kernel 0.52.0__tar.gz → 0.55.0__tar.gz

kernel-0.55.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.55.0"
+}

{kernel-0.52.0 → kernel-0.55.0}/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog
 
+## 0.55.0 (2026-05-15)
+
+Full Changelog: [v0.53.0...v0.55.0](https://github.com/kernel/kernel-python-sdk/compare/v0.53.0...v0.55.0)
+
+### Features
+
+* Add health check and auto-reauth controls for managed auth connections ([9a0655e](https://github.com/kernel/kernel-python-sdk/commit/9a0655efbeef25e4929397b04f492644339f839e))
+* Polish start URL OpenAPI descriptions ([4f16fb0](https://github.com/kernel/kernel-python-sdk/commit/4f16fb073e0d295fd962e8a8aabd55bdf3144e00))
+
+## 0.53.0 (2026-05-12)
+
+Full Changelog: [v0.52.0...v0.53.0](https://github.com/kernel/kernel-python-sdk/compare/v0.52.0...v0.53.0)
+
+### Features
+
+* Add 'switch' MFA option type for generic method-switcher links ([82ae224](https://github.com/kernel/kernel-python-sdk/commit/82ae224a85a22b16e48a26a8058cc992ef772cf2))
+* Add opt-in record_session flag to managed auth ([53fea1c](https://github.com/kernel/kernel-python-sdk/commit/53fea1c26cd8de2b93944bb7625c401d05362b1c))
+* **api:** server-side search on GET /projects ([cacb057](https://github.com/kernel/kernel-python-sdk/commit/cacb057a5d1d3bcb26b6df1f6fe83067f936d642))
+* browser_pools: add start_url config (KERNEL-1217 PR 2) ([e3f0b8d](https://github.com/kernel/kernel-python-sdk/commit/e3f0b8db4b2d05140d112317315ba1e393f385cf))
+* **internal/types:** support eagerly validating pydantic iterators ([b30bc1e](https://github.com/kernel/kernel-python-sdk/commit/b30bc1e0c3493f12a3499eb037f13561dfdcaedf))
+* managed-auth: surface awaiting_external_action even when fallback actions exist ([fd4ffe4](https://github.com/kernel/kernel-python-sdk/commit/fd4ffe40e037e95e93f46b7773d6a5e468c7b8fd))
+* Scope name uniqueness to project for profiles, session_pools, extensions, credentials ([c510a51](https://github.com/kernel/kernel-python-sdk/commit/c510a515b3c57846f0e681638167ba87b8ee15c3))
+
+
+### Bug Fixes
+
+* **client:** add missing f-string prefix in file type error message ([fb5340d](https://github.com/kernel/kernel-python-sdk/commit/fb5340dbf9ea49393d87b5760a2efaaf932c9442))
+
+
+### Chores
+
+* **internal:** reformat pyproject.toml ([27c799b](https://github.com/kernel/kernel-python-sdk/commit/27c799be452cb66af59b79d24b3d5147a85b70f7))
+
+
+### Documentation
+
+* clarify record_session description in OpenAPI spec ([3ac3fb8](https://github.com/kernel/kernel-python-sdk/commit/3ac3fb8e4e643c40addd3e85f8480d5821cecca7))
+
 ## 0.52.0 (2026-04-29)
 
 Full Changelog: [v0.51.0...v0.52.0](https://github.com/kernel/kernel-python-sdk/compare/v0.51.0...v0.52.0)

{kernel-0.52.0 → kernel-0.55.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.52.0
+Version: 0.55.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.52.0 → kernel-0.55.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.52.0"
+version = "0.55.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"
@@ -168,7 +168,7 @@ show_error_codes = true
 #
 # We also exclude our `tests` as mypy doesn't always infer
 # types correctly and Pyright will still catch any type errors.
-exclude = ['src/kernel/_files.py', '_dev/.*.py', 'tests/.*']
+exclude = ["src/kernel/_files.py", "_dev/.*.py", "tests/.*"]
 
 strict_equality = true
 implicit_reexport = true

{kernel-0.52.0 → kernel-0.55.0}/src/kernel/_files.py

@@ -99,7 +99,7 @@ async def async_to_httpx_files(files: RequestFiles | None) -> HttpxRequestFiles
     elif is_sequence_t(files):
         files = [(key, await _async_transform_file(file)) for key, file in files]
     else:
-        raise TypeError("Unexpected file type input {type(files)}, expected mapping or sequence")
+        raise TypeError(f"Unexpected file type input {type(files)}, expected mapping or sequence")
 
     return files
 

{kernel-0.52.0 → kernel-0.55.0}/src/kernel/_models.py

@@ -25,7 +25,9 @@ from typing_extensions import (
     ClassVar,
     Protocol,
     Required,
+    Annotated,
     ParamSpec,
+    TypeAlias,
     TypedDict,
     TypeGuard,
     final,
@@ -79,7 +81,15 @@ from ._compat import (
 from ._constants import RAW_RESPONSE_HEADER
 
 if TYPE_CHECKING:
+    from pydantic import GetCoreSchemaHandler, ValidatorFunctionWrapHandler
+    from pydantic_core import CoreSchema, core_schema
     from pydantic_core.core_schema import ModelField, ModelSchema, LiteralSchema, ModelFieldsSchema
+else:
+    try:
+        from pydantic_core import CoreSchema, core_schema
+    except ImportError:
+        CoreSchema = None
+        core_schema = None
 
 __all__ = ["BaseModel", "GenericModel"]
 
@@ -396,6 +406,76 @@ class BaseModel(pydantic.BaseModel):
             )
 
 
+class _EagerIterable(list[_T], Generic[_T]):
+    """
+    Accepts any Iterable[T] input (including generators), consumes it
+    eagerly, and validates all items upfront.
+
+    Validation preserves the original container type where possible
+    (e.g. a set[T] stays a set[T]).  Serialization (model_dump / JSON)
+    always emits a list — round-tripping through model_dump() will not
+    restore the original container type.
+    """
+
+    @classmethod
+    def __get_pydantic_core_schema__(
+        cls,
+        source_type: Any,
+        handler: GetCoreSchemaHandler,
+    ) -> CoreSchema:
+        (item_type,) = get_args(source_type) or (Any,)
+        item_schema: CoreSchema = handler.generate_schema(item_type)
+        list_of_items_schema: CoreSchema = core_schema.list_schema(item_schema)
+
+        return core_schema.no_info_wrap_validator_function(
+            cls._validate,
+            list_of_items_schema,
+            serialization=core_schema.plain_serializer_function_ser_schema(
+                cls._serialize,
+                info_arg=False,
+            ),
+        )
+
+    @staticmethod
+    def _validate(v: Iterable[_T], handler: "ValidatorFunctionWrapHandler") -> Any:
+        original_type: type[Any] = type(v)
+
+        # Normalize to list so list_schema can validate each item
+        if isinstance(v, list):
+            items: list[_T] = v
+        else:
+            try:
+                items = list(v)
+            except TypeError as e:
+                raise TypeError("Value is not iterable") from e
+
+        # Validate items against the inner schema
+        validated: list[_T] = handler(items)
+
+        # Reconstruct original container type
+        if original_type is list:
+            return validated
+        # str(list) produces the list's repr, not a string built from items,
+        # so skip reconstruction for str and its subclasses.
+        if issubclass(original_type, str):
+            return validated
+        try:
+            return original_type(validated)
+        except (TypeError, ValueError):
+            # If the type cannot be reconstructed, just return the validated list
+            return validated
+
+    @staticmethod
+    def _serialize(v: Iterable[_T]) -> list[_T]:
+        """Always serialize as a list so Pydantic's JSON encoder is happy."""
+        if isinstance(v, list):
+            return v
+        return list(v)
+
+
+EagerIterable: TypeAlias = Annotated[Iterable[_T], _EagerIterable]
+
+
 def _construct_field(value: object, field: FieldInfo, key: str) -> object:
     if value is None:
         return field_get_default(field)

{kernel-0.52.0 → kernel-0.55.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.52.0"  # x-release-please-version
+__version__ = "0.55.0"  # x-release-please-version

{kernel-0.52.0 → kernel-0.55.0}/src/kernel/resources/auth/connections.py

@@ -62,10 +62,13 @@ class ConnectionsResource(SyncAPIResource):
         domain: str,
         profile_name: str,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
+        auto_reauth: bool | Omit = omit,
         credential: connection_create_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
+        health_checks: bool | Omit = omit,
         login_url: str | Omit = omit,
         proxy: connection_create_params.Proxy | Omit = omit,
+        record_session: bool | Omit = omit,
         save_credentials: bool | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -104,6 +107,15 @@ class ConnectionsResource(SyncAPIResource):
               - OneLogin: \\**.onelogin.com
               - Ping Identity: _.pingone.com, _.pingidentity.com
 
+          auto_reauth: Whether to permit automatic re-authentication when a scheduled health check
+              detects an expired session. This is an opt-in flag only — it does not check
+              whether re-auth is actually feasible. Even when true, re-auth only runs when the
+              system has what it needs to perform it (for example, saved credentials for the
+              required login fields), and only after a scheduled health check detects an
+              expired session — so this flag has no effect when `health_checks` is false. When
+              false, expired sessions are marked as `NEEDS_AUTH` instead of attempting
+              re-auth. Defaults to true.
+
           credential:
               Reference to credentials for the auth connection. Use one of:
 
@@ -117,11 +129,19 @@ class ConnectionsResource(SyncAPIResource):
               depends on your plan: Enterprise: 300 (5 minutes), Startup: 1200 (20 minutes),
               Hobbyist: 3600 (1 hour).
 
+          health_checks: Whether to enable periodic health checks. When false, the system will not
+              automatically verify authentication status, and `auto_reauth` has no effect on
+              the automatic flow (since re-auth is only triggered by a failed scheduled health
+              check). Defaults to true.
+
           login_url: Optional login page URL to skip discovery
 
           proxy: Proxy selection. Provide either id or name. The proxy must belong to the
               caller's org.
 
+          record_session: Whether to record browser sessions for this connection by default. Useful for
+              debugging. Can be overridden per-login. Defaults to false.
+
           save_credentials: Whether to save credentials after every successful login. Defaults to true.
               One-time codes (TOTP, SMS, etc.) are not saved.
 
@@ -140,10 +160,13 @@ class ConnectionsResource(SyncAPIResource):
                     "domain": domain,
                     "profile_name": profile_name,
                     "allowed_domains": allowed_domains,
+                    "auto_reauth": auto_reauth,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
+                    "health_checks": health_checks,
                     "login_url": login_url,
                     "proxy": proxy,
+                    "record_session": record_session,
                     "save_credentials": save_credentials,
                 },
                 connection_create_params.ConnectionCreateParams,
@@ -194,10 +217,13 @@ class ConnectionsResource(SyncAPIResource):
         id: str,
         *,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
+        auto_reauth: bool | Omit = omit,
         credential: connection_update_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
+        health_checks: bool | Omit = omit,
         login_url: str | Omit = omit,
         proxy: connection_update_params.Proxy | Omit = omit,
+        record_session: bool | Omit = omit,
         save_credentials: bool | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -214,6 +240,14 @@ class ConnectionsResource(SyncAPIResource):
         Args:
           allowed_domains: Additional domains valid for this auth flow (replaces existing list)
 
+          auto_reauth: Whether automatic re-authentication is permitted for this connection. This is an
+              opt-in flag only — it does not check whether re-auth is actually feasible. Even
+              when true, re-auth only runs when the system has what it needs to perform it
+              (for example, saved credentials for the required login fields), and only after a
+              scheduled health check detects an expired session — so this flag has no effect
+              when `health_checks` is false. When false, expired sessions detected by a health
+              check are marked as `NEEDS_AUTH` instead of attempting re-auth.
+
           credential:
               Reference to credentials for the auth connection. Use one of:
 
@@ -223,11 +257,18 @@ class ConnectionsResource(SyncAPIResource):
 
           health_check_interval: Interval in seconds between automatic health checks
 
+          health_checks: Whether periodic health checks are enabled. When set to false, the system will
+              not automatically verify authentication status, and `auto_reauth` has no effect
+              on the automatic flow (since re-auth is only triggered by a failed scheduled
+              health check).
+
           login_url: Login page URL. Set to empty string to clear.
 
           proxy: Proxy selection. Provide either id or name. The proxy must belong to the
               caller's org.
 
+          record_session: Whether to record browser sessions for this connection by default
+
           save_credentials: Whether to save credentials after every successful login
 
           extra_headers: Send extra headers
@@ -245,10 +286,13 @@ class ConnectionsResource(SyncAPIResource):
             body=maybe_transform(
                 {
                     "allowed_domains": allowed_domains,
+                    "auto_reauth": auto_reauth,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
+                    "health_checks": health_checks,
                     "login_url": login_url,
                     "proxy": proxy,
+                    "record_session": record_session,
                     "save_credentials": save_credentials,
                 },
                 connection_update_params.ConnectionUpdateParams,
@@ -398,6 +442,7 @@ class ConnectionsResource(SyncAPIResource):
         id: str,
         *,
         proxy: connection_login_params.Proxy | Omit = omit,
+        record_session: bool | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -415,6 +460,9 @@ class ConnectionsResource(SyncAPIResource):
           proxy: Proxy selection. Provide either id or name. The proxy must belong to the
               caller's org.
 
+          record_session: Override the connection's default for recording this login's browser session.
+              When omitted, the connection's record_session default is used.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -427,7 +475,13 @@ class ConnectionsResource(SyncAPIResource):
             raise ValueError(f"Expected a non-empty value for `id` but received {id!r}")
         return self._post(
             path_template("/auth/connections/{id}/login", id=id),
-            body=maybe_transform({"proxy": proxy}, connection_login_params.ConnectionLoginParams),
+            body=maybe_transform(
+                {
+                    "proxy": proxy,
+                    "record_session": record_session,
+                },
+                connection_login_params.ConnectionLoginParams,
+            ),
             options=make_request_options(
                 extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
             ),
@@ -525,10 +579,13 @@ class AsyncConnectionsResource(AsyncAPIResource):
         domain: str,
         profile_name: str,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
+        auto_reauth: bool | Omit = omit,
         credential: connection_create_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
+        health_checks: bool | Omit = omit,
         login_url: str | Omit = omit,
         proxy: connection_create_params.Proxy | Omit = omit,
+        record_session: bool | Omit = omit,
         save_credentials: bool | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -567,6 +624,15 @@ class AsyncConnectionsResource(AsyncAPIResource):
               - OneLogin: \\**.onelogin.com
               - Ping Identity: _.pingone.com, _.pingidentity.com
 
+          auto_reauth: Whether to permit automatic re-authentication when a scheduled health check
+              detects an expired session. This is an opt-in flag only — it does not check
+              whether re-auth is actually feasible. Even when true, re-auth only runs when the
+              system has what it needs to perform it (for example, saved credentials for the
+              required login fields), and only after a scheduled health check detects an
+              expired session — so this flag has no effect when `health_checks` is false. When
+              false, expired sessions are marked as `NEEDS_AUTH` instead of attempting
+              re-auth. Defaults to true.
+
           credential:
               Reference to credentials for the auth connection. Use one of:
 
@@ -580,11 +646,19 @@ class AsyncConnectionsResource(AsyncAPIResource):
               depends on your plan: Enterprise: 300 (5 minutes), Startup: 1200 (20 minutes),
               Hobbyist: 3600 (1 hour).
 
+          health_checks: Whether to enable periodic health checks. When false, the system will not
+              automatically verify authentication status, and `auto_reauth` has no effect on
+              the automatic flow (since re-auth is only triggered by a failed scheduled health
+              check). Defaults to true.
+
           login_url: Optional login page URL to skip discovery
 
           proxy: Proxy selection. Provide either id or name. The proxy must belong to the
               caller's org.
 
+          record_session: Whether to record browser sessions for this connection by default. Useful for
+              debugging. Can be overridden per-login. Defaults to false.
+
           save_credentials: Whether to save credentials after every successful login. Defaults to true.
               One-time codes (TOTP, SMS, etc.) are not saved.
 
@@ -603,10 +677,13 @@ class AsyncConnectionsResource(AsyncAPIResource):
                     "domain": domain,
                     "profile_name": profile_name,
                     "allowed_domains": allowed_domains,
+                    "auto_reauth": auto_reauth,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
+                    "health_checks": health_checks,
                     "login_url": login_url,
                     "proxy": proxy,
+                    "record_session": record_session,
                     "save_credentials": save_credentials,
                 },
                 connection_create_params.ConnectionCreateParams,
@@ -657,10 +734,13 @@ class AsyncConnectionsResource(AsyncAPIResource):
         id: str,
         *,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
+        auto_reauth: bool | Omit = omit,
         credential: connection_update_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
+        health_checks: bool | Omit = omit,
         login_url: str | Omit = omit,
         proxy: connection_update_params.Proxy | Omit = omit,
+        record_session: bool | Omit = omit,
         save_credentials: bool | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -677,6 +757,14 @@ class AsyncConnectionsResource(AsyncAPIResource):
         Args:
           allowed_domains: Additional domains valid for this auth flow (replaces existing list)
 
+          auto_reauth: Whether automatic re-authentication is permitted for this connection. This is an
+              opt-in flag only — it does not check whether re-auth is actually feasible. Even
+              when true, re-auth only runs when the system has what it needs to perform it
+              (for example, saved credentials for the required login fields), and only after a
+              scheduled health check detects an expired session — so this flag has no effect
+              when `health_checks` is false. When false, expired sessions detected by a health
+              check are marked as `NEEDS_AUTH` instead of attempting re-auth.
+
           credential:
               Reference to credentials for the auth connection. Use one of:
 
@@ -686,11 +774,18 @@ class AsyncConnectionsResource(AsyncAPIResource):
 
           health_check_interval: Interval in seconds between automatic health checks
 
+          health_checks: Whether periodic health checks are enabled. When set to false, the system will
+              not automatically verify authentication status, and `auto_reauth` has no effect
+              on the automatic flow (since re-auth is only triggered by a failed scheduled
+              health check).
+
           login_url: Login page URL. Set to empty string to clear.
 
           proxy: Proxy selection. Provide either id or name. The proxy must belong to the
               caller's org.
 
+          record_session: Whether to record browser sessions for this connection by default
+
           save_credentials: Whether to save credentials after every successful login
 
           extra_headers: Send extra headers
@@ -708,10 +803,13 @@ class AsyncConnectionsResource(AsyncAPIResource):
             body=await async_maybe_transform(
                 {
                     "allowed_domains": allowed_domains,
+                    "auto_reauth": auto_reauth,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
+                    "health_checks": health_checks,
                     "login_url": login_url,
                     "proxy": proxy,
+                    "record_session": record_session,
                     "save_credentials": save_credentials,
                 },
                 connection_update_params.ConnectionUpdateParams,
@@ -861,6 +959,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
         id: str,
         *,
         proxy: connection_login_params.Proxy | Omit = omit,
+        record_session: bool | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -878,6 +977,9 @@ class AsyncConnectionsResource(AsyncAPIResource):
           proxy: Proxy selection. Provide either id or name. The proxy must belong to the
               caller's org.
 
+          record_session: Override the connection's default for recording this login's browser session.
+              When omitted, the connection's record_session default is used.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -890,7 +992,13 @@ class AsyncConnectionsResource(AsyncAPIResource):
             raise ValueError(f"Expected a non-empty value for `id` but received {id!r}")
         return await self._post(
             path_template("/auth/connections/{id}/login", id=id),
-            body=await async_maybe_transform({"proxy": proxy}, connection_login_params.ConnectionLoginParams),
+            body=await async_maybe_transform(
+                {
+                    "proxy": proxy,
+                    "record_session": record_session,
+                },
+                connection_login_params.ConnectionLoginParams,
+            ),
             options=make_request_options(
                 extra_headers=extra_headers, extra_query=extra_query, extra_body=extra_body, timeout=timeout
             ),

{kernel-0.52.0 → kernel-0.55.0}/src/kernel/resources/browser_pools.py

@@ -68,6 +68,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy_id: str | Omit = omit,
+        start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
         viewport: BrowserViewport | Omit = omit,
@@ -100,7 +101,7 @@ class BrowserPoolsResource(SyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view.
 
-          name: Optional name for the browser pool. Must be unique within the organization.
+          name: Optional name for the browser pool. Must be unique within the project.
 
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
@@ -109,6 +110,10 @@ class BrowserPoolsResource(SyncAPIResource):
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy
               belonging to the caller's org.
 
+          start_url: Optional URL to open when a browser is created for the pool. Navigation is
+              best-effort, so navigation failures do not prevent the pool from filling. Reused
+              browsers keep the page left by the previous lease.
+
           stealth: If true, launches the browser in stealth mode to reduce detection by anti-bot
               mechanisms.
 
@@ -149,6 +154,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
                     "viewport": viewport,
@@ -208,6 +214,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy_id: str | Omit = omit,
+        start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
         viewport: BrowserViewport | Omit = omit,
@@ -243,7 +250,7 @@ class BrowserPoolsResource(SyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view.
 
-          name: Optional name for the browser pool. Must be unique within the organization.
+          name: Optional name for the browser pool. Must be unique within the project.
 
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
@@ -252,6 +259,10 @@ class BrowserPoolsResource(SyncAPIResource):
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy
               belonging to the caller's org.
 
+          start_url: Optional URL to open when a browser is created for the pool. Navigation is
+              best-effort, so navigation failures do not prevent the pool from filling. Reused
+              browsers keep the page left by the previous lease.
+
           stealth: If true, launches the browser in stealth mode to reduce detection by anti-bot
               mechanisms.
 
@@ -295,6 +306,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
                     "viewport": viewport,
@@ -530,6 +542,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy_id: str | Omit = omit,
+        start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
         viewport: BrowserViewport | Omit = omit,
@@ -562,7 +575,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view.
 
-          name: Optional name for the browser pool. Must be unique within the organization.
+          name: Optional name for the browser pool. Must be unique within the project.
 
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
@@ -571,6 +584,10 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy
               belonging to the caller's org.
 
+          start_url: Optional URL to open when a browser is created for the pool. Navigation is
+              best-effort, so navigation failures do not prevent the pool from filling. Reused
+              browsers keep the page left by the previous lease.
+
           stealth: If true, launches the browser in stealth mode to reduce detection by anti-bot
               mechanisms.
 
@@ -611,6 +628,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
                     "viewport": viewport,
@@ -670,6 +688,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy_id: str | Omit = omit,
+        start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
         viewport: BrowserViewport | Omit = omit,
@@ -705,7 +724,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           kiosk_mode: If true, launches the browser in kiosk mode to hide address bar and tabs in live
               view.
 
-          name: Optional name for the browser pool. Must be unique within the organization.
+          name: Optional name for the browser pool. Must be unique within the project.
 
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
@@ -714,6 +733,10 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy
               belonging to the caller's org.
 
+          start_url: Optional URL to open when a browser is created for the pool. Navigation is
+              best-effort, so navigation failures do not prevent the pool from filling. Reused
+              browsers keep the page left by the previous lease.
+
           stealth: If true, launches the browser in stealth mode to reduce detection by anti-bot
               mechanisms.
 
@@ -757,6 +780,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
                     "viewport": viewport,