feat(api): add Google WPP to SDKs

stainless-app[bot] · stainless-app[bot] · commit 75159c4e762e · 2025-12-09T08:37:16.000Z
docs(api): clarify error 422 for 3DS challenge response
feat(api): add IS_AFTER / IS_BEFORE operators to Auth Rule APIs
diff --git a/.stats.yml b/.stats.yml
@@ -1,4 +1,4 @@
 configured_endpoints: 175
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/lithic%2Flithic-3e50857d2b8f4c85922abf83df7b3c6894f5bd500d6226ff589476029bbb258b.yml
-openapi_spec_hash: 6bef8b283eb7292ad6f3f62d40fda699
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/lithic%2Flithic-abe6a4f82f696099fa8ecb1cc44f08979e17d56578ae7ea68b0e9182e21df508.yml
+openapi_spec_hash: d2ce51592a9a234c6f34a1168a31f91f
 config_hash: ba3fbfc99a1b8635d9e79e9e49d12952
diff --git a/src/lithic/resources/cards/cards.py b/src/lithic/resources/cards/cards.py
@@ -6,7 +6,7 @@
 import json
 import base64
 import hashlib
-from typing import Union
+from typing import Any, Union, cast
 from datetime import datetime, timezone, timedelta
 from typing_extensions import Literal
 
@@ -1193,7 +1193,10 @@ def web_provision(
         self,
         card_token: str,
         *,
-        digital_wallet: Literal["APPLE_PAY"] | Omit = omit,
+        client_device_id: str | Omit = omit,
+        client_wallet_account_id: str | Omit = omit,
+        digital_wallet: Literal["APPLE_PAY", "GOOGLE_PAY"] | Omit = omit,
+        server_session_id: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -1210,8 +1213,17 @@ def web_provision(
         for more information.
 
         Args:
+          client_device_id: Only applicable if `digital_wallet` is GOOGLE_PAY. Google Pay Web Push
+              Provisioning device identifier required for the tokenization flow
+
+          client_wallet_account_id: Only applicable if `digital_wallet` is GOOGLE_PAY. Google Pay Web Push
+              Provisioning wallet account identifier required for the tokenization flow
+
           digital_wallet: Name of digital wallet provider.
 
+          server_session_id: Only applicable if `digital_wallet` is GOOGLE_PAY. Google Pay Web Push
+              Provisioning session identifier required for the FPAN flow.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -1222,13 +1234,26 @@ def web_provision(
         """
         if not card_token:
             raise ValueError(f"Expected a non-empty value for `card_token` but received {card_token!r}")
-        return self._post(
-            f"/v1/cards/{card_token}/web_provision",
-            body=maybe_transform({"digital_wallet": digital_wallet}, card_web_provision_params.CardWebProvisionParams),
-            options=make_request_options(
-                extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+        return cast(
+            CardWebProvisionResponse,
+            self._post(
+                f"/v1/cards/{card_token}/web_provision",
+                body=maybe_transform(
+                    {
+                        "client_device_id": client_device_id,
+                        "client_wallet_account_id": client_wallet_account_id,
+                        "digital_wallet": digital_wallet,
+                        "server_session_id": server_session_id,
+                    },
+                    card_web_provision_params.CardWebProvisionParams,
+                ),
+                options=make_request_options(
+                    extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+                ),
+                cast_to=cast(
+                    Any, CardWebProvisionResponse
+                ),  # Union types cannot be passed in as arguments in the type system
             ),
-            cast_to=CardWebProvisionResponse,
         )
 
 
@@ -2354,7 +2379,10 @@ async def web_provision(
         self,
         card_token: str,
         *,
-        digital_wallet: Literal["APPLE_PAY"] | Omit = omit,
+        client_device_id: str | Omit = omit,
+        client_wallet_account_id: str | Omit = omit,
+        digital_wallet: Literal["APPLE_PAY", "GOOGLE_PAY"] | Omit = omit,
+        server_session_id: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -2371,8 +2399,17 @@ async def web_provision(
         for more information.
 
         Args:
+          client_device_id: Only applicable if `digital_wallet` is GOOGLE_PAY. Google Pay Web Push
+              Provisioning device identifier required for the tokenization flow
+
+          client_wallet_account_id: Only applicable if `digital_wallet` is GOOGLE_PAY. Google Pay Web Push
+              Provisioning wallet account identifier required for the tokenization flow
+
           digital_wallet: Name of digital wallet provider.
 
+          server_session_id: Only applicable if `digital_wallet` is GOOGLE_PAY. Google Pay Web Push
+              Provisioning session identifier required for the FPAN flow.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -2383,15 +2420,26 @@ async def web_provision(
         """
         if not card_token:
             raise ValueError(f"Expected a non-empty value for `card_token` but received {card_token!r}")
-        return await self._post(
-            f"/v1/cards/{card_token}/web_provision",
-            body=await async_maybe_transform(
-                {"digital_wallet": digital_wallet}, card_web_provision_params.CardWebProvisionParams
-            ),
-            options=make_request_options(
-                extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+        return cast(
+            CardWebProvisionResponse,
+            await self._post(
+                f"/v1/cards/{card_token}/web_provision",
+                body=await async_maybe_transform(
+                    {
+                        "client_device_id": client_device_id,
+                        "client_wallet_account_id": client_wallet_account_id,
+                        "digital_wallet": digital_wallet,
+                        "server_session_id": server_session_id,
+                    },
+                    card_web_provision_params.CardWebProvisionParams,
+                ),
+                options=make_request_options(
+                    extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
+                ),
+                cast_to=cast(
+                    Any, CardWebProvisionResponse
+                ),  # Union types cannot be passed in as arguments in the type system
             ),
-            cast_to=CardWebProvisionResponse,
         )
 
 
diff --git a/src/lithic/types/auth_rules/auth_rule_condition_param.py b/src/lithic/types/auth_rules/auth_rule_condition_param.py
@@ -2,8 +2,9 @@
 
 from __future__ import annotations
 
-from typing_extensions import Required, TypedDict
+from typing_extensions import Required, Annotated, TypedDict
 
+from ..._utils import PropertyInfo
 from .conditional_attribute import ConditionalAttribute
 from .conditional_operation import ConditionalOperation
 from .conditional_value_param import ConditionalValueParam
@@ -68,5 +69,5 @@ class AuthRuleConditionParam(TypedDict, total=False):
     operation: Required[ConditionalOperation]
     """The operation to apply to the attribute"""
 
-    value: Required[ConditionalValueParam]
+    value: Required[Annotated[ConditionalValueParam, PropertyInfo(format="iso8601")]]
     """A regex string, to be used with `MATCHES` or `DOES_NOT_MATCH`"""
diff --git a/src/lithic/types/auth_rules/conditional_3ds_action_parameters_param.py b/src/lithic/types/auth_rules/conditional_3ds_action_parameters_param.py
@@ -3,8 +3,9 @@
 from __future__ import annotations
 
 from typing import Iterable
-from typing_extensions import Literal, Required, TypedDict
+from typing_extensions import Literal, Required, Annotated, TypedDict
 
+from ..._utils import PropertyInfo
 from .conditional_operation import ConditionalOperation
 from .conditional_value_param import ConditionalValueParam
 
@@ -54,7 +55,7 @@ class Condition(TypedDict, total=False):
     operation: Required[ConditionalOperation]
     """The operation to apply to the attribute"""
 
-    value: Required[ConditionalValueParam]
+    value: Required[Annotated[ConditionalValueParam, PropertyInfo(format="iso8601")]]
     """A regex string, to be used with `MATCHES` or `DOES_NOT_MATCH`"""
 
 
diff --git a/src/lithic/types/auth_rules/conditional_ach_action_parameters_param.py b/src/lithic/types/auth_rules/conditional_ach_action_parameters_param.py
@@ -3,8 +3,9 @@
 from __future__ import annotations
 
 from typing import Union, Iterable
-from typing_extensions import Literal, Required, TypeAlias, TypedDict
+from typing_extensions import Literal, Required, Annotated, TypeAlias, TypedDict
 
+from ..._utils import PropertyInfo
 from .conditional_operation import ConditionalOperation
 from .conditional_value_param import ConditionalValueParam
 
@@ -126,7 +127,7 @@ class Condition(TypedDict, total=False):
     operation: Required[ConditionalOperation]
     """The operation to apply to the attribute"""
 
-    value: Required[ConditionalValueParam]
+    value: Required[Annotated[ConditionalValueParam, PropertyInfo(format="iso8601")]]
     """A regex string, to be used with `MATCHES` or `DOES_NOT_MATCH`"""
 
 
diff --git a/src/lithic/types/auth_rules/conditional_authorization_action_parameters_param.py b/src/lithic/types/auth_rules/conditional_authorization_action_parameters_param.py
@@ -3,8 +3,9 @@
 from __future__ import annotations
 
 from typing import Iterable
-from typing_extensions import Literal, Required, TypedDict
+from typing_extensions import Literal, Required, Annotated, TypedDict
 
+from ..._utils import PropertyInfo
 from .conditional_operation import ConditionalOperation
 from .conditional_value_param import ConditionalValueParam
 
@@ -94,7 +95,7 @@ class Condition(TypedDict, total=False):
     operation: Required[ConditionalOperation]
     """The operation to apply to the attribute"""
 
-    value: Required[ConditionalValueParam]
+    value: Required[Annotated[ConditionalValueParam, PropertyInfo(format="iso8601")]]
     """A regex string, to be used with `MATCHES` or `DOES_NOT_MATCH`"""
 
 
diff --git a/src/lithic/types/auth_rules/conditional_operation.py b/src/lithic/types/auth_rules/conditional_operation.py
@@ -15,6 +15,8 @@
     "IS_GREATER_THAN_OR_EQUAL_TO",
     "IS_LESS_THAN",
     "IS_LESS_THAN_OR_EQUAL_TO",
+    "IS_AFTER",
+    "IS_BEFORE",
     "CONTAINS_ANY",
     "CONTAINS_ALL",
     "CONTAINS_NONE",
diff --git a/src/lithic/types/auth_rules/conditional_tokenization_action_parameters_param.py b/src/lithic/types/auth_rules/conditional_tokenization_action_parameters_param.py
@@ -3,8 +3,9 @@
 from __future__ import annotations
 
 from typing import Union, Iterable
-from typing_extensions import Literal, Required, TypeAlias, TypedDict
+from typing_extensions import Literal, Required, Annotated, TypeAlias, TypedDict
 
+from ..._utils import PropertyInfo
 from .conditional_operation import ConditionalOperation
 from .conditional_value_param import ConditionalValueParam
 
@@ -118,7 +119,7 @@ class Condition(TypedDict, total=False):
     operation: Required[ConditionalOperation]
     """The operation to apply to the attribute"""
 
-    value: Required[ConditionalValueParam]
+    value: Required[Annotated[ConditionalValueParam, PropertyInfo(format="iso8601")]]
     """A regex string, to be used with `MATCHES` or `DOES_NOT_MATCH`"""
 
 
diff --git a/src/lithic/types/auth_rules/conditional_value.py b/src/lithic/types/auth_rules/conditional_value.py
@@ -1,8 +1,9 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 from typing import List, Union
+from datetime import datetime
 from typing_extensions import TypeAlias
 
 __all__ = ["ConditionalValue"]
 
-ConditionalValue: TypeAlias = Union[str, int, List[str]]
+ConditionalValue: TypeAlias = Union[str, int, List[str], datetime]
diff --git a/src/lithic/types/auth_rules/conditional_value_param.py b/src/lithic/types/auth_rules/conditional_value_param.py
@@ -3,10 +3,11 @@
 from __future__ import annotations
 
 from typing import Union
+from datetime import datetime
 from typing_extensions import TypeAlias
 
 from ..._types import SequenceNotStr
 
 __all__ = ["ConditionalValueParam"]
 
-ConditionalValueParam: TypeAlias = Union[str, int, SequenceNotStr[str]]
+ConditionalValueParam: TypeAlias = Union[str, int, SequenceNotStr[str], Union[str, datetime]]
diff --git a/src/lithic/types/card_web_provision_params.py b/src/lithic/types/card_web_provision_params.py
@@ -8,5 +8,25 @@
 
 
 class CardWebProvisionParams(TypedDict, total=False):
-    digital_wallet: Literal["APPLE_PAY"]
+    client_device_id: str
+    """Only applicable if `digital_wallet` is GOOGLE_PAY.
+
+    Google Pay Web Push Provisioning device identifier required for the tokenization
+    flow
+    """
+
+    client_wallet_account_id: str
+    """Only applicable if `digital_wallet` is GOOGLE_PAY.
+
+    Google Pay Web Push Provisioning wallet account identifier required for the
+    tokenization flow
+    """
+
+    digital_wallet: Literal["APPLE_PAY", "GOOGLE_PAY"]
     """Name of digital wallet provider."""
+
+    server_session_id: str
+    """Only applicable if `digital_wallet` is GOOGLE_PAY.
+
+    Google Pay Web Push Provisioning session identifier required for the FPAN flow.
+    """
diff --git a/src/lithic/types/card_web_provision_response.py b/src/lithic/types/card_web_provision_response.py
@@ -1,13 +1,20 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
-from typing import Optional
+from typing import Union, Optional
+from typing_extensions import TypeAlias
 
 from .._models import BaseModel
 
-__all__ = ["CardWebProvisionResponse", "Jws", "JwsHeader"]
+__all__ = [
+    "CardWebProvisionResponse",
+    "AppleWebPushProvisioningResponse",
+    "AppleWebPushProvisioningResponseJws",
+    "AppleWebPushProvisioningResponseJwsHeader",
+    "GoogleWebPushProvisioningResponse",
+]
 
 
-class JwsHeader(BaseModel):
+class AppleWebPushProvisioningResponseJwsHeader(BaseModel):
     """
     JWS unprotected headers containing header parameters that aren't integrity-protected by the JWS signature.
     """
@@ -16,10 +23,10 @@ class JwsHeader(BaseModel):
     """The ID for the JWS Public Key of the key pair used to generate the signature."""
 
 
-class Jws(BaseModel):
+class AppleWebPushProvisioningResponseJws(BaseModel):
     """JWS object required for handoff to Apple's script."""
 
-    header: Optional[JwsHeader] = None
+    header: Optional[AppleWebPushProvisioningResponseJwsHeader] = None
     """
     JWS unprotected headers containing header parameters that aren't
     integrity-protected by the JWS signature.
@@ -38,9 +45,26 @@ class Jws(BaseModel):
     """Base64url encoded signature of the JWS object."""
 
 
-class CardWebProvisionResponse(BaseModel):
-    jws: Optional[Jws] = None
+class AppleWebPushProvisioningResponse(BaseModel):
+    jws: Optional[AppleWebPushProvisioningResponseJws] = None
     """JWS object required for handoff to Apple's script."""
 
     state: Optional[str] = None
     """A unique identifier for the JWS object."""
+
+
+class GoogleWebPushProvisioningResponse(BaseModel):
+    google_opc: Optional[str] = None
+    """
+    A base64 encoded and encrypted payload representing card data for the Google Pay
+    UWPP FPAN flow.
+    """
+
+    tsp_opc: Optional[str] = None
+    """
+    A base64 encoded and encrypted payload representing card data for the Google Pay
+    UWPP tokenization flow.
+    """
+
+
+CardWebProvisionResponse: TypeAlias = Union[AppleWebPushProvisioningResponse, GoogleWebPushProvisioningResponse]
diff --git a/tests/api_resources/test_cards.py b/tests/api_resources/test_cards.py
@@ -660,7 +660,10 @@ def test_method_web_provision(self, client: Lithic) -> None:
     def test_method_web_provision_with_all_params(self, client: Lithic) -> None:
         card = client.cards.web_provision(
             card_token="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
+            client_device_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
+            client_wallet_account_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
             digital_wallet="APPLE_PAY",
+            server_session_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
         )
         assert_matches_type(CardWebProvisionResponse, card, path=["response"])
 
@@ -1336,7 +1339,10 @@ async def test_method_web_provision(self, async_client: AsyncLithic) -> None:
     async def test_method_web_provision_with_all_params(self, async_client: AsyncLithic) -> None:
         card = await async_client.cards.web_provision(
             card_token="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
+            client_device_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
+            client_wallet_account_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
             digital_wallet="APPLE_PAY",
+            server_session_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
         )
         assert_matches_type(CardWebProvisionResponse, card, path=["response"])
 
