feat: chore(stlc): seal custom-code tracking files

Stainless-Generated-From: 8ac1635568224ca17c04e5c6f15ac6e66e31b932

Author: kernel-internal[bot]

src/kernel/types/vault_provider_config.py

@@ -1,6 +1,6 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
-from typing import Union
+from typing import Union, Optional
 from datetime import datetime
 from typing_extensions import Literal, Annotated, TypeAlias
 
@@ -30,6 +30,12 @@ class VaultLinkProviderConfig(BaseModel):
 
     updated_at: datetime
 
+    publishable_key: Optional[str] = None
+    """Stripe publishable key sent to Link when refreshing and revoking wallet grants.
+
+    Omitted when not configured.
+    """
+
 
 class VaultAgentCardProviderConfig(BaseModel):
     """Response schema for an AgentCard configuration, without secret credentials.

src/kernel/types/vault_provider_config_create_params.py

@@ -28,6 +28,14 @@ class VaultLinkProviderConfigRequestCredentials(TypedDict, total=False):
 
     client_secret: Required[str]
 
+    publishable_key: str
+    """Stripe publishable key for the account that owns the Link OAuth client.
+
+    Link requires it as the bearer credential when Kernel refreshes or revokes
+    imported wallet grants; without it, those wallets stop working when the imported
+    access token expires.
+    """
+
 
 class VaultAgentCardProviderConfigRequest(TypedDict, total=False):
     credentials: Required[VaultAgentCardProviderConfigRequestCredentials]

src/kernel/types/vault_provider_config_update_params.py

@@ -26,3 +26,9 @@ class Credentials(TypedDict, total=False):
     """
 
     client_secret: str
+
+    publishable_key: str
+    """Link configurations only.
+
+    Stripe publishable key sent to Link when refreshing and revoking wallet grants.
+    """

tests/api_resources/test_vault_provider_configs.py

@@ -33,6 +33,20 @@ def test_method_create_overload_1(self, client: Kernel) -> None:
         )
         assert_matches_type(VaultProviderConfig, vault_provider_config, path=["response"])
 
+    @pytest.mark.skip(reason="Mock server tests are disabled")
+    @parametrize
+    def test_method_create_with_all_params_overload_1(self, client: Kernel) -> None:
+        vault_provider_config = client.vault_provider_configs.create(
+            credentials={
+                "client_id": "x",
+                "client_secret": "x",
+                "publishable_key": "pk_test_lK9w2kI5J1",
+            },
+            name="name",
+            provider="link",
+        )
+        assert_matches_type(VaultProviderConfig, vault_provider_config, path=["response"])
+
     @pytest.mark.skip(reason="Mock server tests are disabled")
     @parametrize
     def test_raw_response_create_overload_1(self, client: Kernel) -> None:
@@ -173,7 +187,10 @@ def test_method_update(self, client: Kernel) -> None:
     def test_method_update_with_all_params(self, client: Kernel) -> None:
         vault_provider_config = client.vault_provider_configs.update(
             id_or_name="id_or_name",
-            credentials={"client_secret": "x"},
+            credentials={
+                "client_secret": "x",
+                "publishable_key": "pk_test_lK9w2kI5J1",
+            },
             name="renamed-link-client",
         )
         assert_matches_type(VaultProviderConfig, vault_provider_config, path=["response"])
@@ -310,6 +327,20 @@ async def test_method_create_overload_1(self, async_client: AsyncKernel) -> None
         )
         assert_matches_type(VaultProviderConfig, vault_provider_config, path=["response"])
 
+    @pytest.mark.skip(reason="Mock server tests are disabled")
+    @parametrize
+    async def test_method_create_with_all_params_overload_1(self, async_client: AsyncKernel) -> None:
+        vault_provider_config = await async_client.vault_provider_configs.create(
+            credentials={
+                "client_id": "x",
+                "client_secret": "x",
+                "publishable_key": "pk_test_lK9w2kI5J1",
+            },
+            name="name",
+            provider="link",
+        )
+        assert_matches_type(VaultProviderConfig, vault_provider_config, path=["response"])
+
     @pytest.mark.skip(reason="Mock server tests are disabled")
     @parametrize
     async def test_raw_response_create_overload_1(self, async_client: AsyncKernel) -> None:
@@ -450,7 +481,10 @@ async def test_method_update(self, async_client: AsyncKernel) -> None:
     async def test_method_update_with_all_params(self, async_client: AsyncKernel) -> None:
         vault_provider_config = await async_client.vault_provider_configs.update(
             id_or_name="id_or_name",
-            credentials={"client_secret": "x"},
+            credentials={
+                "client_secret": "x",
+                "publishable_key": "pk_test_lK9w2kI5J1",
+            },
             name="renamed-link-client",
         )
         assert_matches_type(VaultProviderConfig, vault_provider_config, path=["response"])