feat: Support native prepared Adyen Sessions checkout

Stainless-Generated-From: 1c59aa3eefd9ebe82d2a948a4b96dfe9903207a1

Author: kernel-internal[bot]

src/kernel/resources/vaults/items.py

@@ -517,7 +517,7 @@ def perform_operation(
         leave the outcome unknown; do not automatically retry.
 
         Args:
-          checkout: Required when preparing an unused AgentCard card for a supported tokenization
+          checkout: Required when preparing an unused AgentCard card for a supported checkout
               processor. Consent is bound to this browser and declared merchant origin, not a
               tab. Wait for the item's ready_to_submit status before native Pay and submit
               within its readiness deadline. Unused preparations expire automatically; every
@@ -1290,7 +1290,7 @@ async def perform_operation(
         leave the outcome unknown; do not automatically retry.
 
         Args:
-          checkout: Required when preparing an unused AgentCard card for a supported tokenization
+          checkout: Required when preparing an unused AgentCard card for a supported checkout
               processor. Consent is bound to this browser and declared merchant origin, not a
               tab. Wait for the item's ready_to_submit status before native Pay and submit
               within its readiness deadline. Unused preparations expire automatically; every

src/kernel/types/vaults/agentcard_checkout_preparation.py

@@ -13,7 +13,7 @@
 class AgentcardCheckoutPreparation(BaseModel):
     """One-use processor-bound checkout preparation.
 
-    Keep the approval page open through token handoff. The amount is display-only and does not constrain the merchant's eventual charge.
+    Keep the approval page open through device handoff, including Adyen encryption. The amount is declared by the caller and does not constrain the merchant's eventual charge. Adyen device approval and browser Authorised responses are not capture or fulfillment evidence.
     """
 
     browser_id: str

src/kernel/types/vaults/agentcard_prepared_processor.py

@@ -4,4 +4,4 @@
 
 __all__ = ["AgentcardPreparedProcessor"]
 
-AgentcardPreparedProcessor: TypeAlias = Literal["square", "braintree", "worldpay", "bambora", "mercado_pago"]
+AgentcardPreparedProcessor: TypeAlias = Literal["square", "braintree", "worldpay", "bambora", "mercado_pago", "adyen"]

src/kernel/types/vaults/card_vault_item_state.py

@@ -117,8 +117,10 @@ class AgentCardCardState(BaseModel):
     preparation: Optional[AgentcardCheckoutPreparation] = None
     """One-use processor-bound checkout preparation.
 
-    Keep the approval page open through token handoff. The amount is display-only
-    and does not constrain the merchant's eventual charge.
+    Keep the approval page open through device handoff, including Adyen encryption.
+    The amount is declared by the caller and does not constrain the merchant's
+    eventual charge. Adyen device approval and browser Authorised responses are not
+    capture or fulfillment evidence.
     """
 
     status_reason: Optional[str] = None

src/kernel/types/vaults/item_perform_operation_params.py

@@ -34,7 +34,7 @@ class PrepareCheckoutVaultItemOperationRequest(TypedDict, total=False):
 
     checkout: Required[VaultCheckoutContextParam]
     """
-    Required when preparing an unused AgentCard card for a supported tokenization
+    Required when preparing an unused AgentCard card for a supported checkout
     processor. Consent is bound to this browser and declared merchant origin, not a
     tab. Wait for the item's ready_to_submit status before native Pay and submit
     within its readiness deadline. Unused preparations expire automatically; every

src/kernel/types/vaults/prepare_checkout_vault_item_operation_request_param.py

@@ -10,14 +10,14 @@
 
 
 class PrepareCheckoutVaultItemOperationRequestParam(TypedDict, total=False):
-    """Prepare an unused AgentCard card for a supported tokenization checkout.
+    """Prepare an unused AgentCard card for a supported checkout.
 
     Deliver the returned approval URL and keep the approval page open. Poll the item until ready_to_submit, then submit native Pay before preparation.expires_at. Readiness lasts at most 30 seconds. Unused preparations expire automatically. Preparations are single-use even after failure or expiry; do not automatically retry and reconcile uncertain outcomes with the merchant.
     """
 
     checkout: Required[VaultCheckoutContextParam]
     """
-    Required when preparing an unused AgentCard card for a supported tokenization
+    Required when preparing an unused AgentCard card for a supported checkout
     processor. Consent is bound to this browser and declared merchant origin, not a
     tab. Wait for the item's ready_to_submit status before native Pay and submit
     within its readiness deadline. Unused preparations expire automatically; every

src/kernel/types/vaults/vault_checkout_context_param.py

@@ -11,16 +11,16 @@
 
 class VaultCheckoutContextParam(TypedDict, total=False):
     """
-    Required when preparing an unused AgentCard card for a supported tokenization processor. Consent is bound to this browser and declared merchant origin, not a tab. Wait for the item's ready_to_submit status before native Pay and submit within its readiness deadline. Unused preparations expire automatically; every preparation is single-use, including after failure or expiry.
+    Required when preparing an unused AgentCard card for a supported checkout processor. Consent is bound to this browser and declared merchant origin, not a tab. Wait for the item's ready_to_submit status before native Pay and submit within its readiness deadline. Unused preparations expire automatically; every preparation is single-use, including after failure or expiry.
     """
 
     browser_id: Required[str]
     """Active browser session with this vault bound to it."""
 
     environment: Required[Literal["production", "sandbox", "shared"]]
     """
-    Use production or sandbox for Square, Braintree and Worldpay; shared for Bambora
-    and Mercado Pago. Shared endpoints do not establish test mode. Merchant
+    Use production or sandbox for Square, Braintree, Worldpay and Adyen; shared for
+    Bambora and Mercado Pago. Shared endpoints do not establish test mode. Merchant
     credentials/configuration determine processor test mode, independently of the
     AgentCard credential mode.
     """
@@ -32,8 +32,10 @@ class VaultCheckoutContextParam(TypedDict, total=False):
     """
 
     psp: AgentcardPreparedProcessor
-    """Tokenization processor.
+    """Checkout processor.
 
-    Omit for Square compatibility. Non-Square processors require multi-processor
-    preparation enablement.
+    Omit for Square compatibility. Adyen supports fresh-card Sessions requests on
+    Adyen hosts only. Use public dummy card fields, not vault aliases. The unique
+    armed preparation is associated with the subsequent eligible request from this
+    browser and declared merchant origin; competing preparations are rejected.
     """