diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 8305d4a..f04d089 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.31.1"
+  ".": "0.32.0"
 }
\ No newline at end of file
diff --git a/.stats.yml b/.stats.yml
index 2964321..ad62343 100644
--- a/.stats.yml
+++ b/.stats.yml
@@ -1,4 +1,4 @@
 configured_endpoints: 108
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-3fbe762c99e8a120c426ac22bc1fa257c9127d631b12a38a6440a37f52935543.yml
-openapi_spec_hash: 5a190df210ed90b20a71c5061ff43917
-config_hash: 38c9b3b355025daf9bb643040e4af94e
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel%2Fkernel-f967d3024897a6125d5d18c4577dbb2cc22d742d487e6a43165198685f992379.yml
+openapi_spec_hash: e1c40ef0aee3a79168eb9cc854a9e403
+config_hash: 3b1fbbb6bda0dac7e8b42e155cd7da56
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 19d195d..0a99391 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.32.0 (2026-02-07)
+
+Full Changelog: [v0.31.1...v0.32.0](https://github.com/kernel/kernel-go-sdk/compare/v0.31.1...v0.32.0)
+
+### Features
+
+* **auth:** add reauth circuit breaker logic ([9cfbd02](https://github.com/kernel/kernel-go-sdk/commit/9cfbd021a7ecf10f4a037ce73e775c5dab2d8fa0))
+
 ## 0.31.1 (2026-02-06)
 
 Full Changelog: [v0.31.0...v0.31.1](https://github.com/kernel/kernel-go-sdk/compare/v0.31.0...v0.31.1)
diff --git a/README.md b/README.md
index 7096145..3128dd0 100644
--- a/README.md
+++ b/README.md
@@ -28,7 +28,7 @@ Or to pin the version:
 <!-- x-release-please-start-version -->
 
 ```sh
-go get -u 'github.com/kernel/kernel-go-sdk@v0.31.1'
+go get -u 'github.com/kernel/kernel-go-sdk@v0.32.0'
 ```
 
 <!-- x-release-please-end -->
diff --git a/agentauth.go b/agentauth.go
index fb05f0c..52029c9 100644
--- a/agentauth.go
+++ b/agentauth.go
@@ -331,6 +331,8 @@ type AuthAgent struct {
 	// Whether automatic re-authentication is possible (has credential_id, selectors,
 	// and login_url)
 	CanReauth bool `json:"can_reauth"`
+	// Reason why automatic re-authentication is or is not possible
+	CanReauthReason string `json:"can_reauth_reason"`
 	// Reference to credentials for managed auth. Use one of:
 	//
 	// - { name } for Kernel credentials
@@ -355,6 +357,7 @@ type AuthAgent struct {
 		Status          respjson.Field
 		AllowedDomains  respjson.Field
 		CanReauth       respjson.Field
+		CanReauthReason respjson.Field
 		Credential      respjson.Field
 		CredentialID    respjson.Field
 		HasSelectors    respjson.Field
diff --git a/authconnection.go b/authconnection.go
index 6d7a9aa..44d3eba 100644
--- a/authconnection.go
+++ b/authconnection.go
@@ -245,6 +245,8 @@ type ManagedAuth struct {
 	// Whether automatic re-authentication is possible (has credential, selectors, and
 	// login_url)
 	CanReauth bool `json:"can_reauth"`
+	// Reason why automatic re-authentication is or is not possible
+	CanReauthReason string `json:"can_reauth_reason"`
 	// Reference to credentials for managed auth. Use one of:
 	//
 	// - { name } for Kernel credentials
@@ -304,6 +306,7 @@ type ManagedAuth struct {
 		Status                respjson.Field
 		AllowedDomains        respjson.Field
 		CanReauth             respjson.Field
+		CanReauthReason       respjson.Field
 		Credential            respjson.Field
 		DiscoveredFields      respjson.Field
 		ErrorMessage          respjson.Field
diff --git a/internal/version.go b/internal/version.go
index becd05d..5a62e29 100644
--- a/internal/version.go
+++ b/internal/version.go
@@ -2,4 +2,4 @@
 
 package internal
 
-const PackageVersion = "0.31.1" // x-release-please-version
+const PackageVersion = "0.32.0" // x-release-please-version