release: 0.93.0

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.92.0"
+  ".": "0.93.0"
 }

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## [0.93.0](https://github.com/kernel/kernel-node-sdk/compare/v0.92.0...v0.93.0) (2026-08-19)
+
+
+### Features
+
+* Add proxy_error to browser telemetry event schema ([4f0478b](https://github.com/kernel/kernel-node-sdk/commit/4f0478b0dcb922baa03d82cbb38bb8b295f700da))
+* Bind managed auth submissions to interactions ([c87e8f5](https://github.com/kernel/kernel-node-sdk/commit/c87e8f52b8e721f9f6c4eab892e5df1d4a06db67))
+* Harden canonical managed auth interactions ([7fff9fe](https://github.com/kernel/kernel-node-sdk/commit/7fff9fe4b39d467c0583b9f1c0e5b951e35a2bde))
+
 ## [0.92.0](https://github.com/kernel/kernel-node-sdk/compare/v0.91.0...v0.92.0) (2026-08-17)
 
 

api.md

@@ -128,6 +128,7 @@ Types:
 - <code><a href="./src/resources/browsers/telemetry.ts">BrowserPageNavigationEvent</a></code>
 - <code><a href="./src/resources/browsers/telemetry.ts">BrowserPageNavigationSettledEvent</a></code>
 - <code><a href="./src/resources/browsers/telemetry.ts">BrowserPageTabOpenedEvent</a></code>
+- <code><a href="./src/resources/browsers/telemetry.ts">BrowserProxyErrorEvent</a></code>
 - <code><a href="./src/resources/browsers/telemetry.ts">BrowserServiceCrashedEvent</a></code>
 - <code><a href="./src/resources/browsers/telemetry.ts">BrowserSystemOomKillEvent</a></code>
 - <code><a href="./src/resources/browsers/telemetry.ts">BrowserTelemetryCategoriesConfig</a></code>

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.92.0",
+  "version": "0.93.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "dist/index.d.ts",

src/resources/auth/connections.ts

@@ -465,6 +465,12 @@ export interface ManagedAuth {
    */
   hosted_url?: string | null;
 
+  /**
+   * Opaque identifier for the current canonical interaction. Required when
+   * submitting fields or choices and changes for each new actionable pause.
+   */
+  interaction_id?: string | null;
+
   /**
    * @deprecated Deprecated alias for `last_auth_check_at`. Despite the name, this is
    * the last health-check timestamp, not the last successful authentication. Use
@@ -775,6 +781,11 @@ export namespace ManagedAuth {
      */
     id: string;
 
+    /**
+     * Why the field requires user input.
+     */
+    reason: 'missing' | 'rejected';
+
     /**
      * Credential reference name to store the submitted value under.
      */
@@ -800,12 +811,6 @@ export namespace ManagedAuth {
      */
     observed_selector?: string | null;
 
-    /**
-     * Whether the submitted value must replace an existing credential after explicit
-     * rejection.
-     */
-    replace_existing?: boolean;
-
     /**
      * Whether this field is required.
      */
@@ -1555,6 +1560,12 @@ export interface SubmitFieldsRequest {
    */
   fields?: { [key: string]: string };
 
+  /**
+   * Opaque interaction ID returned with canonical fields and choices. Required for
+   * canonical submissions.
+   */
+  interaction_id?: string;
+
   /**
    * The MFA method type to select (when mfa_options were returned)
    */
@@ -1670,6 +1681,12 @@ export namespace ConnectionFollowResponse {
      */
     hosted_url?: string;
 
+    /**
+     * Opaque identifier for the current canonical interaction. Required when
+     * submitting fields or choices and changes for each new actionable pause.
+     */
+    interaction_id?: string;
+
     /**
      * Browser live view URL for debugging.
      */
@@ -1831,6 +1848,11 @@ export namespace ConnectionFollowResponse {
        */
       id: string;
 
+      /**
+       * Why the field requires user input.
+       */
+      reason: 'missing' | 'rejected';
+
       /**
        * Credential reference name to store the submitted value under.
        */
@@ -1856,12 +1878,6 @@ export namespace ConnectionFollowResponse {
        */
       observed_selector?: string | null;
 
-      /**
-       * Whether the submitted value must replace an existing credential after explicit
-       * rejection.
-       */
-      replace_existing?: boolean;
-
       /**
        * Whether this field is required.
        */
@@ -2549,6 +2565,12 @@ export interface ConnectionSubmitParams {
    */
   fields?: { [key: string]: string };
 
+  /**
+   * Opaque interaction ID returned with canonical fields and choices. Required for
+   * canonical submissions.
+   */
+  interaction_id?: string;
+
   /**
    * The MFA method type to select (when mfa_options were returned)
    */

src/resources/browsers/browsers.ts

@@ -85,6 +85,7 @@ import {
   BrowserPageNavigationEvent,
   BrowserPageNavigationSettledEvent,
   BrowserPageTabOpenedEvent,
+  BrowserProxyErrorEvent,
   BrowserServiceCrashedEvent,
   BrowserSystemOomKillEvent,
   BrowserTelemetryCategoriesConfig,
@@ -1673,6 +1674,7 @@ export declare namespace Browsers {
     type BrowserPageNavigationEvent as BrowserPageNavigationEvent,
     type BrowserPageNavigationSettledEvent as BrowserPageNavigationSettledEvent,
     type BrowserPageTabOpenedEvent as BrowserPageTabOpenedEvent,
+    type BrowserProxyErrorEvent as BrowserProxyErrorEvent,
     type BrowserServiceCrashedEvent as BrowserServiceCrashedEvent,
     type BrowserSystemOomKillEvent as BrowserSystemOomKillEvent,
     type BrowserTelemetryCategoriesConfig as BrowserTelemetryCategoriesConfig,

src/resources/browsers/index.ts

@@ -120,6 +120,7 @@ export {
   type BrowserPageNavigationEvent,
   type BrowserPageNavigationSettledEvent,
   type BrowserPageTabOpenedEvent,
+  type BrowserProxyErrorEvent,
   type BrowserServiceCrashedEvent,
   type BrowserSystemOomKillEvent,
   type BrowserTelemetryCategoriesConfig,

src/resources/browsers/telemetry.ts

@@ -1725,6 +1725,88 @@ export namespace BrowserPageTabOpenedEvent {
   }
 }
 
+/**
+ * A branded proxy-layer failure observed by the browser. Emitted when the metro
+ * egress host-proxy serves a branded 5xx error page whose response carries the
+ * X-Kernel-Proxy-Error header. Low-volume and carries a typed code. Its value is
+ * per-session and per-URL attribution for sessions that already capture the
+ * network stream: proxy failures are only observable while the CDP network
+ * collector is running, so this is an opt-in refinement of the raw network events
+ * rather than a default-on alerting signal.
+ */
+export interface BrowserProxyErrorEvent {
+  category: 'network';
+
+  /**
+   * Provenance metadata identifying which producer emitted the event.
+   */
+  source: BrowserEventSource;
+
+  /**
+   * Event timestamp in Unix microseconds.
+   */
+  ts: number;
+
+  type: 'proxy_error';
+
+  /**
+   * Browser event context stamped by the browser monitor onto all CDP-sourced
+   * events. Identifies the target, frame, and navigation epoch in which the event
+   * occurred.
+   */
+  data?: BrowserProxyErrorEvent.Data;
+
+  /**
+   * True if the data field was truncated due to size limits.
+   */
+  truncated?: boolean;
+}
+
+export namespace BrowserProxyErrorEvent {
+  /**
+   * Browser event context stamped by the browser monitor onto all CDP-sourced
+   * events. Identifies the target, frame, and navigation epoch in which the event
+   * occurred.
+   */
+  export interface Data extends TelemetryAPI.BrowserEventContext {
+    /**
+     * Proxy-layer error code: the X-Kernel-Proxy-Error response header value from a
+     * branded 5xx error page served by the metro egress host-proxy. Values mirror what
+     * the proxy emits: destination_blocked, provider_blacklisted,
+     * provider_unreachable, proxy_unavailable, upstream_timeout, upstream_dns_failure,
+     * upstream_connect_failed. Unknown header values are dropped.
+     */
+    code:
+      | 'destination_blocked'
+      | 'provider_blacklisted'
+      | 'provider_unreachable'
+      | 'proxy_unavailable'
+      | 'upstream_timeout'
+      | 'upstream_dns_failure'
+      | 'upstream_connect_failed';
+
+    /**
+     * CDP request identifier matching the originating request.
+     */
+    request_id: string;
+
+    /**
+     * HTTP response status of the branded error page (502).
+     */
+    status: number;
+
+    /**
+     * HTTP method of the failed request, when known.
+     */
+    method?: string;
+
+    /**
+     * CDP Network.ResourceType for the request, when known.
+     */
+    resource_type?: string;
+  }
+}
+
 /**
  * A managed service exited unexpectedly. Intentional stops do not produce this
  * event; only unexpected exits and terminal restart-give-up transitions do.
@@ -1990,6 +2072,7 @@ export type BrowserTelemetryEvent =
   | BrowserNetworkResponseEvent
   | BrowserNetworkLoadingFailedEvent
   | BrowserNetworkIdleEvent
+  | BrowserProxyErrorEvent
   | BrowserPageNavigationEvent
   | BrowserPageDomContentLoadedEvent
   | BrowserPageLoadEvent
@@ -2184,6 +2267,7 @@ export declare namespace Telemetry {
     type BrowserPageNavigationEvent as BrowserPageNavigationEvent,
     type BrowserPageNavigationSettledEvent as BrowserPageNavigationSettledEvent,
     type BrowserPageTabOpenedEvent as BrowserPageTabOpenedEvent,
+    type BrowserProxyErrorEvent as BrowserProxyErrorEvent,
     type BrowserServiceCrashedEvent as BrowserServiceCrashedEvent,
     type BrowserSystemOomKillEvent as BrowserSystemOomKillEvent,
     type BrowserTelemetryCategoriesConfig as BrowserTelemetryCategoriesConfig,

src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.92.0'; // x-release-please-version
+export const VERSION = '0.93.0'; // x-release-please-version