release: 0.116.0

[kernel-internal]

Automated Release PR

0.116.0 (2026-10-01)

Features

• chore(stlc): seal custom-code tracking files (10c4031)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds credential TOTP configuration and payment checkout origin fields on generated clients; changes are additive but touch secrets/2FA and checkout authorization behavior.

Overview
Release 0.116.0 bumps package version metadata and the README install pin; functional changes are in generated API types.

Credentials / TOTP: Create, update, and read models now support configurable TOTP via totp_digits, totp_period, and totp_algorithm (SHA1/SHA256/SHA512). totp_secret is documented to accept either a base32 seed or an otpauth://totp/... URI, with URI parameters overriding explicit fields when present. Credential responses echo the stored TOTP metadata; tests were updated to send the new optional fields.

Vault AgentCard: Agent card specs add optional checkout_origin (checkout page origin for autopilot rule matching on unprepared checkouts), plus a union helper GetCheckoutOrigin(). AgentCard docs now describe approval vs autopilot-rule authorization instead of only “approval-gated.”

^{Reviewed by Cursor Bugbot for commit 4eb07f2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[masnwilliams]

lgtm

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-go-sdk/releases/tag/v0.116.0 🌻