Skip to content

Add Kernel Browser kit#20

Open
ealeyner wants to merge 4 commits into
docker:mainfrom
ealeyner:add-kernel-kit
Open

Add Kernel Browser kit#20
ealeyner wants to merge 4 commits into
docker:mainfrom
ealeyner:add-kernel-kit

Conversation

@ealeyner
Copy link
Copy Markdown
Contributor

@ealeyner ealeyner commented May 5, 2026

Summary

  • Adds a kernel/ mixin kit for kernel.sh — cloud-hosted Chromium for AI agents
  • Installs the kernel CLI globally so agents can manage browser sessions from the terminal
  • Wires KERNEL_API_KEY through the sandbox proxy via credentials.sources + environment.proxyManaged — the real credential never enters the VM
  • Drops /home/agent/.kernel/quickstart.md with TypeScript, Python, and CLI usage examples
  • Includes TCK test and README

How auth works

serviceDomains is intentionally narrow (api.onkernel.com only). The Kernel API uses Authorization: Bearer <token>; CDP WebSocket proxy URLs (wss://proxy.<region>.onkernel.com:8443/...) are covered by the *.onkernel.com wildcard in allowedDomains without auth injection — a wildcard in serviceDomains would put the proxy into TLS-intercept mode and corrupt those connections.

Test plan

  • sbx kit validate ./kernel/ — VALID
  • cd kernel && go test -v -count=1 -timeout 10m ./... (requires Docker + Go 1.23+)
  • sbx run claude --kit ./kernel/ with KERNEL_API_KEY set — CLI available, quickstart at /home/agent/.kernel/quickstart.md

🤖 Generated with Claude Code

Mixin kit for kernel.sh — cloud-hosted Chromium for AI agents.
Installs the Kernel CLI globally, wires KERNEL_API_KEY through the
sandbox proxy (credentials never enter the VM), and drops a quick-
reference guide at /home/agent/.kernel/quickstart.md.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Eli Aleyner <eli@aleyner.com>
@ealeyner ealeyner requested a review from a team as a code owner May 5, 2026 06:08
ealeyner and others added 3 commits May 5, 2026 02:39
Agent kit for Open Interpreter — a natural language interface that
writes and runs code (Python, JS, Shell) inside the sandbox. auto_run
is enabled by default since the sandbox provides the OS-level isolation
that makes it safe. Supports both OpenAI (default, GPT-4o) and
Anthropic (Claude) via proxy-managed credentials.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Eli Aleyner <eli@aleyner.com>
….13 compat

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Eli Aleyner <eli@aleyner.com>
Replace pip install references with uv tool install --python 3.12,
explain the PEP 668 and numpy/Python 3.13 wheel constraints, and
document the background auto-upgrade on startup.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Eli Aleyner <eli@aleyner.com>
@mdelapenya
Copy link
Copy Markdown
Member

@ealeyner the security guidelines for this repo means we need to use gpg/ssh keys when doing commits in this repo. We recently added #28 with the process 🙏

I'd suggest you regenerate the commits and push-force if possible

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants