site_configs.AsyncSiteConfigsResourceWithStreamingResponse:
+        """Resolve browser and proxy recommendations for bot-protected sites."""
+        from .resources.site_configs import AsyncSiteConfigsResourceWithStreamingResponse
+
+        return AsyncSiteConfigsResourceWithStreamingResponse(self._client.site_configs)
+
     @cached_property
     def browsers(self) -> browsers.AsyncBrowsersResourceWithStreamingResponse:
         """Create and manage browser sessions."""

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.92.0"  # x-release-please-version
+__version__ = "0.94.0"  # x-release-please-version

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/lib/browser_routing/routing.py

@@ -44,7 +44,7 @@ def browser_routing_config_from_env() -> BrowserRoutingConfig:
         # Path prefixes eligible for direct-to-VM routing. "telemetry/stream" is
         # the live SSE endpoint (VM); "telemetry/events" is a historical read
         # served by the control plane (S2) and must NOT be here.
-        return BrowserRoutingConfig(subresources=("curl", "telemetry/stream"))
+        return BrowserRoutingConfig(subresources=("curl", "telemetry/stream", "computer", "playwright"))
     if raw.strip() == "":
         return BrowserRoutingConfig()
 
@@ -69,6 +69,14 @@ class BrowserRouteCache:
     def delete(self, session_id: str) -> None:
         self._routes.pop(_normalize_session_id(session_id), None)
 
+    def delete_if_jwt(self, session_id: str, jwt: str) -> bool:
+        key = _normalize_session_id(session_id)
+        route = self._routes.get(key)
+        if route is None or route.jwt != jwt.strip():
+            return False
+        del self._routes[key]
+        return True
+
     def values(self) -> list[BrowserRoute]:
         return list(self._routes.values())
 
@@ -110,14 +118,19 @@ def maybe_populate_browser_route_cache_from_response(response: httpx.Response, *
 
 
 def maybe_evict_browser_route_from_response(response: httpx.Response, *, cache: BrowserRouteCache) -> None:
-    if not response.is_success:
+    if response.is_success:
+        session_id = _session_id_to_evict_from_response(response)
+        if session_id:
+            cache.delete(session_id)
         return
 
-    session_id = _session_id_to_evict_from_response(response)
-    if not session_id:
+    if not is_stale_direct_vm_auth_response(response):
         return
 
-    cache.delete(session_id)
+    jwt = str(response.request.url.params.get("jwt") or "").strip()
+    session_id = _session_id_from_direct_vm_response(response, cache=cache)
+    if session_id and jwt:
+        cache.delete_if_jwt(session_id, jwt)
 
 
 def populate_browser_route_cache_from_value(value: object, *, cache: BrowserRouteCache) -> None:
@@ -161,6 +174,24 @@ def _session_id_to_evict_from_response(response: httpx.Response) -> str | None:
     return None
 
 
+def _session_id_from_direct_vm_response(response: httpx.Response, *, cache: BrowserRouteCache) -> str | None:
+    raw = str(response.request.url)
+    for route in cache.values():
+        if raw.startswith(route.base_url.rstrip("/") + "/"):
+            return route.session_id
+    return None
+
+
+def is_stale_direct_vm_auth_response(response: httpx.Response) -> bool:
+    if response.status_code not in {401, 403}:
+        return False
+    return bool(response.request.url.params.get("jwt"))
+
+
+def should_retry_stale_direct_vm_auth(response: httpx.Response) -> bool:
+    return is_stale_direct_vm_auth_response(response)
+
+
 def _session_id_from_browser_delete_path(path: str) -> str | None:
     match = _BROWSER_DELETE_BY_ID_PATH.match(path)
     if match is None:

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/resources/__init__.py

@@ -112,6 +112,14 @@ from .organization import (
     OrganizationResourceWithStreamingResponse,
     AsyncOrganizationResourceWithStreamingResponse,
 )
+from .site_configs import (
+    SiteConfigsResource,
+    AsyncSiteConfigsResource,
+    SiteConfigsResourceWithRawResponse,
+    AsyncSiteConfigsResourceWithRawResponse,
+    SiteConfigsResourceWithStreamingResponse,
+    AsyncSiteConfigsResourceWithStreamingResponse,
+)
 from .browser_pools import (
     BrowserPoolsResource,
     AsyncBrowserPoolsResource,
@@ -148,6 +156,12 @@ __all__ = [
     "AsyncInvocationsResourceWithRawResponse",
     "InvocationsResourceWithStreamingResponse",
     "AsyncInvocationsResourceWithStreamingResponse",
+    "SiteConfigsResource",
+    "AsyncSiteConfigsResource",
+    "SiteConfigsResourceWithRawResponse",
+    "AsyncSiteConfigsResourceWithRawResponse",
+    "SiteConfigsResourceWithStreamingResponse",
+    "AsyncSiteConfigsResourceWithStreamingResponse",
     "BrowsersResource",
     "AsyncBrowsersResource",
     "BrowsersResourceWithRawResponse",

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/resources/auth/connections.py

@@ -530,6 +530,7 @@ class ConnectionsResource(SyncAPIResource):
         *,
         field_values: Dict[str, str] | Omit = omit,
         fields: Dict[str, str] | Omit = omit,
+        interaction_id: str | Omit = omit,
         mfa_option_id: str | Omit = omit,
         selected_choice_id: str | Omit = omit,
         sign_in_option_id: str | Omit = omit,
@@ -552,6 +553,9 @@ class ConnectionsResource(SyncAPIResource):
 
           fields: Map of field name to value
 
+          interaction_id: Opaque interaction ID returned with canonical fields and choices. Required for
+              canonical submissions.
+
           mfa_option_id: The MFA method type to select (when mfa_options were returned)
 
           selected_choice_id: Canonical choice ID selected by the user.
@@ -580,6 +584,7 @@ class ConnectionsResource(SyncAPIResource):
                 {
                     "field_values": field_values,
                     "fields": fields,
+                    "interaction_id": interaction_id,
                     "mfa_option_id": mfa_option_id,
                     "selected_choice_id": selected_choice_id,
                     "sign_in_option_id": sign_in_option_id,
@@ -1143,6 +1148,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
         *,
         field_values: Dict[str, str] | Omit = omit,
         fields: Dict[str, str] | Omit = omit,
+        interaction_id: str | Omit = omit,
         mfa_option_id: str | Omit = omit,
         selected_choice_id: str | Omit = omit,
         sign_in_option_id: str | Omit = omit,
@@ -1165,6 +1171,9 @@ class AsyncConnectionsResource(AsyncAPIResource):
 
           fields: Map of field name to value
 
+          interaction_id: Opaque interaction ID returned with canonical fields and choices. Required for
+              canonical submissions.
+
           mfa_option_id: The MFA method type to select (when mfa_options were returned)
 
           selected_choice_id: Canonical choice ID selected by the user.
@@ -1193,6 +1202,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
                 {
                     "field_values": field_values,
                     "fields": fields,
+                    "interaction_id": interaction_id,
                     "mfa_option_id": mfa_option_id,
                     "selected_choice_id": selected_choice_id,
                     "sign_in_option_id": sign_in_option_id,

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/resources/browsers/browsers.py

@@ -208,7 +208,7 @@ class BrowsersResource(SyncAPIResource):
           extensions: List of browser extensions to load into the session. Provide each by id or name.
 
           gpu: If true, enables GPU acceleration for the browser session. Requires Start-Up or
-              Enterprise plan and headless=false.
+              Enterprise plan, headless=false, and region=us-east.
 
           headless: If true, launches the browser using a headless image (no VNC/GUI). Defaults to
               false.
@@ -828,7 +828,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
           extensions: List of browser extensions to load into the session. Provide each by id or name.
 
           gpu: If true, enables GPU acceleration for the browser session. Requires Start-Up or
-              Enterprise plan and headless=false.
+              Enterprise plan, headless=false, and region=us-east.
 
           headless: If true, launches the browser using a headless image (no VNC/GUI). Defaults to
               false.

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/resources/browsers/telemetry.py

@@ -62,6 +62,7 @@ class TelemetryResource(SyncAPIResource):
                 "page",
                 "interaction",
                 "control",
+                "platform",
                 "connection",
                 "system",
                 "screenshot",
@@ -238,6 +239,7 @@ class AsyncTelemetryResource(AsyncAPIResource):
                 "page",
                 "interaction",
                 "control",
+                "platform",
                 "connection",
                 "system",
                 "screenshot",

{kernel-0.92.0 → kernel-0.94.0}/src/kernel/resources/proxies.py

@@ -252,7 +252,10 @@ class ProxiesResource(SyncAPIResource):
     ) -> None:
         """Soft delete a proxy.
 
-        Sessions referencing it are not modified.
+        Session records referencing it are not modified. If egress
+        binding polling is enabled, existing tunnels for active sessions using the proxy
+        are terminated within one polling interval; subsequent connections through the
+        deleted proxy are rejected.
 
         Args:
           extra_headers: Send extra headers
@@ -553,7 +556,10 @@ class AsyncProxiesResource(AsyncAPIResource):
     ) -> None:
         """Soft delete a proxy.
 
-        Sessions referencing it are not modified.
+        Session records referencing it are not modified. If egress
+        binding polling is enabled, existing tunnels for active sessions using the proxy
+        are terminated within one polling interval; subsequent connections through the
+        deleted proxy are rejected.
 
         Args:
           extra_headers: Send extra headers