release: 0.122.0

[kernel-internal]

Automated Release PR

0.122.0 (2026-10-09)

Features

• Accept client-encrypted credential values in vault items (78ee783)
• Add feature-gated Korean ISP proxies (96d63e2)
• Describe vault fill as safe to retry (b96e6ca)
• Infer a challenge result for unobserved captcha providers in the relay (84022be)
• Support proxy routes in browser pools (e5b2ffc)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds vault client-encryption APIs and changes captcha telemetry shapes; consumers integrating vault fill retry behavior or event parsing should verify against the updated types.

Overview
Releases @onkernel/sdk 0.122.0, syncing generated types and client methods with new Kernel API surface (endpoint count 174 → 175).

Vault credentials add browser-side encryption: client.vaults.retrieveEncryptionKey and VaultEncryptionKey, plus optional encrypted_value on credential field create/update (mutually exclusive with value). Docs now state vault fill is safe to retry after failure, unknown, or transport errors (replacing prior “do not automatically retry” guidance).

Browsers and pools document proxy routes on browser pools (proxy-v3 required) and tighten allowed_hosts rules: allowlists can only be changed on sessions that were created with one, not added later. ISP proxies gain KR in supported country lists.

Captcha telemetry expands captcha_challenge_result / solve events with captcha_provider, task_kind, and inferred results (task_id vs challenge_id); captcha_type is marked deprecated on those payloads.

^{Reviewed by Cursor Bugbot for commit 0d2f2ce. Bugbot is set up for automated code reviews on this repo. Configure here.}

[rgarcia]

Reviewed: vault encryption key method/type and encrypted_value on credential field input/update are modeled correctly.

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-node-sdk/releases/tag/v0.122.0 🌻