Merge pull request #180 from kernel/release-please--branches--main--changes--next

release: 0.114.0

Author: rgarcia

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.113.0"
+  ".": "0.114.0"
 }

CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.114.0](https://github.com/kernel/kernel-python-sdk/compare/v0.113.0...v0.114.0) (2026-09-30)
+
+
+### Features
+
+* Accept telemetry.storage and settle it at browser create ([28fb2d3](https://github.com/kernel/kernel-python-sdk/commit/28fb2d3c8fd83090d83404a0b407557585bf93f6))
+* Allow export-only network and console telemetry for BAA orgs ([2ff8d4a](https://github.com/kernel/kernel-python-sdk/commit/2ff8d4acacb1b8152b9c7d1b38067c1b02167f40))
+* Expose missing managed auth check URL as verification unavailable ([74dbad8](https://github.com/kernel/kernel-python-sdk/commit/74dbad8f0cdf5b414022ad907f6e20ee54893c59))
+* Let Vaults fill credentials from 1Password ([2937b10](https://github.com/kernel/kernel-python-sdk/commit/2937b10cce135282b6badc7e5bf71d339500ffdb))
+* Send Stripe publishable key when refreshing customer-owned Link grants ([5c1bed3](https://github.com/kernel/kernel-python-sdk/commit/5c1bed353eb421bff589bcc86b2940ca750e3999))
+
 ## [0.113.0](https://github.com/kernel/kernel-python-sdk/compare/v0.112.0...v0.113.0) (2026-09-27)
 
 

api.md

@@ -207,6 +207,7 @@ from kernel.types.browsers import (
     BrowserTelemetryEvent,
     BrowserTelemetryExportConfig,
     BrowserTelemetryOtlpExportConfig,
+    BrowserTelemetryStorageConfig,
     TelemetryEventsResponse,
     TelemetryStreamResponse,
 )
@@ -554,6 +555,8 @@ from kernel.types.vaults import (
     CardVaultItemSpec,
     CardVaultItemState,
     CollectVaultItemOperationRequest,
+    CredentialAccountVaultItem,
+    CredentialAccountVaultItemRequest,
     CredentialCollectionAction,
     CredentialVaultFieldDefinition,
     CredentialVaultFieldInput,
@@ -569,6 +572,19 @@ from kernel.types.vaults import (
     CredentialVaultItemUpdateRequest,
     FillVaultItemOperationRequest,
     FillVaultItemOperationResult,
+    KernelCredentialVaultItemSpec,
+    KernelCredentialVaultItemSpecInput,
+    KernelCredentialVaultItemState,
+    OnePasswordCredentialAccountSpec,
+    OnePasswordCredentialAccountState,
+    OnePasswordCredentialVaultItemSpec,
+    OnePasswordCredentialVaultItemSpecInput,
+    OnePasswordCredentialVaultItemState,
+    OnePasswordFillVaultItemOperationRequest,
+    OnePasswordFillVaultItemOperationResult,
+    OnePasswordOAuthAction,
+    OnePasswordRecoverVaultItemOperationRequest,
+    OnePasswordRequestAccessVaultItemOperationRequest,
     PrepareCheckoutVaultItemOperationRequest,
     VaultCardAliases,
     VaultCardFillField,

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.113.0"
+version = "0.114.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.113.0"  # x-release-please-version
+__version__ = "0.114.0"  # x-release-please-version

src/kernel/resources/vaults/items.py

@@ -15,6 +15,7 @@
     "BrowserTelemetryExport",
     "BrowserTelemetryExportOtlp",
     "BrowserTelemetryExportOtlpDestination",
+    "BrowserTelemetryStorage",
     "Credential",
     "Proxy",
 ]
@@ -166,6 +167,17 @@ class BrowserTelemetryExport(TypedDict, total=False):
     """
 
 
+class BrowserTelemetryStorage(TypedDict, total=False):
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
+    enabled: bool
+    """Whether captured telemetry is persisted to Kernel storage.
+
+    Defaults to true. Setting false requires an OTLP destination and cannot be
+    changed after the browser is created.
+    """
+
+
 class BrowserTelemetry(TypedDict, total=False):
     """Deprecated.
 
@@ -205,6 +217,9 @@ class BrowserTelemetry(TypedDict, total=False):
     Omit to capture without exporting.
     """
 
+    storage: BrowserTelemetryStorage
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
 
 class Credential(TypedDict, total=False):
     """Reference to credentials for the auth connection.

src/kernel/types/auth/connection_create_params.py

@@ -14,6 +14,7 @@
     "BrowserTelemetryExport",
     "BrowserTelemetryExportOtlp",
     "BrowserTelemetryExportOtlpDestination",
+    "BrowserTelemetryStorage",
     "Proxy",
 ]
 
@@ -92,6 +93,17 @@ class BrowserTelemetryExport(TypedDict, total=False):
     """
 
 
+class BrowserTelemetryStorage(TypedDict, total=False):
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
+    enabled: bool
+    """Whether captured telemetry is persisted to Kernel storage.
+
+    Defaults to true. Setting false requires an OTLP destination and cannot be
+    changed after the browser is created.
+    """
+
+
 class BrowserTelemetry(TypedDict, total=False):
     """Deprecated.
 
@@ -131,6 +143,9 @@ class BrowserTelemetry(TypedDict, total=False):
     Omit to capture without exporting.
     """
 
+    storage: BrowserTelemetryStorage
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
 
 class Proxy(TypedDict, total=False):
     """Deprecated. Use browser.proxy. Retained during migration for existing clients."""

src/kernel/types/auth/connection_login_params.py

@@ -15,6 +15,7 @@
     "BrowserTelemetryExport",
     "BrowserTelemetryExportOtlp",
     "BrowserTelemetryExportOtlpDestination",
+    "BrowserTelemetryStorage",
     "Credential",
     "Proxy",
 ]
@@ -129,6 +130,17 @@ class BrowserTelemetryExport(TypedDict, total=False):
     """
 
 
+class BrowserTelemetryStorage(TypedDict, total=False):
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
+    enabled: bool
+    """Whether captured telemetry is persisted to Kernel storage.
+
+    Defaults to true. Setting false requires an OTLP destination and cannot be
+    changed after the browser is created.
+    """
+
+
 class BrowserTelemetry(TypedDict, total=False):
     """Deprecated.
 
@@ -168,6 +180,9 @@ class BrowserTelemetry(TypedDict, total=False):
     Omit to capture without exporting.
     """
 
+    storage: BrowserTelemetryStorage
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
 
 class Credential(TypedDict, total=False):
     """Reference to credentials for the auth connection.

src/kernel/types/auth/connection_update_params.py

@@ -14,6 +14,7 @@
     "BrowserTelemetryExport",
     "BrowserTelemetryExportOtlp",
     "BrowserTelemetryExportOtlpDestination",
+    "BrowserTelemetryStorage",
     "Choice",
     "Credential",
     "DiscoveredField",
@@ -68,6 +69,17 @@ class BrowserTelemetryExport(BaseModel):
     """
 
 
+class BrowserTelemetryStorage(BaseModel):
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
+    enabled: Optional[bool] = None
+    """Whether captured telemetry is persisted to Kernel storage.
+
+    Defaults to true. Setting false requires an OTLP destination and cannot be
+    changed after the browser is created.
+    """
+
+
 class BrowserTelemetry(BaseModel):
     """Deprecated.
 
@@ -107,6 +119,9 @@ class BrowserTelemetry(BaseModel):
     Omit to capture without exporting.
     """
 
+    storage: Optional[BrowserTelemetryStorage] = None
+    """Whether to persist this session's captured telemetry to Kernel storage."""
+
 
 class Choice(BaseModel):
     """Canonical auth-flow choice awaiting user selection."""
@@ -309,7 +324,11 @@ class ManagedAuth(BaseModel):
     """
 
     status: Literal["AUTHENTICATED", "NEEDS_AUTH"]
-    """Current authentication status of the managed profile"""
+    """Last known authentication status of the managed profile.
+
+    An inconclusive health check preserves this status and does not verify the
+    current session.
+    """
 
     allowed_domains: Optional[List[str]] = None
     """Additional hostname roots valid for this auth flow, besides the primary domain.
@@ -504,6 +523,13 @@ class ManagedAuth(BaseModel):
     3600 (1 hour), Free: 21600 (6 hours).
     """
 
+    health_check_unavailable_reason: Optional[Literal["no_auth_check_url"]] = None
+    """Why health checks cannot verify this connection.
+
+    Present when health checks are enabled but no auth check URL is available; a
+    recent last_auth_check_at is not evidence of a valid session.
+    """
+
     health_checks: Optional[bool] = None
     """Whether periodic health checks are enabled for this connection.