[kernel-internal]

Automated Release PR

0.137.0 (2026-10-29)

Features

• Add request-only fingerprint beta contract (8dfe062)
• Read Shop Pay card status one read at a time and report outcome details (007451f)
• Remove the projects_enabled flag from the API (d4e4c24)
• route browser REPL and WebMCP calls directly to browser VMs (3a21439)
• Route Evervault alias payment windows through per-window upstreams (3048bdb)
• Wire Shop Pay into the vault API (a34a3a2)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

High Risk
Shop Pay vault and payment reporting types plus VM routing for REPL/WebMCP affect money movement and live session traffic; fingerprint overrides also change browser identity presented to sites.

Overview
Release 0.137.0 bumps the package and documents new API surface in generated types and api.md.

Browsers: Adds optional closed-beta fingerprint on create (BrowserFingerprint, currently os: 'macos') and exports it through the client. The SDK’s default VM routing list now includes repl and webmcp (while replays stays on the control plane), with tests locking that behavior. Telemetry BrowserProxyErrorEvent gains code payment_window_expired.

Vaults / Shop Pay: Extends wallet and card unions with Shop Pay specs and states, a shop_pay_oauth item action, checkout-style authorize for Shop Pay cards, richer confirm_transaction fields (failure_code, order_id, order_url), and card fill fields billing_first_name / billing_last_name. Docs on delete/authorize flows now treat Shop Pay like Link/Kernel where relevant.

Projects: Removes SDK doc text that project APIs return 404 / projects_disabled when projects are disabled (aligned with dropping projects_enabled from the API).

^{Reviewed by Cursor Bugbot for commit 9ec5a37. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bmsaadat]

Holding this release until Shop Pay passes its production smoke test. I'll approve once it does.

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-node-sdk/releases/tag/v0.137.0 🌻