From dda0e7b80fe6b104bde97a0b06cf060557501824 Mon Sep 17 00:00:00 2001 From: "stainless-app[bot]" <142633134+stainless-app[bot]@users.noreply.github.com> Date: Sat, 17 Jan 2026 21:34:31 +0000 Subject: [PATCH 1/8] codegen metadata --- .stats.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.stats.yml b/.stats.yml index 2857ba8..8e09c0a 100644 --- a/.stats.yml +++ b/.stats.yml @@ -1,4 +1,4 @@ configured_endpoints: 91 -openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-fc2c80b398a8dd511010ae7cda5e21c353e388ee130aa288974b47af4208b5b8.yml -openapi_spec_hash: 5e06586dbbb9fce12b907f4e32497006 +openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-1e490dbef30dfa53ccba72524fcba4079f244f2530a4f770c00f8fee707eaa72.yml +openapi_spec_hash: 1fd15429610959f19aed6d3cb170ab9e config_hash: cc7fdd701d995d4b3456d77041c604cf From 33f2a9cd0b5391bd058f6c74900c8d3731b3f990 Mon Sep 17 00:00:00 2001 From: "stainless-app[bot]" <142633134+stainless-app[bot]@users.noreply.github.com> Date: Sun, 18 Jan 2026 22:56:52 +0000 Subject: [PATCH 2/8] feat(dashboard): add browser replays support for past browsers --- .stats.yml | 4 ++-- api.md | 2 +- browser.go | 45 +++++++++++++++++++++++++++++++++++++-------- browser_test.go | 11 +++++++++-- 4 files changed, 49 insertions(+), 13 deletions(-) diff --git a/.stats.yml b/.stats.yml index 8e09c0a..37fa5b7 100644 --- a/.stats.yml +++ b/.stats.yml @@ -1,4 +1,4 @@ configured_endpoints: 91 -openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-1e490dbef30dfa53ccba72524fcba4079f244f2530a4f770c00f8fee707eaa72.yml -openapi_spec_hash: 1fd15429610959f19aed6d3cb170ab9e +openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-68729f2ff40476377ead9019c18ea140fc4efbc2e68d7c4fc323bd61ae81f768.yml +openapi_spec_hash: 9eec61481f9059b5fedc13abc3e39338 config_hash: cc7fdd701d995d4b3456d77041c604cf diff --git a/api.md b/api.md index f5dfb8c..5a00389 100644 --- a/api.md +++ b/api.md @@ -81,7 +81,7 @@ Response Types: Methods: - client.Browsers.New(ctx context.Context, body kernel.BrowserNewParams) (\*kernel.BrowserNewResponse, error) -- client.Browsers.Get(ctx context.Context, id string) (\*kernel.BrowserGetResponse, error) +- client.Browsers.Get(ctx context.Context, id string, query kernel.BrowserGetParams) (\*kernel.BrowserGetResponse, error) - client.Browsers.Update(ctx context.Context, id string, body kernel.BrowserUpdateParams) (\*kernel.BrowserUpdateResponse, error) - client.Browsers.List(ctx context.Context, query kernel.BrowserListParams) (\*pagination.OffsetPagination[kernel.BrowserListResponse], error) - client.Browsers.Delete(ctx context.Context, body kernel.BrowserDeleteParams) error diff --git a/browser.go b/browser.go index c8da385..0c27f87 100644 --- a/browser.go +++ b/browser.go @@ -66,14 +66,14 @@ func (r *BrowserService) New(ctx context.Context, body BrowserNewParams, opts .. } // Get information about a browser session. -func (r *BrowserService) Get(ctx context.Context, id string, opts ...option.RequestOption) (res *BrowserGetResponse, err error) { +func (r *BrowserService) Get(ctx context.Context, id string, query BrowserGetParams, opts ...option.RequestOption) (res *BrowserGetResponse, err error) { opts = slices.Concat(r.Options, opts) if id == "" { err = errors.New("missing required id parameter") return } path := fmt.Sprintf("browsers/%s", id) - err = requestconfig.ExecuteNewRequest(ctx, http.MethodGet, path, nil, &res, opts...) + err = requestconfig.ExecuteNewRequest(ctx, http.MethodGet, path, query, &res, opts...) return } @@ -89,8 +89,8 @@ func (r *BrowserService) Update(ctx context.Context, id string, body BrowserUpda return } -// List all browser sessions with pagination support. Use include_deleted=true to -// include soft-deleted sessions in the results. +// List all browser sessions with pagination support. Use status parameter to +// filter by session state. func (r *BrowserService) List(ctx context.Context, query BrowserListParams, opts ...option.RequestOption) (res *pagination.OffsetPagination[BrowserListResponse], err error) { var raw *http.Response opts = slices.Concat(r.Options, opts) @@ -108,8 +108,8 @@ func (r *BrowserService) List(ctx context.Context, query BrowserListParams, opts return res, nil } -// List all browser sessions with pagination support. Use include_deleted=true to -// include soft-deleted sessions in the results. +// List all browser sessions with pagination support. Use status parameter to +// filter by session state. func (r *BrowserService) ListAutoPaging(ctx context.Context, query BrowserListParams, opts ...option.RequestOption) *pagination.OffsetPaginationAutoPager[BrowserListResponse] { return pagination.NewOffsetPaginationAutoPager(r.List(ctx, query, opts...)) } @@ -532,6 +532,20 @@ func (r *BrowserNewParams) UnmarshalJSON(data []byte) error { return apijson.UnmarshalRoot(data, r) } +type BrowserGetParams struct { + // When true, includes soft-deleted browser sessions in the lookup. + IncludeDeleted param.Opt[bool] `query:"include_deleted,omitzero" json:"-"` + paramObj +} + +// URLQuery serializes [BrowserGetParams]'s query parameters as `url.Values`. +func (r BrowserGetParams) URLQuery() (v url.Values, err error) { + return apiquery.MarshalWithSettings(r, apiquery.QuerySettings{ + ArrayFormat: apiquery.ArrayQueryFormatComma, + NestedFormat: apiquery.NestedQueryFormatBrackets, + }) +} + type BrowserUpdateParams struct { // ID of the proxy to use. Omit to leave unchanged, set to empty string to remove // proxy. @@ -548,13 +562,18 @@ func (r *BrowserUpdateParams) UnmarshalJSON(data []byte) error { } type BrowserListParams struct { - // When true, includes soft-deleted browser sessions in the results alongside - // active sessions. + // Deprecated: Use status=all instead. When true, includes soft-deleted browser + // sessions in the results alongside active sessions. IncludeDeleted param.Opt[bool] `query:"include_deleted,omitzero" json:"-"` // Maximum number of results to return. Defaults to 20, maximum 100. Limit param.Opt[int64] `query:"limit,omitzero" json:"-"` // Number of results to skip. Defaults to 0. Offset param.Opt[int64] `query:"offset,omitzero" json:"-"` + // Filter sessions by status. "active" returns only active sessions (default), + // "deleted" returns only soft-deleted sessions, "all" returns both. + // + // Any of "active", "deleted", "all". + Status BrowserListParamsStatus `query:"status,omitzero" json:"-"` paramObj } @@ -566,6 +585,16 @@ func (r BrowserListParams) URLQuery() (v url.Values, err error) { }) } +// Filter sessions by status. "active" returns only active sessions (default), +// "deleted" returns only soft-deleted sessions, "all" returns both. +type BrowserListParamsStatus string + +const ( + BrowserListParamsStatusActive BrowserListParamsStatus = "active" + BrowserListParamsStatusDeleted BrowserListParamsStatus = "deleted" + BrowserListParamsStatusAll BrowserListParamsStatus = "all" +) + type BrowserDeleteParams struct { // Persistent browser identifier PersistentID string `query:"persistent_id,required" json:"-"` diff --git a/browser_test.go b/browser_test.go index d0ab6f5..f0df76c 100644 --- a/browser_test.go +++ b/browser_test.go @@ -63,7 +63,7 @@ func TestBrowserNewWithOptionalParams(t *testing.T) { } } -func TestBrowserGet(t *testing.T) { +func TestBrowserGetWithOptionalParams(t *testing.T) { t.Skip("Prism tests are disabled") baseURL := "http://localhost:4010" if envURL, ok := os.LookupEnv("TEST_API_BASE_URL"); ok { @@ -76,7 +76,13 @@ func TestBrowserGet(t *testing.T) { option.WithBaseURL(baseURL), option.WithAPIKey("My API Key"), ) - _, err := client.Browsers.Get(context.TODO(), "htzv5orfit78e1m2biiifpbv") + _, err := client.Browsers.Get( + context.TODO(), + "htzv5orfit78e1m2biiifpbv", + kernel.BrowserGetParams{ + IncludeDeleted: kernel.Bool(true), + }, + ) if err != nil { var apierr *kernel.Error if errors.As(err, &apierr) { @@ -132,6 +138,7 @@ func TestBrowserListWithOptionalParams(t *testing.T) { IncludeDeleted: kernel.Bool(true), Limit: kernel.Int(1), Offset: kernel.Int(0), + Status: kernel.BrowserListParamsStatusActive, }) if err != nil { var apierr *kernel.Error From 87102cc94a523e19ae7e2ea476a4c75f3e7cfead Mon Sep 17 00:00:00 2001 From: "stainless-app[bot]" <142633134+stainless-app[bot]@users.noreply.github.com> Date: Mon, 19 Jan 2026 18:47:24 +0000 Subject: [PATCH 3/8] codegen metadata --- .stats.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.stats.yml b/.stats.yml index 37fa5b7..9ec6fcc 100644 --- a/.stats.yml +++ b/.stats.yml @@ -1,4 +1,4 @@ configured_endpoints: 91 -openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-68729f2ff40476377ead9019c18ea140fc4efbc2e68d7c4fc323bd61ae81f768.yml -openapi_spec_hash: 9eec61481f9059b5fedc13abc3e39338 +openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-59d2925a3cb93809cc762a3ac350691b365898e284f2c66a5999b9a6a37a35e5.yml +openapi_spec_hash: dfcb0a49e657426d0c0f44cfa3e89430 config_hash: cc7fdd701d995d4b3456d77041c604cf From 6848a1c11b3b648b163db8cf1e47347d6b6acbb8 Mon Sep 17 00:00:00 2001 From: "stainless-app[bot]" <142633134+stainless-app[bot]@users.noreply.github.com> Date: Wed, 21 Jan 2026 00:59:52 +0000 Subject: [PATCH 4/8] feat: Update browser pool org limits --- .stats.yml | 4 ++-- browserpool.go | 12 +++++++++--- 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/.stats.yml b/.stats.yml index 9ec6fcc..996826a 100644 --- a/.stats.yml +++ b/.stats.yml @@ -1,4 +1,4 @@ configured_endpoints: 91 -openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-59d2925a3cb93809cc762a3ac350691b365898e284f2c66a5999b9a6a37a35e5.yml -openapi_spec_hash: dfcb0a49e657426d0c0f44cfa3e89430 +openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-97558c7b5f2714e629041ff892cdabef76c4ab214b5f908ba8b36d507eac5260.yml +openapi_spec_hash: 3464d532154863ca17b82082451b9faf config_hash: cc7fdd701d995d4b3456d77041c604cf diff --git a/browserpool.go b/browserpool.go index b137499..6119f17 100644 --- a/browserpool.go +++ b/browserpool.go @@ -167,7 +167,9 @@ func (r *BrowserPool) UnmarshalJSON(data []byte) error { // Configuration used to create all browsers in this pool type BrowserPoolBrowserPoolConfig struct { - // Number of browsers to create in the pool + // Number of browsers to maintain in the pool. The maximum size is determined by + // your organization's pooled sessions limit (the sum of all pool sizes cannot + // exceed your limit). Size int64 `json:"size,required"` // List of browser extensions to load into the session. Provide each by id or name. Extensions []shared.BrowserExtension `json:"extensions"` @@ -290,7 +292,9 @@ func (r *BrowserPoolAcquireResponse) UnmarshalJSON(data []byte) error { } type BrowserPoolNewParams struct { - // Number of browsers to create in the pool + // Number of browsers to maintain in the pool. The maximum size is determined by + // your organization's pooled sessions limit (the sum of all pool sizes cannot + // exceed your limit). Size int64 `json:"size,required"` // Percentage of the pool to fill per minute. Defaults to 10%. FillRatePerMinute param.Opt[int64] `json:"fill_rate_per_minute,omitzero"` @@ -337,7 +341,9 @@ func (r *BrowserPoolNewParams) UnmarshalJSON(data []byte) error { } type BrowserPoolUpdateParams struct { - // Number of browsers to create in the pool + // Number of browsers to maintain in the pool. The maximum size is determined by + // your organization's pooled sessions limit (the sum of all pool sizes cannot + // exceed your limit). Size int64 `json:"size,required"` // Whether to discard all idle browsers and rebuild the pool immediately. Defaults // to false. From 71801e7d3375037a68f751099bc6333e592fb654 Mon Sep 17 00:00:00 2001 From: "stainless-app[bot]" <142633134+stainless-app[bot]@users.noreply.github.com> Date: Wed, 21 Jan 2026 03:29:19 +0000 Subject: [PATCH 5/8] =?UTF-8?q?refactor(agentauth):=20enhance=20discover?= =?UTF-8?q?=20and=20submit=20modules=20with=20improve=E2=80=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .stats.yml | 4 ++-- agentauth.go | 3 +++ 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.stats.yml b/.stats.yml index 996826a..480b78b 100644 --- a/.stats.yml +++ b/.stats.yml @@ -1,4 +1,4 @@ configured_endpoints: 91 -openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-97558c7b5f2714e629041ff892cdabef76c4ab214b5f908ba8b36d507eac5260.yml -openapi_spec_hash: 3464d532154863ca17b82082451b9faf +openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-714affeb2859c03a71d35708b6704b1750a1712738a130f3363ae67b20d751d9.yml +openapi_spec_hash: 9d2b9358f0f640ecd1eacd15b70dd361 config_hash: cc7fdd701d995d4b3456d77041c604cf diff --git a/agentauth.go b/agentauth.go index dcccafe..f34761d 100644 --- a/agentauth.go +++ b/agentauth.go @@ -146,6 +146,8 @@ type AgentAuthInvocationResponse struct { PendingFields []DiscoveredField `json:"pending_fields,nullable"` // SSO buttons available on the page (present when step=awaiting_input) PendingSSOButtons []AgentAuthInvocationResponsePendingSSOButton `json:"pending_sso_buttons,nullable"` + // SSO provider being used for authentication (e.g., google, github, microsoft) + SSOProvider string `json:"sso_provider,nullable"` // Names of fields that have been submitted (present when step=submitting or later) SubmittedFields []string `json:"submitted_fields,nullable"` // JSON contains metadata for fields, check presence with [respjson.Field.Valid]. @@ -162,6 +164,7 @@ type AgentAuthInvocationResponse struct { MfaOptions respjson.Field PendingFields respjson.Field PendingSSOButtons respjson.Field + SSOProvider respjson.Field SubmittedFields respjson.Field ExtraFields map[string]respjson.Field raw string From 690962f9f276c1e917c7462ec57400afccf3509f Mon Sep 17 00:00:00 2001 From: "stainless-app[bot]" <142633134+stainless-app[bot]@users.noreply.github.com> Date: Wed, 21 Jan 2026 04:38:58 +0000 Subject: [PATCH 6/8] feat(agent-auth): add 1Password integration for credential providers --- .stats.yml | 8 +- api.md | 21 +++ client.go | 24 ++-- credentialprovider.go | 269 +++++++++++++++++++++++++++++++++++++ credentialprovider_test.go | 169 +++++++++++++++++++++++ 5 files changed, 476 insertions(+), 15 deletions(-) create mode 100644 credentialprovider.go create mode 100644 credentialprovider_test.go diff --git a/.stats.yml b/.stats.yml index 480b78b..50043a4 100644 --- a/.stats.yml +++ b/.stats.yml @@ -1,4 +1,4 @@ -configured_endpoints: 91 -openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-714affeb2859c03a71d35708b6704b1750a1712738a130f3363ae67b20d751d9.yml -openapi_spec_hash: 9d2b9358f0f640ecd1eacd15b70dd361 -config_hash: cc7fdd701d995d4b3456d77041c604cf +configured_endpoints: 97 +openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-7427d4bcaba5cad07910da7a222bdd2650b5280e6b889132ed38d230adafb8a5.yml +openapi_spec_hash: e8e3dc1ae54666d544d1fc848b25e7cf +config_hash: b470456b217bb9502f5212311d395a6f diff --git a/api.md b/api.md index 5a00389..c9d3ba0 100644 --- a/api.md +++ b/api.md @@ -309,3 +309,24 @@ Methods: - client.Credentials.List(ctx context.Context, query kernel.CredentialListParams) (\*pagination.OffsetPagination[kernel.Credential], error) - client.Credentials.Delete(ctx context.Context, idOrName string) error - client.Credentials.TotpCode(ctx context.Context, idOrName string) (\*kernel.CredentialTotpCodeResponse, error) + +# CredentialProviders + +Params Types: + +- kernel.CreateCredentialProviderRequestParam +- kernel.UpdateCredentialProviderRequestParam + +Response Types: + +- kernel.CredentialProvider +- kernel.CredentialProviderTestResult + +Methods: + +- client.CredentialProviders.New(ctx context.Context, body kernel.CredentialProviderNewParams) (\*kernel.CredentialProvider, error) +- client.CredentialProviders.Get(ctx context.Context, id string) (\*kernel.CredentialProvider, error) +- client.CredentialProviders.Update(ctx context.Context, id string, body kernel.CredentialProviderUpdateParams) (\*kernel.CredentialProvider, error) +- client.CredentialProviders.List(ctx context.Context) (\*[]kernel.CredentialProvider, error) +- client.CredentialProviders.Delete(ctx context.Context, id string) error +- client.CredentialProviders.Test(ctx context.Context, id string) (\*kernel.CredentialProviderTestResult, error) diff --git a/client.go b/client.go index edbb3a8..a1ac662 100644 --- a/client.go +++ b/client.go @@ -16,17 +16,18 @@ import ( // interacting with the kernel API. You should not instantiate this client // directly, and instead use the [NewClient] method instead. type Client struct { - Options []option.RequestOption - Deployments DeploymentService - Apps AppService - Invocations InvocationService - Browsers BrowserService - Profiles ProfileService - Proxies ProxyService - Extensions ExtensionService - BrowserPools BrowserPoolService - Agents AgentService - Credentials CredentialService + Options []option.RequestOption + Deployments DeploymentService + Apps AppService + Invocations InvocationService + Browsers BrowserService + Profiles ProfileService + Proxies ProxyService + Extensions ExtensionService + BrowserPools BrowserPoolService + Agents AgentService + Credentials CredentialService + CredentialProviders CredentialProviderService } // DefaultClientOptions read from the environment (KERNEL_API_KEY, @@ -61,6 +62,7 @@ func NewClient(opts ...option.RequestOption) (r Client) { r.BrowserPools = NewBrowserPoolService(opts...) r.Agents = NewAgentService(opts...) r.Credentials = NewCredentialService(opts...) + r.CredentialProviders = NewCredentialProviderService(opts...) return } diff --git a/credentialprovider.go b/credentialprovider.go new file mode 100644 index 0000000..ded8c4f --- /dev/null +++ b/credentialprovider.go @@ -0,0 +1,269 @@ +// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details. + +package kernel + +import ( + "context" + "encoding/json" + "errors" + "fmt" + "net/http" + "slices" + "time" + + "github.com/kernel/kernel-go-sdk/internal/apijson" + shimjson "github.com/kernel/kernel-go-sdk/internal/encoding/json" + "github.com/kernel/kernel-go-sdk/internal/requestconfig" + "github.com/kernel/kernel-go-sdk/option" + "github.com/kernel/kernel-go-sdk/packages/param" + "github.com/kernel/kernel-go-sdk/packages/respjson" +) + +// CredentialProviderService contains methods and other services that help with +// interacting with the kernel API. +// +// Note, unlike clients, this service does not read variables from the environment +// automatically. You should not instantiate this service directly, and instead use +// the [NewCredentialProviderService] method instead. +type CredentialProviderService struct { + Options []option.RequestOption +} + +// NewCredentialProviderService generates a new service that applies the given +// options to each request. These options are applied after the parent client's +// options (if there is one), and before any request-specific options. +func NewCredentialProviderService(opts ...option.RequestOption) (r CredentialProviderService) { + r = CredentialProviderService{} + r.Options = opts + return +} + +// Configure an external credential provider (e.g., 1Password) for automatic +// credential lookup. +func (r *CredentialProviderService) New(ctx context.Context, body CredentialProviderNewParams, opts ...option.RequestOption) (res *CredentialProvider, err error) { + opts = slices.Concat(r.Options, opts) + path := "org/credential-providers" + err = requestconfig.ExecuteNewRequest(ctx, http.MethodPost, path, body, &res, opts...) + return +} + +// Retrieve a credential provider by its ID. +func (r *CredentialProviderService) Get(ctx context.Context, id string, opts ...option.RequestOption) (res *CredentialProvider, err error) { + opts = slices.Concat(r.Options, opts) + if id == "" { + err = errors.New("missing required id parameter") + return + } + path := fmt.Sprintf("org/credential-providers/%s", id) + err = requestconfig.ExecuteNewRequest(ctx, http.MethodGet, path, nil, &res, opts...) + return +} + +// Update a credential provider's configuration. +func (r *CredentialProviderService) Update(ctx context.Context, id string, body CredentialProviderUpdateParams, opts ...option.RequestOption) (res *CredentialProvider, err error) { + opts = slices.Concat(r.Options, opts) + if id == "" { + err = errors.New("missing required id parameter") + return + } + path := fmt.Sprintf("org/credential-providers/%s", id) + err = requestconfig.ExecuteNewRequest(ctx, http.MethodPatch, path, body, &res, opts...) + return +} + +// List external credential providers configured for the organization. +func (r *CredentialProviderService) List(ctx context.Context, opts ...option.RequestOption) (res *[]CredentialProvider, err error) { + opts = slices.Concat(r.Options, opts) + path := "org/credential-providers" + err = requestconfig.ExecuteNewRequest(ctx, http.MethodGet, path, nil, &res, opts...) + return +} + +// Delete a credential provider by its ID. +func (r *CredentialProviderService) Delete(ctx context.Context, id string, opts ...option.RequestOption) (err error) { + opts = slices.Concat(r.Options, opts) + opts = append([]option.RequestOption{option.WithHeader("Accept", "*/*")}, opts...) + if id == "" { + err = errors.New("missing required id parameter") + return + } + path := fmt.Sprintf("org/credential-providers/%s", id) + err = requestconfig.ExecuteNewRequest(ctx, http.MethodDelete, path, nil, nil, opts...) + return +} + +// Validate the credential provider's token and list accessible vaults. +func (r *CredentialProviderService) Test(ctx context.Context, id string, opts ...option.RequestOption) (res *CredentialProviderTestResult, err error) { + opts = slices.Concat(r.Options, opts) + if id == "" { + err = errors.New("missing required id parameter") + return + } + path := fmt.Sprintf("org/credential-providers/%s/test", id) + err = requestconfig.ExecuteNewRequest(ctx, http.MethodPost, path, nil, &res, opts...) + return +} + +// Request to create an external credential provider +// +// The properties Token, ProviderType are required. +type CreateCredentialProviderRequestParam struct { + // Service account token for the provider (e.g., 1Password service account token) + Token string `json:"token,required"` + // Type of credential provider + // + // Any of "onepassword". + ProviderType CreateCredentialProviderRequestProviderType `json:"provider_type,omitzero,required"` + // How long to cache credential lists (default 300 seconds) + CacheTtlSeconds param.Opt[int64] `json:"cache_ttl_seconds,omitzero"` + paramObj +} + +func (r CreateCredentialProviderRequestParam) MarshalJSON() (data []byte, err error) { + type shadow CreateCredentialProviderRequestParam + return param.MarshalObject(r, (*shadow)(&r)) +} +func (r *CreateCredentialProviderRequestParam) UnmarshalJSON(data []byte) error { + return apijson.UnmarshalRoot(data, r) +} + +// Type of credential provider +type CreateCredentialProviderRequestProviderType string + +const ( + CreateCredentialProviderRequestProviderTypeOnepassword CreateCredentialProviderRequestProviderType = "onepassword" +) + +// An external credential provider (e.g., 1Password) for automatic credential +// lookup +type CredentialProvider struct { + // Unique identifier for the credential provider + ID string `json:"id,required"` + // When the credential provider was created + CreatedAt time.Time `json:"created_at,required" format:"date-time"` + // Whether the provider is enabled for credential lookups + Enabled bool `json:"enabled,required"` + // Priority order for credential lookups (lower numbers are checked first) + Priority int64 `json:"priority,required"` + // Type of credential provider + // + // Any of "onepassword". + ProviderType CredentialProviderProviderType `json:"provider_type,required"` + // When the credential provider was last updated + UpdatedAt time.Time `json:"updated_at,required" format:"date-time"` + // JSON contains metadata for fields, check presence with [respjson.Field.Valid]. + JSON struct { + ID respjson.Field + CreatedAt respjson.Field + Enabled respjson.Field + Priority respjson.Field + ProviderType respjson.Field + UpdatedAt respjson.Field + ExtraFields map[string]respjson.Field + raw string + } `json:"-"` +} + +// Returns the unmodified JSON received from the API +func (r CredentialProvider) RawJSON() string { return r.JSON.raw } +func (r *CredentialProvider) UnmarshalJSON(data []byte) error { + return apijson.UnmarshalRoot(data, r) +} + +// Type of credential provider +type CredentialProviderProviderType string + +const ( + CredentialProviderProviderTypeOnepassword CredentialProviderProviderType = "onepassword" +) + +// Result of testing a credential provider connection +type CredentialProviderTestResult struct { + // Whether the connection test was successful + Success bool `json:"success,required"` + // List of vaults accessible by the service account + Vaults []CredentialProviderTestResultVault `json:"vaults,required"` + // Error message if the test failed + Error string `json:"error"` + // JSON contains metadata for fields, check presence with [respjson.Field.Valid]. + JSON struct { + Success respjson.Field + Vaults respjson.Field + Error respjson.Field + ExtraFields map[string]respjson.Field + raw string + } `json:"-"` +} + +// Returns the unmodified JSON received from the API +func (r CredentialProviderTestResult) RawJSON() string { return r.JSON.raw } +func (r *CredentialProviderTestResult) UnmarshalJSON(data []byte) error { + return apijson.UnmarshalRoot(data, r) +} + +type CredentialProviderTestResultVault struct { + // Vault ID + ID string `json:"id,required"` + // Vault name + Name string `json:"name,required"` + // JSON contains metadata for fields, check presence with [respjson.Field.Valid]. + JSON struct { + ID respjson.Field + Name respjson.Field + ExtraFields map[string]respjson.Field + raw string + } `json:"-"` +} + +// Returns the unmodified JSON received from the API +func (r CredentialProviderTestResultVault) RawJSON() string { return r.JSON.raw } +func (r *CredentialProviderTestResultVault) UnmarshalJSON(data []byte) error { + return apijson.UnmarshalRoot(data, r) +} + +// Request to update a credential provider +type UpdateCredentialProviderRequestParam struct { + // New service account token (to rotate credentials) + Token param.Opt[string] `json:"token,omitzero"` + // How long to cache credential lists + CacheTtlSeconds param.Opt[int64] `json:"cache_ttl_seconds,omitzero"` + // Whether the provider is enabled for credential lookups + Enabled param.Opt[bool] `json:"enabled,omitzero"` + // Priority order for credential lookups (lower numbers are checked first) + Priority param.Opt[int64] `json:"priority,omitzero"` + paramObj +} + +func (r UpdateCredentialProviderRequestParam) MarshalJSON() (data []byte, err error) { + type shadow UpdateCredentialProviderRequestParam + return param.MarshalObject(r, (*shadow)(&r)) +} +func (r *UpdateCredentialProviderRequestParam) UnmarshalJSON(data []byte) error { + return apijson.UnmarshalRoot(data, r) +} + +type CredentialProviderNewParams struct { + // Request to create an external credential provider + CreateCredentialProviderRequest CreateCredentialProviderRequestParam + paramObj +} + +func (r CredentialProviderNewParams) MarshalJSON() (data []byte, err error) { + return shimjson.Marshal(r.CreateCredentialProviderRequest) +} +func (r *CredentialProviderNewParams) UnmarshalJSON(data []byte) error { + return json.Unmarshal(data, &r.CreateCredentialProviderRequest) +} + +type CredentialProviderUpdateParams struct { + // Request to update a credential provider + UpdateCredentialProviderRequest UpdateCredentialProviderRequestParam + paramObj +} + +func (r CredentialProviderUpdateParams) MarshalJSON() (data []byte, err error) { + return shimjson.Marshal(r.UpdateCredentialProviderRequest) +} +func (r *CredentialProviderUpdateParams) UnmarshalJSON(data []byte) error { + return json.Unmarshal(data, &r.UpdateCredentialProviderRequest) +} diff --git a/credentialprovider_test.go b/credentialprovider_test.go new file mode 100644 index 0000000..18e4a02 --- /dev/null +++ b/credentialprovider_test.go @@ -0,0 +1,169 @@ +// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details. + +package kernel_test + +import ( + "context" + "errors" + "os" + "testing" + + "github.com/kernel/kernel-go-sdk" + "github.com/kernel/kernel-go-sdk/internal/testutil" + "github.com/kernel/kernel-go-sdk/option" +) + +func TestCredentialProviderNewWithOptionalParams(t *testing.T) { + t.Skip("Prism tests are disabled") + baseURL := "http://localhost:4010" + if envURL, ok := os.LookupEnv("TEST_API_BASE_URL"); ok { + baseURL = envURL + } + if !testutil.CheckTestServer(t, baseURL) { + return + } + client := kernel.NewClient( + option.WithBaseURL(baseURL), + option.WithAPIKey("My API Key"), + ) + _, err := client.CredentialProviders.New(context.TODO(), kernel.CredentialProviderNewParams{ + CreateCredentialProviderRequest: kernel.CreateCredentialProviderRequestParam{ + Token: "ops_eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...", + ProviderType: kernel.CreateCredentialProviderRequestProviderTypeOnepassword, + CacheTtlSeconds: kernel.Int(300), + }, + }) + if err != nil { + var apierr *kernel.Error + if errors.As(err, &apierr) { + t.Log(string(apierr.DumpRequest(true))) + } + t.Fatalf("err should be nil: %s", err.Error()) + } +} + +func TestCredentialProviderGet(t *testing.T) { + t.Skip("Prism tests are disabled") + baseURL := "http://localhost:4010" + if envURL, ok := os.LookupEnv("TEST_API_BASE_URL"); ok { + baseURL = envURL + } + if !testutil.CheckTestServer(t, baseURL) { + return + } + client := kernel.NewClient( + option.WithBaseURL(baseURL), + option.WithAPIKey("My API Key"), + ) + _, err := client.CredentialProviders.Get(context.TODO(), "id") + if err != nil { + var apierr *kernel.Error + if errors.As(err, &apierr) { + t.Log(string(apierr.DumpRequest(true))) + } + t.Fatalf("err should be nil: %s", err.Error()) + } +} + +func TestCredentialProviderUpdateWithOptionalParams(t *testing.T) { + t.Skip("Prism tests are disabled") + baseURL := "http://localhost:4010" + if envURL, ok := os.LookupEnv("TEST_API_BASE_URL"); ok { + baseURL = envURL + } + if !testutil.CheckTestServer(t, baseURL) { + return + } + client := kernel.NewClient( + option.WithBaseURL(baseURL), + option.WithAPIKey("My API Key"), + ) + _, err := client.CredentialProviders.Update( + context.TODO(), + "id", + kernel.CredentialProviderUpdateParams{ + UpdateCredentialProviderRequest: kernel.UpdateCredentialProviderRequestParam{ + Token: kernel.String("ops_eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."), + CacheTtlSeconds: kernel.Int(300), + Enabled: kernel.Bool(true), + Priority: kernel.Int(0), + }, + }, + ) + if err != nil { + var apierr *kernel.Error + if errors.As(err, &apierr) { + t.Log(string(apierr.DumpRequest(true))) + } + t.Fatalf("err should be nil: %s", err.Error()) + } +} + +func TestCredentialProviderList(t *testing.T) { + t.Skip("Prism tests are disabled") + baseURL := "http://localhost:4010" + if envURL, ok := os.LookupEnv("TEST_API_BASE_URL"); ok { + baseURL = envURL + } + if !testutil.CheckTestServer(t, baseURL) { + return + } + client := kernel.NewClient( + option.WithBaseURL(baseURL), + option.WithAPIKey("My API Key"), + ) + _, err := client.CredentialProviders.List(context.TODO()) + if err != nil { + var apierr *kernel.Error + if errors.As(err, &apierr) { + t.Log(string(apierr.DumpRequest(true))) + } + t.Fatalf("err should be nil: %s", err.Error()) + } +} + +func TestCredentialProviderDelete(t *testing.T) { + t.Skip("Prism tests are disabled") + baseURL := "http://localhost:4010" + if envURL, ok := os.LookupEnv("TEST_API_BASE_URL"); ok { + baseURL = envURL + } + if !testutil.CheckTestServer(t, baseURL) { + return + } + client := kernel.NewClient( + option.WithBaseURL(baseURL), + option.WithAPIKey("My API Key"), + ) + err := client.CredentialProviders.Delete(context.TODO(), "id") + if err != nil { + var apierr *kernel.Error + if errors.As(err, &apierr) { + t.Log(string(apierr.DumpRequest(true))) + } + t.Fatalf("err should be nil: %s", err.Error()) + } +} + +func TestCredentialProviderTest(t *testing.T) { + t.Skip("Prism tests are disabled") + baseURL := "http://localhost:4010" + if envURL, ok := os.LookupEnv("TEST_API_BASE_URL"); ok { + baseURL = envURL + } + if !testutil.CheckTestServer(t, baseURL) { + return + } + client := kernel.NewClient( + option.WithBaseURL(baseURL), + option.WithAPIKey("My API Key"), + ) + _, err := client.CredentialProviders.Test(context.TODO(), "id") + if err != nil { + var apierr *kernel.Error + if errors.As(err, &apierr) { + t.Log(string(apierr.DumpRequest(true))) + } + t.Fatalf("err should be nil: %s", err.Error()) + } +} From 5353b67c215485b3689543f79214055d0ed737cd Mon Sep 17 00:00:00 2001 From: "stainless-app[bot]" <142633134+stainless-app[bot]@users.noreply.github.com> Date: Wed, 21 Jan 2026 04:39:15 +0000 Subject: [PATCH 7/8] release: 0.27.0 --- .release-please-manifest.json | 2 +- CHANGELOG.md | 22 ++++++++++++++++++++++ README.md | 2 +- internal/version.go | 2 +- 4 files changed, 25 insertions(+), 3 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index caf5ca3..59acac4 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.26.0" + ".": "0.27.0" } \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index 039f057..8d951c3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,27 @@ # Changelog +## 0.27.0 (2026-01-21) + +Full Changelog: [v0.26.0...v0.27.0](https://github.com/kernel/kernel-go-sdk/compare/v0.26.0...v0.27.0) + +### Features + +* add manual dispatch trigger with optional PR number input ([b3020ea](https://github.com/kernel/kernel-go-sdk/commit/b3020eac3fb81e628345bffcab03e45e8556ebc1)) +* **agent-auth:** add 1Password integration for credential providers ([690962f](https://github.com/kernel/kernel-go-sdk/commit/690962f9f276c1e917c7462ec57400afccf3509f)) +* **dashboard:** add browser replays support for past browsers ([33f2a9c](https://github.com/kernel/kernel-go-sdk/commit/33f2a9cd0b5391bd058f6c74900c8d3731b3f990)) +* Update browser pool org limits ([6848a1c](https://github.com/kernel/kernel-go-sdk/commit/6848a1c11b3b648b163db8cf1e47347d6b6acbb8)) + + +### Bug Fixes + +* require CLI commands for all SDK methods ([8e3d9be](https://github.com/kernel/kernel-go-sdk/commit/8e3d9be2e555559533d9d935ce7e6a57c06bf29e)) +* update CLI coverage workflow to perform full SDK method enumeration ([23d4b9b](https://github.com/kernel/kernel-go-sdk/commit/23d4b9be60db33c3de40da6666e3c51ded15dba5)) + + +### Refactors + +* **agentauth:** enhance discover and submit modules with improve… ([71801e7](https://github.com/kernel/kernel-go-sdk/commit/71801e7d3375037a68f751099bc6333e592fb654)) + ## 0.26.0 (2026-01-17) Full Changelog: [v0.25.0...v0.26.0](https://github.com/kernel/kernel-go-sdk/compare/v0.25.0...v0.26.0) diff --git a/README.md b/README.md index 9a24c47..6d76526 100644 --- a/README.md +++ b/README.md @@ -28,7 +28,7 @@ Or to pin the version: ```sh -go get -u 'github.com/kernel/kernel-go-sdk@v0.26.0' +go get -u 'github.com/kernel/kernel-go-sdk@v0.27.0' ``` diff --git a/internal/version.go b/internal/version.go index dc72016..c2280fd 100644 --- a/internal/version.go +++ b/internal/version.go @@ -2,4 +2,4 @@ package internal -const PackageVersion = "0.26.0" // x-release-please-version +const PackageVersion = "0.27.0" // x-release-please-version From d3b84c0fa1bc5f0d1dcd2bcb1d4e8c8e3dd22997 Mon Sep 17 00:00:00 2001 From: Mason Williams <43387599+masnwilliams@users.noreply.github.com> Date: Wed, 21 Jan 2026 00:25:01 -0500 Subject: [PATCH 8/8] Update CHANGELOG to reflect new features and remove bugs Removed bug fixes section and updated features list. --- CHANGELOG.md | 7 ------- 1 file changed, 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8d951c3..6094a75 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,18 +6,11 @@ Full Changelog: [v0.26.0...v0.27.0](https://github.com/kernel/kernel-go-sdk/comp ### Features -* add manual dispatch trigger with optional PR number input ([b3020ea](https://github.com/kernel/kernel-go-sdk/commit/b3020eac3fb81e628345bffcab03e45e8556ebc1)) * **agent-auth:** add 1Password integration for credential providers ([690962f](https://github.com/kernel/kernel-go-sdk/commit/690962f9f276c1e917c7462ec57400afccf3509f)) * **dashboard:** add browser replays support for past browsers ([33f2a9c](https://github.com/kernel/kernel-go-sdk/commit/33f2a9cd0b5391bd058f6c74900c8d3731b3f990)) * Update browser pool org limits ([6848a1c](https://github.com/kernel/kernel-go-sdk/commit/6848a1c11b3b648b163db8cf1e47347d6b6acbb8)) -### Bug Fixes - -* require CLI commands for all SDK methods ([8e3d9be](https://github.com/kernel/kernel-go-sdk/commit/8e3d9be2e555559533d9d935ce7e6a57c06bf29e)) -* update CLI coverage workflow to perform full SDK method enumeration ([23d4b9b](https://github.com/kernel/kernel-go-sdk/commit/23d4b9be60db33c3de40da6666e3c51ded15dba5)) - - ### Refactors * **agentauth:** enhance discover and submit modules with improve… ([71801e7](https://github.com/kernel/kernel-go-sdk/commit/71801e7d3375037a68f751099bc6333e592fb654))