[kernel-internal]

Automated Release PR

0.140.0 (2026-11-03)

Features

• Drop Kernel's origin gate from 1Password fill (7d574cd)
• Pass through tool_page_unloaded and disable SDK retries for WebMCP invoke failures (15c227b)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Low Risk
Changes are mostly generated SDK docs/types plus CI prompt/workflow text; the new WebMCP enum value is additive for TypeScript callers.

Overview
Release 0.140.0 bumps package and manifest versions and adds changelog entries for WebMCP invoke failure handling and relaxed 1Password fill origin matching on the API side.

WebMCP types and docs now include a tool_page_unloaded failure code alongside outcome_unknown, with expanded invokeTool documentation on page reload/crash behavior and that neither case should be retried (X-Should-Retry: false). Documented tool input size moves from 1 MiB to 4 MiB on invoke request/param types.

Vault 1Password fill operation descriptions change to say the 1Password extension decides page/login match (Kernel no longer gates on shared origin), and entry_id is required when multiple approved entries exist and the page origin does not identify exactly one.

MCP coverage automation (prompt + workflow) now baselines the SDK diff on origin/main’s pinned SDK version, widens the diff to src/client.ts and src/lib, and requires the coverage report to cover all branch changes since that baseline—not only the latest agent run.

^{Reviewed by Cursor Bugbot for commit 79d2add. Bugbot is set up for automated code reviews on this repo. Configure here.}