kernel 0.120.0__tar.gz → 0.122.0__tar.gz

kernel-0.122.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.122.0"
+}

{kernel-0.120.0 → kernel-0.122.0}/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.122.0](https://github.com/kernel/kernel-python-sdk/compare/v0.121.0...v0.122.0) (2026-10-09)
+
+
+### Features
+
+* Accept client-encrypted credential values in vault items ([a289cba](https://github.com/kernel/kernel-python-sdk/commit/a289cba652251b6f42b60aad92619627efc9304b))
+* Add feature-gated Korean ISP proxies ([56785ca](https://github.com/kernel/kernel-python-sdk/commit/56785cad65cda7e757258204de47f1a4a5974088))
+* Describe vault fill as safe to retry ([e419d6d](https://github.com/kernel/kernel-python-sdk/commit/e419d6d8970f0e78f91b4771969787bb835a6acf))
+* Infer a challenge result for unobserved captcha providers in the relay ([0e4734c](https://github.com/kernel/kernel-python-sdk/commit/0e4734caedae1068b5f3f9eeb5212871dfc4a0ec))
+* Support proxy routes in browser pools ([669ea52](https://github.com/kernel/kernel-python-sdk/commit/669ea5294ab1da43e5042209992364ca009f7053))
+
+## [0.121.0](https://github.com/kernel/kernel-python-sdk/compare/v0.120.0...v0.121.0) (2026-10-07)
+
+
+### Features
+
+* Create and poll 1Password access requests over the 1Password API ([c59f487](https://github.com/kernel/kernel-python-sdk/commit/c59f4871e5dfafd294d9fe9338555d07a6ecd491))
+* Deprecate datacenter proxies in the API ([c34882c](https://github.com/kernel/kernel-python-sdk/commit/c34882c77d247ace0fa23d37da1c3574d21bd1b0))
+
 ## [0.120.0](https://github.com/kernel/kernel-python-sdk/compare/v0.119.0...v0.120.0) (2026-10-06)
 
 

{kernel-0.120.0 → kernel-0.122.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.120.0
+Version: 0.122.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk
@@ -22,7 +22,8 @@ Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Typing :: Typed
 Requires-Python: >=3.9
-Requires-Dist: anyio<5,>=3.5.0
+Requires-Dist: anyio<5,>=3.5.0; python_version < '3.10'
+Requires-Dist: anyio<5,>=4.14.2; python_version >= '3.10'
 Requires-Dist: distro<2,>=1.7.0
 Requires-Dist: httpx<1,>=0.23.0
 Requires-Dist: pydantic<3,>=1.9.0

{kernel-0.120.0 → kernel-0.122.0}/api.md

@@ -120,6 +120,7 @@ from kernel.types import (
     BrowserMemory,
     BrowserMemoryRequest,
     BrowserNetworkConfig,
+    BrowserNetworkUpdate,
     BrowserPoolRef,
     BrowserProxy,
     BrowserProxyConfig,
@@ -545,7 +546,7 @@ Methods:
 Types:
 
 ```python
-from kernel.types import Vault
+from kernel.types import Vault, VaultEncryptionKey
 ```
 
 Methods:
@@ -553,6 +554,7 @@ Methods:
 - <code title="get /vaults/{id_or_name}">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">retrieve</a>(id_or_name) -> <a href="./src/kernel/types/vault.py">Vault</a></code>
 - <code title="get /vaults">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">list</a>(\*\*<a href="src/kernel/types/vault_list_params.py">params</a>) -> <a href="./src/kernel/types/vault.py">SyncOffsetPagination[Vault]</a></code>
 - <code title="delete /vaults/{id_or_name}">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">delete</a>(id_or_name) -> None</code>
+- <code title="get /vaults/{id_or_name}/encryption_key">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">retrieve_encryption_key</a>(id_or_name) -> <a href="./src/kernel/types/vault_encryption_key.py">VaultEncryptionKey</a></code>
 - <code title="post /vaults">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">upsert</a>(\*\*<a href="src/kernel/types/vault_upsert_params.py">params</a>) -> <a href="./src/kernel/types/vault.py">Vault</a></code>
 
 ## Items

{kernel-0.120.0 → kernel-0.122.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.120.0"
+version = "0.122.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"
@@ -12,7 +12,8 @@ dependencies = [
   "httpx>=0.23.0, <1",
   "pydantic>=1.9.0, <3",
   "typing-extensions>=4.14, <5",
-  "anyio>=3.5.0, <5",
+  "anyio>=4.14.2, <5; python_version >= '3.10'",
+  "anyio>=3.5.0, <5; python_version < '3.10'",
   "distro>=1.7.0, <2",
   "sniffio",
 ]

{kernel-0.120.0 → kernel-0.122.0}/requirements-dev.lock

@@ -19,7 +19,7 @@ aiosignal==1.4.0
     # via aiohttp
 annotated-types==0.7.0
     # via pydantic
-anyio==4.12.1
+anyio==4.14.2
     # via httpx
     # via kernel
 argcomplete==3.6.3
@@ -48,7 +48,7 @@ exceptiongroup==1.3.1
     # via pytest
 execnet==2.1.2
     # via pytest-xdist
-filelock==3.19.1
+filelock==3.32.7
     # via virtualenv
 frozenlist==1.8.0
     # via aiohttp

{kernel-0.120.0 → kernel-0.122.0}/requirements.lock

@@ -19,7 +19,7 @@ aiosignal==1.4.0
     # via aiohttp
 annotated-types==0.7.0
     # via pydantic
-anyio==4.12.1
+anyio==4.14.2
     # via httpx
     # via kernel
 async-timeout==5.0.1

{kernel-0.120.0 → kernel-0.122.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.120.0"  # x-release-please-version
+__version__ = "0.122.0"  # x-release-please-version

{kernel-0.120.0 → kernel-0.122.0}/src/kernel/resources/browser_pools.py

@@ -123,7 +123,9 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          network: Network configuration applied to browsers in this pool.
+          network: Network configuration applied to browsers in this pool. Proxy routes require
+              proxy-v3; the pool will not provision browsers through Envoy if proxy-v3 is
+              unavailable.
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
@@ -318,9 +320,11 @@ class BrowserPoolsResource(SyncAPIResource):
 
           network: If provided, replaces the pool's network configuration. Omit to leave the
               existing configuration unchanged; an empty object ({}) removes it, while
-              network: {private_hosts: []} sets an explicit empty list. Only applied to
-              browsers created in the pool after the update; browsers already in the pool keep
-              their configuration until discarded (see discard_all_idle).
+              network: {private_hosts: []} or network: {proxy_routes: []} sets an explicit
+              empty list. Proxy routes require proxy-v3; the pool will not provision browsers
+              through Envoy if proxy-v3 is unavailable. Only applied to browsers created in
+              the pool after the update; browsers already in the pool keep their configuration
+              until discarded (see discard_all_idle).
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
@@ -770,7 +774,9 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          network: Network configuration applied to browsers in this pool.
+          network: Network configuration applied to browsers in this pool. Proxy routes require
+              proxy-v3; the pool will not provision browsers through Envoy if proxy-v3 is
+              unavailable.
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
@@ -965,9 +971,11 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           network: If provided, replaces the pool's network configuration. Omit to leave the
               existing configuration unchanged; an empty object ({}) removes it, while
-              network: {private_hosts: []} sets an explicit empty list. Only applied to
-              browsers created in the pool after the update; browsers already in the pool keep
-              their configuration until discarded (see discard_all_idle).
+              network: {private_hosts: []} or network: {proxy_routes: []} sets an explicit
+              empty list. Proxy routes require proxy-v3; the pool will not provision browsers
+              through Envoy if proxy-v3 is unavailable. Only applied to browsers created in
+              the pool after the update; browsers already in the pool keep their configuration
+              until discarded (see discard_all_idle).
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load

{kernel-0.120.0 → kernel-0.122.0}/src/kernel/resources/browsers/browsers.py

@@ -112,6 +112,7 @@ from ...types.browser_update_response import BrowserUpdateResponse
 from ...types.browser_retrieve_response import BrowserRetrieveResponse
 from ...types.browser_proxy_config_param import BrowserProxyConfigParam
 from ...types.browser_network_config_param import BrowserNetworkConfigParam
+from ...types.browser_network_update_param import BrowserNetworkUpdateParam
 from ...types.shared_params.browser_profile import BrowserProfile
 from ...types.shared_params.browser_viewport import BrowserViewport
 from ...types.shared_params.browser_extension import BrowserExtension
@@ -241,7 +242,8 @@ class BrowsersResource(SyncAPIResource):
               the dashboard. Must be unique among active sessions within the project. Can be
               changed later via PATCH /browsers/{id_or_name}.
 
-          network: Network configuration for the browser session. Cannot be changed after creation.
+          network: Network configuration for the browser session. Only allowed_hosts can be changed
+              after creation, with PATCH /browsers/{id_or_name}.
 
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
@@ -393,6 +395,7 @@ class BrowsersResource(SyncAPIResource):
         *,
         disable_default_proxy: bool | Omit = omit,
         name: Optional[str] | Omit = omit,
+        network: BrowserNetworkUpdateParam | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy: BrowserProxyConfigParam | Omit = omit,
         proxy_id: Optional[str] | Omit = omit,
@@ -418,6 +421,8 @@ class BrowsersResource(SyncAPIResource):
               empty string to clear the name. When set, must be unique among active sessions
               within the project.
 
+          network: Network configuration changes to apply to the running browser session.
+
           profile: Profile to load into the browser session. Only allowed if the session does not
               already have a profile loaded.
 
@@ -464,6 +469,7 @@ class BrowsersResource(SyncAPIResource):
                 {
                     "disable_default_proxy": disable_default_proxy,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy": proxy,
                     "proxy_id": proxy_id,
@@ -945,7 +951,8 @@ class AsyncBrowsersResource(AsyncAPIResource):
               the dashboard. Must be unique among active sessions within the project. Can be
               changed later via PATCH /browsers/{id_or_name}.
 
-          network: Network configuration for the browser session. Cannot be changed after creation.
+          network: Network configuration for the browser session. Only allowed_hosts can be changed
+              after creation, with PATCH /browsers/{id_or_name}.
 
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
@@ -1097,6 +1104,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
         *,
         disable_default_proxy: bool | Omit = omit,
         name: Optional[str] | Omit = omit,
+        network: BrowserNetworkUpdateParam | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy: BrowserProxyConfigParam | Omit = omit,
         proxy_id: Optional[str] | Omit = omit,
@@ -1122,6 +1130,8 @@ class AsyncBrowsersResource(AsyncAPIResource):
               empty string to clear the name. When set, must be unique among active sessions
               within the project.
 
+          network: Network configuration changes to apply to the running browser session.
+
           profile: Profile to load into the browser session. Only allowed if the session does not
               already have a profile loaded.
 
@@ -1168,6 +1178,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
                 {
                     "disable_default_proxy": disable_default_proxy,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy": proxy,
                     "proxy_id": proxy_id,

{kernel-0.120.0 → kernel-0.122.0}/src/kernel/resources/proxies.py

@@ -53,7 +53,7 @@ class ProxiesResource(SyncAPIResource):
     def create(
         self,
         *,
-        type: Literal["datacenter", "isp", "residential", "mobile", "custom"],
+        type: Literal["isp", "residential", "mobile", "custom"],
         bypass_hosts: SequenceNotStr[str] | Omit = omit,
         config: proxy_create_params.Config | Omit = omit,
         name: str | Omit = omit,
@@ -69,12 +69,9 @@ class ProxiesResource(SyncAPIResource):
         Create a new proxy configuration in the resolved project.
 
         Args:
-          type: Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-              worst: `mobile` > `residential` > `isp` > `datacenter`.
-
           bypass_hosts: Hostnames that should bypass the parent proxy and connect directly.
 
-          config: Configuration specific to the selected proxy `type`.
+          config: Configuration for an ISP proxy.
 
           name: Readable name of the proxy.
 
@@ -292,25 +289,25 @@ class ProxiesResource(SyncAPIResource):
         """Run a health check on the proxy to verify it's working.
 
         Optionally specify a URL
-        to test reachability against a specific target. For ISP and datacenter proxies,
-        this reliably tests whether the target site is reachable from the proxy's stable
-        exit IP. For residential and mobile proxies, the exit node varies between
-        requests, so this validates proxy configuration and connectivity rather than
-        guaranteeing site-specific reachability.
+        to test reachability against a specific target. For ISP proxies, this reliably
+        tests whether the target site is reachable from the proxy's stable exit IP. For
+        residential and mobile proxies, the exit node varies between requests, so this
+        validates proxy configuration and connectivity rather than guaranteeing
+        site-specific reachability.
 
         Args:
           url: An optional URL to test reachability against. If provided, the proxy check will
               test connectivity to this URL instead of the default test URLs. Only HTTP and
               HTTPS schemes are allowed, and the URL must resolve to a public IP address. For
-              ISP and datacenter proxies, the exit IP is stable, so a successful check
-              reliably indicates that subsequent browser sessions will reach the target site
-              with the same IP. For residential and mobile proxies, the exit node changes
-              between requests, so a successful check validates proxy configuration but does
-              not guarantee that a subsequent browser session will use the same exit IP or
-              reach the same site — it is useful for verifying credentials and connectivity,
-              not for predicting site-specific behavior. When provided, the check result does
-              not update the proxy's health status, since a failure may indicate a problem
-              with the target site rather than the proxy itself.
+              ISP proxies, the exit IP is stable, so a successful check reliably indicates
+              that subsequent browser sessions will reach the target site with the same IP.
+              For residential and mobile proxies, the exit node changes between requests, so a
+              successful check validates proxy configuration but does not guarantee that a
+              subsequent browser session will use the same exit IP or reach the same site — it
+              is useful for verifying credentials and connectivity, not for predicting
+              site-specific behavior. When provided, the check result does not update the
+              proxy's health status, since a failure may indicate a problem with the target
+              site rather than the proxy itself.
 
           extra_headers: Send extra headers
 
@@ -357,7 +354,7 @@ class AsyncProxiesResource(AsyncAPIResource):
     async def create(
         self,
         *,
-        type: Literal["datacenter", "isp", "residential", "mobile", "custom"],
+        type: Literal["isp", "residential", "mobile", "custom"],
         bypass_hosts: SequenceNotStr[str] | Omit = omit,
         config: proxy_create_params.Config | Omit = omit,
         name: str | Omit = omit,
@@ -373,12 +370,9 @@ class AsyncProxiesResource(AsyncAPIResource):
         Create a new proxy configuration in the resolved project.
 
         Args:
-          type: Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-              worst: `mobile` > `residential` > `isp` > `datacenter`.
-
           bypass_hosts: Hostnames that should bypass the parent proxy and connect directly.
 
-          config: Configuration specific to the selected proxy `type`.
+          config: Configuration for an ISP proxy.
 
           name: Readable name of the proxy.
 
@@ -596,25 +590,25 @@ class AsyncProxiesResource(AsyncAPIResource):
         """Run a health check on the proxy to verify it's working.
 
         Optionally specify a URL
-        to test reachability against a specific target. For ISP and datacenter proxies,
-        this reliably tests whether the target site is reachable from the proxy's stable
-        exit IP. For residential and mobile proxies, the exit node varies between
-        requests, so this validates proxy configuration and connectivity rather than
-        guaranteeing site-specific reachability.
+        to test reachability against a specific target. For ISP proxies, this reliably
+        tests whether the target site is reachable from the proxy's stable exit IP. For
+        residential and mobile proxies, the exit node varies between requests, so this
+        validates proxy configuration and connectivity rather than guaranteeing
+        site-specific reachability.
 
         Args:
           url: An optional URL to test reachability against. If provided, the proxy check will
               test connectivity to this URL instead of the default test URLs. Only HTTP and
               HTTPS schemes are allowed, and the URL must resolve to a public IP address. For
-              ISP and datacenter proxies, the exit IP is stable, so a successful check
-              reliably indicates that subsequent browser sessions will reach the target site
-              with the same IP. For residential and mobile proxies, the exit node changes
-              between requests, so a successful check validates proxy configuration but does
-              not guarantee that a subsequent browser session will use the same exit IP or
-              reach the same site — it is useful for verifying credentials and connectivity,
-              not for predicting site-specific behavior. When provided, the check result does
-              not update the proxy's health status, since a failure may indicate a problem
-              with the target site rather than the proxy itself.
+              ISP proxies, the exit IP is stable, so a successful check reliably indicates
+              that subsequent browser sessions will reach the target site with the same IP.
+              For residential and mobile proxies, the exit node changes between requests, so a
+              successful check validates proxy configuration but does not guarantee that a
+              subsequent browser session will use the same exit IP or reach the same site — it
+              is useful for verifying credentials and connectivity, not for predicting
+              site-specific behavior. When provided, the check result does not update the
+              proxy's health status, since a failure may indicate a problem with the target
+              site rather than the proxy itself.
 
           extra_headers: Send extra headers