CLI: Update Go SDK to 738369d524a3806832577f6793dde7eaf15c5725 by kernel-internal[bot] · Pull Request #304 · kernel/cli

kernel-internal · 2026-10-27T12:54:36Z

Summary

Update the Go SDK to 738369d524a3806832577f6793dde7eaf15c5725.

Coverage

CLI coverage update report

SDK update

Updated github.com/kernel/kernel-go-sdk from v0.137.0 to v0.138.0 (SDK commit 738369d524a3806832577f6793dde7eaf15c5725).
Ran go get github.com/kernel/kernel-go-sdk@738369d524a3806832577f6793dde7eaf15c5725 and go mod tidy.

Coverage audit

Enumerated all 176 methods in the SDK api.md and reviewed their parameter structs.
Six SDK methods are intentionally excluded because their OpenAPI operations have x-cli-skip: true:
- client.ConfigRegistry.List
- client.ConfigRegistry.Lookup
- client.ConfigRegistry.Resolve
- client.ConfigRegistry.Analyses.Get
- client.ConfigRegistry.Analyses.List
- client.ConfigRegistry.Analyses.Cancel
All 170 non-skipped SDK methods have corresponding CLI coverage.
Compared SDK parameter fields with command flags and positional arguments. No missing command or flag coverage was found. Existing intentional CLI mappings include positional resource identifiers, page-based pagination where supported, and JSON/spec inputs for complex union payloads.

Gap analysis

Missing commands

None.

Missing flags

None.

Changes

Commands and flags

No new SDK methods or request parameter fields were introduced, so no new commands or flags were required.

Response output

SDK v0.138.0 adds the browser-session response field leased_at. Following OpenAPI field components.schemas.Browser.leased_at, the CLI now shows Leased At for leased pooled sessions in human-readable output from:

kernel browsers create when acquiring through --pool-id or --pool-name
kernel browsers get
kernel browsers update
kernel browsers list (column shown only when at least one result is leased)
kernel browser-pools acquire
kernel invoke browsers (column shown only when at least one result is leased)

JSON output already includes leased_at through the updated SDK response models. No command Short/Long text or flag usage text needed adjustment because this release changes only a response field, not endpoint or request-field behavior.

Intentional exclusions

Config Registry operations remain excluded as directed by x-cli-skip: true.
Other OpenAPI operations marked x-cli-skip: true are not exposed as methods in this SDK release and therefore require no CLI command.

Validation

go test ./cmd/... ./pkg/... — passed.
Focused leased-session output tests — passed.
go build ./... — passed.
Built the CLI at /home/runner/work/_temp/cli-scratch/kernel and smoke-checked help for the affected commands.
Real-API smoke tests were skipped under the task's no-new-command/no-new-flag rule. The response-only formatting change is covered by unit tests using SDK leased_at values.

Validation

Go build
Go vet
Go tests

Note

High Risk
Changes span payment vault operations, API key policy issuance, and browser save-profile (session restart), all security- and money-sensitive paths with new validation and concurrency semantics.

Overview
Updates the CLI for kernel-go-sdk v0.138.0, wiring new request fields and response metadata across several command groups—not only pooled-session leased_at display.

API keys gain --expires-at (RFC3339, mutually exclusive with --days-to-expire) and --policy JSON for least-privilege statements; list/get/sort now surface Last Used At with docs on ~20-minute accuracy.

Managed auth connections add --hitl on create/update to pause unsolved login CAPTCHAs for live-view completion, plus Live View URL in follow output and expanded submit help for human_intervention choices.

Browsers add save-profile, closed-beta --fingerprint-os=macos, conditional allowlist updates via --expected-allowlist-revision + --mutation-id, and Leased At in create/get/list/update and pool-acquire paths when applicable. Browser pool update accepts --expected-network for optimistic concurrency on network changes.

Vaults expand payment coverage: Shop Pay wallets/cards, payment-requests create/update for Link/KERNEL one-purchase items, add_payment_method / remove_payment_method, richer confirm_transaction parsing (order/failure fields, Shop Pay transaction-type limits), and broader authorize/fill/recovery behavior for Link payment requests and Shop Pay. Vault writes route through shared vaultWriteRequestOptions() (no retries) instead of ad hoc WithMaxRetries(0).

^{Reviewed by Cursor Bugbot for commit 6fdc7e5. Bugbot is set up for automated code reviews on this repo. Configure here.}

socket-security · 2026-10-27T12:55:25Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/github.com/kernel/kernel-go-sdk@v0.131.0 ⏵ v0.138.0	⁺¹

View full report

…erage

cursor

Stale Bugbot comment from a previous run.

save-profile now prints whether it created or overwrote the profile, and no longer lets the SDK retry: a retry after a failed or slow save starts a second save and restarts the browser again. The help text names browser_not_active, mentions Playwright connections, and says to save at a stable point.

hiroTamada

reviewed — the vault no-replay middleware is a real fix (verified both subtests fail with writes=2 without it), and the new surfaces look well-guarded. a couple of questions, neither blocking:

Questions

cmd/browsers.go:1109 — save-profile restarts the browser but uses default SDK retries (2x on 409/5xx/conn errors). help says "retry only browser_busy", but the SDK will also auto-retry browser_lease_changed/inactive 409s. consider option.WithMaxRetries(0) or confirm the API sends x-should-retry: false
cmd/vaults_commands.go:498-537 — does the API accept PATCH on a KERNEL payment_request? cards update excludes kernel ("kernel cards cannot be updated", :466), but payment-requests update allows --provider kernel and its example (shared with create, :515) shows a KERNEL spec. if unsupported, mirror cards update; if supported, the "same lifecycle as the card" help needs a caveat

…erage

cursor

Stale Bugbot comment from a previous run.

…erage

bmsaadat

Holding this until the Shop Pay changes pass a smoke test through the real API (Raf's ask for the SDK bot PRs). The approval above predates the Shop Pay commits. I'll approve as soon as it passes.

bmsaadat

Smoke tested the Shop Pay changes against the prod API with a local build of this branch: wallet connect, card create, spec refusals, authorize at checkout, Shop approval, fill, a real $1 purchase on Kernel's Stripe link, and confirm_transaction (card consumed). All passed.

cursor

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 6fdc7e5. Configure here.}

cursor · 2026-11-02T20:46:41Z

 			}
 		}
-		if op.Type == "authorize" && item.Type == "card" && item.Spec.Provider == "link" && item.State.Status == "requested" {
+		if op.Type == "authorize" && (item.Type == "card" || item.Type == "payment_request") && item.Spec.Provider == "link" && item.State.Status == "requested" {


Shop Pay authorize hint omits flags

Low Severity

printVaultOperationHints appends --browser-id and --page-url only for requested Link card or payment_request authorize. Requested Shop Pay cards now accept the same checkout-bound pair, so the printed invoke line sends users down the merchant_url path instead of locking fill to the open checkout.

^{Reviewed by Cursor Bugbot for commit 6fdc7e5. Configure here.}

kernel-internal Bot added 2 commits October 28, 2026 17:05

Update Go SDK to 47914f683b2ee9414fba387299f0894e67b2ae2c and CLI cov…

8d09bc5

…erage

Update Go SDK to 754943ffe42e7755c64fdf9b383ad4bad39a94f2 and CLI cov…

8296665

…erage

kernel-internal Bot force-pushed the cli-coverage-update branch from 1f9ef54 to 8296665 Compare October 28, 2026 17:06

kernel-internal Bot changed the title ~~CLI: Update Go SDK to 47914f683b2ee9414fba387299f0894e67b2ae2c~~ CLI: Update Go SDK to 754943ffe42e7755c64fdf9b383ad4bad39a94f2 Oct 28, 2026

cursor Bot reviewed Oct 28, 2026

View reviewed changes

Comment thread cmd/browsers.go Resolved

Comment thread cmd/vaults_output.go Resolved

hiroTamada self-requested a review October 28, 2026 17:45

hiroTamada approved these changes Oct 28, 2026

View reviewed changes

Update Go SDK to b65fda9ebe34d4ae3b609d7434ab9c64d5156144 and CLI cov…

e4f0bfe

…erage

kernel-internal Bot changed the title ~~CLI: Update Go SDK to 754943ffe42e7755c64fdf9b383ad4bad39a94f2~~ CLI: Update Go SDK to b65fda9ebe34d4ae3b609d7434ab9c64d5156144 Oct 28, 2026

Update Go SDK to 7ae0d1549fa45a8a87c1445b57d7a5884c0b5045 and CLI cov…

02bfb06

…erage

kernel-internal Bot changed the title ~~CLI: Update Go SDK to b65fda9ebe34d4ae3b609d7434ab9c64d5156144~~ CLI: Update Go SDK to 7ae0d1549fa45a8a87c1445b57d7a5884c0b5045 Oct 28, 2026

Update Go SDK to 66f4c3396eb162eacbbc7b614e89cfc7e6a01585 and CLI cov…

d5e9abe

…erage

kernel-internal Bot changed the title ~~CLI: Update Go SDK to 7ae0d1549fa45a8a87c1445b57d7a5884c0b5045~~ CLI: Update Go SDK to 66f4c3396eb162eacbbc7b614e89cfc7e6a01585 Oct 29, 2026

cursor Bot reviewed Oct 29, 2026

View reviewed changes

Comment thread cmd/vaults_help.go Resolved

Comment thread cmd/vaults_help.go Resolved

Update Go SDK to 26119f060f1e2c69f363e627151994d3c63093e4 and CLI cov…

adeafcf

…erage

kernel-internal Bot changed the title ~~CLI: Update Go SDK to 66f4c3396eb162eacbbc7b614e89cfc7e6a01585~~ CLI: Update Go SDK to 26119f060f1e2c69f363e627151994d3c63093e4 Oct 30, 2026

Update Go SDK to 738369d524a3806832577f6793dde7eaf15c5725 and CLI cov…

d294c78

…erage

kernel-internal Bot changed the title ~~CLI: Update Go SDK to 26119f060f1e2c69f363e627151994d3c63093e4~~ CLI: Update Go SDK to 738369d524a3806832577f6793dde7eaf15c5725 Oct 30, 2026

rgarcia mentioned this pull request Oct 30, 2026

Run the CLI updater on release and report on the whole evergreen PR kernel/kernel-go-sdk#219

Closed

bmsaadat requested changes Oct 30, 2026

View reviewed changes

bmsaadat approved these changes Oct 30, 2026

View reviewed changes

bmsaadat mentioned this pull request Oct 30, 2026

Document the Shop Pay wallet kernel/docs#737

Merged

Merge branch 'main' into cli-coverage-update

6fdc7e5

cursor Bot reviewed Nov 2, 2026

View reviewed changes

bmsaadat merged commit 3b0759f into main Nov 2, 2026
8 checks passed

bmsaadat deleted the cli-coverage-update branch November 2, 2026 20:47

Navigation Menu

Repository navigation

CLI: Update Go SDK to 738369d524a3806832577f6793dde7eaf15c5725 - #304

CLI: Update Go SDK to 738369d524a3806832577f6793dde7eaf15c5725#304
bmsaadat merged 9 commits into
mainfrom
cli-coverage-update

kernel-internal Bot commented Oct 27, 2026 •

edited by cursor Bot

Loading

Uh oh!

socket-security Bot commented Oct 27, 2026 •

edited

Loading

Uh oh!

cursor Bot left a comment •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

hiroTamada left a comment

Uh oh!

cursor Bot left a comment •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

bmsaadat left a comment

Uh oh!

bmsaadat left a comment

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Nov 2, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

kernel-internal Bot commented Oct 27, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Coverage

CLI coverage update report

SDK update

Coverage audit

Gap analysis

Missing commands

Missing flags

Changes

Commands and flags

Response output

Intentional exclusions

Validation

Validation

Uh oh!

socket-security Bot commented Oct 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

hiroTamada left a comment

Choose a reason for hiding this comment

Questions

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

bmsaadat left a comment

Choose a reason for hiding this comment

Uh oh!

bmsaadat left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Nov 2, 2026

Choose a reason for hiding this comment

Shop Pay authorize hint omits flags

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

kernel-internal Bot commented Oct 27, 2026 •

edited by cursor Bot

Loading

socket-security Bot commented Oct 27, 2026 •

edited

Loading

cursor Bot left a comment •

edited

Loading

cursor Bot left a comment •

edited

Loading