Add org entitlements command

[IlyaasK]

Why

The organization entitlements API and Go SDK v0.92.0 are released. The CLI should expose the effective organization policy calculated by the API without maintaining a second plan-to-entitlement table.

What

• upgrade kernel-go-sdk from v0.91.0 to v0.92.0
• add the read-only kernel org entitlements command
• show effective plan, feature access, feature constraints, and organization limits in human-readable output
• support --output json using the generated SDK model unchanged
• render nullable caps as unlimited in human output while preserving JSON null

kernel org limits remains the command for reading and changing configurable organization concurrency limits.

How

The command calls the generated Organization.Entitlements.Get SDK operation directly. All entitlement resolution remains in the API; the CLI only projects the returned model.

Verification

Before: kernel-go-sdk v0.91.0 and the CLI did not expose organization entitlements.

After:

• make test passes (go vet ./... and go test ./...)
• make build passes
• focused organization command tests pass
• command registration and help output verified locally
• read-only production smoke passes for both human and JSON output
• production JSON was structurally asserted for plan, trial, managed-auth, extension-cap, and browser-limit fields without printing organization data

KERNEL-1713

---

Note

Low Risk
Read-only CLI surface over a new SDK GET; no auth, persistence, or limit-mutation behavior changes.

Overview
Adds a read-only kernel org entitlements command that surfaces the API’s effective organization policy (plan, trial, features, and limits) without duplicating entitlement logic in the CLI.

The command calls Organization.Entitlements.Get from kernel-go-sdk v0.92.0 (upgraded from v0.91.0). Human output is a table projection of the SDK model; --output json prints the generated model as-is. Nullable caps render as unlimited / none / unknown in the table while JSON keeps null where applicable.

README documents the new subcommand. kernel org limits is unchanged for reading and updating configurable concurrency settings.

^{Reviewed by Cursor Bugbot for commit 4961b76. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​kernel/​kernel-go-sdk@​v0.91.0 ⏵ v0.92.0	+1

View full report

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 60c8fd3. Configure here.}

[masnwilliams]

requesting changes on two boundary/testability issues. the direct SDK-backed command and flattened table are otherwise the right shape; this does not need a larger architectural rewrite.