feat: Harden canonical managed auth interactions

Stainless-Generated-From: d1e34365f0a909af7b481fcda9c54a08297b67ea

Author: kernel-internal[bot]

src/kernel/types/auth/connection_follow_response.py

@@ -97,6 +97,9 @@ class ManagedAuthStateEventField(BaseModel):
     id: str
     """Stable field identifier for canonical submit."""
 
+    reason: Literal["missing", "rejected"]
+    """Why the field requires user input."""
+
     ref: str
     """Credential reference name to store the submitted value under."""
 
@@ -112,12 +115,6 @@ class ManagedAuthStateEventField(BaseModel):
     observed_selector: Optional[str] = None
     """Selector for the visible field, when available."""
 
-    replace_existing: Optional[bool] = None
-    """
-    Whether the submitted value must replace an existing credential after explicit
-    rejection.
-    """
-
     required: Optional[bool] = None
     """Whether this field is required."""
 

src/kernel/types/auth/managed_auth.py

@@ -206,6 +206,9 @@ class Field(BaseModel):
     id: str
     """Stable field identifier for canonical submit."""
 
+    reason: Literal["missing", "rejected"]
+    """Why the field requires user input."""
+
     ref: str
     """Credential reference name to store the submitted value under."""
 
@@ -221,12 +224,6 @@ class Field(BaseModel):
     observed_selector: Optional[str] = None
     """Selector for the visible field, when available."""
 
-    replace_existing: Optional[bool] = None
-    """
-    Whether the submitted value must replace an existing credential after explicit
-    rejection.
-    """
-
     required: Optional[bool] = None
     """Whether this field is required."""