[kernel-internal]

Automated Release PR

0.125.0 (2026-10-13)

Features

• chore(stlc): seal custom-code tracking files (635766d)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds credential-scoping and expiry options for API keys; types are additive but misconfigured policies or expiry could affect access control for integrators.

Overview
Releases @onkernel/sdk 0.125.0 (version constants, changelog, and release manifest).

The substantive SDK change is in API keys: create and read types now support scoped keys via an optional policy with allow-list statements (action + resource, wildcards supported). Returned APIKey objects can include that policy when present. Create also accepts expires_at as an alternative to days_to_expire (documented as mutually exclusive), and create docs note project scoping and policies. Skipped api-keys tests were updated to cover the new create fields.

^{Reviewed by Cursor Bugbot for commit afa92e7. Bugbot is set up for automated code reviews on this repo. Configure here.}

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-node-sdk/releases/tag/v0.125.0 🌻