[codex] Update Kernel SDK compatibility

[IlyaasK]

Summary

• Bump @onkernel/sdk to the ^0.58.0 release line.
• Adapt MCP profile listing call sites to the SDK 0.58 paginated profiles.list() response.
• Preserve the previous all-profiles behavior by iterating the SDK paginator before listing profiles or checking for existing profile names.

Validation

• git diff --check
• bun run build with dummy build-time Clerk/OAuth env values and network access for Google Fonts
• python3 /Users/ilyaas/.codex/skills/autoreview/scripts/autoreview --mode local clean after the pagination fix

---

Note

Medium Risk
Profile setup and listing depend on fully consuming the new paginator; incomplete iteration could miss existing profiles or change duplicate-detection behavior, though the change is localized to profile APIs.

Overview
Upgrades @onkernel/sdk from ^0.35.0 to ^0.58.0 and updates the MCP server so profile listing still returns the full set of profiles.

SDK 0.58 exposes profiles.list() as a paginated async iterator, not a plain array. A new listProfiles helper drains that iterator into an array, and all former direct client.profiles.list() call sites (the profiles:// resource, manage_profiles setup duplicate check, and list action) now use it. The profiles resource empty response is keyed off profiles.length instead of treating the list result as an array directly.

^{Reviewed by Cursor Bugbot for commit 078dc8f. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mcp	Ready	Preview, Comment	May 29, 2026 3:28pm

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​onkernel/​sdk@​0.35.0 ⏵ 0.58.0	+1		+1	+2

View full report

[firetiger-agent]

Firetiger deploy monitoring skipped

This PR didn't match the auto-monitor filter configured on your GitHub connection:

PRs in the kernel, infra, hypeman, and hypeship repos. kernel is a ~mono repo with many logical services underneath, ensure to focus on the implicated service for the PR

Reason: PR is in the codex repo, which is not included in the operator's filter (kernel, infra, hypeman, hypeship only).

To monitor this PR anyway, reply with @firetiger monitor this.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 59b7cbd. Configure here.}

[vercel]

Additional Suggestion:

The condition profiles ? always evaluates to truthy because listProfiles() returns an array, causing "No profiles found" fallback message to never be displayed when there are no profiles.

[IlyaasK]

adding additional functionality - projects, browser, api key gen in future prs