kernel 0.103.0__tar.gz → 0.106.0__tar.gz

kernel-0.106.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.106.0"
+}

{kernel-0.103.0 → kernel-0.106.0}/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.106.0 (2026-09-16)
+
+Full Changelog: [v0.104.0...v0.106.0](https://github.com/kernel/kernel-python-sdk/compare/v0.104.0...v0.106.0)
+
+### Features
+
+* Add processor-bound AgentCard preparation contracts ([37d5e9c](https://github.com/kernel/kernel-python-sdk/commit/37d5e9c3d5db76bece8f8ba8d5358b939bc79315))
+* Add start_url to browser session updates ([82a475d](https://github.com/kernel/kernel-python-sdk/commit/82a475dae250abce535476386be88033a5314656))
+* Polish and publish the Config Registry API ([afe2fea](https://github.com/kernel/kernel-python-sdk/commit/afe2feaf2dcea1f4fc160d66cfe9f3711b61a447))
+* Square UKP and Hypeman placement load factors ([76dee03](https://github.com/kernel/kernel-python-sdk/commit/76dee03d215481de6ee42b2cba631b5f5893c1a3))
+
+## [0.104.0](https://github.com/kernel/kernel-python-sdk/compare/v0.103.0...v0.104.0) (2026-09-15)
+
+
+### Features
+
+* Expose the WebMCP `awaiting_submission` status ([9b5cb34](https://github.com/kernel/kernel-python-sdk/commit/9b5cb34e8fb19c22a44c42aca9e1fc61bf7744a9))
+
 ## [0.103.0](https://github.com/kernel/kernel-python-sdk/compare/v0.102.0...v0.103.0) (2026-09-15)
 
 

{kernel-0.103.0 → kernel-0.106.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.103.0
+Version: 0.106.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.103.0 → kernel-0.106.0}/api.md

@@ -109,6 +109,7 @@ Methods:
 
 - <code title="get /config-registry/analyses/{id}">client.config_registry.analyses.<a href="./src/kernel/resources/config_registry/analyses.py">retrieve</a>(id) -> <a href="./src/kernel/types/config_registry_response.py">ConfigRegistryResponse</a></code>
 - <code title="get /config-registry/analyses">client.config_registry.analyses.<a href="./src/kernel/resources/config_registry/analyses.py">list</a>(\*\*<a href="src/kernel/types/config_registry/analysis_list_params.py">params</a>) -> <a href="./src/kernel/types/analysis_summary.py">SyncOffsetPagination[AnalysisSummary]</a></code>
+- <code title="post /config-registry/analyses/{id}/cancel">client.config_registry.analyses.<a href="./src/kernel/resources/config_registry/analyses.py">cancel</a>(id) -> <a href="./src/kernel/types/config_registry_response.py">ConfigRegistryResponse</a></code>
 
 # Browsers
 
@@ -526,6 +527,7 @@ Types:
 from kernel.types.vaults import (
     AgentcardCheckoutAuthorization,
     AgentcardCheckoutPreparation,
+    AgentcardPreparedProcessor,
     AuthorizeVaultItemOperationRequest,
     CardVaultItemSpec,
     CardVaultItemState,

{kernel-0.103.0 → kernel-0.106.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.103.0"
+version = "0.106.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.103.0"  # x-release-please-version
+__version__ = "0.106.0"  # x-release-please-version

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/resources/browsers/browsers.py

@@ -394,6 +394,7 @@ class BrowsersResource(SyncAPIResource):
         profile: BrowserProfile | Omit = omit,
         proxy: BrowserProxyConfigParam | Omit = omit,
         proxy_id: Optional[str] | Omit = omit,
+        start_url: str | Omit = omit,
         tags: Optional[TagsParam] | Omit = omit,
         telemetry: Optional[browser_update_params.Telemetry] | Omit = omit,
         viewport: browser_update_params.Viewport | Omit = omit,
@@ -428,6 +429,11 @@ class BrowsersResource(SyncAPIResource):
           proxy_id: ID of the proxy to use. Omit to leave unchanged, set to empty string to remove
               proxy. Deprecated in favor of proxy.
 
+          start_url: Optional URL to navigate the browser to after applying this update. When a
+              profile is loaded in the same update, this overrides the profile's restored
+              tabs. Navigation is best-effort, so failures do not fail the update. Omit or set
+              to an empty string to leave the current page unchanged.
+
           tags: User-defined key-value tags for the browser session. Omit to leave unchanged.
               Provide a map to replace the entire tag set (full replace, not a merge). Set to
               an empty object ({}) to clear all tags. Up to 50 pairs.
@@ -459,6 +465,7 @@ class BrowsersResource(SyncAPIResource):
                     "profile": profile,
                     "proxy": proxy,
                     "proxy_id": proxy_id,
+                    "start_url": start_url,
                     "tags": tags,
                     "telemetry": telemetry,
                     "viewport": viewport,
@@ -1024,6 +1031,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
         profile: BrowserProfile | Omit = omit,
         proxy: BrowserProxyConfigParam | Omit = omit,
         proxy_id: Optional[str] | Omit = omit,
+        start_url: str | Omit = omit,
         tags: Optional[TagsParam] | Omit = omit,
         telemetry: Optional[browser_update_params.Telemetry] | Omit = omit,
         viewport: browser_update_params.Viewport | Omit = omit,
@@ -1058,6 +1066,11 @@ class AsyncBrowsersResource(AsyncAPIResource):
           proxy_id: ID of the proxy to use. Omit to leave unchanged, set to empty string to remove
               proxy. Deprecated in favor of proxy.
 
+          start_url: Optional URL to navigate the browser to after applying this update. When a
+              profile is loaded in the same update, this overrides the profile's restored
+              tabs. Navigation is best-effort, so failures do not fail the update. Omit or set
+              to an empty string to leave the current page unchanged.
+
           tags: User-defined key-value tags for the browser session. Omit to leave unchanged.
               Provide a map to replace the entire tag set (full replace, not a merge). Set to
               an empty object ({}) to clear all tags. Up to 50 pairs.
@@ -1089,6 +1102,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
                     "profile": profile,
                     "proxy": proxy,
                     "proxy_id": proxy_id,
+                    "start_url": start_url,
                     "tags": tags,
                     "telemetry": telemetry,
                     "viewport": viewport,

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/resources/browsers/webmcp.py

@@ -60,11 +60,16 @@ class WebmcpResource(SyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> InvocationResult:
-        """
-        Invokes the exact live registration identified by tool_ref and waits
-        synchronously for its result. Navigation during execution is allowed. If the tab
-        or embedded frame disappears, or the request times out after invocation begins,
-        the response reports outcome_unknown and the tool is not retried.
+        """Invokes the exact live registration identified by tool_ref.
+
+        Non-autosubmit
+        declarative form tools return after their fields are populated with an
+        awaiting_submission status. Other tools wait for a terminal result, including
+        across navigation. Inspect a populated form, obtain any required confirmation,
+        then submit through Playwright or computer interaction without invoking the tool
+        again. If the tab or embedded frame disappears, or the request times out after
+        invocation begins, the response reports outcome_unknown and the tool is not
+        retried.
 
         Args:
           input: Tool input, limited to 1 MiB after JSON serialization.
@@ -168,11 +173,16 @@ class AsyncWebmcpResource(AsyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> InvocationResult:
-        """
-        Invokes the exact live registration identified by tool_ref and waits
-        synchronously for its result. Navigation during execution is allowed. If the tab
-        or embedded frame disappears, or the request times out after invocation begins,
-        the response reports outcome_unknown and the tool is not retried.
+        """Invokes the exact live registration identified by tool_ref.
+
+        Non-autosubmit
+        declarative form tools return after their fields are populated with an
+        awaiting_submission status. Other tools wait for a terminal result, including
+        across navigation. Inspect a populated form, obtain any required confirmation,
+        then submit through Playwright or computer interaction without invoking the tool
+        again. If the tab or embedded frame disappears, or the request times out after
+        invocation begins, the response reports outcome_unknown and the tool is not
+        retried.
 
         Args:
           input: Tool input, limited to 1 MiB after JSON serialization.

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/resources/config_registry/analyses.py

@@ -126,6 +126,43 @@ class AnalysesResource(SyncAPIResource):
             model=AnalysisSummary,
         )
 
+    def cancel(
+        self,
+        id: str,
+        *,
+        # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
+        # The extra values given here take precedence over values defined on the client or passed to this method.
+        extra_headers: Headers | None = None,
+        extra_query: Query | None = None,
+        extra_body: Body | None = None,
+        timeout: float | httpx.Timeout | None | NotGiven = not_given,
+    ) -> ConfigRegistryResponse:
+        """Requests cancellation of a running project-scoped analysis.
+
+        Cancellation is
+        asynchronous; poll the analysis until its status becomes canceled. Repeating the
+        request after the analysis reaches a terminal state returns the existing
+        outcome.
+
+        Args:
+          extra_headers: Send extra headers
+
+          extra_query: Add additional query parameters to the request
+
+          extra_body: Add additional JSON properties to the request
+
+          timeout: Override the client-level default timeout for this request, in seconds
+        """
+        if not id:
+            raise ValueError(f"Expected a non-empty value for `id` but received {id!r}")
+        return self._post(
+            path_template("/config-registry/analyses/{id}/cancel", id=id),
+            options=make_request_options(
+                extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+            ),
+            cast_to=ConfigRegistryResponse,
+        )
+
 
 class AsyncAnalysesResource(AsyncAPIResource):
     """Resolve browser and proxy recommendations for bot-protected sites."""
@@ -230,6 +267,43 @@ class AsyncAnalysesResource(AsyncAPIResource):
             model=AnalysisSummary,
         )
 
+    async def cancel(
+        self,
+        id: str,
+        *,
+        # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
+        # The extra values given here take precedence over values defined on the client or passed to this method.
+        extra_headers: Headers | None = None,
+        extra_query: Query | None = None,
+        extra_body: Body | None = None,
+        timeout: float | httpx.Timeout | None | NotGiven = not_given,
+    ) -> ConfigRegistryResponse:
+        """Requests cancellation of a running project-scoped analysis.
+
+        Cancellation is
+        asynchronous; poll the analysis until its status becomes canceled. Repeating the
+        request after the analysis reaches a terminal state returns the existing
+        outcome.
+
+        Args:
+          extra_headers: Send extra headers
+
+          extra_query: Add additional query parameters to the request
+
+          extra_body: Add additional JSON properties to the request
+
+          timeout: Override the client-level default timeout for this request, in seconds
+        """
+        if not id:
+            raise ValueError(f"Expected a non-empty value for `id` but received {id!r}")
+        return await self._post(
+            path_template("/config-registry/analyses/{id}/cancel", id=id),
+            options=make_request_options(
+                extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+            ),
+            cast_to=ConfigRegistryResponse,
+        )
+
 
 class AnalysesResourceWithRawResponse:
     def __init__(self, analyses: AnalysesResource) -> None:
@@ -241,6 +315,9 @@ class AnalysesResourceWithRawResponse:
         self.list = to_raw_response_wrapper(
             analyses.list,
         )
+        self.cancel = to_raw_response_wrapper(
+            analyses.cancel,
+        )
 
 
 class AsyncAnalysesResourceWithRawResponse:
@@ -253,6 +330,9 @@ class AsyncAnalysesResourceWithRawResponse:
         self.list = async_to_raw_response_wrapper(
             analyses.list,
         )
+        self.cancel = async_to_raw_response_wrapper(
+            analyses.cancel,
+        )
 
 
 class AnalysesResourceWithStreamingResponse:
@@ -265,6 +345,9 @@ class AnalysesResourceWithStreamingResponse:
         self.list = to_streamed_response_wrapper(
             analyses.list,
         )
+        self.cancel = to_streamed_response_wrapper(
+            analyses.cancel,
+        )
 
 
 class AsyncAnalysesResourceWithStreamingResponse:
@@ -277,3 +360,6 @@ class AsyncAnalysesResourceWithStreamingResponse:
         self.list = async_to_streamed_response_wrapper(
             analyses.list,
         )
+        self.cancel = async_to_streamed_response_wrapper(
+            analyses.cancel,
+        )

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/resources/config_registry/config_registry.py

@@ -190,8 +190,9 @@ class ConfigRegistryResource(SyncAPIResource):
               any non-HTTPS destination as off-site and will not drive an http one. Kernel
               uses it to drive the browser further into the site, where it can observe
               protections that only appear once a session interacts. When this target already
-              has a verified configuration, the run confirms that one instead of re-deriving
-              the whole matrix, so supplying an intent narrows what can be recommended.
+              has a recommended configuration, the run confirms that one instead of
+              re-deriving the whole matrix, so supplying an intent narrows what can be
+              recommended.
 
           extra_headers: Send extra headers
 
@@ -374,8 +375,9 @@ class AsyncConfigRegistryResource(AsyncAPIResource):
               any non-HTTPS destination as off-site and will not drive an http one. Kernel
               uses it to drive the browser further into the site, where it can observe
               protections that only appear once a session interacts. When this target already
-              has a verified configuration, the run confirms that one instead of re-deriving
-              the whole matrix, so supplying an intent narrows what can be recommended.
+              has a recommended configuration, the run confirms that one instead of
+              re-deriving the whole matrix, so supplying an intent narrows what can be
+              recommended.
 
           extra_headers: Send extra headers
 

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/resources/vaults/items.py

@@ -511,11 +511,11 @@ class ItemsResource(SyncAPIResource):
         leave the outcome unknown; do not automatically retry.
 
         Args:
-          checkout: Required when preparing an unused AgentCard card for Square. Consent is bound to
-              this browser and declared merchant origin, not a tab. Wait for the item's
-              ready_to_submit status before native Pay and submit within its readiness
-              deadline. Unused preparations expire automatically; every preparation is
-              single-use, including after failure or expiry.
+          checkout: Required when preparing an unused AgentCard card for a supported tokenization
+              processor. Consent is bound to this browser and declared merchant origin, not a
+              tab. Wait for the item's ready_to_submit status before native Pay and submit
+              within its readiness deadline. Unused preparations expire automatically; every
+              preparation is single-use, including after failure or expiry.
 
           extra_headers: Send extra headers
 
@@ -1274,11 +1274,11 @@ class AsyncItemsResource(AsyncAPIResource):
         leave the outcome unknown; do not automatically retry.
 
         Args:
-          checkout: Required when preparing an unused AgentCard card for Square. Consent is bound to
-              this browser and declared merchant origin, not a tab. Wait for the item's
-              ready_to_submit status before native Pay and submit within its readiness
-              deadline. Unused preparations expire automatically; every preparation is
-              single-use, including after failure or expiry.
+          checkout: Required when preparing an unused AgentCard card for a supported tokenization
+              processor. Consent is bound to this browser and declared merchant origin, not a
+              tab. Wait for the item's ready_to_submit status before native Pay and submit
+              within its readiness deadline. Unused preparations expire automatically; every
+              preparation is single-use, including after failure or expiry.
 
           extra_headers: Send extra headers
 

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/analysis.py

@@ -31,3 +31,9 @@ class Analysis(BaseModel):
 
     status: Literal["running", "completed", "failed", "canceled", "expired"]
     """Lifecycle status of a background analysis."""
+
+    intent: Optional[str] = None
+    """The workload description supplied for this analysis.
+
+    Null when the analysis only tested connectivity.
+    """

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/browser_create_response.py

@@ -106,7 +106,7 @@ class BrowserCreateResponse(BaseModel):
     """
 
     start_url: Optional[str] = None
-    """URL the session was asked to navigate to on creation, if any.
+    """URL the session was most recently asked to navigate to, if any.
 
     Recorded for debugging. Navigation is fire-and-forget — the URL is dispatched to
     the browser without waiting for it to load, and any errors (DNS failure, bad

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/browser_list_response.py

@@ -106,7 +106,7 @@ class BrowserListResponse(BaseModel):
     """
 
     start_url: Optional[str] = None
-    """URL the session was asked to navigate to on creation, if any.
+    """URL the session was most recently asked to navigate to, if any.
 
     Recorded for debugging. Navigation is fire-and-forget — the URL is dispatched to
     the browser without waiting for it to load, and any errors (DNS failure, bad

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/browser_pool_acquire_response.py

@@ -106,7 +106,7 @@ class BrowserPoolAcquireResponse(BaseModel):
     """
 
     start_url: Optional[str] = None
-    """URL the session was asked to navigate to on creation, if any.
+    """URL the session was most recently asked to navigate to, if any.
 
     Recorded for debugging. Navigation is fire-and-forget — the URL is dispatched to
     the browser without waiting for it to load, and any errors (DNS failure, bad

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/browser_retrieve_response.py

@@ -106,7 +106,7 @@ class BrowserRetrieveResponse(BaseModel):
     """
 
     start_url: Optional[str] = None
-    """URL the session was asked to navigate to on creation, if any.
+    """URL the session was most recently asked to navigate to, if any.
 
     Recorded for debugging. Navigation is fire-and-forget — the URL is dispatched to
     the browser without waiting for it to load, and any errors (DNS failure, bad

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/browser_update_params.py

@@ -59,6 +59,14 @@ class BrowserUpdateParams(TypedDict, total=False):
     favor of proxy.
     """
 
+    start_url: str
+    """Optional URL to navigate the browser to after applying this update.
+
+    When a profile is loaded in the same update, this overrides the profile's
+    restored tabs. Navigation is best-effort, so failures do not fail the update.
+    Omit or set to an empty string to leave the current page unchanged.
+    """
+
     tags: Optional[TagsParam]
     """User-defined key-value tags for the browser session.
 

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/browser_update_response.py

@@ -106,7 +106,7 @@ class BrowserUpdateResponse(BaseModel):
     """
 
     start_url: Optional[str] = None
-    """URL the session was asked to navigate to on creation, if any.
+    """URL the session was most recently asked to navigate to, if any.
 
     Recorded for debugging. Navigation is fire-and-forget — the URL is dispatched to
     the browser without waiting for it to load, and any errors (DNS failure, bad

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/browsers/invocation_result.py

@@ -11,7 +11,13 @@ __all__ = ["InvocationResult"]
 class InvocationResult(BaseModel):
     invocation_id: str
 
-    status: Literal["completed", "canceled", "error"]
+    status: Literal["completed", "canceled", "error", "awaiting_submission"]
+    """
+    awaiting_submission means a non-autosubmit declarative form was populated but
+    not submitted. Inspect the form, obtain any required confirmation, then submit
+    through Playwright or computer interaction without invoking the tool again. The
+    other statuses are terminal results.
+    """
 
     error_text: Optional[str] = None
 

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/config_registry_resolve_params.py

@@ -27,6 +27,7 @@ class ConfigRegistryResolveParams(TypedDict, total=False):
     any non-HTTPS destination as off-site and will not drive an http one. Kernel
     uses it to drive the browser further into the site, where it can observe
     protections that only appear once a session interacts. When this target already
-    has a verified configuration, the run confirms that one instead of re-deriving
-    the whole matrix, so supplying an intent narrows what can be recommended.
+    has a recommended configuration, the run confirms that one instead of
+    re-deriving the whole matrix, so supplying an intent narrows what can be
+    recommended.
     """

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/evidence.py

@@ -30,9 +30,9 @@ class Evidence(BaseModel):
     success_rate: float
     """Accessed trials divided by judged trials. Inconclusive trials are excluded."""
 
-    last_verified_at: Optional[datetime] = None
-    """Most recent contributing run where this config met the success threshold.
-
-    Omitted for knowledge assembled from runs that did not independently meet the
-    threshold.
+    last_supported_at: Optional[datetime] = None
+    """
+    Most recent contributing run whose evidence supported recommending this
+    configuration. Omitted when no individual run independently met the
+    recommendation threshold.
     """

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/invocation_list_browsers_response.py

@@ -106,7 +106,7 @@ class Browser(BaseModel):
     """
 
     start_url: Optional[str] = None
-    """URL the session was asked to navigate to on creation, if any.
+    """URL the session was most recently asked to navigate to, if any.
 
     Recorded for debugging. Navigation is fire-and-forget — the URL is dispatched to
     the browser without waiting for it to load, and any errors (DNS failure, bad

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/recommendation.py

@@ -17,7 +17,11 @@ class Recommendation(BaseModel):
     evidence: Evidence
 
     match_scope: Literal["exact", "host", "domain"]
-    """Specificity of knowledge matched for this recommendation."""
+    """Specificity of knowledge matched for this recommendation.
+
+    Exact matches use knowledge for the requested target; host and domain matches
+    use broader fallback knowledge.
+    """
 
     matched_target: str
     """Target value that supplied the recommendation."""
@@ -26,10 +30,3 @@ class Recommendation(BaseModel):
     """Proxy recipe for the recommended browser."""
 
     type: Literal["recommendation"]
-
-    verification: Literal["verified", "inferred"]
-    """
-    Exact matches meet the evidence threshold; host and domain fallbacks are
-    inferred. Check evidence.last_verified_at for successful verification age and
-    last_observed_at for the latest evidence.
-    """

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/vaults/__init__.py

@@ -24,6 +24,7 @@ from .card_vault_item_spec_param import CardVaultItemSpecParam as CardVaultItemS
 from .credential_vault_item_spec import CredentialVaultItemSpec as CredentialVaultItemSpec
 from .credential_vault_field_type import CredentialVaultFieldType as CredentialVaultFieldType
 from .credential_vault_item_state import CredentialVaultItemState as CredentialVaultItemState
+from .agentcard_prepared_processor import AgentcardPreparedProcessor as AgentcardPreparedProcessor
 from .credential_collection_action import CredentialCollectionAction as CredentialCollectionAction
 from .credential_vault_field_state import CredentialVaultFieldState as CredentialVaultFieldState
 from .vault_checkout_context_param import VaultCheckoutContextParam as VaultCheckoutContextParam

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/vaults/agentcard_checkout_preparation.py

@@ -5,12 +5,13 @@ from datetime import datetime
 from typing_extensions import Literal
 
 from ..._models import BaseModel
+from .agentcard_prepared_processor import AgentcardPreparedProcessor
 
 __all__ = ["AgentcardCheckoutPreparation"]
 
 
 class AgentcardCheckoutPreparation(BaseModel):
-    """One-use Square checkout preparation.
+    """One-use processor-bound checkout preparation.
 
     Keep the approval page open through token handoff. The amount is display-only and does not constrain the merchant's eventual charge.
     """
@@ -19,10 +20,12 @@ class AgentcardCheckoutPreparation(BaseModel):
 
     created_at: datetime
 
-    environment: Literal["production", "sandbox"]
+    environment: Literal["production", "sandbox", "shared"]
 
     merchant_origin: str
 
+    psp: AgentcardPreparedProcessor
+
     status: Literal["creating", "awaiting_approval", "ready", "consumed", "cancelled", "expired", "unknown"]
     """
     Preparation consumed means egress claimed the preparation and it cannot be

kernel-0.106.0/src/kernel/types/vaults/agentcard_prepared_processor.py

@@ -0,0 +1,7 @@
+# File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+from typing_extensions import Literal, TypeAlias
+
+__all__ = ["AgentcardPreparedProcessor"]
+
+AgentcardPreparedProcessor: TypeAlias = Literal["square", "braintree", "worldpay", "bambora", "mercado_pago"]

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/vaults/card_vault_item_state.py

@@ -33,6 +33,11 @@ class LinkCardStateMasks(BaseModel):
 
 
 class LinkCardState(BaseModel):
+    """Issued Link cards retain encrypted card material for the fill operation.
+
+    Link cards do not expose aliases or support egress substitution.
+    """
+
     provider: Literal["link"]
 
     status: Literal[
@@ -47,8 +52,6 @@ class LinkCardState(BaseModel):
     caller-asserted reconciliation operation.
     """
 
-    aliases: Optional[VaultCardAliases] = None
-
     domains: Optional[List[str]] = None
 
     masks: Optional[LinkCardStateMasks] = None
@@ -112,7 +115,7 @@ class AgentCardCardState(BaseModel):
     masks: Optional[AgentCardCardStateMasks] = None
 
     preparation: Optional[AgentcardCheckoutPreparation] = None
-    """One-use Square checkout preparation.
+    """One-use processor-bound checkout preparation.
 
     Keep the approval page open through token handoff. The amount is display-only
     and does not constrain the merchant's eventual charge.

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/vaults/fill_vault_item_operation_request_param.py

@@ -34,10 +34,9 @@ class FillVaultItemOperationRequestParam(TypedDict, total=False):
     Fill in request order and stop on the first failure. This operation is
     not atomic: previously filled fields are not rolled back. Never submit
     the form or click buttons, though input/change events may trigger site
-    behavior. Fill is the preferred browser-checkout path. Aliases remain an
-    alternative for explicitly chosen egress-substitution integrations. Do not
-    automatically retry or fall back to aliases after a failed or indeterminate
-    operation.
+    behavior. Link cards use fill for browser checkout and do not expose
+    aliases or support egress substitution. Do not automatically retry a
+    failed or indeterminate operation.
 
     Secret values are never returned or included in operation logs, traces,
     audit events, or error details. This does not prevent an agent with

{kernel-0.103.0 → kernel-0.106.0}/src/kernel/types/vaults/item_perform_operation_params.py

@@ -33,12 +33,12 @@ class PrepareCheckoutVaultItemOperationRequest(TypedDict, total=False):
     id_or_name: Required[str]
 
     checkout: Required[VaultCheckoutContextParam]
-    """Required when preparing an unused AgentCard card for Square.
-
-    Consent is bound to this browser and declared merchant origin, not a tab. Wait
-    for the item's ready_to_submit status before native Pay and submit within its
-    readiness deadline. Unused preparations expire automatically; every preparation
-    is single-use, including after failure or expiry.
+    """
+    Required when preparing an unused AgentCard card for a supported tokenization
+    processor. Consent is bound to this browser and declared merchant origin, not a
+    tab. Wait for the item's ready_to_submit status before native Pay and submit
+    within its readiness deadline. Unused preparations expire automatically; every
+    preparation is single-use, including after failure or expiry.
     """
 
     type: Required[Literal["prepare_checkout"]]