release: 0.93.0

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.92.0"
+  ".": "0.93.0"
 }

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.93.0](https://github.com/kernel/kernel-python-sdk/compare/v0.92.0...v0.93.0) (2026-08-19)
+
+
+### Features
+
+* Bind managed auth submissions to interactions ([63fb060](https://github.com/kernel/kernel-python-sdk/commit/63fb0606910b17a99f7a584e425fbd77e2d562e5))
+* Harden canonical managed auth interactions ([3522fcb](https://github.com/kernel/kernel-python-sdk/commit/3522fcb9e70854ad2900585f5b37222e7f0e1b26))
+
 ## [0.92.0](https://github.com/kernel/kernel-python-sdk/compare/v0.91.0...v0.92.0) (2026-08-17)
 
 

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.92.0"
+version = "0.93.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.92.0"  # x-release-please-version
+__version__ = "0.93.0"  # x-release-please-version

src/kernel/resources/auth/connections.py

@@ -530,6 +530,7 @@ def submit(
         *,
         field_values: Dict[str, str] | Omit = omit,
         fields: Dict[str, str] | Omit = omit,
+        interaction_id: str | Omit = omit,
         mfa_option_id: str | Omit = omit,
         selected_choice_id: str | Omit = omit,
         sign_in_option_id: str | Omit = omit,
@@ -552,6 +553,9 @@ def submit(
 
           fields: Map of field name to value
 
+          interaction_id: Opaque interaction ID returned with canonical fields and choices. Required for
+              canonical submissions.
+
           mfa_option_id: The MFA method type to select (when mfa_options were returned)
 
           selected_choice_id: Canonical choice ID selected by the user.
@@ -580,6 +584,7 @@ def submit(
                 {
                     "field_values": field_values,
                     "fields": fields,
+                    "interaction_id": interaction_id,
                     "mfa_option_id": mfa_option_id,
                     "selected_choice_id": selected_choice_id,
                     "sign_in_option_id": sign_in_option_id,
@@ -1143,6 +1148,7 @@ async def submit(
         *,
         field_values: Dict[str, str] | Omit = omit,
         fields: Dict[str, str] | Omit = omit,
+        interaction_id: str | Omit = omit,
         mfa_option_id: str | Omit = omit,
         selected_choice_id: str | Omit = omit,
         sign_in_option_id: str | Omit = omit,
@@ -1165,6 +1171,9 @@ async def submit(
 
           fields: Map of field name to value
 
+          interaction_id: Opaque interaction ID returned with canonical fields and choices. Required for
+              canonical submissions.
+
           mfa_option_id: The MFA method type to select (when mfa_options were returned)
 
           selected_choice_id: Canonical choice ID selected by the user.
@@ -1193,6 +1202,7 @@ async def submit(
                 {
                     "field_values": field_values,
                     "fields": fields,
+                    "interaction_id": interaction_id,
                     "mfa_option_id": mfa_option_id,
                     "selected_choice_id": selected_choice_id,
                     "sign_in_option_id": sign_in_option_id,

src/kernel/types/auth/connection_follow_response.py

@@ -97,6 +97,9 @@ class ManagedAuthStateEventField(BaseModel):
     id: str
     """Stable field identifier for canonical submit."""
 
+    reason: Literal["missing", "rejected"]
+    """Why the field requires user input."""
+
     ref: str
     """Credential reference name to store the submitted value under."""
 
@@ -112,12 +115,6 @@ class ManagedAuthStateEventField(BaseModel):
     observed_selector: Optional[str] = None
     """Selector for the visible field, when available."""
 
-    replace_existing: Optional[bool] = None
-    """
-    Whether the submitted value must replace an existing credential after explicit
-    rejection.
-    """
-
     required: Optional[bool] = None
     """Whether this field is required."""
 
@@ -224,6 +221,13 @@ class ManagedAuthStateEvent(BaseModel):
     hosted_url: Optional[str] = None
     """URL to redirect user to for hosted login."""
 
+    interaction_id: Optional[str] = None
+    """Opaque identifier for the current canonical interaction.
+
+    Required when submitting fields or choices and changes for each new actionable
+    pause.
+    """
+
     live_view_url: Optional[str] = None
     """Browser live view URL for debugging."""
 

src/kernel/types/auth/connection_submit_params.py

@@ -15,6 +15,12 @@ class ConnectionSubmitParams(TypedDict, total=False):
     fields: Dict[str, str]
     """Map of field name to value"""
 
+    interaction_id: str
+    """Opaque interaction ID returned with canonical fields and choices.
+
+    Required for canonical submissions.
+    """
+
     mfa_option_id: str
     """The MFA method type to select (when mfa_options were returned)"""
 

src/kernel/types/auth/managed_auth.py

@@ -206,6 +206,9 @@ class Field(BaseModel):
     id: str
     """Stable field identifier for canonical submit."""
 
+    reason: Literal["missing", "rejected"]
+    """Why the field requires user input."""
+
     ref: str
     """Credential reference name to store the submitted value under."""
 
@@ -221,12 +224,6 @@ class Field(BaseModel):
     observed_selector: Optional[str] = None
     """Selector for the visible field, when available."""
 
-    replace_existing: Optional[bool] = None
-    """
-    Whether the submitted value must replace an existing credential after explicit
-    rejection.
-    """
-
     required: Optional[bool] = None
     """Whether this field is required."""
 
@@ -504,6 +501,13 @@ class ManagedAuth(BaseModel):
     hosted_url: Optional[str] = None
     """URL to redirect user to for hosted login (present when flow in progress)"""
 
+    interaction_id: Optional[str] = None
+    """Opaque identifier for the current canonical interaction.
+
+    Required when submitting fields or choices and changes for each new actionable
+    pause.
+    """
+
     last_auth_at: Optional[datetime] = None
     """Deprecated alias for `last_auth_check_at`.
 

tests/api_resources/auth/test_connections.py

@@ -556,6 +556,7 @@ def test_method_submit_with_all_params(self, client: Kernel) -> None:
                 "email": "user@example.com",
                 "password": "secret",
             },
+            interaction_id="mai_abc123xyz",
             mfa_option_id="sms",
             selected_choice_id="google",
             sign_in_option_id="work-account",
@@ -1190,6 +1191,7 @@ async def test_method_submit_with_all_params(self, async_client: AsyncKernel) ->
                 "email": "user@example.com",
                 "password": "secret",
             },
+            interaction_id="mai_abc123xyz",
             mfa_option_id="sms",
             selected_choice_id="google",
             sign_in_option_id="work-account",