release: 0.21.0

[stainless-app]

Automated Release PR

0.21.0 (2025-12-02)

Full Changelog: v0.20.0...v0.21.0

Features

• Browser pools sdk release (69dcf34)
• Mason/agent auth api (ee63aba)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

[mesa-dot-dev]

Mesa Description

Automated Release PR

0.21.0 (2025-12-02)

Full Changelog: v0.20.0...v0.21.0

Features

• Browser pools sdk release (69dcf34)
• Mason/agent auth api (ee63aba)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

^{Description generated by Mesa. Update settings}

[mesa-dot-dev]

Performed full review of 2393c0f...358cb54

Analysis

1. Credential Handling Risks: The AgentAuthRunSubmitParams.FieldValues map accepts arbitrary key-value pairs containing sensitive credentials without built-in sanitization for logging, potentially exposing passwords and OTP codes in memory, error messages, or debugging output.

2. JWT Token Management: The Exchange endpoint returns JWT tokens with a 30-minute TTL, but lacks a defined refresh mechanism or guidance on token rotation, which could lead to authentication issues or insecure token handling.

3. Handoff Code Security Gaps: The one-time handoff code mechanism lacks documented rate limiting on exchange attempts and complexity requirements, creating potential security vulnerabilities.

4. Testing Deficiency: All tests are currently skipped with "Prism tests are disabled", which is concerning for a security-sensitive feature and reduces confidence in the implementation's reliability.

Tip

Help

Slash Commands:

• /review - Request a full code review
• /review latest - Review only changes since the last review
• /describe - Generate PR description. This will update the PR body or issue comment depending on your configuration
• /help - Get help with Mesa commands and configuration options

^{12 files reviewed | 0 comments | Edit Agent Settings • Read Docs}

[stainless-app]

🤖 Release is at https://github.com/onkernel/kernel-go-sdk/releases/tag/v0.21.0 🌻