[kernel-internal]

Summary

• Update @onkernel/sdk to 0.139.0.

Coverage

MCP coverage update

Added or updated MCP coverage

• Audited the complete SDK resource surface and parameter declarations. SDK 0.139.0 adds no methods, request parameters, nested request options, enum values, pagination behavior, streaming APIs, or changed signatures; its only API-surface addition is the optional browser response field leased_at.
• manage_browser_pools action acquire now preserves BrowserPoolAcquireResponse.leased_at in its compact browser result.
• manage_apps action list_invocation_browsers now preserves InvocationListBrowsersResponse.Browser.leased_at.
• manage_browsers create, update, list, and get responses, plus browser resources, already pass browser records through without filtering this field. Mocked coverage now verifies leased_at survives create/get, update, and list response handling.
• Added mocked assertions for pool acquisition and invocation browser listing. No production resources were created and no production API calls were made.

Description updates

• Updated manage_browsers, manage_browser_pools, and manage_apps descriptions to follow OpenAPI schema field Browser.leased_at: it is present only for leased pooled sessions and records when the session was last leased.
• No endpoint, parameter, or other exposed field descriptions changed in the OpenAPI diff.

Intentional exclusions

• No SDK 0.139.0 addition is excluded.
• Existing SSE and long-lived lifecycle APIs remain outside the bounded MCP request model: deployment/invocation/auth follow streams, browser log and telemetry streams, filesystem watches, and asynchronous process spawn/stdin/status/resize/kill/stdout streaming. Existing MCP tools use bounded list/get/event reads and synchronous exec_command instead.
• Existing binary or multipart artifact workflows remain excluded where they are not safe JSON tool calls: deployment creation, ad-hoc extension loading, extension upload/download/Chrome Store download, profile archive download, replay download, and audit-log export downloads.
• invocations.update remains an app-runtime status/output callback; exposing it would let an MCP caller forge invocation state or output. browsers.fetch and config-registry waitForResult remain SDK conveniences represented by browser_curl and bounded analysis get/list actions.
• Organization-wide audit logs, audit export destinations, organization entitlements/limits, and OTLP destination administration remain admin/configuration surfaces. Audit data can contain organization-wide user and request metadata, while OTLP create/update accepts collector credentials in headers; telemetry tools select destinations that were configured through a trusted admin path.
• vaults.retrieveEncryptionKey remains integration-only for custom credential-collection applications. MCP keeps the hosted, value-redacting vault flows rather than exposing custom encrypted-value plumbing.

Validation

• bun run check:managed-auth-app — passed.
• bunx tsc --noEmit --incremental false — passed.
• bun test — passed: 1,200 tests, 0 failures.
• Validation used Bun 1.3.3. No validation limitations remain.

Validation

• Frozen Bun install
• Managed-auth App bundle check
• TypeScript type check
• Bun tests
• OAuth Redis recording check

---

Note

High Risk
Large changes to payment vault tools, managed auth HITL, and browser save_profile (session restart), all of which affect money, credentials, and live browser state.

Overview
Bumps @onkernel/sdk from 0.132.0 to 0.139.0 and threads new API fields and flows through the MCP surface.

Browsers and pools: Responses and tool copy now include leased_at for leased pooled sessions. manage_browsers adds a save_profile action (destination by profile_id or profile_name, long timeout, no auto-retry), create-only fingerprint overrides (os=macos with strict stealth/headless/gpu/memory rules), and telemetry guidance for browser_proxy_error code payment_window_expired. Pool acquire and app list_invocation_browsers pass through leased_at.

Auth: manage_auth_connections accepts hitl on create/update; wait returns distinct guidance when flow_step is AWAITING_HUMAN_INTERVENTION.

API keys: List sorting adds last_used_at, with documented null ordering for expires_at / last_used_at.

Vaults (major): New entitlement-gated manage_vault_payment_requests (Link/Kernel). manage_vault_cards adds Shop Pay authorize/fill/confirm flows; manage_vault_credentials adds managed_auth items tied to saved connection credentials; manage_vault_wallets / manage_vault_items add Kernel wallet add_payment_method / remove_payment_method, richer confirm_transaction and 1pw_fill (target_id) validation, and payment-request authorize/recovery handling. manage_vault_provider_configs excludes shop_pay from org config providers.

Tests and registration metadata (tool names, hints, prompt allowlist for fingerprint) are updated throughout.

^{Reviewed by Cursor Bugbot for commit 2e4e481. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
mcp	Ready	Preview	Oct 30, 2026 6:14am UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​onkernel/​sdk@​0.132.0 ⏵ 0.139.0	-7		+1	+1

View full report

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 6a89cbd. Configure here.}

[rgarcia]

cc @hiroTamada

[bmsaadat]

Smoke tested the Shop Pay changes against the prod API with a local build of this branch: wallet connect, card create, spec refusals, authorize at checkout, Shop approval, fill, a real $1 purchase on Kernel's Stripe link, and confirm_transaction (card consumed). All passed.