[kernel-internal]

Summary

• Update the Go SDK to 47914f683b2ee9414fba387299f0894e67b2ae2c.

Coverage

Kernel CLI SDK coverage report

Generated: 2026-10-27T12:52:30Z

Summary

• Updated github.com/kernel/kernel-go-sdk from v0.131.0 to v0.132.0.
• Verified that v0.132.0 resolves from the requested SDK commit 47914f683b2ee9414fba387299f0894e67b2ae2c.
• Enumerated all 175 SDK methods and every exported top-level field on their generated parameter structs.
• Recursively enumerated all 237 CLI help paths, including their flags and subcommands; all help invocations succeeded.
• Found no missing SDK-method commands and no missing parameter flags.
• The only v0.131.0-to-v0.132.0 generated API surface change is the response field APIKey.LastUsedAt (last_used_at). Added it to human-readable API-key list/get output and synchronized help with the field's OpenAPI caveats.

SDK delta review

The supplied /tmp/sdk-diff.patch contains no method or parameter changes, and /tmp/openapi-diff.patch reports that its baseline is unavailable. An independent comparison of the resolved SDK modules found:

• api.md: unchanged, with 175 methods in both versions.
• Generated parameter structs and fields: unchanged.
• Added methods: 0.
• Removed methods: 0.
• Changed method signatures: 0.
• Added or changed request fields: 0.
• Generated response change: APIKey.LastUsedAt time.Time plus its response metadata field.

The SDK changelog describes this release as returning last_used_at on API keys.

Full coverage disposition

SDK service group	Methods	Covered CLI surface	x-cli-skip	Uncovered
APIKeys	6	6	0	0
Apps	1	1	0	0
AuditLogs	8	8	0	0
Auth	10	10	0	0
BrowserPools	8	8	0	0
Browsers	57	57	0	0
ConfigRegistry	6	0	6	0
CredentialProviders	7	7	0	0
Credentials	6	6	0	0
Deployments	5	5	0	0
Extensions	6	6	0	0
Invocations	7	7	0	0
Organization	3	3	0	0
Profiles	6	6	0	0
Projects	7	7	0	0
Proxies	6	6	0	0
Search	4	4	0	0
Telemetry	5	5	0	0
VaultProviderConfigs	5	5	0	0
Vaults	12	12	0	0
Total	175	169	6	0

Enumeration artifacts were generated outside the checkout under /home/runner/work/_temp/cli-scratch/:

• sdk-coverage-matrix.tsv
• sdk-param-structs.tsv
• cli-coverage-matrix-final.tsv
• cli-coverage-matrix-final.json

Gap report

Missing commands

None.

Missing flags

None. The complete v0.132.0 request-parameter surface is identical to v0.131.0, whose non-skipped methods are already covered by the CLI.

Response/output gap addressed

• APIKey.LastUsedAt / OpenAPI components.schemas.ApiKey.properties.last_used_at
  • kernel api-keys list now includes a Last Used At column.
  • kernel api-keys get now includes a Last Used At row.
  • A null or unavailable value renders as -, avoiding the inaccurate claim that the key was never used before tracking began.
  • JSON output already serializes the SDK response field and was verified against the API.

Help text synchronized with OpenAPI

Updated kernel api-keys list and kernel api-keys get long help to reflect ApiKey.last_used_at:

• The timestamp is accurate to within about 20 minutes.
• - means no use has been recorded since last-use tracking began.

The wording is adapted for CLI output while preserving the OpenAPI field's accuracy and null-value semantics.

Intentional exclusions

The following generated SDK methods are explicitly marked x-cli-skip: true and remain intentionally excluded:

SDK method	OpenAPI operation
client.ConfigRegistry.List	GET /config-registry
client.ConfigRegistry.Lookup	POST /config-registry/lookup
client.ConfigRegistry.Resolve	POST /config-registry/resolve
client.ConfigRegistry.Analyses.List	GET /config-registry/analyses
client.ConfigRegistry.Analyses.Get	GET /config-registry/analyses/{id}
client.ConfigRegistry.Analyses.Cancel	POST /config-registry/analyses/{id}/cancel

Four additional OpenAPI operations are both x-cli-skip and x-stainless-skip, so they have no generated SDK method:

• POST /mpp/browsers
• GET /vault/card-captures/current
• POST /vault/card-captures/current
• POST /auth/connections/{id}/exchange

Files changed

• go.mod
• go.sum
• cmd/api_keys.go
• cmd/api_keys_test.go

Validation

Passed:

• go mod tidy
• Targeted API-key unit tests
• go test ./...
• go vet ./...
• go build ./...
• git diff --check
• Recursive help enumeration: 237 commands, 1,931 flag occurrences, 281 unique flag names, 0 failures

Real-API read-only smoke tests passed using the scratch-built CLI:

• kernel api-keys list --limit 1 rendered the Last Used At column.
• kernel api-keys list --limit 1 --output json included last_used_at.
• kernel api-keys get <id> rendered the Last Used At row.
• Both updated commands' help included the 20-minute accuracy and unrecorded-use caveats.

No API resources were created, modified, or deleted during smoke testing.

Limitations

Because the supplied OpenAPI diff had no baseline, description synchronization was checked against the current OpenAPI document and the independently verified SDK v0.131.0-to-v0.132.0 source delta. No unrelated help text was changed.

Validation

• Go build
• Go vet
• Go tests

---

Note

Low Risk
Display-only CLI and dependency bump for a new read-only API field; no auth or mutation paths changed.

Overview
Bumps github.com/kernel/kernel-go-sdk from v0.131.0 to v0.132.0, which adds last_used_at on API key responses.

Human-readable kernel api-keys list and kernel api-keys get now show Last Used At (formatted locally, or - when the API has no recorded use). formatAPIKeyLastUsedAt mirrors the existing expires-at handling. List/get long help documents ~20-minute accuracy and that - means no use since tracking started. Tests cover list/get rendering and the null case. JSON output picks up the new SDK field without extra CLI changes.

^{Reviewed by Cursor Bugbot for commit 1f9ef54. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​kernel/​kernel-go-sdk@​v0.131.0 ⏵ v0.132.0	+1

View full report