release: 0.102.0

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.101.0"
+  ".": "0.102.0"
 }

CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.102.0](https://github.com/kernel/kernel-python-sdk/compare/v0.101.0...v0.102.0) (2026-09-14)
+
+
+### Features
+
+* Accept a workload intent and use it to widen vendor coverage ([39ffff8](https://github.com/kernel/kernel-python-sdk/commit/39ffff82be3987e2220d8d5057d8d2505991a3eb))
+* Add guarded vault card fill operations ([3927c96](https://github.com/kernel/kernel-python-sdk/commit/3927c961789b4427a72c979ee5bb3dbcae1b8c74))
+* Add single-use AgentCard prepare_checkout for Square ([c439359](https://github.com/kernel/kernel-python-sdk/commit/c43935913b8a471421ef8d96c9066c442ec95171))
+* Allow replacing AgentCard cards after unknown creates ([22a8731](https://github.com/kernel/kernel-python-sdk/commit/22a87318e6ac2f1318a295b9d22de5b2306e66b2))
+* Document punctuation key sequences ([e7850fd](https://github.com/kernel/kernel-python-sdk/commit/e7850fd5757934c731373c5cb09b4444a29d7e84))
+* Honor managed auth browser regions ([0fa2fa3](https://github.com/kernel/kernel-python-sdk/commit/0fa2fa34cd72d04a12c6f9afd61d87098d43799b))
+* Reapply vendor guidance recommendations ([dfcc7ec](https://github.com/kernel/kernel-python-sdk/commit/dfcc7ecbaa087a07d11a5b0eb4738b41b8fadd8b))
+* Report proxy-restricted targets from config registry lookup ([c276ebc](https://github.com/kernel/kernel-python-sdk/commit/c276ebc6fd266924894b300b13ff02f30d0c8527))
+
 ## [0.101.0](https://github.com/kernel/kernel-python-sdk/compare/v0.100.0...v0.101.0) (2026-09-11)
 
 

api.md

@@ -525,12 +525,21 @@ Types:
 ```python
 from kernel.types.vaults import (
     AgentcardCheckoutAuthorization,
+    AgentcardCheckoutPreparation,
+    AuthorizeVaultItemOperationRequest,
     CardVaultItemSpec,
     CardVaultItemState,
+    FillVaultItemOperationRequest,
+    FillVaultItemOperationResult,
+    PrepareCheckoutVaultItemOperationRequest,
     VaultCardAliases,
+    VaultCardFillField,
+    VaultCheckoutContext,
+    VaultFillFieldResult,
     VaultItem,
     VaultItemAction,
     VaultItemEvent,
+    VaultItemOperationResponse,
     VaultPaymentMethod,
     WalletVaultItemSpec,
     WalletVaultItemState,
@@ -546,7 +555,7 @@ Methods:
 - <code title="get /vaults/{id_or_name}/items">client.vaults.items.<a href="./src/kernel/resources/vaults/items.py">list</a>(id_or_name) -> <a href="./src/kernel/types/vaults/item_list_response.py">ItemListResponse</a></code>
 - <code title="delete /vaults/{id_or_name}/items/{key}">client.vaults.items.<a href="./src/kernel/resources/vaults/items.py">delete</a>(key, \*, id_or_name) -> None</code>
 - <code title="get /vaults/{id_or_name}/items/{key}/events">client.vaults.items.<a href="./src/kernel/resources/vaults/items.py">events</a>(key, \*, id_or_name, \*\*<a href="src/kernel/types/vaults/item_events_params.py">params</a>) -> <a href="./src/kernel/types/vaults/item_events_response.py">ItemEventsResponse</a></code>
-- <code title="post /vaults/{id_or_name}/items/{key}/operations">client.vaults.items.<a href="./src/kernel/resources/vaults/items.py">perform_operation</a>(key, \*, id_or_name, \*\*<a href="src/kernel/types/vaults/item_perform_operation_params.py">params</a>) -> <a href="./src/kernel/types/vaults/vault_item.py">VaultItem</a></code>
+- <code title="post /vaults/{id_or_name}/items/{key}/operations">client.vaults.items.<a href="./src/kernel/resources/vaults/items.py">perform_operation</a>(key, \*, id_or_name, \*\*<a href="src/kernel/types/vaults/item_perform_operation_params.py">params</a>) -> <a href="./src/kernel/types/vaults/vault_item_operation_response.py">VaultItemOperationResponse</a></code>
 - <code title="put /vaults/{id_or_name}/items/{key}">client.vaults.items.<a href="./src/kernel/resources/vaults/items.py">upsert</a>(key, \*, id_or_name, \*\*<a href="src/kernel/types/vaults/item_upsert_params.py">params</a>) -> <a href="./src/kernel/types/vaults/vault_item.py">VaultItem</a></code>
 
 # Credentials

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.101.0"
+version = "0.102.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.101.0"  # x-release-please-version
+__version__ = "0.102.0"  # x-release-please-version

src/kernel/resources/browsers/computer.py

@@ -397,7 +397,9 @@ def press_key(
           keys: List of key symbols to press. Each item should be a key symbol supported by
               xdotool (see X11 keysym definitions). Examples include "Return", "Shift",
               "Ctrl", "Alt", "F5". Items in this list could also be combinations, e.g.
-              "Ctrl+t" or "Ctrl+Shift+Tab".
+              "Ctrl+t" or "Ctrl+Shift+Tab". Use X11 names for punctuation in combinations,
+              such as "Ctrl+minus" or "Ctrl+plus". A literal hyphen is also accepted as an
+              alias, so "Ctrl+-" is normalized to "Ctrl+minus".
 
           duration: Duration to hold the keys down in milliseconds. If omitted or 0, keys are
               tapped.
@@ -1002,7 +1004,9 @@ async def press_key(
           keys: List of key symbols to press. Each item should be a key symbol supported by
               xdotool (see X11 keysym definitions). Examples include "Return", "Shift",
               "Ctrl", "Alt", "F5". Items in this list could also be combinations, e.g.
-              "Ctrl+t" or "Ctrl+Shift+Tab".
+              "Ctrl+t" or "Ctrl+Shift+Tab". Use X11 names for punctuation in combinations,
+              such as "Ctrl+minus" or "Ctrl+plus". A literal hyphen is also accepted as an
+              alias, so "Ctrl+-" is normalized to "Ctrl+minus".
 
           duration: Duration to hold the keys down in milliseconds. If omitted or 0, keys are
               tapped.

src/kernel/resources/config_registry/config_registry.py

@@ -165,6 +165,7 @@ def resolve(
         *,
         url: str,
         allowed_proxy_countries: SequenceNotStr[str] | Omit = omit,
+        intent: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -184,6 +185,14 @@ def resolve(
               configuration. Kernel may test a subset of allowed countries. When omitted,
               Kernel uses its default country selection.
 
+          intent: Plain-language description of the workload you intend to run against this
+              target, in a sentence or two. Requires an https target, because the pass treats
+              any non-HTTPS destination as off-site and will not drive an http one. Kernel
+              uses it to drive the browser further into the site, where it can observe
+              protections that only appear once a session interacts. When this target already
+              has a verified configuration, the run confirms that one instead of re-deriving
+              the whole matrix, so supplying an intent narrows what can be recommended.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -198,6 +207,7 @@ def resolve(
                 {
                     "url": url,
                     "allowed_proxy_countries": allowed_proxy_countries,
+                    "intent": intent,
                 },
                 config_registry_resolve_params.ConfigRegistryResolveParams,
             ),
@@ -339,6 +349,7 @@ async def resolve(
         *,
         url: str,
         allowed_proxy_countries: SequenceNotStr[str] | Omit = omit,
+        intent: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -358,6 +369,14 @@ async def resolve(
               configuration. Kernel may test a subset of allowed countries. When omitted,
               Kernel uses its default country selection.
 
+          intent: Plain-language description of the workload you intend to run against this
+              target, in a sentence or two. Requires an https target, because the pass treats
+              any non-HTTPS destination as off-site and will not drive an http one. Kernel
+              uses it to drive the browser further into the site, where it can observe
+              protections that only appear once a session interacts. When this target already
+              has a verified configuration, the run confirms that one instead of re-deriving
+              the whole matrix, so supplying an intent narrows what can be recommended.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -372,6 +391,7 @@ async def resolve(
                 {
                     "url": url,
                     "allowed_proxy_countries": allowed_proxy_countries,
+                    "intent": intent,
                 },
                 config_registry_resolve_params.ConfigRegistryResolveParams,
             ),