Add Kernel-managed vault wallet and card tools

[hiroTamada]

Summary

• Expose Kernel-hosted wallet enrollment, payment-method eligibility, and one-time card requests with merchant country through the existing vault tools.
• Allow explicit authorization of advertised Kernel cards and return hosted approval actions while keeping card numbers and CVC out of MCP inputs and filtering upstream error text on Kernel tool paths.
• Project Kernel card status and safe display fields; document the cardholder flow and upgrade the SDK to include Kernel wallet/card shapes.

Validation

• bun test (916 passed)
• bunx tsc --noEmit
• Prettier check on changed source/docs passed. Repository-wide bun run format:check remains blocked by pre-existing formatting in AGENTS.md.
• No live payments or resource mutations were run; API calls were mocked.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
mcp	Ready	Preview	Oct 6, 2026 8:02pm UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​onkernel/​sdk@​0.117.0 ⏵ 0.119.0	+1		+1	+1

View full report