release: 0.127.0

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.126.0"
+  ".": "0.127.0"
 }

CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.127.0](https://github.com/kernel/kernel-node-sdk/compare/v0.126.0...v0.127.0) (2026-10-16)
+
+
+### Features
+
+* Add atomic preconditions to pool network updates ([50d68f4](https://github.com/kernel/kernel-node-sdk/commit/50d68f4a37942f828a5ed2e1484d9f4e3f0604ec))
+* Add passkey credential fields and PATCH field add/remove ([d1001f3](https://github.com/kernel/kernel-node-sdk/commit/d1001f3ada17f6951453337d61a66054d46ada91))
+* Allow replacing vault cards whose provider outcome is unknown ([060038b](https://github.com/kernel/kernel-node-sdk/commit/060038b80d7bdc0a3feb63c5bb8a9dc9624b6308))
+* chore(stlc): seal custom-code tracking files ([2b47c61](https://github.com/kernel/kernel-node-sdk/commit/2b47c615b08d72fb5ea27120cbc6509d22d9931f))
+* Classify text captchas as token tasks and Binance as a provider ([0974d4f](https://github.com/kernel/kernel-node-sdk/commit/0974d4f31fa6104d5a7be2cfbb9b0fcdd1766559))
+* Deliver Kernel card details through fill ([03d2609](https://github.com/kernel/kernel-node-sdk/commit/03d2609d2f0694f9a50988d476b5eb1ff0efeb0b))
+* Raise Kernel card amount cap to $10,000 ([1f992aa](https://github.com/kernel/kernel-node-sdk/commit/1f992aaadfef30a8d8ddc2abd7105b855866d051))
+* Remove Link expires_at, return 400 for missing credential values, and log fill failures ([8dea4a0](https://github.com/kernel/kernel-node-sdk/commit/8dea4a0085460718baf7cc210b74875138065407))
+
 ## [0.126.0](https://github.com/kernel/kernel-node-sdk/compare/v0.125.0...v0.126.0) (2026-10-14)
 
 

api.md

@@ -519,6 +519,7 @@ Types:
 - <code><a href="./src/resources/vaults/items.ts">CredentialAccountVaultItemRequest</a></code>
 - <code><a href="./src/resources/vaults/items.ts">CredentialCollectionAction</a></code>
 - <code><a href="./src/resources/vaults/items.ts">CredentialVaultFieldDefinition</a></code>
+- <code><a href="./src/resources/vaults/items.ts">CredentialVaultFieldDefinitionInput</a></code>
 - <code><a href="./src/resources/vaults/items.ts">CredentialVaultFieldInput</a></code>
 - <code><a href="./src/resources/vaults/items.ts">CredentialVaultFieldState</a></code>
 - <code><a href="./src/resources/vaults/items.ts">CredentialVaultFieldType</a></code>

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.126.0",
+  "version": "0.127.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "dist/index.d.ts",

src/resources/browser-pools.ts

@@ -580,7 +580,8 @@ export interface BrowserPoolCreateParams {
   kiosk_mode?: boolean;
 
   /**
-   * Memory requested for headful browsers in this pool.
+   * Memory for browsers in this pool. Headless: 1GiB (default), 2GiB, or 4GiB.
+   * Headful: 8GiB (default) or 16GiB.
    */
   memory?: BrowsersAPI.BrowserMemoryRequest;
 
@@ -827,6 +828,16 @@ export interface BrowserPoolUpdateParams {
    */
   discard_all_idle?: boolean;
 
+  /**
+   * Optional optimistic concurrency precondition. Send the network configuration
+   * from the last pool response, or {} when it has no network configuration. The
+   * entire update is rejected with 409 stale_network if the saved network differs,
+   * checked atomically with the write. Omit for unconditional updates. Explicit
+   * empty lists differ from omitted lists; route targets must match the saved
+   * references (resolved IDs, not equivalent proxy names).
+   */
+  expected_network?: BrowsersAPI.BrowserNetworkConfig;
+
   /**
    * If provided, replaces the extension list. Empty array clears all
    * previously-selected extensions. Omit this field to leave extensions unchanged.
@@ -851,11 +862,11 @@ export interface BrowserPoolUpdateParams {
   kiosk_mode?: boolean;
 
   /**
-   * Memory requested for newly-warmed headful browsers in this pool. Existing
-   * browsers retain their original allocation. Use discard_all_idle to replace idle
-   * browsers.
+   * Memory requested for newly-warmed browsers in this pool: 1GiB, 2GiB, or 4GiB for
+   * headless, 8GiB or 16GiB for headful. Existing browsers retain their original
+   * allocation. Use discard_all_idle to replace idle browsers.
    */
-  memory?: '8GiB' | '16GiB';
+  memory?: '1GiB' | '2GiB' | '4GiB' | '8GiB' | '16GiB';
 
   /**
    * If provided, replaces the pool name. Empty string is a no-op; the pool name

src/resources/browsers/browsers.ts

@@ -349,12 +349,13 @@ export type ProfilesOffsetPagination = OffsetPagination<Profile>;
 /**
  * Memory allocated to the browser session.
  */
-export type BrowserMemory = '1GiB' | '2GiB' | '6GiB' | '8GiB' | '12GiB' | '16GiB';
+export type BrowserMemory = '1GiB' | '2GiB' | '4GiB' | '6GiB' | '8GiB' | '12GiB' | '16GiB';
 
 /**
- * Memory requested for a headful, non-GPU browser session.
+ * Memory requested for a non-GPU browser. Headless browsers support 1GiB
+ * (default), 2GiB, or 4GiB; headful browsers support 8GiB (default) or 16GiB.
  */
-export type BrowserMemoryRequest = '8GiB' | '16GiB';
+export type BrowserMemoryRequest = '1GiB' | '2GiB' | '4GiB' | '8GiB' | '16GiB';
 
 /**
  * Network configuration for a browser session or browser pool.
@@ -1491,7 +1492,8 @@ export interface BrowserCreateParams {
   kiosk_mode?: boolean;
 
   /**
-   * Memory for a headful, non-GPU browser session. Defaults to 8GiB.
+   * Memory for a non-GPU browser. Headless: 1GiB (default), 2GiB, or 4GiB. Headful:
+   * 8GiB (default) or 16GiB.
    */
   memory?: BrowserMemoryRequest;
 

src/resources/browsers/telemetry.ts

@@ -282,7 +282,7 @@ export namespace BrowserCaptchaChallengeResultEvent {
      * Enterprise reCAPTCHA variants are grouped into their version bucket
      * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
      * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
-     * products use other.
+     * products, including text captchas a site draws itself, use other.
      */
     captcha_provider?:
       | 'hcaptcha'
@@ -292,6 +292,7 @@ export namespace BrowserCaptchaChallengeResultEvent {
       | 'geetest'
       | 'arkose'
       | 'human'
+      | 'binance'
       | 'other';
 
     /**
@@ -388,7 +389,7 @@ export namespace BrowserCaptchaSolveResultEvent {
      * Enterprise reCAPTCHA variants are grouped into their version bucket
      * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
      * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
-     * products use other.
+     * products, including text captchas a site draws itself, use other.
      */
     captcha_provider?:
       | 'hcaptcha'
@@ -398,6 +399,7 @@ export namespace BrowserCaptchaSolveResultEvent {
       | 'geetest'
       | 'arkose'
       | 'human'
+      | 'binance'
       | 'other';
 
     /**
@@ -414,6 +416,11 @@ export namespace BrowserCaptchaSolveResultEvent {
      */
     error_code?: string;
 
+    /**
+     * Captured hCaptcha recognition media, when known.
+     */
+    media?: 'image' | 'video';
+
     /**
      * Opaque identifier shared with the matching captcha_solve_started.
      */
@@ -493,7 +500,7 @@ export namespace BrowserCaptchaSolveStartedEvent {
      * Enterprise reCAPTCHA variants are grouped into their version bucket
      * (recaptcha_v2 or recaptcha_v3), FunCaptcha uses arkose, press-and-hold
      * challenges served by HUMAN (formerly PerimeterX) use human, and unlisted
-     * products use other.
+     * products, including text captchas a site draws itself, use other.
      */
     captcha_provider?:
       | 'hcaptcha'
@@ -503,6 +510,7 @@ export namespace BrowserCaptchaSolveStartedEvent {
       | 'geetest'
       | 'arkose'
       | 'human'
+      | 'binance'
       | 'other';
 
     /**
@@ -513,6 +521,11 @@ export namespace BrowserCaptchaSolveStartedEvent {
      */
     challenge_id?: string;
 
+    /**
+     * Captured hCaptcha recognition media, when known.
+     */
+    media?: 'image' | 'video';
+
     /**
      * Opaque identifier shared with the matching captcha_solve_result.
      */

src/resources/vaults/index.ts

@@ -14,6 +14,7 @@ export {
   type CredentialAccountVaultItemRequest,
   type CredentialCollectionAction,
   type CredentialVaultFieldDefinition,
+  type CredentialVaultFieldDefinitionInput,
   type CredentialVaultFieldInput,
   type CredentialVaultFieldState,
   type CredentialVaultFieldType,