CLI: Update SDK to 8e8343ff31318fb906816388a647c922c266d3cf and add new commands/flags

[kernel-internal]

This PR updates the Go SDK to 8e8343ff31318fb906816388a647c922c266d3cf and adds CLI commands/flags for new SDK methods.

SDK Update

• Updated kernel-go-sdk to 8e8343ff31318fb906816388a647c922c266d3cf. This branch also has the earlier bumps to 9ac854e2d73931cce7e4879b8505b1e11cf1e27c, 3c8b90c8bea096937d6cee06eabd6076e1801376, 6d9c6187b9e9ddbe1a1546a48b1544dacbb62417 and 64c58f83184c4ea19b63938eb496b86b2ff93a5f (v0.123.0).

Coverage Analysis

This PR was generated by performing a full enumeration of SDK methods and CLI commands. Every SDK method in api.md is reachable from the CLI, except the x-cli-skip Config Registry endpoints. browsers curl and search reach their endpoints over raw HTTP rather than through the typed SDK methods, as before.

SDK changes covered:

• 3c8b90c: browser pools support egress allowlists (network.allowed_hosts).
• 6d9c618: the telemetry SSE stream can filter by event type (BrowserTelemetryStreamParams.Type).
• 64c58f8: release v0.123.0. Only release metadata changed, so no new coverage.
• 9ac854e: Kernel Visa transaction reporting. Adds the confirm_transaction vault item operation (ConfirmTransactionVaultItemOperationRequestParam) and merchant_category / merchant_category_code on KernelCardVaultItemSpecParam.
• 8e8343f: Kernel Visa verification restart. Adds the restart_verification vault item operation (RestartVerificationVaultItemOperationRequestParam). No new methods.

These were intentionally not added:

• Telemetry.Export and Telemetry.Storage on BrowserPoolNew/Update/AcquireParams, and Telemetry.Export on BrowserUpdateParams. The API rejects export and storage on pools and silently ignores export on PATCH /browsers.
• AuditLogExportChunkParams.Limit is still not exposed. It was already missing before this SDK change, and audit-logs download manages chunk paging itself.
• Deprecated fields (ProxyID, DisableDefaultProxy, the managed-auth Proxy and BrowserTelemetry) are still covered by the newer flags that replaced them.

New Commands

• kernel vaults items invoke <vault> <key> confirm_transaction --params|--spec-file for client.Vaults.Items.PerformOperation() with OfConfirmTransaction. It requires status, transaction_type, amount, currency and occurred_at. The CLI checks the enums, that amount is a non-negative integer and that occurred_at is an ISO 8601 timestamp, and it rejects unknown keys. Before this change, invoking confirm_transaction fell through to the parameterless path and sent an invalid body.

• kernel vaults items invoke <vault> <key> restart_verification [--open] for client.Vaults.Items.PerformOperation() with OfRestartVerification. It takes no parameters. The API only advertises it on recovery_required Kernel Visa cards whose initial attestation failed. Before this change, the CLI refused every operation on a recovery_required item, so it could not be invoked. Now it is the only operation allowed in that state, and only when the API advertises it. Human output for these items shows the operation and warns that it does not approve spending.

New Flags

• kernel browser-pools create --allowed-host for BrowserPoolNewParams.Network.AllowedHosts
• kernel browser-pools update --allowed-host / --clear-allowed-hosts for BrowserPoolUpdateParams.Network.AllowedHosts
• kernel browsers telemetry stream --types now sends BrowserTelemetryStreamParams.Type to the API (server-side filter).
• kernel vaults cards create --provider kernel --spec documents merchant_category and merchant_category_code for KernelCardVaultItemSpecParam.MerchantCategory/MerchantCategoryCode. The spec is raw JSON that is passed through as-is, and both fields now appear in vault item output.

Other changes

• kernel browser-pools get shows an Allowed Hosts row. The help text and README for allowlists on pooled browsers are updated.
• browsers create --private-host without --allowed-host no longer sends "allowed_hosts": [].
• An empty --allowed-host is rejected.

Testing

• go test ./... passes. New unit tests cover pool allowlists, stream types, the confirm_transaction request body and its param validation.
• Live API smoke tests:
  • Earlier commits: pool allowlist create/update/clear, leased-browser allowlist update and telemetry --types filtering.
  • This commit: creating a Kernel card with merchant_category/merchant_category_code reached server validation. The server stopped it with "wallet is pending_authorization", because enrolling a Kernel wallet needs a cardholder passkey, so the full card flow could not be run.
  • confirm_transaction: checked the missing-params and invalid-status errors and the available_operations check against a live item.
  • restart_verification: a Kernel Visa item in attestation-failure recovery can't be created on demand. Against the live API, invoking it on an item that doesn't advertise it fails before any POST, and --params is rejected. Unit tests cover the request body, the recovery gate and the output.
  • All test resources were cleaned up.

Triggered by: kernel/kernel-go-sdk@8e8343f
Reviewer: @kernel-internal[bot]

🤖 Generated with Claude Code

---

Note

Medium Risk
Adds pool-level egress allowlists and changes how network config is PATCHed, which can unintentionally drop allowlists on partial pool updates; pooled-browser allowlist lifecycle affects security boundaries on release.

Overview
Updates kernel-go-sdk and wires new API surface into the CLI, mainly around egress allowlists for browser pools and server-side telemetry filtering.

Browser pools gain --allowed-host on create/update and --clear-allowed-hosts on update, with validation (max 100 entries, mutual exclusion with other network clears) and correct partial network payloads when clearing routes or allowlists without wiping private hosts. browser-pools get shows an Allowed Hosts row; README/help describe how pool allowlists apply to warmed browsers and reset (or replace the browser) when a lease ends.

Browsers share stricter --allowed-host handling: an explicit but empty flag is rejected, and create no longer sends empty allowed_hosts / proxy_routes JSON. Docs and errors now say pooled leases use the pool allowlist (set via browser-pools) and that browsers update --allowed-host is supported on leased pool browsers with reset-on-release behavior.

Telemetry: browsers telemetry stream --types is passed to the API as BrowserTelemetryStreamParams.Type for server-side filtering (tests assert query wiring).

Vault: new/expanded tests for confirm_transaction invoke body and param validation (full operation support aligns with the SDK bump described in the PR).

Risk: Mostly CLI/docs and request shaping; network allowlist changes affect egress policy for pools and pooled sessions.

^{Reviewed by Cursor Bugbot for commit 9d195f6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​kernel/​kernel-go-sdk@​v0.122.1-0.20261009181557-f737b63ffd16 ⏵ v0.123.1-0.20261012183001-8e8343ff3131	+1

View full report

[cursor]

Stale Bugbot comment from a previous run.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 479a223. Configure here.}