Skip to content

release: 0.31.1 #67

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
stainless-app merged 2 commits into from
Feb 6, 2026
Merged

release: 0.31.1 #67

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
fe6c74f
chore: add Managed Auth API planning doc
stainless-app[bot] Feb 6, 2026
5eb46b9
release: 0.31.1
stainless-app[bot] Feb 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .release-please-manifest.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
{
".": "0.31.0"
".": "0.31.1"
}
8 changes: 4 additions & 4 deletions .stats.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
configured_endpoints: 100
openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-a6d93dc291278035c96add38bb6150ec2b9ba8bbabb4676e3dbbb8444cf3b1e4.yml
openapi_spec_hash: 694bcc56d94fd0ff0d1f7b0fc1dae8ba
config_hash: 62e33cf2ed8fe0b4ceebba63367481ad
configured_endpoints: 108
openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-3fbe762c99e8a120c426ac22bc1fa257c9127d631b12a38a6440a37f52935543.yml
openapi_spec_hash: 5a190df210ed90b20a71c5061ff43917
config_hash: 38c9b3b355025daf9bb643040e4af94e
8 changes: 8 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,13 @@
# Changelog

## 0.31.1 (2026-02-06)

Full Changelog: [v0.31.0...v0.31.1](https://github.com/kernel/kernel-go-sdk/compare/v0.31.0...v0.31.1)

### Chores

* add Managed Auth API planning doc ([fe6c74f](https://github.com/kernel/kernel-go-sdk/commit/fe6c74f86576f1939a61e5ea78a0480837629c81))

## 0.31.0 (2026-02-06)

Full Changelog: [v0.30.0...v0.31.0](https://github.com/kernel/kernel-go-sdk/compare/v0.30.0...v0.31.0)
Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ Or to pin the version:
<!-- x-release-please-start-version -->

```sh
go get -u 'github.com/kernel/kernel-go-sdk@v0.31.0'
go get -u 'github.com/kernel/kernel-go-sdk@v0.31.1'
```

<!-- x-release-please-end -->
Expand Down
187 changes: 140 additions & 47 deletions agentauth.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,19 +43,24 @@ func NewAgentAuthService(opts ...option.RequestOption) (r AgentAuthService) {
return
}

// Creates a new auth agent for the specified domain and profile combination, or
// returns an existing one if it already exists. This is idempotent - calling with
// the same domain and profile will return the same agent. Does NOT start an
// invocation - use POST /agents/auth/invocations to start an auth flow.
// **Deprecated: Use POST /auth/connections instead.** Creates a new auth agent for
// the specified domain and profile combination, or returns an existing one if it
// already exists. This is idempotent - calling with the same domain and profile
// will return the same agent. Does NOT start an invocation - use POST
// /agents/auth/invocations to start an auth flow.
//
// Deprecated: deprecated
func (r *AgentAuthService) New(ctx context.Context, body AgentAuthNewParams, opts ...option.RequestOption) (res *AuthAgent, err error) {
opts = slices.Concat(r.Options, opts)
path := "agents/auth"
err = requestconfig.ExecuteNewRequest(ctx, http.MethodPost, path, body, &res, opts...)
return
}

// Retrieve an auth agent by its ID. Returns the current authentication status of
// the managed profile.
// **Deprecated: Use GET /auth/connections/{id} instead.** Retrieve an auth agent
// by its ID. Returns the current authentication status of the managed profile.
//
// Deprecated: deprecated
func (r *AgentAuthService) Get(ctx context.Context, id string, opts ...option.RequestOption) (res *AuthAgent, err error) {
opts = slices.Concat(r.Options, opts)
if id == "" {
Expand All @@ -67,7 +72,10 @@ func (r *AgentAuthService) Get(ctx context.Context, id string, opts ...option.Re
return
}

// List auth agents with optional filters for profile_name and domain.
// **Deprecated: Use GET /auth/connections instead.** List auth agents with
// optional filters for profile_name and domain.
//
// Deprecated: deprecated
func (r *AgentAuthService) List(ctx context.Context, query AgentAuthListParams, opts ...option.RequestOption) (res *pagination.OffsetPagination[AuthAgent], err error) {
var raw *http.Response
opts = slices.Concat(r.Options, opts)
Expand All @@ -85,16 +93,22 @@ func (r *AgentAuthService) List(ctx context.Context, query AgentAuthListParams,
return res, nil
}

// List auth agents with optional filters for profile_name and domain.
// **Deprecated: Use GET /auth/connections instead.** List auth agents with
// optional filters for profile_name and domain.
//
// Deprecated: deprecated
func (r *AgentAuthService) ListAutoPaging(ctx context.Context, query AgentAuthListParams, opts ...option.RequestOption) *pagination.OffsetPaginationAutoPager[AuthAgent] {
return pagination.NewOffsetPaginationAutoPager(r.List(ctx, query, opts...))
}

// Deletes an auth agent and terminates its workflow. This will:
// **Deprecated: Use DELETE /auth/connections/{id} instead.** Deletes an auth agent
// and terminates its workflow. This will:
//
// - Soft delete the auth agent record
// - Gracefully terminate the agent's Temporal workflow
// - Cancel any in-progress invocations
//
// Deprecated: deprecated
func (r *AgentAuthService) Delete(ctx context.Context, id string, opts ...option.RequestOption) (err error) {
opts = slices.Concat(r.Options, opts)
opts = append([]option.RequestOption{option.WithHeader("Accept", "*/*")}, opts...)
Expand Down Expand Up @@ -124,13 +138,12 @@ type AgentAuthInvocationResponse struct {
// Any of "initialized", "discovering", "awaiting_input",
// "awaiting_external_action", "submitting", "completed", "expired".
Step AgentAuthInvocationResponseStep `json:"step,required"`
// The invocation type:
// The session type:
//
// - login: First-time authentication
// - reauth: Re-authentication for previously authenticated agents
// - auto_login: Legacy type (no longer created, kept for backward compatibility)
// - login: User-initiated authentication
// - reauth: System-triggered re-authentication (via health check)
//
// Any of "login", "auto_login", "reauth".
// Any of "login", "reauth".
Type AgentAuthInvocationResponseType `json:"type,required"`
// Error message explaining why the invocation failed (present when status=FAILED)
ErrorMessage string `json:"error_message,nullable"`
Expand Down Expand Up @@ -201,26 +214,24 @@ const (
AgentAuthInvocationResponseStepExpired AgentAuthInvocationResponseStep = "expired"
)

// The invocation type:
// The session type:
//
// - login: First-time authentication
// - reauth: Re-authentication for previously authenticated agents
// - auto_login: Legacy type (no longer created, kept for backward compatibility)
// - login: User-initiated authentication
// - reauth: System-triggered re-authentication (via health check)
type AgentAuthInvocationResponseType string

const (
AgentAuthInvocationResponseTypeLogin AgentAuthInvocationResponseType = "login"
AgentAuthInvocationResponseTypeAutoLogin AgentAuthInvocationResponseType = "auto_login"
AgentAuthInvocationResponseTypeReauth AgentAuthInvocationResponseType = "reauth"
AgentAuthInvocationResponseTypeLogin AgentAuthInvocationResponseType = "login"
AgentAuthInvocationResponseTypeReauth AgentAuthInvocationResponseType = "reauth"
)

// An MFA method option for verification
type AgentAuthInvocationResponseMfaOption struct {
// The visible option text
Label string `json:"label,required"`
// The MFA delivery method type
// The MFA delivery method type (includes password for auth method selection pages)
//
// Any of "sms", "call", "email", "totp", "push", "security_key".
// Any of "sms", "call", "email", "totp", "push", "password".
Type string `json:"type,required"`
// Additional instructions from the site
Description string `json:"description,nullable"`
Expand Down Expand Up @@ -301,14 +312,34 @@ type AuthAgent struct {
// Additional domains that are valid for this auth agent's authentication flow
// (besides the primary domain). Useful when login pages redirect to different
// domains.
//
// The following SSO/OAuth provider domains are automatically allowed by default
// and do not need to be specified:
//
// - Google: accounts.google.com
// - Microsoft/Azure AD: login.microsoftonline.com, login.live.com
// - Okta: _.okta.com, _.oktapreview.com
// - Auth0: _.auth0.com, _.us.auth0.com, _.eu.auth0.com, _.au.auth0.com
// - Apple: appleid.apple.com
// - GitHub: github.com
// - Facebook/Meta: www.facebook.com
// - LinkedIn: www.linkedin.com
// - Amazon Cognito: \*.amazoncognito.com
// - OneLogin: \*.onelogin.com
// - Ping Identity: _.pingone.com, _.pingidentity.com
AllowedDomains []string `json:"allowed_domains"`
// Whether automatic re-authentication is possible (has credential_id, selectors,
// and login_url)
CanReauth bool `json:"can_reauth"`
// ID of the linked credential for automatic re-authentication
// Reference to credentials for managed auth. Use one of:
//
// - { name } for Kernel credentials
// - { provider, path } for external provider item
// - { provider, auto: true } for external provider domain lookup
Credential AuthAgentCredential `json:"credential"`
// ID of the linked Kernel credential for automatic re-authentication (deprecated,
// use credential)
CredentialID string `json:"credential_id"`
// Name of the linked credential for automatic re-authentication
CredentialName string `json:"credential_name"`
// Whether this auth agent has stored selectors for deterministic re-authentication
HasSelectors bool `json:"has_selectors"`
// When the last authentication check was performed
Expand All @@ -324,8 +355,8 @@ type AuthAgent struct {
Status respjson.Field
AllowedDomains respjson.Field
CanReauth respjson.Field
Credential respjson.Field
CredentialID respjson.Field
CredentialName respjson.Field
HasSelectors respjson.Field
LastAuthCheckAt respjson.Field
PostLoginURL respjson.Field
Expand All @@ -348,6 +379,37 @@ const (
AuthAgentStatusNeedsAuth AuthAgentStatus = "NEEDS_AUTH"
)

// Reference to credentials for managed auth. Use one of:
//
// - { name } for Kernel credentials
// - { provider, path } for external provider item
// - { provider, auto: true } for external provider domain lookup
type AuthAgentCredential struct {
// If true, lookup by domain from the specified provider
Auto bool `json:"auto"`
// Kernel credential name
Name string `json:"name"`
// Provider-specific path (e.g., "VaultName/ItemName" for 1Password)
Path string `json:"path"`
// External provider name (e.g., "my-1p")
Provider string `json:"provider"`
// JSON contains metadata for fields, check presence with [respjson.Field.Valid].
JSON struct {
Auto respjson.Field
Name respjson.Field
Path respjson.Field
Provider respjson.Field
ExtraFields map[string]respjson.Field
raw string
} `json:"-"`
}

// Returns the unmodified JSON received from the API
func (r AuthAgentCredential) RawJSON() string { return r.JSON.raw }
func (r *AuthAgentCredential) UnmarshalJSON(data []byte) error {
return apijson.UnmarshalRoot(data, r)
}

// Request to create or find an auth agent
//
// The properties Domain, ProfileName are required.
Expand All @@ -366,6 +428,21 @@ type AuthAgentCreateRequestParam struct {
// Additional domains that are valid for this auth agent's authentication flow
// (besides the primary domain). Useful when login pages redirect to different
// domains.
//
// The following SSO/OAuth provider domains are automatically allowed by default
// and do not need to be specified:
//
// - Google: accounts.google.com
// - Microsoft/Azure AD: login.microsoftonline.com, login.live.com
// - Okta: _.okta.com, _.oktapreview.com
// - Auth0: _.auth0.com, _.us.auth0.com, _.eu.auth0.com, _.au.auth0.com
// - Apple: appleid.apple.com
// - GitHub: github.com
// - Facebook/Meta: www.facebook.com
// - LinkedIn: www.linkedin.com
// - Amazon Cognito: \*.amazoncognito.com
// - OneLogin: \*.onelogin.com
// - Ping Identity: _.pingone.com, _.pingidentity.com
AllowedDomains []string `json:"allowed_domains,omitzero"`
// Optional proxy configuration
Proxy AuthAgentCreateRequestProxyParam `json:"proxy,omitzero"`
Expand Down Expand Up @@ -426,13 +503,12 @@ type AuthAgentInvocationCreateResponse struct {
HostedURL string `json:"hosted_url,required" format:"uri"`
// Unique identifier for the invocation.
InvocationID string `json:"invocation_id,required"`
// The invocation type:
// The session type:
//
// - login: First-time authentication
// - reauth: Re-authentication for previously authenticated agents
// - auto_login: Legacy type (no longer created, kept for backward compatibility)
// - login: User-initiated authentication
// - reauth: System-triggered re-authentication (via health check)
//
// Any of "login", "auto_login", "reauth".
// Any of "login", "reauth".
Type AuthAgentInvocationCreateResponseType `json:"type,required"`
// JSON contains metadata for fields, check presence with [respjson.Field.Valid].
JSON struct {
Expand All @@ -452,17 +528,15 @@ func (r *AuthAgentInvocationCreateResponse) UnmarshalJSON(data []byte) error {
return apijson.UnmarshalRoot(data, r)
}

// The invocation type:
// The session type:
//
// - login: First-time authentication
// - reauth: Re-authentication for previously authenticated agents
// - auto_login: Legacy type (no longer created, kept for backward compatibility)
// - login: User-initiated authentication
// - reauth: System-triggered re-authentication (via health check)
type AuthAgentInvocationCreateResponseType string

const (
AuthAgentInvocationCreateResponseTypeLogin AuthAgentInvocationCreateResponseType = "login"
AuthAgentInvocationCreateResponseTypeAutoLogin AuthAgentInvocationCreateResponseType = "auto_login"
AuthAgentInvocationCreateResponseTypeReauth AuthAgentInvocationCreateResponseType = "reauth"
AuthAgentInvocationCreateResponseTypeLogin AuthAgentInvocationCreateResponseType = "login"
AuthAgentInvocationCreateResponseTypeReauth AuthAgentInvocationCreateResponseType = "reauth"
)

// A discovered form field
Expand All @@ -477,20 +551,26 @@ type DiscoveredField struct {
//
// Any of "text", "email", "password", "tel", "number", "url", "code", "totp".
Type DiscoveredFieldType `json:"type,required"`
// If this field is associated with an MFA option, the type of that option (e.g.,
// password field linked to "Enter password" option)
//
// Any of "sms", "call", "email", "totp", "push", "password".
LinkedMfaType DiscoveredFieldLinkedMfaType `json:"linked_mfa_type,nullable"`
// Field placeholder
Placeholder string `json:"placeholder"`
// Whether field is required
Required bool `json:"required"`
// JSON contains metadata for fields, check presence with [respjson.Field.Valid].
JSON struct {
Label respjson.Field
Name respjson.Field
Selector respjson.Field
Type respjson.Field
Placeholder respjson.Field
Required respjson.Field
ExtraFields map[string]respjson.Field
raw string
Label respjson.Field
Name respjson.Field
Selector respjson.Field
Type respjson.Field
LinkedMfaType respjson.Field
Placeholder respjson.Field
Required respjson.Field
ExtraFields map[string]respjson.Field
raw string
} `json:"-"`
}

Expand All @@ -514,6 +594,19 @@ const (
DiscoveredFieldTypeTotp DiscoveredFieldType = "totp"
)

// If this field is associated with an MFA option, the type of that option (e.g.,
// password field linked to "Enter password" option)
type DiscoveredFieldLinkedMfaType string

const (
DiscoveredFieldLinkedMfaTypeSMS DiscoveredFieldLinkedMfaType = "sms"
DiscoveredFieldLinkedMfaTypeCall DiscoveredFieldLinkedMfaType = "call"
DiscoveredFieldLinkedMfaTypeEmail DiscoveredFieldLinkedMfaType = "email"
DiscoveredFieldLinkedMfaTypeTotp DiscoveredFieldLinkedMfaType = "totp"
DiscoveredFieldLinkedMfaTypePush DiscoveredFieldLinkedMfaType = "push"
DiscoveredFieldLinkedMfaTypePassword DiscoveredFieldLinkedMfaType = "password"
)

type AgentAuthNewParams struct {
// Request to create or find an auth agent
AuthAgentCreateRequest AuthAgentCreateRequestParam
Expand Down
Loading