release: 0.116.0

[kernel-internal]

Automated Release PR

0.116.0 (2026-10-01)

Features

• chore(stlc): seal custom-code tracking files (c053ce4)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Expands credential TOTP configuration and secret input formats (auth-sensitive), and adds AgentCard checkout_origin which affects payment authorization/autopilot behavior.

Overview
Release 0.116.0 bumps package version metadata and changelog; the functional changes are OpenAPI-driven SDK updates.

Credentials / 2FA: Create and update now accept optional totp_algorithm, totp_digits, and totp_period, and totp_secret is documented to accept either a base32 secret or an otpauth:// URI (URI params override explicit fields). The Credential response type exposes the stored TOTP metadata (totp_algorithm, totp_digits, totp_period).

Vaults (AgentCard): AgentCardCardVaultItemSpec adds optional checkout_origin so checkouts can be matched to cardholder autopilot rules; docs now note approvals can be skipped when autopilot applies.

Credential API tests were extended to pass the new TOTP fields in “all params” cases.

^{Reviewed by Cursor Bugbot for commit 689d5a2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[masnwilliams]

lgtm

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-python-sdk/releases/tag/v0.116.0 🌻