@onkernel/sdk 0.116.0 → 0.118.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -87,10 +87,13 @@ export class Items extends APIResource {
87
87
 
88
88
  /**
89
89
  * Unresolved payment operations normally block deletion, including operations on
90
- * child cards of a wallet. An AgentCard card in recovery_required whose checkout
91
- * create response returned no authorization ID may be explicitly abandoned by
92
- * deleting that card directly; deleting its wallet or vault remains blocked.
93
- * Deleting or recreating an item is not proof that a payment did not occur.
90
+ * child cards of a wallet. Deleting a connected Kernel wallet first blocks new
91
+ * payments on it, then removes its enrolled card. If that fails, the wallet is
92
+ * kept and keeps refusing payments; retry the deletion. An AgentCard card in
93
+ * recovery_required whose checkout create response returned no authorization ID
94
+ * may be explicitly abandoned by deleting that card directly; deleting its wallet
95
+ * or vault remains blocked. Deleting or recreating an item is not proof that a
96
+ * payment did not occur.
94
97
  *
95
98
  * @example
96
99
  * ```ts
@@ -304,8 +307,8 @@ export type AgentcardPreparedProcessor =
304
307
  | 'adyen';
305
308
 
306
309
  /**
307
- * Authorize a Link card using its existing purchase specification. Use only after
308
- * explicit user approval and when the item advertises authorize. Do not
310
+ * Authorize a Link or Kernel card using its existing purchase specification. Use
311
+ * only after explicit user approval and when the item advertises authorize. Do not
309
312
  * automatically retry provider failures or indeterminate outcomes. Checkout
310
313
  * context is not accepted.
311
314
  */
@@ -318,7 +321,8 @@ export interface AuthorizeVaultItemOperationRequest {
318
321
  */
319
322
  export type CardVaultItemSpec =
320
323
  | CardVaultItemSpec.LinkCardVaultItemSpec
321
- | CardVaultItemSpec.AgentCardCardVaultItemSpec;
324
+ | CardVaultItemSpec.AgentCardCardVaultItemSpec
325
+ | KernelCardVaultItemSpec;
322
326
 
323
327
  export namespace CardVaultItemSpec {
324
328
  /**
@@ -462,7 +466,10 @@ export namespace CardVaultItemSpec {
462
466
  * Issued Link cards retain encrypted card material for the fill operation. Link
463
467
  * cards do not expose aliases or support egress substitution.
464
468
  */
465
- export type CardVaultItemState = CardVaultItemState.LinkCardState | CardVaultItemState.AgentCardCardState;
469
+ export type CardVaultItemState =
470
+ | CardVaultItemState.LinkCardState
471
+ | CardVaultItemState.AgentCardCardState
472
+ | KernelCardState;
466
473
 
467
474
  export namespace CardVaultItemState {
468
475
  /**
@@ -501,6 +508,11 @@ export namespace CardVaultItemState {
501
508
 
502
509
  last4?: string;
503
510
 
511
+ /**
512
+ * Last four digits of the network token presented to the merchant.
513
+ */
514
+ token_last4?: string;
515
+
504
516
  [k: string]: string | undefined;
505
517
  }
506
518
  }
@@ -559,6 +571,11 @@ export namespace CardVaultItemState {
559
571
 
560
572
  last4?: string;
561
573
 
574
+ /**
575
+ * Last four digits of the network token presented to the merchant.
576
+ */
577
+ token_last4?: string;
578
+
562
579
  [k: string]: string | undefined;
563
580
  }
564
581
  }
@@ -641,7 +658,8 @@ export namespace CredentialAccountVaultItem {
641
658
  | '1pw_access_request_status'
642
659
  | '1pw_fill'
643
660
  | '1pw_recover'
644
- | '1pw_update_access_token';
661
+ | '1pw_update_access_token'
662
+ | 'webmcp_invoke';
645
663
  }
646
664
  }
647
665
 
@@ -907,7 +925,8 @@ export namespace CredentialVaultItem {
907
925
  | '1pw_access_request_status'
908
926
  | '1pw_fill'
909
927
  | '1pw_recover'
910
- | '1pw_update_access_token';
928
+ | '1pw_update_access_token'
929
+ | 'webmcp_invoke';
911
930
  }
912
931
 
913
932
  export interface OnePasswordAccessApprovalAction {
@@ -1013,11 +1032,11 @@ export interface CredentialVaultItemUpdateRequest {
1013
1032
  }
1014
1033
 
1015
1034
  /**
1016
- * Fill selected fields from one ready credential or ready, unexpired Link card
1017
- * into a browser linked to its vault. Only invoke when the item advertises `fill`.
1018
- * Browser and vault must belong to the same project. Kernel checks access and
1019
- * allowed destinations before filling; providing a page URL does not authorize a
1020
- * destination.
1035
+ * Fill selected fields from one ready credential or ready, unexpired Link or
1036
+ * Kernel card into a browser linked to its vault. Only invoke when the item
1037
+ * advertises `fill`. Browser and vault must belong to the same project. Kernel
1038
+ * checks access and allowed destinations before filling; providing a page URL does
1039
+ * not authorize a destination.
1021
1040
  *
1022
1041
  * Find exactly one open page matching `page_url`. Credential items may omit
1023
1042
  * `page_url` to require exactly one open page; cards require an HTTPS page URL.
@@ -1033,9 +1052,10 @@ export interface CredentialVaultItemUpdateRequest {
1033
1052
  *
1034
1053
  * Fill in request order and stop on the first failure. This operation is not
1035
1054
  * atomic: previously filled fields are not rolled back. Never submit the form or
1036
- * click buttons, though input/change events may trigger site behavior. Link cards
1037
- * use fill for browser checkout and do not expose aliases or support egress
1038
- * substitution. Do not automatically retry a failed or indeterminate operation.
1055
+ * click buttons, though input/change events may trigger site behavior. Link and
1056
+ * Kernel cards use fill for browser checkout and do not expose aliases or support
1057
+ * egress substitution. Do not automatically retry a failed or indeterminate
1058
+ * operation.
1039
1059
  *
1040
1060
  * Secret values are never returned or included in operation logs, traces, audit
1041
1061
  * events, or error details. This does not prevent an agent with unrestricted
@@ -1087,6 +1107,98 @@ export interface FillVaultItemOperationResult {
1087
1107
  type: 'fill';
1088
1108
  }
1089
1109
 
1110
+ /**
1111
+ * A ready Kernel card retains its encrypted network token and one-time code for
1112
+ * the fill operation until the item's expires_at. Fill and submit checkout before
1113
+ * then. Visa cards can be enrolled, but Visa purchases are not yet supported and
1114
+ * authorize returns 400; supported Mastercard purchases need no cardholder
1115
+ * approval. masks.last4 is the enrolled card's last four digits; masks.token_last4
1116
+ * is the network token's last four digits shown to the merchant. Kernel cards do
1117
+ * not expose aliases or support egress substitution. Kernel does not observe
1118
+ * whether the merchant charged the card.
1119
+ */
1120
+ export interface KernelCardState {
1121
+ provider: 'kernel';
1122
+
1123
+ /**
1124
+ * recovery_required means issuing the one-time code has an unresolved outcome.
1125
+ * Kernel never issues another code for the item automatically, and the item cannot
1126
+ * be deleted or replaced until the original attempt is reconciled with support.
1127
+ * When status_reason says the provider refused retrieval before acceptance, no
1128
+ * code was issued and a later read retries.
1129
+ */
1130
+ status:
1131
+ | 'requested'
1132
+ | 'pending_authorization'
1133
+ | 'ready'
1134
+ | 'consumed'
1135
+ | 'expired'
1136
+ | 'declined'
1137
+ | 'recovery_required';
1138
+
1139
+ /**
1140
+ * Informational registrable domain. Fill is locked to merchant_url's exact origin.
1141
+ */
1142
+ domains?: Array<string>;
1143
+
1144
+ masks?: KernelCardState.Masks;
1145
+
1146
+ status_reason?: string;
1147
+ }
1148
+
1149
+ export namespace KernelCardState {
1150
+ export interface Masks {
1151
+ brand?: string;
1152
+
1153
+ last4?: string;
1154
+
1155
+ /**
1156
+ * Last four digits of the network token presented to the merchant.
1157
+ */
1158
+ token_last4?: string;
1159
+
1160
+ [k: string]: string | undefined;
1161
+ }
1162
+ }
1163
+
1164
+ /**
1165
+ * One live purchase with a Kernel-enrolled card. Authorization obtains an agentic
1166
+ * network token number, expiry and one-time 3-digit code. They are stored
1167
+ * encrypted for the fill operation, which types them only on merchant_url's
1168
+ * origin; the merchant's own checkout submits the payment. The one-time code is
1169
+ * valid until the item's expires_at; fill and submit checkout before then. Visa
1170
+ * cards can be enrolled, but Visa purchases are not yet supported: authorize
1171
+ * returns 400. Supported Mastercard purchases need no cardholder approval. Card
1172
+ * updates are not supported; delete and create a new item instead.
1173
+ */
1174
+ export interface KernelCardVaultItemSpec {
1175
+ /**
1176
+ * Integer amount in minor currency units (at most 50000), bound to the one-time
1177
+ * code.
1178
+ */
1179
+ amount: number;
1180
+
1181
+ /**
1182
+ * ISO 4217 code. Supported: aud, brl, cad, chf, czk, dkk, eur, gbp, hkd, inr, jpy,
1183
+ * krw, mxn, nok, nzd, pln, sek, sgd, usd, zar.
1184
+ */
1185
+ currency: string;
1186
+
1187
+ merchant_name: string;
1188
+
1189
+ /**
1190
+ * Merchant checkout URL. Fill is allowed only on this URL's origin.
1191
+ */
1192
+ merchant_url: string;
1193
+
1194
+ provider: 'kernel';
1195
+
1196
+ /**
1197
+ * Key of the Kernel wallet item whose enrolled card pays.
1198
+ */
1199
+ wallet: string;
1200
+ }
1201
+
1090
1202
  export interface KernelCredentialVaultItemSpec {
1091
1203
  /**
1092
1204
  * Ordered field definitions rendered in this order by credential collection forms.
@@ -1143,6 +1255,34 @@ export interface KernelCredentialVaultItemState {
1143
1255
  status: 'pending_collection' | 'ready';
1144
1256
  }
1145
1257
 
1258
+ export interface KernelWalletState {
1259
+ provider: 'kernel';
1260
+
1261
+ /**
1262
+ * pending_authorization asks the cardholder to use the card_enrollment action.
1263
+ * connected is ready for supported purchases. reconnect_required asks the
1264
+ * cardholder to use a new card_enrollment action after an uncertain enrollment was
1265
+ * safely removed. degraded means the enrollment outcome is unknown and the wallet
1266
+ * must be deleted before adding another card.
1267
+ */
1268
+ status: 'pending_authorization' | 'connected' | 'reconnect_required' | 'degraded';
1269
+
1270
+ status_reason?: string;
1271
+ }
1272
+
1273
+ /**
1274
+ * One card Kernel enrolls for Visa or Mastercard agentic network tokens using
1275
+ * Kernel-managed credentials. Creation returns a card_enrollment action: the
1276
+ * cardholder enters the card and their email on a Kernel-hosted page, then Kernel
1277
+ * enrolls the securely stored card. The card number never reaches Kernel. The
1278
+ * connected wallet's payment_methods expansion lists the enrolled card. Visa cards
1279
+ * can be enrolled, but Visa purchases are not yet supported: authorize
1280
+ * returns 400.
1281
+ */
1282
+ export interface KernelWalletVaultItemSpec {
1283
+ provider: 'kernel';
1284
+ }
1285
+
1146
1286
  export interface OnePasswordCredentialAccountSpec {
1147
1287
  authorization: OnePasswordCredentialAccountSpec.Authorization;
1148
1288
 
@@ -1772,7 +1912,8 @@ export namespace VaultItem {
1772
1912
  | '1pw_access_request_status'
1773
1913
  | '1pw_fill'
1774
1914
  | '1pw_recover'
1775
- | '1pw_update_access_token';
1915
+ | '1pw_update_access_token'
1916
+ | 'webmcp_invoke';
1776
1917
  }
1777
1918
 
1778
1919
  /**
@@ -1844,7 +1985,8 @@ export namespace VaultItem {
1844
1985
  | '1pw_access_request_status'
1845
1986
  | '1pw_fill'
1846
1987
  | '1pw_recover'
1847
- | '1pw_update_access_token';
1988
+ | '1pw_update_access_token'
1989
+ | 'webmcp_invoke';
1848
1990
  }
1849
1991
  }
1850
1992
  }
@@ -1911,9 +2053,9 @@ export interface VaultItemEvent {
1911
2053
  }
1912
2054
 
1913
2055
  /**
1914
- * The submission result reported by the 1Password extension when available. Kernel
1915
- * returns fill_unknown if the extension call has no conclusive result. Inspect the
1916
- * page to determine successful authentication on the website.
2056
+ * Authorization and preparation return the existing item shape. Fill returns a
2057
+ * value-free result; WebMCP invocation returns the tool's output. Neither persists
2058
+ * transient outcomes on the item.
1917
2059
  */
1918
2060
  export type VaultItemOperationResponse =
1919
2061
  | VaultItemOperationResponse.WalletVaultItem
@@ -1921,7 +2063,8 @@ export type VaultItemOperationResponse =
1921
2063
  | CredentialAccountVaultItem
1922
2064
  | CredentialVaultItem
1923
2065
  | FillVaultItemOperationResult
1924
- | OnePasswordFillVaultItemOperationResult;
2066
+ | OnePasswordFillVaultItemOperationResult
2067
+ | WebmcpInvokeVaultItemOperationResult;
1925
2068
 
1926
2069
  export namespace VaultItemOperationResponse {
1927
2070
  export interface WalletVaultItem {
@@ -1991,7 +2134,8 @@ export namespace VaultItemOperationResponse {
1991
2134
  | '1pw_access_request_status'
1992
2135
  | '1pw_fill'
1993
2136
  | '1pw_recover'
1994
- | '1pw_update_access_token';
2137
+ | '1pw_update_access_token'
2138
+ | 'webmcp_invoke';
1995
2139
  }
1996
2140
 
1997
2141
  /**
@@ -2063,7 +2207,8 @@ export namespace VaultItemOperationResponse {
2063
2207
  | '1pw_access_request_status'
2064
2208
  | '1pw_fill'
2065
2209
  | '1pw_recover'
2066
- | '1pw_update_access_token';
2210
+ | '1pw_update_access_token'
2211
+ | 'webmcp_invoke';
2067
2212
  }
2068
2213
  }
2069
2214
  }
@@ -2118,6 +2263,27 @@ export namespace VaultPaymentMethod {
2118
2263
  }
2119
2264
  }
2120
2265
 
2266
+ export interface VaultWebmcpBinding {
2267
+ /**
2268
+ * A declared, populated credential field or supported card field. A TOTP field
2269
+ * supplies a fresh code, never its seed.
2270
+ */
2271
+ field: string;
2272
+
2273
+ /**
2274
+ * RFC 6901 JSON Pointer to an existing null value in input. Object keys are exact;
2275
+ * array indices must be canonical and in range. No root or array-append paths.
2276
+ * Each path and each field may occur only once.
2277
+ */
2278
+ input_path: string;
2279
+
2280
+ /**
2281
+ * Required for card expiration (MM/YY or MM/YYYY), forbidden for other fields.
2282
+ * Invalid formats are rejected before invocation.
2283
+ */
2284
+ format?: string;
2285
+ }
2286
+
2121
2287
  /**
2122
2288
  * AgentCard wallet. Omit provider_config to use Kernel-managed credentials, or
2123
2289
  * select a customer-owned configuration. Mode (sandbox vs live) is determined by
@@ -2128,7 +2294,8 @@ export namespace VaultPaymentMethod {
2128
2294
  */
2129
2295
  export type WalletVaultItemSpec =
2130
2296
  | WalletVaultItemSpec.LinkWalletVaultItemSpec
2131
- | WalletVaultItemSpec.AgentCardWalletVaultItemSpec;
2297
+ | WalletVaultItemSpec.AgentCardWalletVaultItemSpec
2298
+ | KernelWalletVaultItemSpec;
2132
2299
 
2133
2300
  export namespace WalletVaultItemSpec {
2134
2301
  export interface LinkWalletVaultItemSpec {
@@ -2210,7 +2377,8 @@ export namespace WalletVaultItemSpec {
2210
2377
 
2211
2378
  export type WalletVaultItemState =
2212
2379
  | WalletVaultItemState.LinkWalletState
2213
- | WalletVaultItemState.AgentCardWalletState;
2380
+ | WalletVaultItemState.AgentCardWalletState
2381
+ | KernelWalletState;
2214
2382
 
2215
2383
  export namespace WalletVaultItemState {
2216
2384
  export interface LinkWalletState {
@@ -2235,6 +2403,85 @@ export namespace WalletVaultItemState {
2235
2403
  }
2236
2404
  }
2237
2405
 
2406
+ /**
2407
+ * Invoke a WebMCP tool using values from a vaulted item. The browser must be
2408
+ * attached to the item's vault. Discover the tool_ref, inputSchema, and source
2409
+ * with GET /browsers/{id_or_name}/webmcp/tools or webmcp.listTools() in the
2410
+ * Browser REPL (POST /browsers/{id_or_name}/repl) before invoking it. Input paths
2411
+ * replace existing null slots in input. Tool output is returned without redaction
2412
+ * and may include the supplied values. The tool may submit or perform other side
2413
+ * effects. Any item destination restrictions apply to the tool's top-level page
2414
+ * and registering frame (if any).
2415
+ */
2416
+ export interface WebmcpInvokeVaultItemOperationRequest {
2417
+ bindings: Array<VaultWebmcpBinding>;
2418
+
2419
+ /**
2420
+ * Browser session ID, not a reusable browser name.
2421
+ */
2422
+ browser_id: string;
2423
+
2424
+ /**
2425
+ * Public tool arguments with an existing null slot at each binding path. At most
2426
+ * 64 KiB after JSON serialization, including substituted values. Never include
2427
+ * vault values here.
2428
+ */
2429
+ input: { [key: string]: unknown };
2430
+
2431
+ /**
2432
+ * Exact top-level URL from the discovered tool source (fragment omitted). This
2433
+ * pins the target page; it does not authorize a destination.
2434
+ */
2435
+ page_url: string;
2436
+
2437
+ /**
2438
+ * Opaque reference to the exact live WebMCP registration.
2439
+ */
2440
+ tool_ref: string;
2441
+
2442
+ type: 'webmcp_invoke';
2443
+
2444
+ /**
2445
+ * Tool invocation timeout in seconds; preflight and response handling have an
2446
+ * additional bounded allowance. An indeterminate outcome is not retried.
2447
+ */
2448
+ timeout_sec?: number;
2449
+ }
2450
+
2451
+ /**
2452
+ * Returns the same tool result fields as the browser WebMCP invoke API, plus the
2453
+ * vault operation discriminator. Output and error text are untrusted page-provided
2454
+ * data, returned without redaction; tools may include supplied vault values.
2455
+ * Inspect the browser page to determine whether the intended site action
2456
+ * succeeded.
2457
+ */
2458
+ export interface WebmcpInvokeVaultItemOperationResult {
2459
+ /**
2460
+ * Unknown means invocation may have run; do not retry automatically. No status
2461
+ * confirms that the website accepted the action.
2462
+ */
2463
+ status: 'completed' | 'canceled' | 'error' | 'awaiting_submission' | 'unknown';
2464
+
2465
+ type: 'webmcp_invoke';
2466
+
2467
+ /**
2468
+ * Untrusted page-provided error text, returned without redaction. May contain
2469
+ * supplied vault values.
2470
+ */
2471
+ error_text?: string;
2472
+
2473
+ /**
2474
+ * Present when the browser reported one.
2475
+ */
2476
+ invocation_id?: string;
2477
+
2478
+ /**
2479
+ * Untrusted page-provided output, returned without redaction. May contain supplied
2480
+ * vault values.
2481
+ */
2482
+ output?: unknown;
2483
+ }
2484
+
2238
2485
  export type ItemListResponse = Array<VaultItem>;
2239
2486
 
2240
2487
  export type ItemEventsResponse = Array<VaultItemEvent>;
@@ -2344,7 +2591,8 @@ export type ItemPerformOperationParams =
2344
2591
  | ItemPerformOperationParams.OnePasswordPollAccessVaultItemOperationRequest
2345
2592
  | ItemPerformOperationParams.OnePasswordFillVaultItemOperationRequest
2346
2593
  | ItemPerformOperationParams.OnePasswordRecoverVaultItemOperationRequest
2347
- | ItemPerformOperationParams.OnePasswordUpdateAccessTokenVaultItemOperationRequest;
2594
+ | ItemPerformOperationParams.OnePasswordUpdateAccessTokenVaultItemOperationRequest
2595
+ | ItemPerformOperationParams.WebmcpInvokeVaultItemOperationRequest;
2348
2596
 
2349
2597
  export declare namespace ItemPerformOperationParams {
2350
2598
  export interface AuthorizeVaultItemOperationRequest {
@@ -2551,6 +2799,52 @@ export declare namespace ItemPerformOperationParams {
2551
2799
  */
2552
2800
  access_token_expires_at?: string;
2553
2801
  }
2802
+
2803
+ export interface WebmcpInvokeVaultItemOperationRequest {
2804
+ /**
2805
+ * Path param
2806
+ */
2807
+ id_or_name: string;
2808
+
2809
+ /**
2810
+ * Body param
2811
+ */
2812
+ bindings: Array<VaultWebmcpBinding>;
2813
+
2814
+ /**
2815
+ * Body param: Browser session ID, not a reusable browser name.
2816
+ */
2817
+ browser_id: string;
2818
+
2819
+ /**
2820
+ * Body param: Public tool arguments with an existing null slot at each binding
2821
+ * path. At most 64 KiB after JSON serialization, including substituted values.
2822
+ * Never include vault values here.
2823
+ */
2824
+ input: { [key: string]: unknown };
2825
+
2826
+ /**
2827
+ * Body param: Exact top-level URL from the discovered tool source (fragment
2828
+ * omitted). This pins the target page; it does not authorize a destination.
2829
+ */
2830
+ page_url: string;
2831
+
2832
+ /**
2833
+ * Body param: Opaque reference to the exact live WebMCP registration.
2834
+ */
2835
+ tool_ref: string;
2836
+
2837
+ /**
2838
+ * Body param
2839
+ */
2840
+ type: 'webmcp_invoke';
2841
+
2842
+ /**
2843
+ * Body param: Tool invocation timeout in seconds; preflight and response handling
2844
+ * have an additional bounded allowance. An indeterminate outcome is not retried.
2845
+ */
2846
+ timeout_sec?: number;
2847
+ }
2554
2848
  }
2555
2849
 
2556
2850
  export type ItemUpsertParams =
@@ -2576,7 +2870,8 @@ export declare namespace ItemUpsertParams {
2576
2870
  */
2577
2871
  spec:
2578
2872
  | WalletVaultItemRequest.LinkWalletVaultItemRequestSpec
2579
- | WalletVaultItemRequest.AgentCardWalletVaultItemSpec;
2873
+ | WalletVaultItemRequest.AgentCardWalletVaultItemSpec
2874
+ | KernelWalletVaultItemSpec;
2580
2875
 
2581
2876
  /**
2582
2877
  * Body param
@@ -2810,9 +3105,13 @@ export declare namespace Items {
2810
3105
  type CredentialVaultItemUpdateRequest as CredentialVaultItemUpdateRequest,
2811
3106
  type FillVaultItemOperationRequest as FillVaultItemOperationRequest,
2812
3107
  type FillVaultItemOperationResult as FillVaultItemOperationResult,
3108
+ type KernelCardState as KernelCardState,
3109
+ type KernelCardVaultItemSpec as KernelCardVaultItemSpec,
2813
3110
  type KernelCredentialVaultItemSpec as KernelCredentialVaultItemSpec,
2814
3111
  type KernelCredentialVaultItemSpecInput as KernelCredentialVaultItemSpecInput,
2815
3112
  type KernelCredentialVaultItemState as KernelCredentialVaultItemState,
3113
+ type KernelWalletState as KernelWalletState,
3114
+ type KernelWalletVaultItemSpec as KernelWalletVaultItemSpec,
2816
3115
  type OnePasswordCredentialAccountSpec as OnePasswordCredentialAccountSpec,
2817
3116
  type OnePasswordCredentialAccountState as OnePasswordCredentialAccountState,
2818
3117
  type OnePasswordCredentialVaultItemSpec as OnePasswordCredentialVaultItemSpec,
@@ -2834,8 +3133,11 @@ export declare namespace Items {
2834
3133
  type VaultItemEvent as VaultItemEvent,
2835
3134
  type VaultItemOperationResponse as VaultItemOperationResponse,
2836
3135
  type VaultPaymentMethod as VaultPaymentMethod,
3136
+ type VaultWebmcpBinding as VaultWebmcpBinding,
2837
3137
  type WalletVaultItemSpec as WalletVaultItemSpec,
2838
3138
  type WalletVaultItemState as WalletVaultItemState,
3139
+ type WebmcpInvokeVaultItemOperationRequest as WebmcpInvokeVaultItemOperationRequest,
3140
+ type WebmcpInvokeVaultItemOperationResult as WebmcpInvokeVaultItemOperationResult,
2839
3141
  type ItemListResponse as ItemListResponse,
2840
3142
  type ItemEventsResponse as ItemEventsResponse,
2841
3143
  type ItemRetrieveParams as ItemRetrieveParams,
@@ -36,9 +36,13 @@ import {
36
36
  ItemUpdateParams,
37
37
  ItemUpsertParams,
38
38
  Items,
39
+ KernelCardState,
40
+ KernelCardVaultItemSpec,
39
41
  KernelCredentialVaultItemSpec,
40
42
  KernelCredentialVaultItemSpecInput,
41
43
  KernelCredentialVaultItemState,
44
+ KernelWalletState,
45
+ KernelWalletVaultItemSpec,
42
46
  OnePasswordCredentialAccountSpec,
43
47
  OnePasswordCredentialAccountState,
44
48
  OnePasswordCredentialVaultItemSpec,
@@ -60,8 +64,11 @@ import {
60
64
  VaultItemEvent,
61
65
  VaultItemOperationResponse,
62
66
  VaultPaymentMethod,
67
+ VaultWebmcpBinding,
63
68
  WalletVaultItemSpec,
64
69
  WalletVaultItemState,
70
+ WebmcpInvokeVaultItemOperationRequest,
71
+ WebmcpInvokeVaultItemOperationResult,
65
72
  } from './items';
66
73
  import { APIPromise } from '../../core/api-promise';
67
74
  import { OffsetPagination, type OffsetPaginationParams, PagePromise } from '../../core/pagination';
@@ -103,9 +110,11 @@ export class Vaults extends APIResource {
103
110
  }
104
111
 
105
112
  /**
106
- * Unresolved payment operations block deletion. Reconcile the original attempt
107
- * with the provider or support first; deleting or recreating an item is not proof
108
- * that a payment did not occur.
113
+ * Unresolved payment operations block deletion. Deleting a connected Kernel wallet
114
+ * first blocks new payments on it, then removes its enrolled card. If that fails,
115
+ * the wallet is kept and keeps refusing payments; retry the deletion. Reconcile
116
+ * the original attempt with the provider or support first; deleting or recreating
117
+ * an item is not proof that a payment did not occur.
109
118
  *
110
119
  * @example
111
120
  * ```ts
@@ -151,7 +160,12 @@ export interface Vault {
151
160
  updated_at: string;
152
161
  }
153
162
 
154
- export interface VaultListParams extends OffsetPaginationParams {}
163
+ export interface VaultListParams extends OffsetPaginationParams {
164
+ /**
165
+ * Case-insensitive substring match against vault name. IDs match by exact value.
166
+ */
167
+ query?: string;
168
+ }
155
169
 
156
170
  export interface VaultUpsertParams {
157
171
  /**
@@ -196,9 +210,13 @@ export declare namespace Vaults {
196
210
  type CredentialVaultItemUpdateRequest as CredentialVaultItemUpdateRequest,
197
211
  type FillVaultItemOperationRequest as FillVaultItemOperationRequest,
198
212
  type FillVaultItemOperationResult as FillVaultItemOperationResult,
213
+ type KernelCardState as KernelCardState,
214
+ type KernelCardVaultItemSpec as KernelCardVaultItemSpec,
199
215
  type KernelCredentialVaultItemSpec as KernelCredentialVaultItemSpec,
200
216
  type KernelCredentialVaultItemSpecInput as KernelCredentialVaultItemSpecInput,
201
217
  type KernelCredentialVaultItemState as KernelCredentialVaultItemState,
218
+ type KernelWalletState as KernelWalletState,
219
+ type KernelWalletVaultItemSpec as KernelWalletVaultItemSpec,
202
220
  type OnePasswordCredentialAccountSpec as OnePasswordCredentialAccountSpec,
203
221
  type OnePasswordCredentialAccountState as OnePasswordCredentialAccountState,
204
222
  type OnePasswordCredentialVaultItemSpec as OnePasswordCredentialVaultItemSpec,
@@ -220,8 +238,11 @@ export declare namespace Vaults {
220
238
  type VaultItemEvent as VaultItemEvent,
221
239
  type VaultItemOperationResponse as VaultItemOperationResponse,
222
240
  type VaultPaymentMethod as VaultPaymentMethod,
241
+ type VaultWebmcpBinding as VaultWebmcpBinding,
223
242
  type WalletVaultItemSpec as WalletVaultItemSpec,
224
243
  type WalletVaultItemState as WalletVaultItemState,
244
+ type WebmcpInvokeVaultItemOperationRequest as WebmcpInvokeVaultItemOperationRequest,
245
+ type WebmcpInvokeVaultItemOperationResult as WebmcpInvokeVaultItemOperationResult,
225
246
  type ItemListResponse as ItemListResponse,
226
247
  type ItemEventsResponse as ItemEventsResponse,
227
248
  type ItemRetrieveParams as ItemRetrieveParams,
package/src/version.ts CHANGED
@@ -1 +1 @@
1
- export const VERSION = '0.116.0'; // x-release-please-version
1
+ export const VERSION = '0.118.0'; // x-release-please-version
package/version.d.mts CHANGED
@@ -1,2 +1,2 @@
1
- export declare const VERSION = "0.116.0";
1
+ export declare const VERSION = "0.118.0";
2
2
  //# sourceMappingURL=version.d.mts.map
package/version.d.ts CHANGED
@@ -1,2 +1,2 @@
1
- export declare const VERSION = "0.116.0";
1
+ export declare const VERSION = "0.118.0";
2
2
  //# sourceMappingURL=version.d.ts.map
package/version.js CHANGED
@@ -1,5 +1,5 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.VERSION = void 0;
4
- exports.VERSION = '0.116.0'; // x-release-please-version
4
+ exports.VERSION = '0.118.0'; // x-release-please-version
5
5
  //# sourceMappingURL=version.js.map
package/version.mjs CHANGED
@@ -1,2 +1,2 @@
1
- export const VERSION = '0.116.0'; // x-release-please-version
1
+ export const VERSION = '0.118.0'; // x-release-please-version
2
2
  //# sourceMappingURL=version.mjs.map