@onkernel/sdk 0.117.0 → 0.119.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.119.0](https://github.com/kernel/kernel-node-sdk/compare/v0.118.0...v0.119.0) (2026-10-02)
+
+
+### Features
+
+* Add managed auth provider to vault credential items ([6a23c73](https://github.com/kernel/kernel-node-sdk/commit/6a23c73ccc4716c40fff473e2234194e76a354e0))
+
+## [0.118.0](https://github.com/kernel/kernel-node-sdk/compare/v0.117.0...v0.118.0) (2026-10-02)
+
+
+### Features
+
+* Add a query filter to the vault list endpoint ([2a9d2e8](https://github.com/kernel/kernel-node-sdk/commit/2a9d2e844cb301f882f807a304b7fb6dc82ea077))
+* Add Kernel wallets backed by VGS agentic network tokens, with hosted card capture ([3fced64](https://github.com/kernel/kernel-node-sdk/commit/3fced64a6872afc6dd92f22713c61716cc75ecaa))
+
 ## [0.117.0](https://github.com/kernel/kernel-node-sdk/compare/v0.116.0...v0.117.0) (2026-10-02)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.117.0",
+  "version": "0.119.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "./index.d.ts",

package/resources/vaults/index.d.mts

@@ -1,3 +1,3 @@
-export { Items, type AgentcardCheckoutAuthorization, type AgentcardCheckoutPreparation, type AgentcardPreparedProcessor, type AuthorizeVaultItemOperationRequest, type CardVaultItemSpec, type CardVaultItemState, type CollectVaultItemOperationRequest, type CredentialAccountVaultItem, type CredentialAccountVaultItemRequest, type CredentialCollectionAction, type CredentialVaultFieldDefinition, type CredentialVaultFieldInput, type CredentialVaultFieldState, type CredentialVaultFieldType, type CredentialVaultFieldUpdate, type CredentialVaultItem, type CredentialVaultItemRequest, type CredentialVaultItemSpec, type CredentialVaultItemSpecInput, type CredentialVaultItemSpecUpdate, type CredentialVaultItemState, type CredentialVaultItemUpdateRequest, type FillVaultItemOperationRequest, type FillVaultItemOperationResult, type KernelCredentialVaultItemSpec, type KernelCredentialVaultItemSpecInput, type KernelCredentialVaultItemState, type OnePasswordCredentialAccountSpec, type OnePasswordCredentialAccountState, type OnePasswordCredentialVaultItemSpec, type OnePasswordCredentialVaultItemSpecInput, type OnePasswordCredentialVaultItemState, type OnePasswordFillVaultItemOperationRequest, type OnePasswordFillVaultItemOperationResult, type OnePasswordOAuthAction, type OnePasswordRecoverVaultItemOperationRequest, type OnePasswordRequestAccessVaultItemOperationRequest, type PrepareCheckoutVaultItemOperationRequest, type VaultCardAliases, type VaultCardFillField, type VaultCheckoutContext, type VaultFillField, type VaultFillFieldResult, type VaultItem, type VaultItemAction, type VaultItemEvent, type VaultItemOperationResponse, type VaultPaymentMethod, type VaultWebmcpBinding, type WalletVaultItemSpec, type WalletVaultItemState, type WebmcpInvokeVaultItemOperationRequest, type WebmcpInvokeVaultItemOperationResult, type ItemListResponse, type ItemEventsResponse, type ItemRetrieveParams, type ItemUpdateParams, type ItemDeleteParams, type ItemEventsParams, type ItemPerformOperationParams, type ItemUpsertParams, } from "./items.mjs";
+export { Items, type AgentcardCheckoutAuthorization, type AgentcardCheckoutPreparation, type AgentcardPreparedProcessor, type AuthorizeVaultItemOperationRequest, type CardVaultItemSpec, type CardVaultItemState, type CollectVaultItemOperationRequest, type CredentialAccountVaultItem, type CredentialAccountVaultItemRequest, type CredentialCollectionAction, type CredentialVaultFieldDefinition, type CredentialVaultFieldInput, type CredentialVaultFieldState, type CredentialVaultFieldType, type CredentialVaultFieldUpdate, type CredentialVaultItem, type CredentialVaultItemRequest, type CredentialVaultItemSpec, type CredentialVaultItemSpecInput, type CredentialVaultItemSpecUpdate, type CredentialVaultItemState, type CredentialVaultItemUpdateRequest, type FillVaultItemOperationRequest, type FillVaultItemOperationResult, type KernelCardState, type KernelCardVaultItemSpec, type KernelCredentialVaultItemSpec, type KernelCredentialVaultItemSpecInput, type KernelCredentialVaultItemState, type KernelWalletState, type KernelWalletVaultItemSpec, type ManagedAuthCredentialVaultField, type ManagedAuthCredentialVaultItemSpec, type ManagedAuthCredentialVaultItemSpecInput, type ManagedAuthCredentialVaultItemState, type OnePasswordCredentialAccountSpec, type OnePasswordCredentialAccountState, type OnePasswordCredentialVaultItemSpec, type OnePasswordCredentialVaultItemSpecInput, type OnePasswordCredentialVaultItemState, type OnePasswordFillVaultItemOperationRequest, type OnePasswordFillVaultItemOperationResult, type OnePasswordOAuthAction, type OnePasswordRecoverVaultItemOperationRequest, type OnePasswordRequestAccessVaultItemOperationRequest, type PrepareCheckoutVaultItemOperationRequest, type VaultCardAliases, type VaultCardFillField, type VaultCheckoutContext, type VaultFillField, type VaultFillFieldResult, type VaultItem, type VaultItemAction, type VaultItemEvent, type VaultItemOperationResponse, type VaultPaymentMethod, type VaultWebmcpBinding, type WalletVaultItemSpec, type WalletVaultItemState, type WebmcpInvokeVaultItemOperationRequest, type WebmcpInvokeVaultItemOperationResult, type ItemListResponse, type ItemEventsResponse, type ItemRetrieveParams, type ItemUpdateParams, type ItemDeleteParams, type ItemEventsParams, type ItemPerformOperationParams, type ItemUpsertParams, } from "./items.mjs";
 export { Vaults, type Vault, type VaultListParams, type VaultUpsertParams, type VaultsOffsetPagination, } from "./vaults.mjs";
 //# sourceMappingURL=index.d.mts.map

package/resources/vaults/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,EACL,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,sBAAsB,EAC3B,KAAK,2CAA2C,EAChD,KAAK,iDAAiD,EACtD,KAAK,wCAAwC,EAC7C,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qCAAqC,EAC1C,KAAK,oCAAoC,EACzC,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,GACtB,oBAAgB;AACjB,OAAO,EACL,MAAM,EACN,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,qBAAiB"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,EACL,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACnC,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,sBAAsB,EAC3B,KAAK,2CAA2C,EAChD,KAAK,iDAAiD,EACtD,KAAK,wCAAwC,EAC7C,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qCAAqC,EAC1C,KAAK,oCAAoC,EACzC,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,GACtB,oBAAgB;AACjB,OAAO,EACL,MAAM,EACN,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,qBAAiB"}

package/resources/vaults/index.d.ts

@@ -1,3 +1,3 @@
-export { Items, type AgentcardCheckoutAuthorization, type AgentcardCheckoutPreparation, type AgentcardPreparedProcessor, type AuthorizeVaultItemOperationRequest, type CardVaultItemSpec, type CardVaultItemState, type CollectVaultItemOperationRequest, type CredentialAccountVaultItem, type CredentialAccountVaultItemRequest, type CredentialCollectionAction, type CredentialVaultFieldDefinition, type CredentialVaultFieldInput, type CredentialVaultFieldState, type CredentialVaultFieldType, type CredentialVaultFieldUpdate, type CredentialVaultItem, type CredentialVaultItemRequest, type CredentialVaultItemSpec, type CredentialVaultItemSpecInput, type CredentialVaultItemSpecUpdate, type CredentialVaultItemState, type CredentialVaultItemUpdateRequest, type FillVaultItemOperationRequest, type FillVaultItemOperationResult, type KernelCredentialVaultItemSpec, type KernelCredentialVaultItemSpecInput, type KernelCredentialVaultItemState, type OnePasswordCredentialAccountSpec, type OnePasswordCredentialAccountState, type OnePasswordCredentialVaultItemSpec, type OnePasswordCredentialVaultItemSpecInput, type OnePasswordCredentialVaultItemState, type OnePasswordFillVaultItemOperationRequest, type OnePasswordFillVaultItemOperationResult, type OnePasswordOAuthAction, type OnePasswordRecoverVaultItemOperationRequest, type OnePasswordRequestAccessVaultItemOperationRequest, type PrepareCheckoutVaultItemOperationRequest, type VaultCardAliases, type VaultCardFillField, type VaultCheckoutContext, type VaultFillField, type VaultFillFieldResult, type VaultItem, type VaultItemAction, type VaultItemEvent, type VaultItemOperationResponse, type VaultPaymentMethod, type VaultWebmcpBinding, type WalletVaultItemSpec, type WalletVaultItemState, type WebmcpInvokeVaultItemOperationRequest, type WebmcpInvokeVaultItemOperationResult, type ItemListResponse, type ItemEventsResponse, type ItemRetrieveParams, type ItemUpdateParams, type ItemDeleteParams, type ItemEventsParams, type ItemPerformOperationParams, type ItemUpsertParams, } from "./items.js";
+export { Items, type AgentcardCheckoutAuthorization, type AgentcardCheckoutPreparation, type AgentcardPreparedProcessor, type AuthorizeVaultItemOperationRequest, type CardVaultItemSpec, type CardVaultItemState, type CollectVaultItemOperationRequest, type CredentialAccountVaultItem, type CredentialAccountVaultItemRequest, type CredentialCollectionAction, type CredentialVaultFieldDefinition, type CredentialVaultFieldInput, type CredentialVaultFieldState, type CredentialVaultFieldType, type CredentialVaultFieldUpdate, type CredentialVaultItem, type CredentialVaultItemRequest, type CredentialVaultItemSpec, type CredentialVaultItemSpecInput, type CredentialVaultItemSpecUpdate, type CredentialVaultItemState, type CredentialVaultItemUpdateRequest, type FillVaultItemOperationRequest, type FillVaultItemOperationResult, type KernelCardState, type KernelCardVaultItemSpec, type KernelCredentialVaultItemSpec, type KernelCredentialVaultItemSpecInput, type KernelCredentialVaultItemState, type KernelWalletState, type KernelWalletVaultItemSpec, type ManagedAuthCredentialVaultField, type ManagedAuthCredentialVaultItemSpec, type ManagedAuthCredentialVaultItemSpecInput, type ManagedAuthCredentialVaultItemState, type OnePasswordCredentialAccountSpec, type OnePasswordCredentialAccountState, type OnePasswordCredentialVaultItemSpec, type OnePasswordCredentialVaultItemSpecInput, type OnePasswordCredentialVaultItemState, type OnePasswordFillVaultItemOperationRequest, type OnePasswordFillVaultItemOperationResult, type OnePasswordOAuthAction, type OnePasswordRecoverVaultItemOperationRequest, type OnePasswordRequestAccessVaultItemOperationRequest, type PrepareCheckoutVaultItemOperationRequest, type VaultCardAliases, type VaultCardFillField, type VaultCheckoutContext, type VaultFillField, type VaultFillFieldResult, type VaultItem, type VaultItemAction, type VaultItemEvent, type VaultItemOperationResponse, type VaultPaymentMethod, type VaultWebmcpBinding, type WalletVaultItemSpec, type WalletVaultItemState, type WebmcpInvokeVaultItemOperationRequest, type WebmcpInvokeVaultItemOperationResult, type ItemListResponse, type ItemEventsResponse, type ItemRetrieveParams, type ItemUpdateParams, type ItemDeleteParams, type ItemEventsParams, type ItemPerformOperationParams, type ItemUpsertParams, } from "./items.js";
 export { Vaults, type Vault, type VaultListParams, type VaultUpsertParams, type VaultsOffsetPagination, } from "./vaults.js";
 //# sourceMappingURL=index.d.ts.map

package/resources/vaults/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,EACL,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,sBAAsB,EAC3B,KAAK,2CAA2C,EAChD,KAAK,iDAAiD,EACtD,KAAK,wCAAwC,EAC7C,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qCAAqC,EAC1C,KAAK,oCAAoC,EACzC,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,GACtB,mBAAgB;AACjB,OAAO,EACL,MAAM,EACN,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,oBAAiB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,EACL,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACnC,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,sBAAsB,EAC3B,KAAK,2CAA2C,EAChD,KAAK,iDAAiD,EACtD,KAAK,wCAAwC,EAC7C,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qCAAqC,EAC1C,KAAK,oCAAoC,EACzC,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,GACtB,mBAAgB;AACjB,OAAO,EACL,MAAM,EACN,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,oBAAiB"}

package/resources/vaults/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,oCA+DiB;AA9Df,8FAAA,KAAK,OAAA;AA+DP,sCAMkB;AALhB,gGAAA,MAAM,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,oCAuEiB;AAtEf,8FAAA,KAAK,OAAA;AAuEP,sCAMkB;AALhB,gGAAA,MAAM,OAAA"}

package/resources/vaults/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EACL,KAAK,GA8DN,oBAAgB;AACjB,OAAO,EACL,MAAM,GAKP,qBAAiB"}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/resources/vaults/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EACL,KAAK,GAsEN,oBAAgB;AACjB,OAAO,EACL,MAAM,GAKP,qBAAiB"}

package/resources/vaults/items.d.mts

@@ -71,10 +71,14 @@ export declare class Items extends APIResource {
     list(idOrName: string, options?: RequestOptions): APIPromise<ItemListResponse>;
     /**
      * Unresolved payment operations normally block deletion, including operations on
-     * child cards of a wallet. An AgentCard card in recovery_required whose checkout
-     * create response returned no authorization ID may be explicitly abandoned by
-     * deleting that card directly; deleting its wallet or vault remains blocked.
-     * Deleting or recreating an item is not proof that a payment did not occur.
+     * child cards of a wallet. Deleting a connected Kernel wallet first blocks new
+     * payments on it, then removes its enrolled card. If that fails, the wallet is
+     * kept and keeps refusing payments; retry the deletion. An AgentCard card in
+     * recovery_required whose checkout create response returned no authorization ID
+     * may be explicitly abandoned by deleting that card directly; deleting its wallet
+     * or vault remains blocked. Deleting or recreating an item is not proof that a
+     * payment did not occur. Deleting a managed auth credential item leaves the
+     * connection and its saved credential unchanged.
      *
      * @example
      * ```ts
@@ -143,8 +147,8 @@ export declare class Items extends APIResource {
      * ```ts
      * const vaultItem = await client.vaults.items.upsert('x', {
      *   id_or_name: 'id_or_name',
-     *   spec: { provider: 'link' },
-     *   type: 'card',
+     *   spec: { provider: 'managed_auth' },
+     *   type: 'credential',
      * });
      * ```
      */
@@ -222,8 +226,8 @@ export interface AgentcardCheckoutPreparation {
 }
 export type AgentcardPreparedProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'adyen';
 /**
- * Authorize a Link card using its existing purchase specification. Use only after
- * explicit user approval and when the item advertises authorize. Do not
+ * Authorize a Link or Kernel card using its existing purchase specification. Use
+ * only after explicit user approval and when the item advertises authorize. Do not
  * automatically retry provider failures or indeterminate outcomes. Checkout
  * context is not accepted.
  */
@@ -233,7 +237,7 @@ export interface AuthorizeVaultItemOperationRequest {
 /**
  * Live payment card. Test-mode card creation is not supported.
  */
-export type CardVaultItemSpec = CardVaultItemSpec.LinkCardVaultItemSpec | CardVaultItemSpec.AgentCardCardVaultItemSpec;
+export type CardVaultItemSpec = CardVaultItemSpec.LinkCardVaultItemSpec | CardVaultItemSpec.AgentCardCardVaultItemSpec | KernelCardVaultItemSpec;
 export declare namespace CardVaultItemSpec {
     /**
      * Live payment card. Test-mode card creation is not supported.
@@ -344,7 +348,7 @@ export declare namespace CardVaultItemSpec {
  * Issued Link cards retain encrypted card material for the fill operation. Link
  * cards do not expose aliases or support egress substitution.
  */
-export type CardVaultItemState = CardVaultItemState.LinkCardState | CardVaultItemState.AgentCardCardState;
+export type CardVaultItemState = CardVaultItemState.LinkCardState | CardVaultItemState.AgentCardCardState | KernelCardState;
 export declare namespace CardVaultItemState {
     /**
      * Issued Link cards retain encrypted card material for the fill operation. Link
@@ -368,6 +372,10 @@ export declare namespace CardVaultItemState {
         interface Masks {
             brand?: string;
             last4?: string;
+            /**
+             * Last four digits of the network token presented to the merchant.
+             */
+            token_last4?: string;
             [k: string]: string | undefined;
         }
     }
@@ -406,6 +414,10 @@ export declare namespace CardVaultItemState {
         interface Masks {
             brand?: string;
             last4?: string;
+            /**
+             * Last four digits of the network token presented to the merchant.
+             */
+            token_last4?: string;
             [k: string]: string | undefined;
         }
     }
@@ -620,7 +632,8 @@ export interface CredentialVaultItem {
      * Kernel credentials advertise collect and fill when eligible. 1Password
      * credentials advertise 1pw_create_access_request until a request is made,
      * 1pw_access_request_status while its approval is pending, and 1pw_fill after
-     * access is granted.
+     * access is granted. Managed auth credentials advertise fill while ready and
+     * nothing otherwise.
      */
     available_operations: Array<CredentialVaultItem.AvailableOperation>;
     created_at: string;
@@ -638,7 +651,8 @@ export interface CredentialVaultItem {
     updated_at: string;
     /**
      * Starts at 1 and increments on PATCH and successful hosted submission, but not
-     * collection-link renewal.
+     * collection-link renewal. Managed auth credentials stay at 1; changes to the
+     * underlying credential are read at fill time and do not change the version.
      */
     version: number;
     /**
@@ -711,7 +725,9 @@ export declare namespace CredentialVaultItem {
  * declare fields and may enter pending_collection. 1Password credentials either
  * reference a connected credential_account or store a supplied access token and
  * integration key encrypted on the item. They store no login values or selectors.
- * Repeating the original creation request returns the current item without
+ * Managed auth credentials reference a managed auth connection in the same project
+ * that already has a saved credential, and read it at fill time; they store no
+ * values. Repeating the original creation request returns the current item without
  * overwriting later state. A different request at the same key returns 409.
  */
 export interface CredentialVaultItemRequest {
@@ -729,7 +745,7 @@ export interface CredentialVaultItemRequest {
  * Stored-token credentials omit account and never return access_token or
  * integration_key.
  */
-export type CredentialVaultItemSpec = KernelCredentialVaultItemSpec | OnePasswordCredentialVaultItemSpec;
+export type CredentialVaultItemSpec = KernelCredentialVaultItemSpec | OnePasswordCredentialVaultItemSpec | ManagedAuthCredentialVaultItemSpec;
 /**
  * Credential fields are for login and other non-payment credentials. Do not store,
  * collect, or fill credit card data in credential items. Use wallet and card item
@@ -737,7 +753,7 @@ export type CredentialVaultItemSpec = KernelCredentialVaultItemSpec | OnePasswor
  * the user-facing collection form, so list fields in the same top-to-bottom order
  * as the website.
  */
-export type CredentialVaultItemSpecInput = KernelCredentialVaultItemSpecInput | OnePasswordCredentialVaultItemSpecInput;
+export type CredentialVaultItemSpecInput = KernelCredentialVaultItemSpecInput | OnePasswordCredentialVaultItemSpecInput | ManagedAuthCredentialVaultItemSpecInput;
 export interface CredentialVaultItemSpecUpdate {
     /**
      * Recognizable site or service name used as the form title, without suffixes such
@@ -749,7 +765,7 @@ export interface CredentialVaultItemSpecUpdate {
         [key: string]: CredentialVaultFieldUpdate;
     };
 }
-export type CredentialVaultItemState = KernelCredentialVaultItemState | OnePasswordCredentialVaultItemState;
+export type CredentialVaultItemState = KernelCredentialVaultItemState | OnePasswordCredentialVaultItemState | ManagedAuthCredentialVaultItemState;
 /**
  * Atomically update description and selected values. Omitted properties are
  * preserved. Field names, types, required flags, and sensitivity cannot change.
@@ -758,7 +774,8 @@ export type CredentialVaultItemState = KernelCredentialVaultItemState | OnePassw
  * invalidates outstanding Kernel-hosted collection sessions. If required values
  * remain missing, return pending_collection and a fresh collection action.
  * Otherwise return ready without an action; collect can open the form again
- * without clearing values. Customer URLs have no Kernel-managed expiry.
+ * without clearing values. Customer URLs have no Kernel-managed expiry. 1Password
+ * and managed auth credentials return 409.
  */
 export interface CredentialVaultItemUpdateRequest {
     spec: CredentialVaultItemSpecUpdate;
@@ -776,11 +793,11 @@ export interface CredentialVaultItemUpdateRequest {
     expected_item_id?: string;
 }
 /**
- * Fill selected fields from one ready credential or ready, unexpired Link card
- * into a browser linked to its vault. Only invoke when the item advertises `fill`.
- * Browser and vault must belong to the same project. Kernel checks access and
- * allowed destinations before filling; providing a page URL does not authorize a
- * destination.
+ * Fill selected fields from one ready credential or ready, unexpired Link or
+ * Kernel card into a browser linked to its vault. Only invoke when the item
+ * advertises `fill`. Browser and vault must belong to the same project. Kernel
+ * checks access and allowed destinations before filling; providing a page URL does
+ * not authorize a destination.
  *
  * Find exactly one open page matching `page_url`. Credential items may omit
  * `page_url` to require exactly one open page; cards require an HTTPS page URL.
@@ -796,9 +813,10 @@ export interface CredentialVaultItemUpdateRequest {
  *
  * Fill in request order and stop on the first failure. This operation is not
  * atomic: previously filled fields are not rolled back. Never submit the form or
- * click buttons, though input/change events may trigger site behavior. Link cards
- * use fill for browser checkout and do not expose aliases or support egress
- * substitution. Do not automatically retry a failed or indeterminate operation.
+ * click buttons, though input/change events may trigger site behavior. Link and
+ * Kernel cards use fill for browser checkout and do not expose aliases or support
+ * egress substitution. Do not automatically retry a failed or indeterminate
+ * operation.
  *
  * Secret values are never returned or included in operation logs, traces, audit
  * events, or error details. This does not prevent an agent with unrestricted
@@ -842,6 +860,76 @@ export interface FillVaultItemOperationResult {
     status: 'completed' | 'failed' | 'unknown';
     type: 'fill';
 }
+/**
+ * A ready Kernel card retains its encrypted network token and one-time code for
+ * the fill operation until the item's expires_at. Fill and submit checkout before
+ * then. Visa cards can be enrolled, but Visa purchases are not yet supported and
+ * authorize returns 400; supported Mastercard purchases need no cardholder
+ * approval. masks.last4 is the enrolled card's last four digits; masks.token_last4
+ * is the network token's last four digits shown to the merchant. Kernel cards do
+ * not expose aliases or support egress substitution. Kernel does not observe
+ * whether the merchant charged the card.
+ */
+export interface KernelCardState {
+    provider: 'kernel';
+    /**
+     * recovery_required means issuing the one-time code has an unresolved outcome.
+     * Kernel never issues another code for the item automatically, and the item cannot
+     * be deleted or replaced until the original attempt is reconciled with support.
+     * When status_reason says the provider refused retrieval before acceptance, no
+     * code was issued and a later read retries.
+     */
+    status: 'requested' | 'pending_authorization' | 'ready' | 'consumed' | 'expired' | 'declined' | 'recovery_required';
+    /**
+     * Informational registrable domain. Fill is locked to merchant_url's exact origin.
+     */
+    domains?: Array<string>;
+    masks?: KernelCardState.Masks;
+    status_reason?: string;
+}
+export declare namespace KernelCardState {
+    interface Masks {
+        brand?: string;
+        last4?: string;
+        /**
+         * Last four digits of the network token presented to the merchant.
+         */
+        token_last4?: string;
+        [k: string]: string | undefined;
+    }
+}
+/**
+ * One live purchase with a Kernel-enrolled card. Authorization obtains an agentic
+ * network token number, expiry and one-time 3-digit code. They are stored
+ * encrypted for the fill operation, which types them only on merchant_url's
+ * origin; the merchant's own checkout submits the payment. The one-time code is
+ * valid until the item's expires_at; fill and submit checkout before then. Visa
+ * cards can be enrolled, but Visa purchases are not yet supported: authorize
+ * returns 400. Supported Mastercard purchases need no cardholder approval. Card
+ * updates are not supported; delete and create a new item instead.
+ */
+export interface KernelCardVaultItemSpec {
+    /**
+     * Integer amount in minor currency units (at most 50000), bound to the one-time
+     * code.
+     */
+    amount: number;
+    /**
+     * ISO 4217 code. Supported: aud, brl, cad, chf, czk, dkk, eur, gbp, hkd, inr, jpy,
+     * krw, mxn, nok, nzd, pln, sek, sgd, usd, zar.
+     */
+    currency: string;
+    merchant_name: string;
+    /**
+     * Merchant checkout URL. Fill is allowed only on this URL's origin.
+     */
+    merchant_url: string;
+    provider: 'kernel';
+    /**
+     * Key of the Kernel wallet item whose enrolled card pays.
+     */
+    wallet: string;
+}
 export interface KernelCredentialVaultItemSpec {
     /**
      * Ordered field definitions rendered in this order by credential collection forms.
@@ -891,6 +979,109 @@ export interface KernelCredentialVaultItemState {
      */
     status: 'pending_collection' | 'ready';
 }
+export interface KernelWalletState {
+    provider: 'kernel';
+    /**
+     * pending_authorization asks the cardholder to use the card_enrollment action.
+     * connected is ready for supported purchases. reconnect_required asks the
+     * cardholder to use a new card_enrollment action after an uncertain enrollment was
+     * safely removed. degraded means the enrollment outcome is unknown and the wallet
+     * must be deleted before adding another card.
+     */
+    status: 'pending_authorization' | 'connected' | 'reconnect_required' | 'degraded';
+    status_reason?: string;
+}
+/**
+ * One card Kernel enrolls for Visa or Mastercard agentic network tokens using
+ * Kernel-managed credentials. Creation returns a card_enrollment action: the
+ * cardholder enters the card and their email on a Kernel-hosted page, then Kernel
+ * enrolls the securely stored card. The card number never reaches Kernel. The
+ * connected wallet's payment_methods expansion lists the enrolled card. Visa cards
+ * can be enrolled, but Visa purchases are not yet supported: authorize
+ * returns 400.
+ */
+export interface KernelWalletVaultItemSpec {
+    provider: 'kernel';
+}
+export interface ManagedAuthCredentialVaultField {
+    /**
+     * Text, email, and password have form inputs; totp does not and is omitted from
+     * both Kernel-hosted and customer React forms. Password and totp must be
+     * sensitive. A totp value is an RFC 4648 Base32 generator seed (case-insensitive,
+     * optional trailing padding), not an otpauth URI or current code. Reject invalid
+     * or empty decoded seeds. Browser fill generates an RFC 6238 code at execution
+     * time using HMAC-SHA1, 6 digits, and a 30-second period. Preserve leading zeros;
+     * never fill the seed. Custom algorithms, digits, periods, and form enrollment are
+     * unsupported.
+     */
+    type: CredentialVaultFieldType;
+}
+export interface ManagedAuthCredentialVaultItemSpec {
+    /**
+     * ID of the managed auth connection whose saved credential this item reads. List
+     * connections with `GET /auth/connections`.
+     */
+    connection_id: string;
+    provider: 'managed_auth';
+    /**
+     * Display text supplied when the item was created. Omitted when none was given.
+     */
+    description?: string;
+}
+/**
+ * A credential backed by a managed auth connection. The item stores no values: it
+ * reads the connection's saved credential at fill time, so updates made through
+ * managed auth apply immediately. The connection must be in the vault's project
+ * and hold a saved Kernel credential. The check is the saved credential, not
+ * connection status: a connection that needs re-authentication qualifies, and an
+ * authenticated one without a saved credential does not. Returns 404 for an
+ * unknown connection, and 409 when the connection is in another project, has no
+ * saved credential yet, or uses an external credential provider such as 1Password.
+ * No collection form is offered; managed auth collects the login.
+ */
+export interface ManagedAuthCredentialVaultItemSpecInput {
+    /**
+     * ID of the managed auth connection whose saved credential this item reads. List
+     * connections with `GET /auth/connections`.
+     */
+    connection_id: string;
+    provider: 'managed_auth';
+    /**
+     * Optional display text for the item, such as the site or service name. Set at
+     * creation and cannot be changed later; repeating the request with a different
+     * description returns 409. At most 16 KiB in UTF-8 bytes.
+     */
+    description?: string;
+}
+export interface ManagedAuthCredentialVaultItemState {
+    provider: 'managed_auth';
+    /**
+     * Items are created ready, which means the connection has a saved Kernel
+     * credential that stores values or a TOTP seed (what has_values or has_totp_secret
+     * report on credentials), not that a login succeeded. Unavailable means it no
+     * longer does; such items advertise no operations.
+     */
+    status: 'ready' | 'unavailable';
+    /**
+     * One entry per non-empty value on the connection's saved credential, keyed by the
+     * field name to use in fill bindings. Included on single-item responses (create
+     * and get) and omitted from list responses, like `value_keys` on credentials.
+     * Empty when unavailable or when every stored value is empty. A stored value named
+     * totp_secret is never listed or filled. Values are never returned. A totp entry
+     * is present when the credential has a TOTP seed; fill writes a generated code for
+     * it. Entries follow the connection's credential.
+     */
+    fields?: {
+        [key: string]: ManagedAuthCredentialVaultField;
+    };
+    /**
+     * Present when status is unavailable. connection_not_found means the connection
+     * was deleted. no_credential means the connection's credential was deleted or
+     * emptied after the item was created. external_credential means the connection was
+     * moved to an external credential provider.
+     */
+    status_reason?: 'connection_not_found' | 'no_credential' | 'external_credential';
+}
 export interface OnePasswordCredentialAccountSpec {
     authorization: OnePasswordCredentialAccountSpec.Authorization;
     provider: '1password';
@@ -1296,8 +1487,9 @@ export interface VaultCheckoutContext {
 }
 export interface VaultFillField {
     /**
-     * A declared credential field name or a supported card field. Unset credential
-     * fields cannot be filled.
+     * A credential field name from the item's declared fields (Kernel) or state.fields
+     * from a single-item read (managed auth), or a supported card field. Unset
+     * credential fields cannot be filled.
      */
     field: string;
     selector: string;
@@ -1623,7 +1815,7 @@ export interface VaultWebmcpBinding {
  * connects. user_id may only reference a user already enrolled by a wallet in this
  * organization under the same configuration.
  */
-export type WalletVaultItemSpec = WalletVaultItemSpec.LinkWalletVaultItemSpec | WalletVaultItemSpec.AgentCardWalletVaultItemSpec;
+export type WalletVaultItemSpec = WalletVaultItemSpec.LinkWalletVaultItemSpec | WalletVaultItemSpec.AgentCardWalletVaultItemSpec | KernelWalletVaultItemSpec;
 export declare namespace WalletVaultItemSpec {
     interface LinkWalletVaultItemSpec {
         authorization: LinkWalletVaultItemSpec.Authorization;
@@ -1688,7 +1880,7 @@ export declare namespace WalletVaultItemSpec {
         }
     }
 }
-export type WalletVaultItemState = WalletVaultItemState.LinkWalletState | WalletVaultItemState.AgentCardWalletState;
+export type WalletVaultItemState = WalletVaultItemState.LinkWalletState | WalletVaultItemState.AgentCardWalletState | KernelWalletState;
 export declare namespace WalletVaultItemState {
     interface LinkWalletState {
         provider: 'link';
@@ -1791,7 +1983,8 @@ export interface ItemRetrieveParams {
      * authorization, approval, or credential collection. Return the current item when
      * ready or when the wait elapses. This does not wait for edits to an already-ready
      * credential; poll GET without wait and compare version to observe changes after
-     * collect.
+     * collect. Managed auth credentials are created ready, so wait returns
+     * immediately.
      */
     wait?: number;
 }
@@ -2082,7 +2275,7 @@ export declare namespace ItemUpsertParams {
          * user connects. user_id may only reference a user already enrolled by a wallet in
          * this organization under the same configuration.
          */
-        spec: WalletVaultItemRequest.LinkWalletVaultItemRequestSpec | WalletVaultItemRequest.AgentCardWalletVaultItemSpec;
+        spec: WalletVaultItemRequest.LinkWalletVaultItemRequestSpec | WalletVaultItemRequest.AgentCardWalletVaultItemSpec | KernelWalletVaultItemSpec;
         /**
          * Body param
          */
@@ -2259,6 +2452,6 @@ export declare namespace ItemUpsertParams {
     }
 }
 export declare namespace Items {
-    export { type AgentcardCheckoutAuthorization as AgentcardCheckoutAuthorization, type AgentcardCheckoutPreparation as AgentcardCheckoutPreparation, type AgentcardPreparedProcessor as AgentcardPreparedProcessor, type AuthorizeVaultItemOperationRequest as AuthorizeVaultItemOperationRequest, type CardVaultItemSpec as CardVaultItemSpec, type CardVaultItemState as CardVaultItemState, type CollectVaultItemOperationRequest as CollectVaultItemOperationRequest, type CredentialAccountVaultItem as CredentialAccountVaultItem, type CredentialAccountVaultItemRequest as CredentialAccountVaultItemRequest, type CredentialCollectionAction as CredentialCollectionAction, type CredentialVaultFieldDefinition as CredentialVaultFieldDefinition, type CredentialVaultFieldInput as CredentialVaultFieldInput, type CredentialVaultFieldState as CredentialVaultFieldState, type CredentialVaultFieldType as CredentialVaultFieldType, type CredentialVaultFieldUpdate as CredentialVaultFieldUpdate, type CredentialVaultItem as CredentialVaultItem, type CredentialVaultItemRequest as CredentialVaultItemRequest, type CredentialVaultItemSpec as CredentialVaultItemSpec, type CredentialVaultItemSpecInput as CredentialVaultItemSpecInput, type CredentialVaultItemSpecUpdate as CredentialVaultItemSpecUpdate, type CredentialVaultItemState as CredentialVaultItemState, type CredentialVaultItemUpdateRequest as CredentialVaultItemUpdateRequest, type FillVaultItemOperationRequest as FillVaultItemOperationRequest, type FillVaultItemOperationResult as FillVaultItemOperationResult, type KernelCredentialVaultItemSpec as KernelCredentialVaultItemSpec, type KernelCredentialVaultItemSpecInput as KernelCredentialVaultItemSpecInput, type KernelCredentialVaultItemState as KernelCredentialVaultItemState, type OnePasswordCredentialAccountSpec as OnePasswordCredentialAccountSpec, type OnePasswordCredentialAccountState as OnePasswordCredentialAccountState, type OnePasswordCredentialVaultItemSpec as OnePasswordCredentialVaultItemSpec, type OnePasswordCredentialVaultItemSpecInput as OnePasswordCredentialVaultItemSpecInput, type OnePasswordCredentialVaultItemState as OnePasswordCredentialVaultItemState, type OnePasswordFillVaultItemOperationRequest as OnePasswordFillVaultItemOperationRequest, type OnePasswordFillVaultItemOperationResult as OnePasswordFillVaultItemOperationResult, type OnePasswordOAuthAction as OnePasswordOAuthAction, type OnePasswordRecoverVaultItemOperationRequest as OnePasswordRecoverVaultItemOperationRequest, type OnePasswordRequestAccessVaultItemOperationRequest as OnePasswordRequestAccessVaultItemOperationRequest, type PrepareCheckoutVaultItemOperationRequest as PrepareCheckoutVaultItemOperationRequest, type VaultCardAliases as VaultCardAliases, type VaultCardFillField as VaultCardFillField, type VaultCheckoutContext as VaultCheckoutContext, type VaultFillField as VaultFillField, type VaultFillFieldResult as VaultFillFieldResult, type VaultItem as VaultItem, type VaultItemAction as VaultItemAction, type VaultItemEvent as VaultItemEvent, type VaultItemOperationResponse as VaultItemOperationResponse, type VaultPaymentMethod as VaultPaymentMethod, type VaultWebmcpBinding as VaultWebmcpBinding, type WalletVaultItemSpec as WalletVaultItemSpec, type WalletVaultItemState as WalletVaultItemState, type WebmcpInvokeVaultItemOperationRequest as WebmcpInvokeVaultItemOperationRequest, type WebmcpInvokeVaultItemOperationResult as WebmcpInvokeVaultItemOperationResult, type ItemListResponse as ItemListResponse, type ItemEventsResponse as ItemEventsResponse, type ItemRetrieveParams as ItemRetrieveParams, type ItemUpdateParams as ItemUpdateParams, type ItemDeleteParams as ItemDeleteParams, type ItemEventsParams as ItemEventsParams, type ItemPerformOperationParams as ItemPerformOperationParams, type ItemUpsertParams as ItemUpsertParams, };
+    export { type AgentcardCheckoutAuthorization as AgentcardCheckoutAuthorization, type AgentcardCheckoutPreparation as AgentcardCheckoutPreparation, type AgentcardPreparedProcessor as AgentcardPreparedProcessor, type AuthorizeVaultItemOperationRequest as AuthorizeVaultItemOperationRequest, type CardVaultItemSpec as CardVaultItemSpec, type CardVaultItemState as CardVaultItemState, type CollectVaultItemOperationRequest as CollectVaultItemOperationRequest, type CredentialAccountVaultItem as CredentialAccountVaultItem, type CredentialAccountVaultItemRequest as CredentialAccountVaultItemRequest, type CredentialCollectionAction as CredentialCollectionAction, type CredentialVaultFieldDefinition as CredentialVaultFieldDefinition, type CredentialVaultFieldInput as CredentialVaultFieldInput, type CredentialVaultFieldState as CredentialVaultFieldState, type CredentialVaultFieldType as CredentialVaultFieldType, type CredentialVaultFieldUpdate as CredentialVaultFieldUpdate, type CredentialVaultItem as CredentialVaultItem, type CredentialVaultItemRequest as CredentialVaultItemRequest, type CredentialVaultItemSpec as CredentialVaultItemSpec, type CredentialVaultItemSpecInput as CredentialVaultItemSpecInput, type CredentialVaultItemSpecUpdate as CredentialVaultItemSpecUpdate, type CredentialVaultItemState as CredentialVaultItemState, type CredentialVaultItemUpdateRequest as CredentialVaultItemUpdateRequest, type FillVaultItemOperationRequest as FillVaultItemOperationRequest, type FillVaultItemOperationResult as FillVaultItemOperationResult, type KernelCardState as KernelCardState, type KernelCardVaultItemSpec as KernelCardVaultItemSpec, type KernelCredentialVaultItemSpec as KernelCredentialVaultItemSpec, type KernelCredentialVaultItemSpecInput as KernelCredentialVaultItemSpecInput, type KernelCredentialVaultItemState as KernelCredentialVaultItemState, type KernelWalletState as KernelWalletState, type KernelWalletVaultItemSpec as KernelWalletVaultItemSpec, type ManagedAuthCredentialVaultField as ManagedAuthCredentialVaultField, type ManagedAuthCredentialVaultItemSpec as ManagedAuthCredentialVaultItemSpec, type ManagedAuthCredentialVaultItemSpecInput as ManagedAuthCredentialVaultItemSpecInput, type ManagedAuthCredentialVaultItemState as ManagedAuthCredentialVaultItemState, type OnePasswordCredentialAccountSpec as OnePasswordCredentialAccountSpec, type OnePasswordCredentialAccountState as OnePasswordCredentialAccountState, type OnePasswordCredentialVaultItemSpec as OnePasswordCredentialVaultItemSpec, type OnePasswordCredentialVaultItemSpecInput as OnePasswordCredentialVaultItemSpecInput, type OnePasswordCredentialVaultItemState as OnePasswordCredentialVaultItemState, type OnePasswordFillVaultItemOperationRequest as OnePasswordFillVaultItemOperationRequest, type OnePasswordFillVaultItemOperationResult as OnePasswordFillVaultItemOperationResult, type OnePasswordOAuthAction as OnePasswordOAuthAction, type OnePasswordRecoverVaultItemOperationRequest as OnePasswordRecoverVaultItemOperationRequest, type OnePasswordRequestAccessVaultItemOperationRequest as OnePasswordRequestAccessVaultItemOperationRequest, type PrepareCheckoutVaultItemOperationRequest as PrepareCheckoutVaultItemOperationRequest, type VaultCardAliases as VaultCardAliases, type VaultCardFillField as VaultCardFillField, type VaultCheckoutContext as VaultCheckoutContext, type VaultFillField as VaultFillField, type VaultFillFieldResult as VaultFillFieldResult, type VaultItem as VaultItem, type VaultItemAction as VaultItemAction, type VaultItemEvent as VaultItemEvent, type VaultItemOperationResponse as VaultItemOperationResponse, type VaultPaymentMethod as VaultPaymentMethod, type VaultWebmcpBinding as VaultWebmcpBinding, type WalletVaultItemSpec as WalletVaultItemSpec, type WalletVaultItemState as WalletVaultItemState, type WebmcpInvokeVaultItemOperationRequest as WebmcpInvokeVaultItemOperationRequest, type WebmcpInvokeVaultItemOperationResult as WebmcpInvokeVaultItemOperationResult, type ItemListResponse as ItemListResponse, type ItemEventsResponse as ItemEventsResponse, type ItemRetrieveParams as ItemRetrieveParams, type ItemUpdateParams as ItemUpdateParams, type ItemDeleteParams as ItemDeleteParams, type ItemEventsParams as ItemEventsParams, type ItemPerformOperationParams as ItemPerformOperationParams, type ItemUpsertParams as ItemUpsertParams, };
 }
 //# sourceMappingURL=items.d.mts.map