feat: Drop Kernel's origin gate from 1Password fill

Stainless-Generated-From: 1f6da93b3427376e6526a1c28012a96279a47615

Author: kernel-internal[bot]

src/kernel/resources/vaults/items.py

@@ -1280,8 +1280,8 @@ def perform_operation(
           page_url: Exact current top-level page URL. Must match exactly one open page in the
               browser unless target_id is supplied.
 
-          entry_id: ID of an approved request entry. Required when several approved entries have the
-              page's origin.
+          entry_id: ID of an approved request entry. Required when several entries are approved and
+              the page's origin does not match exactly one of them.
 
           target_id: CDP target ID of the page to fill, such as tab.target_id from
               playwright.execute. Use it when several open pages have page_url. The page's
@@ -3285,8 +3285,8 @@ async def perform_operation(
           page_url: Exact current top-level page URL. Must match exactly one open page in the
               browser unless target_id is supplied.
 
-          entry_id: ID of an approved request entry. Required when several approved entries have the
-              page's origin.
+          entry_id: ID of an approved request entry. Required when several entries are approved and
+              the page's origin does not match exactly one of them.
 
           target_id: CDP target ID of the page to fill, such as tab.target_id from
               playwright.execute. Use it when several open pages have page_url. The page's

src/kernel/types/vaults/item_perform_operation_params.py

@@ -235,7 +235,8 @@ class OnePasswordFillVaultItemOperationRequest(TypedDict, total=False):
     entry_id: str
     """ID of an approved request entry.
 
-    Required when several approved entries have the page's origin.
+    Required when several entries are approved and the page's origin does not match
+    exactly one of them.
     """
 
     target_id: str

src/kernel/types/vaults/one_password_fill_vault_item_operation_request_param.py

@@ -10,7 +10,7 @@
 class OnePasswordFillVaultItemOperationRequestParam(TypedDict, total=False):
     """Fill and submit an approved 1Password login in the selected browser page.
 
-    The page must share the selected entry's login origin. Supply entry_id when more than one approved entry matches the page origin, and target_id when more than one open page has page_url. The extension selects fields; callers cannot supply selectors or secret values. Submission does not confirm website authentication.
+    The 1Password extension decides whether the approved login matches the page and refuses pages that don't. Supply entry_id when several entries are approved and the page origin does not identify exactly one of them, and target_id when more than one open page has page_url. The extension selects fields; callers cannot supply selectors or secret values. Submission does not confirm website authentication.
     """
 
     browser_id: Required[str]
@@ -27,7 +27,8 @@ class OnePasswordFillVaultItemOperationRequestParam(TypedDict, total=False):
     entry_id: str
     """ID of an approved request entry.
 
-    Required when several approved entries have the page's origin.
+    Required when several entries are approved and the page's origin does not match
+    exactly one of them.
     """
 
     target_id: str