release: 0.114.0

[kernel-internal]

Automated Release PR

0.114.0 (2026-09-30)

Features

• Accept telemetry.storage and settle it at browser create (3ef0e3b)
• Allow export-only network and console telemetry for BAA orgs (db2aeee)
• Expose 1Password supplied-token inputs in the Node SDK (eb88be6)
• Expose missing managed auth check URL as verification unavailable (eafcdcf)
• Let Vaults fill credentials from 1Password (d2383af)
• Send Stripe publishable key when refreshing customer-owned Link grants (0e42728)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Large new typed surface for vault credentials and 1Password flows (including write-only secrets), plus telemetry storage semantics that affect compliance-oriented deployments; changes are contract/types only but may break strict TypeScript callers on credential spec shapes.

Overview
Release 0.114.0 updates generated TypeScript types and docs for new Kernel API capabilities (version, changelog, api.md, and tests follow the OpenAPI contract).

Browser telemetry gains optional telemetry.storage (and BrowserTelemetryStorageConfig on reads) across browser create/update, pools, and managed-auth browser telemetry. Callers can control whether captured telemetry is persisted in Kernel storage versus export-only/stream-only; docs note defaults and that disabling storage requires an OTLP destination and is fixed at browser create.

Managed auth connections add health_check_unavailable_reason (no_auth_check_url) and clarify that status is last-known (inconclusive checks do not re-verify the session).

Vault Link provider configs accept and return optional publishable_key on create/update so customer-owned Link grants can be refreshed/revoked with Stripe’s publishable key.

Vault credentials expand for 1Password: new credential_account items, discriminated kernel vs 1password credential specs/states, write-only supplied-token inputs (access_token, integration_key), Credential Request v2 requests, and item operations/actions for OAuth, access requests, fill, recover, and token update—plus corresponding exports in the vault modules and api.md.

^{Reviewed by Cursor Bugbot for commit ffbe75c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ce3bbc0. Configure here.}

[rgarcia]

The generated 1Password input and response contracts look correct. Approving the SDK changes; publication still needs the deployment and end-to-end release gates cleared.

[rgarcia]

Reviewed the regenerated release head, including the additional publishable-key model change and passing checks.

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-node-sdk/releases/tag/v0.114.0 🌻