Merge pull request #186 from kernel/release-please--branches--main--changes--next

release: 0.119.0

Author: bmsaadat

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.118.0"
+  ".": "0.119.0"
 }

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.119.0](https://github.com/kernel/kernel-python-sdk/compare/v0.118.0...v0.119.0) (2026-10-02)
+
+
+### Features
+
+* Add managed auth provider to vault credential items ([795d824](https://github.com/kernel/kernel-python-sdk/commit/795d8241dfd22dc7667d7fd74c70182cc7467928))
+
 ## [0.118.0](https://github.com/kernel/kernel-python-sdk/compare/v0.117.0...v0.118.0) (2026-10-02)
 
 

api.md

@@ -579,6 +579,10 @@ from kernel.types.vaults import (
     KernelCredentialVaultItemState,
     KernelWalletState,
     KernelWalletVaultItemSpec,
+    ManagedAuthCredentialVaultField,
+    ManagedAuthCredentialVaultItemSpec,
+    ManagedAuthCredentialVaultItemSpecInput,
+    ManagedAuthCredentialVaultItemState,
     OnePasswordCredentialAccountSpec,
     OnePasswordCredentialAccountState,
     OnePasswordCredentialVaultItemSpec,

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.118.0"
+version = "0.119.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.118.0"  # x-release-please-version
+__version__ = "0.119.0"  # x-release-please-version

src/kernel/resources/vaults/items.py

@@ -93,6 +93,7 @@ def retrieve(
               approval, or credential collection. Return the current item when ready or when
               the wait elapses. This does not wait for edits to an already-ready credential;
               poll GET without wait and compare version to observe changes after collect.
+              Managed auth credentials are created ready, so wait returns immediately.
 
           extra_headers: Send extra headers
 
@@ -315,7 +316,8 @@ def delete(
         recovery_required whose checkout create response returned no authorization ID
         may be explicitly abandoned by deleting that card directly; deleting its wallet
         or vault remains blocked. Deleting or recreating an item is not proof that a
-        payment did not occur.
+        payment did not occur. Deleting a managed auth credential item leaves the
+        connection and its saved credential unchanged.
 
         Args:
           extra_headers: Send extra headers
@@ -1270,6 +1272,7 @@ async def retrieve(
               approval, or credential collection. Return the current item when ready or when
               the wait elapses. This does not wait for edits to an already-ready credential;
               poll GET without wait and compare version to observe changes after collect.
+              Managed auth credentials are created ready, so wait returns immediately.
 
           extra_headers: Send extra headers
 
@@ -1492,7 +1495,8 @@ async def delete(
         recovery_required whose checkout create response returned no authorization ID
         may be explicitly abandoned by deleting that card directly; deleting its wallet
         or vault remains blocked. Deleting or recreating an item is not proof that a
-        payment did not occur.
+        payment did not occur. Deleting a managed auth credential item leaves the
+        connection and its saved credential unchanged.
 
         Args:
           extra_headers: Send extra headers

src/kernel/types/vaults/__init__.py

@@ -48,6 +48,7 @@
 from .credential_vault_field_update_param import CredentialVaultFieldUpdateParam as CredentialVaultFieldUpdateParam
 from .credential_vault_item_request_param import CredentialVaultItemRequestParam as CredentialVaultItemRequestParam
 from .kernel_wallet_vault_item_spec_param import KernelWalletVaultItemSpecParam as KernelWalletVaultItemSpecParam
+from .managed_auth_credential_vault_field import ManagedAuthCredentialVaultField as ManagedAuthCredentialVaultField
 from .one_password_credential_account_spec import OnePasswordCredentialAccountSpec as OnePasswordCredentialAccountSpec
 from .one_password_credential_account_state import (
     OnePasswordCredentialAccountState as OnePasswordCredentialAccountState,
@@ -61,9 +62,15 @@
 from .fill_vault_item_operation_request_param import (
     FillVaultItemOperationRequestParam as FillVaultItemOperationRequestParam,
 )
+from .managed_auth_credential_vault_item_spec import (
+    ManagedAuthCredentialVaultItemSpec as ManagedAuthCredentialVaultItemSpec,
+)
 from .one_password_credential_vault_item_spec import (
     OnePasswordCredentialVaultItemSpec as OnePasswordCredentialVaultItemSpec,
 )
+from .managed_auth_credential_vault_item_state import (
+    ManagedAuthCredentialVaultItemState as ManagedAuthCredentialVaultItemState,
+)
 from .one_password_credential_vault_item_state import (
     OnePasswordCredentialVaultItemState as OnePasswordCredentialVaultItemState,
 )
@@ -94,6 +101,9 @@
 from .webmcp_invoke_vault_item_operation_request_param import (
     WebmcpInvokeVaultItemOperationRequestParam as WebmcpInvokeVaultItemOperationRequestParam,
 )
+from .managed_auth_credential_vault_item_spec_input_param import (
+    ManagedAuthCredentialVaultItemSpecInputParam as ManagedAuthCredentialVaultItemSpecInputParam,
+)
 from .one_password_credential_vault_item_spec_input_param import (
     OnePasswordCredentialVaultItemSpecInputParam as OnePasswordCredentialVaultItemSpecInputParam,
 )

src/kernel/types/vaults/credential_vault_item.py

@@ -83,7 +83,8 @@ class CredentialVaultItem(BaseModel):
 
     1Password credentials advertise 1pw_create_access_request until a request is
     made, 1pw_access_request_status while its approval is pending, and 1pw_fill
-    after access is granted.
+    after access is granted. Managed auth credentials advertise fill while ready and
+    nothing otherwise.
     """
 
     created_at: datetime
@@ -106,7 +107,8 @@ class CredentialVaultItem(BaseModel):
     version: int
     """
     Starts at 1 and increments on PATCH and successful hosted submission, but not
-    collection-link renewal.
+    collection-link renewal. Managed auth credentials stay at 1; changes to the
+    underlying credential are read at fill time and do not change the version.
     """
 
     action: Optional[Action] = None

src/kernel/types/vaults/credential_vault_item_request_param.py

@@ -20,9 +20,12 @@ class CredentialVaultItemRequestParam(TypedDict, total=False):
     Kernel credentials declare fields and may enter pending_collection.
     1Password credentials either reference a connected credential_account or
     store a supplied access token and integration key encrypted on the item.
-    They store no login values or selectors. Repeating the original creation
-    request returns the current item without overwriting later state. A
-    different request at the same key returns 409.
+    They store no login values or selectors.
+    Managed auth credentials reference a managed auth connection in the same
+    project that already has a saved credential, and read it at fill time;
+    they store no values.
+    Repeating the original creation request returns the current item without
+    overwriting later state. A different request at the same key returns 409.
     """
 
     spec: Required[CredentialVaultItemSpecInputParam]

src/kernel/types/vaults/credential_vault_item_spec.py

@@ -5,10 +5,12 @@
 
 from ..._utils import PropertyInfo
 from .kernel_credential_vault_item_spec import KernelCredentialVaultItemSpec
+from .managed_auth_credential_vault_item_spec import ManagedAuthCredentialVaultItemSpec
 from .one_password_credential_vault_item_spec import OnePasswordCredentialVaultItemSpec
 
 __all__ = ["CredentialVaultItemSpec"]
 
 CredentialVaultItemSpec: TypeAlias = Annotated[
-    Union[KernelCredentialVaultItemSpec, OnePasswordCredentialVaultItemSpec], PropertyInfo(discriminator="provider")
+    Union[KernelCredentialVaultItemSpec, OnePasswordCredentialVaultItemSpec, ManagedAuthCredentialVaultItemSpec],
+    PropertyInfo(discriminator="provider"),
 ]