diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index a88c74a9..3eebe245 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.128.0"
+  ".": "0.129.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bd14029e..02064e31 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.129.0](https://github.com/kernel/kernel-node-sdk/compare/v0.128.0...v0.129.0) (2026-10-21)
+
+
+### Features
+
+* chore(stlc): seal custom-code tracking files ([c6f4ec6](https://github.com/kernel/kernel-node-sdk/commit/c6f4ec6ef617a099b2d944757003c78bc321b511))
+
 ## [0.128.0](https://github.com/kernel/kernel-node-sdk/compare/v0.127.0...v0.128.0) (2026-10-19)
 
 
diff --git a/package.json b/package.json
index da2e388e..bbbe93b8 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.128.0",
+  "version": "0.129.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "dist/index.d.ts",
diff --git a/src/resources/browsers/browsers.ts b/src/resources/browsers/browsers.ts
index bdb538a4..b501f9b2 100644
--- a/src/resources/browsers/browsers.ts
+++ b/src/resources/browsers/browsers.ts
@@ -372,7 +372,7 @@ export interface BrowserLocation {
 
   /**
    * Where one effective browser location field came from. `override` is set
-   * explicitly on the session; `metro` is the default for the browser's region.
+   * explicitly on the session; `default` comes from the browser's region.
    */
   locale_source: BrowserLocationSource;
 
@@ -383,7 +383,7 @@ export interface BrowserLocation {
 
   /**
    * Where one effective browser location field came from. `override` is set
-   * explicitly on the session; `metro` is the default for the browser's region.
+   * explicitly on the session; `default` comes from the browser's region.
    */
   timezone_source: BrowserLocationSource;
 }
@@ -404,9 +404,9 @@ export interface BrowserLocationRequest {
 
 /**
  * Where one effective browser location field came from. `override` is set
- * explicitly on the session; `metro` is the default for the browser's region.
+ * explicitly on the session; `default` comes from the browser's region.
  */
-export type BrowserLocationSource = 'override' | 'metro';
+export type BrowserLocationSource = 'override' | 'default';
 
 /**
  * Omit a field to leave it unchanged, set a string override, or set null to clear
diff --git a/src/resources/shared.ts b/src/resources/shared.ts
index ea860cd2..ac7e1b93 100644
--- a/src/resources/shared.ts
+++ b/src/resources/shared.ts
@@ -89,8 +89,8 @@ export interface BrowserViewport {
   width: number;
 
   /**
-   * Display refresh rate in Hz. Any positive integer is accepted; if omitted,
-   * automatically determined from width and height.
+   * Display refresh rate in Hz. Any positive integer is accepted; if omitted, GPU
+   * browsers default to 60 and other browsers derive it from width and height.
    */
   refresh_rate?: number;
 }
diff --git a/src/resources/vaults/items.ts b/src/resources/vaults/items.ts
index 9d167df9..4f0d67af 100644
--- a/src/resources/vaults/items.ts
+++ b/src/resources/vaults/items.ts
@@ -2405,6 +2405,13 @@ export namespace VaultItemAction {
     name: 'card_enrollment';
 
     url: string;
+
+    /**
+     * Secret bearer capability for embedded card capture with @onkernel/vault-react.
+     * Present only for Kernel wallets; never for AgentCard. Treat it like the
+     * enrollment URL and do not log or persist it in browser storage.
+     */
+    capture_token?: string;
   }
 }
 
diff --git a/src/version.ts b/src/version.ts
index dd53b088..54ba18a0 100644
--- a/src/version.ts
+++ b/src/version.ts
@@ -1 +1 @@
-export const VERSION = '0.128.0'; // x-release-please-version
+export const VERSION = '0.129.0'; // x-release-please-version