CLI: Update SDK to 9de3679 (v0.94.0) and restore the telemetry control/platform flags

[kernel-internal]

This PR updates the Go SDK to 9de3679a3880b1fff724377144c60e26e630f7b0 and restores the CLI flags for the telemetry surface that commit brings back.

SDK Update

• Updated kernel-go-sdk to 9de3679a3880b1fff724377144c60e26e630f7b0 (tagged v0.94.0)

Coverage Analysis

This PR was generated by performing a full enumeration of SDK methods and CLI commands.

api.md lists 145 methods, up from 140 at the previous pin. All five additions are the new SiteConfigs resource (Get, List, ListRecommendations, Lookup, Resolve), and every one carries x-cli-skip: true in openapi.yaml — so none needs a CLI command. The other 140 methods are unchanged and all resolve to existing CLI call sites.

A field-level diff of every *Params and *Param struct between 26309b6 and 9de3679 found additions in exactly two places:

• the skipped SiteConfig*Params / LookupRequestParam / ResolveRequestParam structs, and
• the telemetry structs restored below.

The remaining SDK changes are doc-comment rewraps plus new response-only telemetry event types (cdp_command, page_crashed, platform_api_call), which need no flags because telemetry events --types filters on free-form strings.

Restored Flags

The 9de3679 merge brings back the control/platform telemetry split that the previous pin had dropped, and BrowserTelemetryCategoriesConfigParam.Control changed type from BrowserTelemetryCategoryConfigParam to BrowserTelemetryControlConfigParam, which broke the build. This reverts the code changes in 8b5a06b:

• --telemetry accepts ten categories again — platform is valid — for BrowserTelemetryCategoriesConfigParam.Platform
• --telemetry-cdp-exclude is back on all eight commands (browsers create/update, browser-pools create/update/acquire, auth connections create/update/login) for BrowserTelemetryCdpControlConfigParam.ExcludedMethods

The CLI's 38-entry CDP method list was diffed against the SDK's BrowserCdpCommandMethod enum at 9de3679 and is identical.

Testing

Tested against the production API:

• browsers create --telemetry=console,control,platform --telemetry-cdp-exclude=Input.dispatchMouseEvent,Page.captureScreenshot — the response echoes platform.enabled and both excluded methods
• browsers get --output json (telemetry block round-trips) / update --telemetry=network --telemetry-cdp-exclude=none (clears the list) / delete
• browsers telemetry events showed a real platform_api_call event, and --categories platform filtered to it
• browser-pools create --telemetry=console,control,platform --telemetry-cdp-exclude=Page.navigate / get (details row renders excluding CDP methods: Page.navigate) / update --telemetry-cdp-exclude=none / delete
• auth connections create --telemetry=console,control,platform --telemetry-cdp-exclude=Page.navigate / update --telemetry=network / delete
• validation: --telemetry=bogus lists all ten categories, --telemetry=off with --telemetry-cdp-exclude is rejected, an unknown CDP method lists the 38 valid ones, and --telemetry-cdp-exclude without --telemetry is rejected on auth connections update
• read-only sweep across auth context, browsers/browser-pools/auth-connections/app/proxies/profiles/extensions/credentials/projects/api-keys/credential-providers lists, org entitlements, org limits, telemetry destinations, and audit-logs search
• go build ./..., go vet ./..., go test ./... all pass

Triggered by: kernel/kernel-go-sdk@9de3679
Reviewer: @stainless-app[bot]

---

Note

Medium Risk
Changes canonical auth submission binding and telemetry request shaping across browsers, pools, and auth connections; mistakes could cause rejected submits or unintended telemetry config replacement on update.

Overview
Bumps kernel-go-sdk to v0.94.0 and wires new API surfaces into the CLI.

Managed auth submit now supports --interaction-id for canonical --field-value / --choice-id submissions. If omitted, the CLI fetches the connection and sends the current interaction ID; explicit IDs pin or detect stale flows. get, follow, and field formatting show interaction ID and field reason (replacing the old replace-existing hint).

Telemetry gains --telemetry-cdp-exclude on browser create/update, browser-pool create/update/acquire, and auth connection create/update/login. Exclusions merge into control telemetry’s CDP command stream (none clears the list). platform is a selectable --telemetry category; summaries and pool details show excluded CDP methods when set.

README documents the new submit flag; tests cover interaction resolution, validation, and CDP exclude parsing.

^{Reviewed by Cursor Bugbot for commit c6c402b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​github.com/​kernel/​kernel-go-sdk@​v0.92.0 ⏵ v0.94.0	+1

View full report

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit c6c402b. Configure here.}

[cursor]

CDP exclusions hidden when disabled

Low Severity

printTelemetrySummary and formatPoolTelemetry return as soon as no categories are enabled, so they never render Control.Cdp.ExcludedMethods. A create/update that only sets --telemetry-cdp-exclude is treated as fully disabled, unlike formatManagedAuthTelemetry, which still appends the exclusion list onto a disabled base.

Additional Locations (1)

• cmd/browser_pools.go#L132-L142

^{Reviewed by Cursor Bugbot for commit c6c402b. Configure here.}