[kernel-internal]

Automated Release PR

0.137.0 (2026-10-29)

Features

• Add request-only fingerprint beta contract (bca5a05)
• Read Shop Pay card status one read at a time and report outcome details (888e8a2)
• Remove the projects_enabled flag from the API (bfb22ed)
• route browser REPL and WebMCP calls directly to browser VMs (1974522)
• Route Evervault alias payment windows through per-window upstreams (845e6c6)
• Wire Shop Pay into the vault API (e5e6b25)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds Shop Pay payment vault types and richer transaction reporting on sensitive vault operations; browser routing changes alter where REPL/WebMCP traffic is sent by default.

Overview
Release 0.137.0 bumps package version and changelog; the SDK changes track new Kernel API surface for browsers, vault payments, and routing.

Shop Pay in vaults adds wallet and card provider types (shop_pay), OAuth action shop_pay_oauth, and extends card/wallet unions for create, upsert, authorize, and delete docs. confirm_transaction gains optional failure_code, order_id, and order_url (Shop Pay–specific; other providers ignore them). Authorize and confirm_transaction descriptions now cover Shop Pay alongside Link and Kernel cards.

Browsers accept an optional closed-beta fingerprint request param (currently os: macos) on browsers.create (sync/async), with README and tests updated. Default direct-to-VM routing now includes repl and webmcp subpaths (replays still stay on the control plane).

Docs/API cleanup drops SDK docstrings about projects_disabled / projects_enabled on project resources. BrowserProxyErrorEvent adds payment_window_expired as a proxy error code.

^{Reviewed by Cursor Bugbot for commit 6d5bceb. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bmsaadat]

Holding this release until Shop Pay passes its production smoke test. I'll approve once it does.