CLI: Update SDK to v0.84.0 and surface auth timeline telemetry state

[kernel-internal]

This PR updates the Go SDK to 65f3b913775353974858c92a6164ae25232ecc81 (v0.84.0) and reflects the new SDK surface in the CLI.

SDK Update

• Updated kernel-go-sdk to 65f3b913775353974858c92a6164ae25232ecc81 (v0.84.0)

Coverage Analysis

A full enumeration of SDK methods (api.md) against the CLI service interfaces was performed. All 128 SDK methods already have CLI commands. The only endpoint marked x-cli-skip: true in openapi.yaml (POST /auth/connections/{id}/exchange, the hosted login UI handoff) is correctly absent from the CLI.

The only API surface change in this SDK bump is a new response field, ManagedAuthTimelineEvent.TelemetryCaptured ("Whether browser telemetry capture started for this event's browser session"). No new methods and no new request params, so no new commands or flags were required.

Changes

• kernel auth connections timeline now renders a Telemetry column sourced from ManagedAuthTimelineEvent.TelemetryCaptured, so users can tell which timeline events have telemetry retrievable via kernel browsers telemetry events.
  • Shows yes/no when the event has a browser session and the API reports the field.
  • Shows - when the event has no browser session, or when the API does not yet emit the field (avoids reporting a misleading no).
• --output json already passed the field through verbatim (raw JSON passthrough); unchanged.

Testing

Built and run against the live API:

• kernel auth connections timeline <id> --per-page 5 across three connections — new column renders, pagination footer intact
• kernel auth connections timeline <id> --per-page 2 --output json — payload shape unchanged
• kernel auth connections list, kernel browsers list, kernel profiles list — no regressions from the SDK bump
• go build ./... and go test ./... pass

Note: the production API is not yet emitting telemetry_captured, so live output currently shows - in the new column. Unit coverage decodes an event from JSON with the field set to verify the yes path.

Triggered by: kernel/kernel-go-sdk@65f3b91
Reviewer: @stainless-app

---

Note

Low Risk
Display-only CLI change plus a dependency bump; no auth or request-path changes.

Overview
Bumps kernel-go-sdk to v0.84.0 so the CLI can read ManagedAuthTimelineEvent.TelemetryCaptured from the API.

kernel auth connections timeline (table output) gains a Telemetry column: yes / no when the event has a browser session and the API sent telemetry_captured; - when there is no session or the field was omitted (so missing API data is not shown as no). JSON output is unchanged (raw event JSON already includes the field when present).

Unit test coverage decodes a timeline event with telemetry_captured: true and asserts the table shows Telemetry and yes for that session.

^{Reviewed by Cursor Bugbot for commit 57bb747. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​kernel/​kernel-go-sdk@​v0.83.1-0.20260724213320-12b3ec62f63e ⏵ v0.84.0	+1

View full report