release: 0.102.0

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.101.0"
+  ".": "0.102.0"
 }

CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [0.102.0](https://github.com/kernel/kernel-node-sdk/compare/v0.101.0...v0.102.0) (2026-09-14)
+
+
+### Features
+
+* Accept a workload intent and use it to widen vendor coverage ([3c6a789](https://github.com/kernel/kernel-node-sdk/commit/3c6a789765fef9a92606e261273b4ae58c96e314))
+* Add guarded vault card fill operations ([d77b170](https://github.com/kernel/kernel-node-sdk/commit/d77b170936a96eb79327b189d05f2c8f1f0737c3))
+* Add single-use AgentCard prepare_checkout for Square ([f6718d4](https://github.com/kernel/kernel-node-sdk/commit/f6718d4fb93818147fb51b53545fc1327294d5d2))
+* Allow replacing AgentCard cards after unknown creates ([848944b](https://github.com/kernel/kernel-node-sdk/commit/848944b1ce0eb21f58700d41ed82b5121201a3ee))
+* Document punctuation key sequences ([a008dfb](https://github.com/kernel/kernel-node-sdk/commit/a008dfbe12ab150df7154f28127175e4ceee3816))
+* Reapply vendor guidance recommendations ([0fdcce8](https://github.com/kernel/kernel-node-sdk/commit/0fdcce80cec36d682f295d278ae88b5e4877560b))
+* Report proxy-restricted targets from config registry lookup ([a57d992](https://github.com/kernel/kernel-node-sdk/commit/a57d992925092ebce6ba6e18fbb86844edfb67f5))
+
 ## [0.101.0](https://github.com/kernel/kernel-node-sdk/compare/v0.100.0...v0.101.0) (2026-09-11)
 
 

api.md

@@ -465,12 +465,21 @@ Methods:
 Types:
 
 - <code><a href="./src/resources/vaults/items.ts">AgentcardCheckoutAuthorization</a></code>
+- <code><a href="./src/resources/vaults/items.ts">AgentcardCheckoutPreparation</a></code>
+- <code><a href="./src/resources/vaults/items.ts">AuthorizeVaultItemOperationRequest</a></code>
 - <code><a href="./src/resources/vaults/items.ts">CardVaultItemSpec</a></code>
 - <code><a href="./src/resources/vaults/items.ts">CardVaultItemState</a></code>
+- <code><a href="./src/resources/vaults/items.ts">FillVaultItemOperationRequest</a></code>
+- <code><a href="./src/resources/vaults/items.ts">FillVaultItemOperationResult</a></code>
+- <code><a href="./src/resources/vaults/items.ts">PrepareCheckoutVaultItemOperationRequest</a></code>
 - <code><a href="./src/resources/vaults/items.ts">VaultCardAliases</a></code>
+- <code><a href="./src/resources/vaults/items.ts">VaultCardFillField</a></code>
+- <code><a href="./src/resources/vaults/items.ts">VaultCheckoutContext</a></code>
+- <code><a href="./src/resources/vaults/items.ts">VaultFillFieldResult</a></code>
 - <code><a href="./src/resources/vaults/items.ts">VaultItem</a></code>
 - <code><a href="./src/resources/vaults/items.ts">VaultItemAction</a></code>
 - <code><a href="./src/resources/vaults/items.ts">VaultItemEvent</a></code>
+- <code><a href="./src/resources/vaults/items.ts">VaultItemOperationResponse</a></code>
 - <code><a href="./src/resources/vaults/items.ts">VaultPaymentMethod</a></code>
 - <code><a href="./src/resources/vaults/items.ts">WalletVaultItemSpec</a></code>
 - <code><a href="./src/resources/vaults/items.ts">WalletVaultItemState</a></code>
@@ -484,7 +493,7 @@ Methods:
 - <code title="get /vaults/{id_or_name}/items">client.vaults.items.<a href="./src/resources/vaults/items.ts">list</a>(idOrName) -> ItemListResponse</code>
 - <code title="delete /vaults/{id_or_name}/items/{key}">client.vaults.items.<a href="./src/resources/vaults/items.ts">delete</a>(key, { ...params }) -> void</code>
 - <code title="get /vaults/{id_or_name}/items/{key}/events">client.vaults.items.<a href="./src/resources/vaults/items.ts">events</a>(key, { ...params }) -> ItemEventsResponse</code>
-- <code title="post /vaults/{id_or_name}/items/{key}/operations">client.vaults.items.<a href="./src/resources/vaults/items.ts">performOperation</a>(key, { ...params }) -> VaultItem</code>
+- <code title="post /vaults/{id_or_name}/items/{key}/operations">client.vaults.items.<a href="./src/resources/vaults/items.ts">performOperation</a>(key, { ...params }) -> VaultItemOperationResponse</code>
 - <code title="put /vaults/{id_or_name}/items/{key}">client.vaults.items.<a href="./src/resources/vaults/items.ts">upsert</a>(key, { ...params }) -> VaultItem</code>
 
 # Credentials

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.101.0",
+  "version": "0.102.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "dist/index.d.ts",

src/resources/browsers/computer.ts

@@ -439,7 +439,9 @@ export namespace ComputerBatchParams {
        * List of key symbols to press. Each item should be a key symbol supported by
        * xdotool (see X11 keysym definitions). Examples include "Return", "Shift",
        * "Ctrl", "Alt", "F5". Items in this list could also be combinations, e.g.
-       * "Ctrl+t" or "Ctrl+Shift+Tab".
+       * "Ctrl+t" or "Ctrl+Shift+Tab". Use X11 names for punctuation in combinations,
+       * such as "Ctrl+minus" or "Ctrl+plus". A literal hyphen is also accepted as an
+       * alias, so "Ctrl+-" is normalized to "Ctrl+minus".
        */
       keys: Array<string>;
 
@@ -654,7 +656,9 @@ export interface ComputerPressKeyParams {
    * List of key symbols to press. Each item should be a key symbol supported by
    * xdotool (see X11 keysym definitions). Examples include "Return", "Shift",
    * "Ctrl", "Alt", "F5". Items in this list could also be combinations, e.g.
-   * "Ctrl+t" or "Ctrl+Shift+Tab".
+   * "Ctrl+t" or "Ctrl+Shift+Tab". Use X11 names for punctuation in combinations,
+   * such as "Ctrl+minus" or "Ctrl+plus". A literal hyphen is also accepted as an
+   * alias, so "Ctrl+-" is normalized to "Ctrl+minus".
    */
   keys: Array<string>;
 

src/resources/config-registry/config-registry.ts

@@ -152,6 +152,28 @@ export interface ConfigRegistryResponse {
   recommendation: RecommendationResult | null;
 
   target: Target;
+
+  /**
+   * Short advisory markdown to facilitate navigating this target. Returned even when
+   * no configuration reached the target, since knowing what prevented success is
+   * useful without a configuration. Not verified against this target. Null when
+   * nothing applicable was observed or no notes exist.
+   */
+  guidance?: string | null;
+
+  /**
+   * How far the workload pass got, when an intent was supplied and a pass ran. A run
+   * outcome rather than advice, so it is reported whether or not any guidance could
+   * be assembled. Null when no intent was supplied or no pass ran.
+   */
+  workload_outcome?:
+    | 'completed'
+    | 'turn_limit'
+    | 'auth_required'
+    | 'payment_required'
+    | 'blocked'
+    | 'error'
+    | null;
 }
 
 export interface Evidence {
@@ -201,9 +223,20 @@ export interface LookupRequest {
 }
 
 export interface LookupResponse {
-  recommendation: Recommendation | null;
+  /**
+   * A recommendation or a structured no-recommendation result.
+   */
+  recommendation: RecommendationResult | null;
 
   target: Target;
+
+  /**
+   * Short advisory markdown to facilitate navigating this target. Returned even when
+   * no configuration reached the target, since knowing what prevented success is
+   * useful without a configuration. Not verified against this target. Null when
+   * nothing applicable was observed or no notes exist.
+   */
+  guidance?: string | null;
 }
 
 export interface NoRecommendation {
@@ -490,6 +523,17 @@ export interface ResolveRequest {
    * Kernel uses its default country selection.
    */
   allowed_proxy_countries?: Array<string>;
+
+  /**
+   * Plain-language description of the workload you intend to run against this
+   * target, in a sentence or two. Requires an https target, because the pass treats
+   * any non-HTTPS destination as off-site and will not drive an http one. Kernel
+   * uses it to drive the browser further into the site, where it can observe
+   * protections that only appear once a session interacts. When this target already
+   * has a verified configuration, the run confirms that one instead of re-deriving
+   * the whole matrix, so supplying an intent narrows what can be recommended.
+   */
+  intent?: string;
 }
 
 export interface Target {
@@ -546,6 +590,17 @@ export interface ConfigRegistryResolveParams {
    * Kernel uses its default country selection.
    */
   allowed_proxy_countries?: Array<string>;
+
+  /**
+   * Plain-language description of the workload you intend to run against this
+   * target, in a sentence or two. Requires an https target, because the pass treats
+   * any non-HTTPS destination as off-site and will not drive an http one. Kernel
+   * uses it to drive the browser further into the site, where it can observe
+   * protections that only appear once a session interacts. When this target already
+   * has a verified configuration, the run confirms that one instead of re-deriving
+   * the whole matrix, so supplying an intent narrows what can be recommended.
+   */
+  intent?: string;
 }
 
 ConfigRegistry.Analyses = Analyses;

src/resources/vaults/index.ts

@@ -3,12 +3,21 @@
 export {
   Items,
   type AgentcardCheckoutAuthorization,
+  type AgentcardCheckoutPreparation,
+  type AuthorizeVaultItemOperationRequest,
   type CardVaultItemSpec,
   type CardVaultItemState,
+  type FillVaultItemOperationRequest,
+  type FillVaultItemOperationResult,
+  type PrepareCheckoutVaultItemOperationRequest,
   type VaultCardAliases,
+  type VaultCardFillField,
+  type VaultCheckoutContext,
+  type VaultFillFieldResult,
   type VaultItem,
   type VaultItemAction,
   type VaultItemEvent,
+  type VaultItemOperationResponse,
   type VaultPaymentMethod,
   type WalletVaultItemSpec,
   type WalletVaultItemState,