kernel 0.121.0__tar.gz → 0.123.0__tar.gz

kernel-0.123.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.123.0"
+}

{kernel-0.121.0 → kernel-0.123.0}/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## [0.123.0](https://github.com/kernel/kernel-python-sdk/compare/v0.122.0...v0.123.0) (2026-10-09)
+
+
+### Features
+
+* Add video_memory to request the 4GiB VRAM GPU browser tier ([31b7bda](https://github.com/kernel/kernel-python-sdk/commit/31b7bda620f53bc6026b5eb3fac34d50859fa1df))
+* Filter the telemetry SSE stream by event type ([f7daa04](https://github.com/kernel/kernel-python-sdk/commit/f7daa043513d08f6cc6aefec7b058d5bd57f2590))
+* Fix 1Password fill classification for repeat fills and unconfirmed submits ([d387aab](https://github.com/kernel/kernel-python-sdk/commit/d387aab4847329eb4405318a20ee93a372399f70))
+* Support egress allowlists on browser pools ([541fb3f](https://github.com/kernel/kernel-python-sdk/commit/541fb3fc033b8b9542838a116684578cab18fba0))
+
+## [0.122.0](https://github.com/kernel/kernel-python-sdk/compare/v0.121.0...v0.122.0) (2026-10-09)
+
+
+### Features
+
+* Accept client-encrypted credential values in vault items ([a289cba](https://github.com/kernel/kernel-python-sdk/commit/a289cba652251b6f42b60aad92619627efc9304b))
+* Add feature-gated Korean ISP proxies ([56785ca](https://github.com/kernel/kernel-python-sdk/commit/56785cad65cda7e757258204de47f1a4a5974088))
+* Describe vault fill as safe to retry ([e419d6d](https://github.com/kernel/kernel-python-sdk/commit/e419d6d8970f0e78f91b4771969787bb835a6acf))
+* Infer a challenge result for unobserved captcha providers in the relay ([0e4734c](https://github.com/kernel/kernel-python-sdk/commit/0e4734caedae1068b5f3f9eeb5212871dfc4a0ec))
+* Support proxy routes in browser pools ([669ea52](https://github.com/kernel/kernel-python-sdk/commit/669ea5294ab1da43e5042209992364ca009f7053))
+
 ## [0.121.0](https://github.com/kernel/kernel-python-sdk/compare/v0.120.0...v0.121.0) (2026-10-07)
 
 

{kernel-0.121.0 → kernel-0.123.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.121.0
+Version: 0.123.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk
@@ -22,7 +22,8 @@ Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Typing :: Typed
 Requires-Python: >=3.9
-Requires-Dist: anyio<5,>=3.5.0
+Requires-Dist: anyio<5,>=3.5.0; python_version < '3.10'
+Requires-Dist: anyio<5,>=4.14.2; python_version >= '3.10'
 Requires-Dist: distro<2,>=1.7.0
 Requires-Dist: httpx<1,>=0.23.0
 Requires-Dist: pydantic<3,>=1.9.0

{kernel-0.121.0 → kernel-0.123.0}/api.md

@@ -131,6 +131,7 @@ from kernel.types import (
     BrowserReplResult,
     BrowserReplTextContent,
     BrowserUsage,
+    BrowserVideoMemory,
     Profile,
     Tags,
     VaultReference,
@@ -546,7 +547,7 @@ Methods:
 Types:
 
 ```python
-from kernel.types import Vault
+from kernel.types import Vault, VaultEncryptionKey
 ```
 
 Methods:
@@ -554,6 +555,7 @@ Methods:
 - <code title="get /vaults/{id_or_name}">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">retrieve</a>(id_or_name) -> <a href="./src/kernel/types/vault.py">Vault</a></code>
 - <code title="get /vaults">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">list</a>(\*\*<a href="src/kernel/types/vault_list_params.py">params</a>) -> <a href="./src/kernel/types/vault.py">SyncOffsetPagination[Vault]</a></code>
 - <code title="delete /vaults/{id_or_name}">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">delete</a>(id_or_name) -> None</code>
+- <code title="get /vaults/{id_or_name}/encryption_key">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">retrieve_encryption_key</a>(id_or_name) -> <a href="./src/kernel/types/vault_encryption_key.py">VaultEncryptionKey</a></code>
 - <code title="post /vaults">client.vaults.<a href="./src/kernel/resources/vaults/vaults.py">upsert</a>(\*\*<a href="src/kernel/types/vault_upsert_params.py">params</a>) -> <a href="./src/kernel/types/vault.py">Vault</a></code>
 
 ## Items

{kernel-0.121.0 → kernel-0.123.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.121.0"
+version = "0.123.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"
@@ -12,7 +12,8 @@ dependencies = [
   "httpx>=0.23.0, <1",
   "pydantic>=1.9.0, <3",
   "typing-extensions>=4.14, <5",
-  "anyio>=3.5.0, <5",
+  "anyio>=4.14.2, <5; python_version >= '3.10'",
+  "anyio>=3.5.0, <5; python_version < '3.10'",
   "distro>=1.7.0, <2",
   "sniffio",
 ]

{kernel-0.121.0 → kernel-0.123.0}/requirements-dev.lock

@@ -19,7 +19,7 @@ aiosignal==1.4.0
     # via aiohttp
 annotated-types==0.7.0
     # via pydantic
-anyio==4.12.1
+anyio==4.14.2
     # via httpx
     # via kernel
 argcomplete==3.6.3
@@ -48,7 +48,7 @@ exceptiongroup==1.3.1
     # via pytest
 execnet==2.1.2
     # via pytest-xdist
-filelock==3.19.1
+filelock==3.32.7
     # via virtualenv
 frozenlist==1.8.0
     # via aiohttp

{kernel-0.121.0 → kernel-0.123.0}/requirements.lock

@@ -19,7 +19,7 @@ aiosignal==1.4.0
     # via aiohttp
 annotated-types==0.7.0
     # via pydantic
-anyio==4.12.1
+anyio==4.14.2
     # via httpx
     # via kernel
 async-timeout==5.0.1

{kernel-0.121.0 → kernel-0.123.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.121.0"  # x-release-please-version
+__version__ = "0.123.0"  # x-release-please-version

{kernel-0.121.0 → kernel-0.123.0}/src/kernel/resources/browser_pools.py

@@ -123,7 +123,9 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          network: Network configuration applied to browsers in this pool.
+          network: Network configuration applied to browsers in this pool. Egress allowlists and
+              proxy routes require proxy-v3; the pool will not provision browsers through
+              Envoy if proxy-v3 is unavailable.
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
@@ -294,9 +296,11 @@ class BrowserPoolsResource(SyncAPIResource):
           discard_all_idle: Whether to discard all idle browsers and rebuild them immediately with the new
               configuration. Defaults to false. Only browsers that are idle when the update
               runs are rebuilt. A browser that is in use during the update keeps its original
-              configuration, and if it is later released with `reuse: true` it returns to the
-              pool with that stale configuration until it is discarded (by this flag on a
-              later update, or by flushing the pool).
+              configuration, except that its allowlist is reset to the current pool baseline
+              on release or the browser is replaced. For other configuration fields, if it is
+              later released with `reuse: true` it returns to the pool with that stale
+              configuration until it is discarded (by this flag on a later update, or by
+              flushing the pool).
 
           extensions: If provided, replaces the extension list. Empty array clears all
               previously-selected extensions. Omit this field to leave extensions unchanged.
@@ -318,9 +322,15 @@ class BrowserPoolsResource(SyncAPIResource):
 
           network: If provided, replaces the pool's network configuration. Omit to leave the
               existing configuration unchanged; an empty object ({}) removes it, while
-              network: {private_hosts: []} sets an explicit empty list. Only applied to
-              browsers created in the pool after the update; browsers already in the pool keep
-              their configuration until discarded (see discard_all_idle).
+              network: {private_hosts: []} or network: {proxy_routes: []} sets an explicit
+              empty list; allowed_hosts must be non-empty when supplied. Egress allowlists and
+              proxy routes require proxy-v3; the pool will not provision browsers through
+              Envoy if proxy-v3 is unavailable. Changing allowed_hosts automatically replaces
+              idle browsers. Leased browsers retain their allowlist until release, when it is
+              reset to the current pool baseline or the browser is replaced if it cannot
+              safely receive that baseline. Stale browsers cannot be acquired. Other network
+              fields only apply to browsers created after the update; existing browsers keep
+              those fields until discarded (see discard_all_idle).
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
@@ -770,7 +780,9 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          network: Network configuration applied to browsers in this pool.
+          network: Network configuration applied to browsers in this pool. Egress allowlists and
+              proxy routes require proxy-v3; the pool will not provision browsers through
+              Envoy if proxy-v3 is unavailable.
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
@@ -941,9 +953,11 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           discard_all_idle: Whether to discard all idle browsers and rebuild them immediately with the new
               configuration. Defaults to false. Only browsers that are idle when the update
               runs are rebuilt. A browser that is in use during the update keeps its original
-              configuration, and if it is later released with `reuse: true` it returns to the
-              pool with that stale configuration until it is discarded (by this flag on a
-              later update, or by flushing the pool).
+              configuration, except that its allowlist is reset to the current pool baseline
+              on release or the browser is replaced. For other configuration fields, if it is
+              later released with `reuse: true` it returns to the pool with that stale
+              configuration until it is discarded (by this flag on a later update, or by
+              flushing the pool).
 
           extensions: If provided, replaces the extension list. Empty array clears all
               previously-selected extensions. Omit this field to leave extensions unchanged.
@@ -965,9 +979,15 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           network: If provided, replaces the pool's network configuration. Omit to leave the
               existing configuration unchanged; an empty object ({}) removes it, while
-              network: {private_hosts: []} sets an explicit empty list. Only applied to
-              browsers created in the pool after the update; browsers already in the pool keep
-              their configuration until discarded (see discard_all_idle).
+              network: {private_hosts: []} or network: {proxy_routes: []} sets an explicit
+              empty list; allowed_hosts must be non-empty when supplied. Egress allowlists and
+              proxy routes require proxy-v3; the pool will not provision browsers through
+              Envoy if proxy-v3 is unavailable. Changing allowed_hosts automatically replaces
+              idle browsers. Leased browsers retain their allowlist until release, when it is
+              reset to the current pool baseline or the browser is replaced if it cannot
+              safely receive that baseline. Stale browsers cannot be acquired. Other network
+              fields only apply to browsers created after the update; existing browsers keep
+              those fields until discarded (see discard_all_idle).
 
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load

{kernel-0.121.0 → kernel-0.123.0}/src/kernel/resources/browsers/browsers.py

@@ -25,6 +25,7 @@ from .fs.fs import (
     AsyncFsResourceWithStreamingResponse,
 )
 from ...types import (
+    BrowserVideoMemory,
     BrowserMemoryRequest,
     browser_curl_params,
     browser_list_params,
@@ -97,6 +98,7 @@ from .playwright.playwright import (
     AsyncPlaywrightResourceWithStreamingResponse,
 )
 from ...types.browser_repl_result import BrowserReplResult
+from ...types.browser_video_memory import BrowserVideoMemory
 from ...types.browser_curl_response import BrowserCurlResponse
 from ...types.browser_list_response import BrowserListResponse
 from ...types.vault_reference_param import VaultReferenceParam
@@ -206,6 +208,7 @@ class BrowsersResource(SyncAPIResource):
         telemetry: Optional[browser_create_params.Telemetry] | Omit = omit,
         timeout_seconds: int | Omit = omit,
         vaults: Iterable[VaultReferenceParam] | Omit = omit,
+        video_memory: BrowserVideoMemory | Omit = omit,
         viewport: BrowserViewport | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -293,6 +296,10 @@ class BrowsersResource(SyncAPIResource):
           vaults: Project-scoped vaults to link to the browser session. Links are immutable after
               creation.
 
+          video_memory: Video memory (VRAM) for a GPU browser session. Requires gpu=true. Defaults to
+              2GiB, which comes with 4 vCPU and 6GiB memory. 4GiB comes with 8 vCPU and 12GiB
+              memory.
+
           viewport: Initial browser window size in pixels with optional refresh rate. If omitted,
               image defaults apply (1920x1080@25). For GPU images, the default is
               1920x1080@60. Arbitrary viewport dimensions and refresh rates are accepted.
@@ -337,6 +344,7 @@ class BrowsersResource(SyncAPIResource):
                     "telemetry": telemetry,
                     "timeout_seconds": timeout_seconds,
                     "vaults": vaults,
+                    "video_memory": video_memory,
                     "viewport": viewport,
                 },
                 browser_create_params.BrowserCreateParams,
@@ -915,6 +923,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
         telemetry: Optional[browser_create_params.Telemetry] | Omit = omit,
         timeout_seconds: int | Omit = omit,
         vaults: Iterable[VaultReferenceParam] | Omit = omit,
+        video_memory: BrowserVideoMemory | Omit = omit,
         viewport: BrowserViewport | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -1002,6 +1011,10 @@ class AsyncBrowsersResource(AsyncAPIResource):
           vaults: Project-scoped vaults to link to the browser session. Links are immutable after
               creation.
 
+          video_memory: Video memory (VRAM) for a GPU browser session. Requires gpu=true. Defaults to
+              2GiB, which comes with 4 vCPU and 6GiB memory. 4GiB comes with 8 vCPU and 12GiB
+              memory.
+
           viewport: Initial browser window size in pixels with optional refresh rate. If omitted,
               image defaults apply (1920x1080@25). For GPU images, the default is
               1920x1080@60. Arbitrary viewport dimensions and refresh rates are accepted.
@@ -1046,6 +1059,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
                     "telemetry": telemetry,
                     "timeout_seconds": timeout_seconds,
                     "vaults": vaults,
+                    "video_memory": video_memory,
                     "viewport": viewport,
                 },
                 browser_create_params.BrowserCreateParams,

{kernel-0.121.0 → kernel-0.123.0}/src/kernel/resources/browsers/telemetry.py

@@ -157,6 +157,7 @@ class TelemetryResource(SyncAPIResource):
         id_or_name: str,
         *,
         replay: str | Omit = omit,
+        type: SequenceNotStr[str] | Omit = omit,
         last_event_id: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -171,7 +172,10 @@ class TelemetryResource(SyncAPIResource):
         stream closes when the browser session terminates. Each event frame includes an
         id: field containing a monotonically increasing sequence number; pass it as
         Last-Event-ID on reconnect to resume without gaps. The event: field is never
-        set; all frames carry JSON in the data: field. A keepalive comment frame is sent
+        set; event frames carry JSON in the data: field. A frame with an id: field and
+        no data: field moves Last-Event-ID past events that were not delivered, because
+        a type filter excluded them or they could not be decoded or exceeded the size
+        limit; SSE clients dispatch no event for it. A keepalive comment frame is sent
         every 15 seconds when no events arrive. Returns 404 if the browser session does
         not exist. If telemetry was not enabled on the session, the stream opens but no
         events are delivered. Fresh connections only see new events; pass replay=all to
@@ -182,6 +186,14 @@ class TelemetryResource(SyncAPIResource):
               any other value is treated as from-now. The buffer is bounded, so the first
               event id may be greater than 1 if older events were evicted.
 
+          type: Deliver only these event types, such as captcha_solve_started or
+              captcha_challenge_result. Repeat the parameter or pass comma-separated values
+              for multiple types. Keepalive frames are always delivered. Filtered-out events
+              are not sent. An id-only frame carrying the latest skipped id is sent about
+              every 15 seconds while skipped events keep arriving, and otherwise with the next
+              keepalive or when the stream ends, so the connection stays active and
+              Last-Event-ID moves past them; a reconnect resumes after the skipped events.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -201,7 +213,13 @@ class TelemetryResource(SyncAPIResource):
                 extra_query=extra_query,
                 extra_body=extra_body,
                 timeout=timeout,
-                query=maybe_transform({"replay": replay}, telemetry_stream_params.TelemetryStreamParams),
+                query=maybe_transform(
+                    {
+                        "replay": replay,
+                        "type": type,
+                    },
+                    telemetry_stream_params.TelemetryStreamParams,
+                ),
             ),
             cast_to=TelemetryStreamResponse,
             stream=True,
@@ -339,6 +357,7 @@ class AsyncTelemetryResource(AsyncAPIResource):
         id_or_name: str,
         *,
         replay: str | Omit = omit,
+        type: SequenceNotStr[str] | Omit = omit,
         last_event_id: str | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -353,7 +372,10 @@ class AsyncTelemetryResource(AsyncAPIResource):
         stream closes when the browser session terminates. Each event frame includes an
         id: field containing a monotonically increasing sequence number; pass it as
         Last-Event-ID on reconnect to resume without gaps. The event: field is never
-        set; all frames carry JSON in the data: field. A keepalive comment frame is sent
+        set; event frames carry JSON in the data: field. A frame with an id: field and
+        no data: field moves Last-Event-ID past events that were not delivered, because
+        a type filter excluded them or they could not be decoded or exceeded the size
+        limit; SSE clients dispatch no event for it. A keepalive comment frame is sent
         every 15 seconds when no events arrive. Returns 404 if the browser session does
         not exist. If telemetry was not enabled on the session, the stream opens but no
         events are delivered. Fresh connections only see new events; pass replay=all to
@@ -364,6 +386,14 @@ class AsyncTelemetryResource(AsyncAPIResource):
               any other value is treated as from-now. The buffer is bounded, so the first
               event id may be greater than 1 if older events were evicted.
 
+          type: Deliver only these event types, such as captcha_solve_started or
+              captcha_challenge_result. Repeat the parameter or pass comma-separated values
+              for multiple types. Keepalive frames are always delivered. Filtered-out events
+              are not sent. An id-only frame carrying the latest skipped id is sent about
+              every 15 seconds while skipped events keep arriving, and otherwise with the next
+              keepalive or when the stream ends, so the connection stays active and
+              Last-Event-ID moves past them; a reconnect resumes after the skipped events.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -383,7 +413,13 @@ class AsyncTelemetryResource(AsyncAPIResource):
                 extra_query=extra_query,
                 extra_body=extra_body,
                 timeout=timeout,
-                query=await async_maybe_transform({"replay": replay}, telemetry_stream_params.TelemetryStreamParams),
+                query=await async_maybe_transform(
+                    {
+                        "replay": replay,
+                        "type": type,
+                    },
+                    telemetry_stream_params.TelemetryStreamParams,
+                ),
             ),
             cast_to=TelemetryStreamResponse,
             stream=True,

{kernel-0.121.0 → kernel-0.123.0}/src/kernel/resources/vaults/items.py

@@ -426,8 +426,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -473,8 +473,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -521,8 +521,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           checkout: Required when preparing an unused AgentCard card for a supported checkout
@@ -578,8 +578,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           browser_id: Browser session ID, not a reusable browser name.
@@ -640,8 +640,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -688,8 +688,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -739,8 +739,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           browser_id: Browser session ID, not a reusable browser name.
@@ -794,8 +794,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -843,8 +843,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           access_token_expires_at: Optional supplied expiry. Omit to clear the old expiry.
@@ -898,8 +898,8 @@ class ItemsResource(SyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           browser_id: Browser session ID, not a reusable browser name.
@@ -1600,8 +1600,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -1647,8 +1647,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -1695,8 +1695,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           checkout: Required when preparing an unused AgentCard card for a supported checkout
@@ -1752,8 +1752,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           browser_id: Browser session ID, not a reusable browser name.
@@ -1814,8 +1814,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -1862,8 +1862,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -1913,8 +1913,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           browser_id: Browser session ID, not a reusable browser name.
@@ -1968,8 +1968,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           extra_headers: Send extra headers
@@ -2017,8 +2017,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           access_token_expires_at: Optional supplied expiry. Omit to clear the old expiry.
@@ -2072,8 +2072,8 @@ class AsyncItemsResource(AsyncAPIResource):
         return 400 (invalid request or targets), 403 (access or destination denied), 404
         (resource not found), or 409 (item or browser not ready). Once writing starts,
         known partial failures and indeterminate field outcomes return 200 with status
-        `failed` or `unknown`, not an automatic-retry signal. A transport error may
-        leave the outcome unknown; do not automatically retry.
+        `failed` or `unknown`. Fill never submits the page, so it is safe to retry after
+        a failure, an `unknown` outcome, or a transport error.
 
         Args:
           browser_id: Browser session ID, not a reusable browser name.