From efee572e2333b46badb52e4c8f4cca944d55a92f Mon Sep 17 00:00:00 2001 From: "kernel-internal[bot]" <260533166+kernel-internal[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 19:28:51 +0000 Subject: [PATCH 1/3] feat: chore(stlc): seal custom-code tracking files Stainless-Generated-From: 86ce445270573058eb2128359e9dbd62678796d6 --- src/resources/vaults/items.ts | 44 ++++++++++++++++++++++++++++++++++- 1 file changed, 43 insertions(+), 1 deletion(-) diff --git a/src/resources/vaults/items.ts b/src/resources/vaults/items.ts index f63d9c82..99a9bb0c 100644 --- a/src/resources/vaults/items.ts +++ b/src/resources/vaults/items.ts @@ -2113,6 +2113,12 @@ export namespace OnePasswordCredentialVaultItemSpec { */ type: string; + /** + * 1Password's ID for this entry in an access request you created. Supply it only + * with resolved. + */ + id?: string; + keywords?: Array; reason?: string; @@ -2131,11 +2137,20 @@ export namespace OnePasswordCredentialVaultItemSpec { * customer-supplied access token and matching integration key. Supply either * account or both secrets, never both. Supplied secrets are write-only and never * returned. Supply requests for new items; website remains supported for existing - * account-backed callers. + * account-backed callers. To use an access request you already created and the + * user approved with the same access token and integration key, also supply + * access_request_id, resolved, and each requests entry's id; the item is created + * ready and Kernel doesn't create an access request. */ export interface OnePasswordCredentialVaultItemSpecInput { provider: '1password'; + /** + * ID of an approved access request you created with this access_token and + * integration_key. Requires resolved. + */ + access_request_id?: string; + /** * Customer-supplied 1Password broker token. Requires integration_key; stored * encrypted on this item. Omit if providing a connected credential_account item @@ -2168,6 +2183,14 @@ export interface OnePasswordCredentialVaultItemSpecInput { */ requests?: OnePasswordCredentialVaultItemSpecInput.Requests; + /** + * Granted logins from 1Password's status for access_request_id, as returned by the + * 1Password SDK or extension. Requires access_request_id and an id on every + * requests entry. entryId may be omitted only when requests has one entry. Kernel + * doesn't verify the references; 1Password checks them when filling. + */ + resolved?: Array; + /** * @deprecated Legacy single-login shorthand. Supply requests instead. */ @@ -2199,6 +2222,12 @@ export namespace OnePasswordCredentialVaultItemSpecInput { */ type: string; + /** + * 1Password's ID for this entry in an access request you created. Supply it only + * with resolved. + */ + id?: string; + keywords?: Array; reason?: string; @@ -2210,6 +2239,19 @@ export namespace OnePasswordCredentialVaultItemSpecInput { } } } + + export interface Resolved { + /** + * 1Password credential reference. Pass it unchanged as resourcePath to the + * extension's fillCredential or to the 1Password SDK. + */ + reference: string; + + /** + * The requested entry this login satisfies, when known. + */ + entryId?: string; + } } export interface OnePasswordCredentialVaultItemState { From 7073ee3a52cdbf06680ecae9a908d6f7f7093003 Mon Sep 17 00:00:00 2001 From: "kernel-internal[bot]" <260533166+kernel-internal[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 19:34:04 +0000 Subject: [PATCH 2/3] release: 0.136.0 --- .release-please-manifest.json | 2 +- CHANGELOG.md | 7 +++++++ package.json | 2 +- src/version.ts | 2 +- 4 files changed, 10 insertions(+), 3 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 3799cbc2..d62785c5 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.135.0" + ".": "0.136.0" } diff --git a/CHANGELOG.md b/CHANGELOG.md index cfbd9c29..27cf3501 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,12 @@ # Changelog +## [0.136.0](https://github.com/kernel/kernel-node-sdk/compare/v0.135.0...v0.136.0) (2026-10-28) + + +### Features + +* chore(stlc): seal custom-code tracking files ([efee572](https://github.com/kernel/kernel-node-sdk/commit/efee572e2333b46badb52e4c8f4cca944d55a92f)) + ## [0.135.0](https://github.com/kernel/kernel-node-sdk/compare/v0.134.0...v0.135.0) (2026-10-28) diff --git a/package.json b/package.json index a6b89582..3e80f659 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@onkernel/sdk", - "version": "0.135.0", + "version": "0.136.0", "description": "The official TypeScript library for the Kernel API", "author": "Kernel <>", "types": "dist/index.d.ts", diff --git a/src/version.ts b/src/version.ts index b35cd532..23d9082b 100644 --- a/src/version.ts +++ b/src/version.ts @@ -1 +1 @@ -export const VERSION = '0.135.0'; // x-release-please-version +export const VERSION = '0.136.0'; // x-release-please-version From 324021f7dd5b7a6a650f743afc5a0691ce5f6b11 Mon Sep 17 00:00:00 2001 From: Rafael Date: Wed, 28 Oct 2026 19:43:23 +0000 Subject: [PATCH 3/3] docs: describe the 0.136.0 change in the changelog --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 27cf3501..cbde2c71 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,7 +5,7 @@ ### Features -* chore(stlc): seal custom-code tracking files ([efee572](https://github.com/kernel/kernel-node-sdk/commit/efee572e2333b46badb52e4c8f4cca944d55a92f)) +* Import approved 1Password logins onto stored-token credentials ([efee572](https://github.com/kernel/kernel-node-sdk/commit/efee572e2333b46badb52e4c8f4cca944d55a92f)) ## [0.135.0](https://github.com/kernel/kernel-node-sdk/compare/v0.134.0...v0.135.0) (2026-10-28)