CLI: Update Go SDK to 3d0249f678cda7ea4f415a0fb9f4fcd6055e7183 - #215
Open
kernel-internal[bot] wants to merge 17 commits into
Open
CLI: Update Go SDK to 3d0249f678cda7ea4f415a0fb9f4fcd6055e7183#215kernel-internal[bot] wants to merge 17 commits into
kernel-internal[bot] wants to merge 17 commits into
Conversation
Updates github.com/kernel/kernel-go-sdk to v0.86.0 (b5ea2f3dee2cbb2af9001e4558a28a807d31aeb3). A full enumeration of all 127 api.md methods against the CLI command tree found no missing commands. Enumerating every *Params field against every command's flags surfaced a set of filter/sort/pagination params the CLI never exposed; this closes those. New flags: - kernel api-keys list: --name, --query, --status, --include-deleted (deprecated alias for --status all), --sort-by, --sort-direction. Adds a Deleted At column when the filter can return deleted keys, matching `browsers list`. - kernel projects list: --page, --per-page, --name, --query. This command previously had no flags at all and always returned the API's default page. Uses the page-based pagination UX with a footer, as in `app list`. - kernel browser-pools list: --name, --query - kernel extensions list: --name, --query - kernel proxies list: --name, --query - kernel profiles list: --name - kernel auth connections list: --query - kernel credentials list: --query - kernel credential-providers list: --query - kernel deploy history: --query - kernel invoke history: --query - kernel browser-pools acquire: --start-url (BrowserPoolAcquireParams.StartURL) - kernel browsers telemetry events: --order asc|desc (BrowserTelemetryEventsParams.Order), rejecting `--order desc --since` locally since the endpoint 400s on that combination. SDK 0.86.0 changes: - ManagedAuthField.ReplaceExisting is now surfaced by `auth connections get` (as a `replace-existing` field marker) and `auth connections follow`, so it is visible before running `submit`. - ProjectLimits.MaxPooledSessions doc-only deprecation; no CLI change needed (the flag already exists and the API rejects it). Also forwards `browsers create --pool-id/--pool-name --start-url` through to the acquire call instead of warning and dropping it. start_url is a per-lease override on BrowserPoolAcquireParams, so it now sits alongside name/tag/telemetry/timeout in poolLeaseAllowedFlags. Tested against the live API: - api-keys list --status all --sort-by name --sort-direction asc (verified sort order and Deleted At population), --query, --include-deleted, and --sort-by/--sort-direction/--status validation errors - projects list --per-page 3 / --page 2 (footer + Next hint), --name, --query - --name and --query on proxies/extensions/browser-pools/profiles list - --query on credentials/credential-providers/auth connections list, deploy history, invoke history - browsers telemetry events --order desc (returned seq 22->18 vs asc 1->5) and the --order desc --since / --order bogus validation errors - browser-pools acquire --start-url and browsers create --pool-id --start-url (API echoed start_url on both) - go build, go vet, and go test ./... all pass Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Bump github.com/kernel/kernel-go-sdk to v0.86.1-0.20260804210355-b94cd585bac0 (commit b94cd58). The new SDK commit is byte-identical to v0.86.0 in module content -- the two upstream commits only touch CI promotion workflows, which are not part of the Go module. A full enumeration of all 127 SDK methods in api.md against the CLI command tree, and of all 95 *Params structs (345 fields, including nested unions) against every CLI flag, found no coverage gaps. Also fix the pagination footer hint in `kernel profiles list`, which suggested `kernel profile list` (singular, not a real command). Tested: go build ./..., go vet ./..., go test ./... (all pass); smoke-tested `kernel browsers list`, `kernel profiles list`, and `kernel profiles list --per-page 3` against the live API. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Target SDK commit 9e39767e809b04f0786fb17377eb800fa624bddc contains no API
changes: it adds only .github/workflows/stlc-{promote,sync}.yml on top of
v0.86.0. `git diff v0.86.0..9e39767` touches zero .go files and no api.md.
The SHA is also not resolvable as a module version on its own -- it exists
only on the staging repo's main, so `go get 9e39767` fails with "unknown
revision". go.mod needs no change here: the preceding commit already moved it
to v0.86.1-0.20260804210355-b94cd585bac0, and b94cd58 is a direct child of
9e39767, so that pseudo-version already contains this target commit.
Coverage was re-enumerated from scratch anyway rather than trusting the
empty diff. All 127 methods in api.md map to an existing command; the seven
x-cli-skip endpoints in openapi.yaml (auth connections exchange, audit-log
export destinations) are absent from the SDK, so nothing to skip. Every
*Params field was diffed against every command's flags, including expanding
the embedded request structs (ManagedAuth*, CreateCredential*, CreateProject,
Update*Limits, CreateCredentialProvider*) and the ProxyNewParamsConfig union
variants, which the field-name comparison alone hides.
That surfaced one real gap, pre-existing rather than new in this bump:
- kernel audit-logs download: --format jsonl.gz|jsonl
(AuditLogExportChunkParams.Format). The format was hardcoded to jsonl.gz,
so uncompressed export was unreachable. The default output filename now
derives its extension from the format instead of always ending .jsonl.gz.
Two other unmatched fields were checked and are correctly not flags:
- BrowserCurlParams.ResponseEncoding: `browsers curl` does not call the SDK
Curl method at all. It streams raw bytes over the browser's HTTPClient,
which is already binary-safe, making the JSON-transport encoding moot.
- AuditLogListParams.PageToken / AuditLogExportChunkParams.Cursor: internal
pagination, driven by response headers.
Tested against the live API:
- audit-logs download --format jsonl (25-day window): 74 chunks, 3,669,435
rows, wrote audit-logs-20260710-20260804.jsonl; `file` reports NDJSON and
the lines parse as JSON.
- audit-logs download (default): wrote audit-logs-20260803-20260804.jsonl.gz;
gunzip yields 109,526 lines, matching the reported row count.
- audit-logs download --format jsonl.gz --to explicit.jsonl.gz: byte-identical
size to the default run.
- audit-logs download --format csv: rejected locally with
"invalid --format value: csv".
- go build ./... and go test ./... pass, before and after rebasing onto the
b94cd58 go.mod bump.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk to v0.86.1-0.20260805130902-f0262729f366 (commit f026272). The SDK diff between b94cd58 and f026272 is empty for api.md and all Go source files -- the only change in that range is a CI workflow file (.github/workflows/stlc-promote.yml). No new methods, no new param fields, so no CLI commands or flags were added. Coverage verification: - Enumerated all 127 SDK methods from api.md; every one has a corresponding CLI command. - Enumerated all 95 SDK *Params structs and their fields, diffed against all 205 CLI flags. Every remaining discrepancy resolved to a naming difference (--tag vs Tags, --kiosk vs KioskMode, --bypass-host vs BypassHosts, --env vs EnvVars), a positional argument, an embedded request-body struct, or a path parameter. - BrowserCurlParams.ResponseEncoding remains intentionally unexposed: `kernel browsers curl` bypasses the SDK Curl method and streams raw bytes through the browser's HTTP client, so response encoding does not apply. Tested: go build ./..., go vet ./..., go test ./... (all pass); smoke-tested `browsers list --limit 3` and `app list --per-page 2` against the live API -- both return expected output and the app list pagination footer renders correctly.
kernel-internal
Bot
changed the title
Bumps kernel-go-sdk to v0.86.1-0.20260805143436-f6072746e884 (kernel/kernel-go-sdk@f607274). The SDK diff between f026272 and f607274 contains no changes to api.md or any Go source file - f607274 is the stainless release merge commit and f026272 was a CI-only change. No new methods, params, or fields. Coverage analysis: performed a full enumeration anyway. All 126 SDK methods in api.md map to existing CLI commands, and every field of every *Params struct maps to an existing flag. The 7 endpoints marked x-cli-skip in openapi.yaml (auth connection exchange, audit-log export destinations) are absent from the SDK surface, as expected. One intentional non-gap: BrowserCurlParams.ResponseEncoding has no flag because `kernel browsers curl` bypasses the Browsers.Curl SDK method and streams raw bytes through the browser's HTTP client, so the base64 JSON transport option does not apply. Tested: go build ./..., go vet ./..., go test ./... (all pass), plus live API smoke tests of profiles list, browsers list, proxies list, api-keys list against the rebuilt binary. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps kernel-go-sdk to a42a4e3500ad02f7089f2903435d45ae907a1ff8.
The SDK adds telemetry.export.otlp (destination by id or name, plus an
enabled toggle) to every schema that embeds the shared telemetry request
config. Exposes it as --telemetry-export-otlp on the endpoints that
actually honor it:
- browsers create
- auth connections create / update / login
Not added to browser-pools create/update/acquire or browsers update: the
SDK carries the field there because the schema is shared, but the API
rejects export on pools and ignores it on a browser update, so a flag
there would be inert.
A destination requires capture to be enabled in the same request — the API
validates the payload on its own rather than consulting the stored config.
Create implies --telemetry=all (nothing to clobber); update and login
instead error with an actionable message, since enabling capture there
would replace the connection's current category selection.
Also surfaces export state in output: the browser create/update summary
(where the resolved destination is an ID string) and the auth connection
details table (where the stored request is echoed back as an {id, name}
object).
Full enumeration of all 127 api.md methods against the CLI command tree
found no missing commands.
Tested against the live API: browsers create --telemetry-export-otlp with
off / destination-by-name / destination-by-CUID; auth connections
create + get + update round-trip; both validation guards. Destination
lookup errors confirm the field reaches the server on each path (the test
org has no OTLP destinations configured, and no API exists to create one,
so a successful export bind could not be exercised end to end).
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
Bumps github.com/kernel/kernel-go-sdk to
v0.86.1-0.20260806131931-10e64888bbba (commit 10e6488).
The upstream SDK commit only touched scripts/utils/upload-artifact.sh
(restoring a Stainless artifact download slug); no api.md entries, service
methods, or param structs changed.
Coverage analysis: full enumeration of all 130 SDK methods in api.md against
the 138-command CLI tree, plus a field-by-field comparison of every *Params
struct (including nested request bodies such as ManagedAuthCreateRequestParam,
CreateCredentialRequestParam, and UpdateProjectLimitsRequestParam) against the
flags of each command. No coverage gaps found. Endpoints marked x-cli-skip in
openapi.yaml (/auth/connections/{id}/exchange, audit-log export destinations)
are absent from the SDK and correctly absent from the CLI.
Tested: go vet ./... and go test ./... pass; smoke tested `kernel app list`
and `kernel browsers list` against the production API.
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk to
v0.86.1-0.20260806134418-f64bbb81fe7c.
The upstream commit is a merge whose tree is identical to the previously
pinned 10e64888bbba, so there are no API surface changes: the generated
api.md and *.go sources are byte-identical between the two versions.
Coverage analysis performed anyway:
- Enumerated all 127 SDK methods from api.md (including nested resources:
Browsers.{Fs,Fs.Watch,Process,Computer,Telemetry,Replays,Logs,Playwright},
Auth.Connections, Organization.Limits).
- Enumerated all 138 CLI leaf commands and their flags.
- Expanded every *Params struct plus the nested request params
(ManagedAuthCreate/Update, CreateCredential, CreateCredentialProvider,
SubmitFields, UpdateOrgLimits, UpdateProjectLimits, CreateProject).
- No missing commands and no missing flags.
Verified the x-cli-skip endpoints (/auth/connections/{id}/exchange and the
/audit-logs/export/destinations family) are absent from the SDK surface, so
they need no CLI coverage.
Tested: go build ./..., go vet ./..., go test ./... all pass;
`kernel status` and `kernel profiles list` smoke-tested against the live API.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk to v0.86.1-0.20260806134905-05231c859625. The SDK diff between the CLI's previous pin (v0.86.1-0.20260806134418-f64bbb81fe7c) and this commit is empty: the only SDK change is CI-only (.github/workflows/release-please.yml). No API surface changed. Coverage analysis: full enumeration of all 127 methods in api.md against the CLI command tree found no gaps. All 127 map to existing commands, and all 94 param structs' fields map to existing flags, positional args, or the --page/--per-page pagination pattern. Tested: go build ./..., go test ./... (all pass), and smoke tested `browsers list`, `profiles list`, `app list` against the live API. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk to v0.86.1-0.20260806144011-2bc9fe850fb4. The SDK commit range 05231c85..2bc9fe85 contains no source changes (release/CI plumbing only), so there are no new methods or params. Coverage analysis: full enumeration of all 127 SDK methods in api.md against the CLI command tree found no gaps. Every method maps to a command, and every param struct field maps to a flag or positional argument (e.g. HoldKeys -> --hold-key, LastEventID -> --seq, AuditLogListParams.SearchUserID -> --user-id, BrowserCurlParams.TimeoutMs -> --max-time). The 7 x-cli-skip endpoints (auth connection exchange, audit-log export destinations) are absent from the SDK as expected. Tested: go build ./..., go test ./... (all pass), kernel app list against the production API. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk from
v0.86.1-0.20260806144011-2bc9fe850fb4 to v0.86.1 (commit 4511ca3).
The SDK change between these two commits is release-only (CHANGELOG.md,
README.md, internal/version.go, .release-please-manifest.json). No API
surface changed, so there are no new commands or flags to add.
Coverage analysis: performed a full enumeration of all 127 SDK methods in
api.md and all 95 *Params structs against the existing CLI commands and
flags. No gaps found.
- All 127 SDK methods have CLI commands. The 7 streaming methods
(Auth.Connections.Follow, Browsers.Curl, Browsers.Logs.Stream,
Browsers.Process.StdoutStream, Browsers.Telemetry.Stream,
Deployments.Follow, Invocations.Follow) are covered via the SDK's
*Streaming variants or a raw HTTP client.
- All param fields are exposed as flags, positional args, or are
intentionally handled (pagination via --page/--per-page, audit-logs via
the SDK PageToken auto-pager, and curl via browsers.HTTPClient() for
streaming/binary-safe semantics where --max-time covers TimeoutMs).
- x-cli-skip endpoints (/auth/connections/{id}/exchange and the
/audit-logs/export/destinations family) are absent from the SDK.
Tested: go build ./..., go vet ./..., go test ./... (all pass); against
the live API: browsers list, profiles list, app list (verified pagination
footer and --page/--per-page on profiles and app), browsers create -t 30
-o json, browsers delete (cleaned up).
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Updates kernel-go-sdk to b6de398f2ddc7a0620381ffa3c04a4d6d03f208f. Full enumeration of all 127 SDK methods in api.md and all 94 param structs against existing CLI commands and flags found no missing commands or flags. The only SDK change in this bump is a new response-only field, ProfileSaveChanges, on the browser session responses (BrowserNewResponse, BrowserGetResponse, BrowserUpdateResponse, BrowserListResponse, BrowserPoolAcquireResponse, InvocationListBrowsersResponseBrowser). The CLI already accepts this as input via --save-changes on `browsers create` and `browsers update`; this exposes the effective server-side value in the output: - buildBrowserTableData adds a "Profile Save Changes" row, shown only when a profile is attached (the API omits the field otherwise). This covers `browsers create`, `browsers get`, and `browser-pools acquire`. - `browsers update` echoes "Profile save changes: <bool>" when the command changed the profile, matching how it already echoes name and tags changes. Tested against the live API: - browsers create --profile-name X --save-changes -> row reads true - browsers create --profile-name X (no flag) -> row reads false - browsers create (no profile) -> row omitted - browsers get <id> -> row present - browsers get <id> -o json -> profile_save_changes present - browsers update <id> --profile-name X --save-changes -> echoes true - browser-pools acquire <pool> -> shared render path All test browsers, pools, and profiles were deleted afterward. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk to v0.86.2-0.20260807195052-6d7dc2e70cfe. Coverage analysis: a full enumeration of the 133 SDK methods in api.md against the CLI command tree found no gaps. The only new resource in this SDK bump is AuditLogs.ExportDestinations (New/Get/Update/List/ Delete/Test), and all six of its endpoints are marked x-cli-skip: true in openapi.yaml, so they are intentionally excluded from the CLI. No new commands or flags were added; smoke tested `kernel browsers list` against the live API and ran the full test suite. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 3f4bd30. Configure here.
Updates github.com/kernel/kernel-go-sdk to d44daa947c65f1c5df1b68103e088bacb99fc455. The SDK added one new endpoint since the CLI's previous version (6d7dc2e): GET /auth/context, exposed as client.Auth.Context.Get. It is not marked x-cli-skip in the API spec, so it needs CLI coverage. New command: - `kernel auth context` - Show the identity and authorization context for the current credentials (principal, organization, credential scope, effective request scope). Supports `--output json`. A full enumeration of api.md methods against the CLI command tree found no other coverage gaps; no param structs changed in this SDK bump. Tested against the real API: - `kernel auth context` renders the table, with a null project_id in either scope shown as "organization-wide" - `kernel auth context --output json` prints the raw response - `kernel auth context --project <id>` reflects the project in the effective scope while the credential scope stays organization-wide - `go build ./...` and `go test ./...` pass Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk to v0.86.2-0.20260808025144-654fc1c964ba (654fc1c). 654fc1c is a merge commit of d44daa9, which the CLI was already pinned to, so there are no SDK source changes in this bump. Coverage analysis: full enumeration of all 134 methods in the SDK's api.md against every CLI command and flag found no gaps. The six client.AuditLogs.ExportDestinations.* methods remain intentionally uncovered - all of their endpoints are marked x-cli-skip: true in openapi.yaml. Tested: go build ./..., go vet ./..., go test ./... all pass; kernel auth context and kernel app list verified against the live API. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
Bumps github.com/kernel/kernel-go-sdk from v0.86.2-0.20260808025144-654fc1c964ba to v0.87.0 (3d0249f678cda7ea4f415a0fb9f4fcd6055e7183). The SDK diff between these revisions contains no API changes -- only the release-please version bump (CHANGELOG, README, internal/version.go). Coverage analysis: performed a full enumeration of all 134 SDK methods in api.md against the full CLI command tree (139 leaf commands), plus an automated sweep of every *Params struct field against every CLI flag. All non-x-cli-skip SDK methods have CLI commands and all param fields have flags. No gaps found. Tested: go build ./..., go vet ./..., go test ./... all pass; smoke tested `kernel browsers list` and `kernel profiles list` against the real API. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
kernel-internal
Bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR updates the Go SDK dependency to the latest version.
SDK Update
The SDK diff between the previously pinned revision (
v0.86.2-0.20260808025144-654fc1c964ba) and this one contains no API changes — only the release-please version bump (CHANGELOG.md, README.md, internal/version.go, .release-please-manifest.json).Coverage Analysis
A full enumeration of SDK methods and CLI commands was performed. No coverage gaps were found.
api.md(with their HTTP verb + path) and mapped each to the CLI command tree (139 leaf commands walked from the built binary).x-cli-skip: trueinopenapi.yaml:POST /auth/connections/{id}/exchangeand the six/audit-logs/export/destinationsoperations.*Paramsstruct field in the SDK against every flag in the CLI tree. All apparent mismatches were verified as naming differences for flags that already exist, e.g.KioskMode→--kiosk,TimeoutSeconds→-t/--timeout,TimeoutMs→--max-time,MaxDurationInSeconds→--max-duration,BypassHosts→--bypass-host,SearchUserID→--user-id,Category→--categories,Profile→--profile-id/--profile-name,Tags→--tag,Extensions→--extension. The remainder are path parameters or positional args.Testing
go build ./...,go vet ./...,go test ./...all pass.kernel browsers list --limit 3andkernel profiles listboth return correctly formatted output.No new commands or flags were added, so there was nothing further to smoke test.
Triggered by: kernel/kernel-go-sdk@3d0249f
Reviewer: @rgarcia
Note
Medium Risk
Broad CLI changes across auth context, telemetry OTLP export wiring, and API key listing/filtering; behavior is mostly flag-to-SDK mapping but mistakes could misconfigure export or scope expectations.
Overview
Bumps kernel-go-sdk to v0.87.0 and wires a batch of new API surface into the CLI, with README updates to match.
New command:
kernel auth contextshows principal, org, auth method, and credential/effective scope (JSON via-o json).Browser telemetry:
--telemetry-export-otlp <id-or-name>onbrowsers create(and pool acquire path) binds OTLP export at session creation; implies--telemetry=allwhen capture isn’t set. Same flag onauth connections create/update/loginwith stricter rules on update/login (destination requires--telemetryin the same command). Human output now shows export destinations and OTLP summaries.List/search/pagination: Adds
--query(and often--name) across auth connections, API keys, browser pools, credentials, credential providers, deployments, extensions, invocations, profiles, projects, and proxies. API keys list gains--status,--sort-by,--sort-direction, and a Deleted At column when deleted keys can appear. Projects list gains paging with next-page hints.Other:
audit logs download --format jsonl|jsonl.gz;browsers telemetry events --order asc|desc(validated against--since); pool acquire /browsers create --pool-*--start-url; browser get/create tables show profile save changes; managed-auth flows surfacereplace-existingon fields.Reviewed by Cursor Bugbot for commit bc24ff8. Bugbot is set up for automated code reviews on this repo. Configure here.