release: 0.127.0 - #197

Note

Medium Risk
SDK-only release, but types and docs change vault payment recovery, credential schema PATCH, and pool network preconditions—callers should re-read vault card and credential update flows before upgrading.

Overview
Release 0.127.0 bumps the package and syncs generated types/docs with the latest Kernel API.

Browser pools and sessions gain optional expected_network on pool update for optimistic concurrency (409 stale_network when the saved network changed). Memory request types and docs now include headless sizes (1GiB/2GiB/4GiB) alongside headful 8GiB/16GiB.

Vault credentials add a passkey field type (CXF JSON, not form-fillable, like TOTP). Credential item PATCH supports add_fields / remove_fields plus a new CredentialVaultFieldDefinitionInput shape; collection and WebMCP docs treat passkeys like TOTP for forms.

Vault cards: Link card specs drop expires_at. Kernel cards document fill for checkout details, raise the amount cap to 1,000,000 minor units, and broaden fill when network-token enrollment isn’t available. recovery_required guidance shifts to delete and recreate (including abandoning Link/Kernel issuance recovery via card delete) instead of retrying updates.

Captcha telemetry adds binance as a provider, optional media on solve events, and clarifies text captchas under other.

Tests and api.md exports are updated for the new parameters.

^{Reviewed by Cursor Bugbot for commit 14852b5. Bugbot is set up for automated code reviews on this repo. Configure here.}