kernel 0.74.0__tar.gz → 0.75.0__tar.gz

kernel-0.75.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.75.0"
+}

{kernel-0.74.0 → kernel-0.75.0}/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.75.0 (2026-07-08)
+
+Full Changelog: [v0.74.0...v0.75.0](https://github.com/kernel/kernel-python-sdk/compare/v0.74.0...v0.75.0)
+
+### Features
+
+* Auto-flush pools when a managed auth profile re-authenticates ([430c07f](https://github.com/kernel/kernel-python-sdk/commit/430c07fc2bfd5ab80fe25cc4677b34729bf4b4ee))
+* Document env var redaction on deployment and app reads ([51d713b](https://github.com/kernel/kernel-python-sdk/commit/51d713b92b4c0ed0c2420ea2e128568530a81a14))
+* Expose resolved profile_id and extension_ids on browser pool reads ([56876e9](https://github.com/kernel/kernel-python-sdk/commit/56876e9a49fca34ec34b58ea8f5f85130c0c0315))
+* Reject API key self-deletion ([482f920](https://github.com/kernel/kernel-python-sdk/commit/482f9209f956e5615bdbaa6ec9c58081df56587b))
+* Revert "Store and return a sha256 checksum for uploaded extensions (#… ([74dbc54](https://github.com/kernel/kernel-python-sdk/commit/74dbc54d4d8d5b330f74985227fa09f7569457a7))
+* Store and return a sha256 checksum for uploaded extensions ([b266775](https://github.com/kernel/kernel-python-sdk/commit/b266775497fec10224e965c787c146494eecdae8))
+* Store and return a sha256 checksum for uploaded extensions (reland) ([98cfb28](https://github.com/kernel/kernel-python-sdk/commit/98cfb2835be3d321799bbfd0400e1bb59b39b218))
+
+
+### Documentation
+
+* **api:** clarify reuse/discard_all_idle pool config staleness ([e8641eb](https://github.com/kernel/kernel-python-sdk/commit/e8641ebe96926b22f8874a8ff79498a4cbe7e4ed))
+
 ## 0.74.0 (2026-07-06)
 
 Full Changelog: [v0.73.0...v0.74.0](https://github.com/kernel/kernel-python-sdk/compare/v0.73.0...v0.74.0)

{kernel-0.74.0 → kernel-0.75.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.74.0
+Version: 0.75.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.74.0 → kernel-0.75.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.74.0"
+version = "0.75.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.74.0"  # x-release-please-version
+__version__ = "0.75.0"  # x-release-please-version

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/resources/api_keys.py

@@ -266,8 +266,10 @@ class APIKeysResource(SyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> None:
-        """
-        Delete an API key.
+        """Delete an API key.
+
+        A key cannot delete itself; use a different key to delete
+        this one.
 
         Args:
           extra_headers: Send extra headers
@@ -575,8 +577,10 @@ class AsyncAPIKeysResource(AsyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> None:
-        """
-        Delete an API key.
+        """Delete an API key.
+
+        A key cannot delete itself; use a different key to delete
+        this one.
 
         Args:
           extra_headers: Send extra headers

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/resources/browser_pools.py

@@ -69,6 +69,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
@@ -110,16 +111,19 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -166,6 +170,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
@@ -225,6 +230,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         size: int | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
@@ -241,7 +247,9 @@ class BrowserPoolsResource(SyncAPIResource):
 
         As with creation,
         save_changes on the pool profile is ignored (not rejected); pooled browsers
-        never persist changes back to the profile.
+        never persist changes back to the profile. To clear the profile reference, send
+        `profile: { "id": "" }`. Clearing the profile also disables
+        `refresh_on_profile_update`.
 
         Args:
           chrome_policy: Custom Chrome enterprise policy overrides applied to all browsers in this pool.
@@ -249,8 +257,12 @@ class BrowserPoolsResource(SyncAPIResource):
               Blocked: kernel-managed policies (extensions, proxy, CDP/automation). See
               https://chromeenterprise.google/policies/
 
-          discard_all_idle: Whether to discard all idle browsers and rebuild the pool immediately. Defaults
-              to false.
+          discard_all_idle: Whether to discard all idle browsers and rebuild them immediately with the new
+              configuration. Defaults to false. Only browsers that are idle when the update
+              runs are rebuilt. A browser that is in use during the update keeps its original
+              configuration, and if it is later released with `reuse: true` it returns to the
+              pool with that stale configuration until it is discarded (by this flag on a
+              later update, or by flushing the pool).
 
           extensions: List of browser extensions to load into the session. Provide each by id or name.
 
@@ -265,16 +277,19 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           size: Number of browsers to maintain in the pool. The maximum size is determined by
               your organization's pooled sessions limit (the sum of all pool sizes cannot
               exceed your limit).
@@ -327,6 +342,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "size": size,
                     "start_url": start_url,
                     "stealth": stealth,
@@ -554,7 +570,10 @@ class BrowserPoolsResource(SyncAPIResource):
           session_id: Browser session ID to release back to the pool
 
           reuse: Whether to reuse the browser instance or destroy it and create a new one.
-              Defaults to true.
+              Defaults to true. A reused browser keeps the configuration it was created with,
+              so it does not pick up pool configuration changes made while it was in use.
+              Release with `reuse: false`, or flush the pool afterward, to rebuild it with the
+              current configuration.
 
           extra_headers: Send extra headers
 
@@ -617,6 +636,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
@@ -658,16 +678,19 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -714,6 +737,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
@@ -773,6 +797,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         size: int | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
@@ -789,7 +814,9 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
         As with creation,
         save_changes on the pool profile is ignored (not rejected); pooled browsers
-        never persist changes back to the profile.
+        never persist changes back to the profile. To clear the profile reference, send
+        `profile: { "id": "" }`. Clearing the profile also disables
+        `refresh_on_profile_update`.
 
         Args:
           chrome_policy: Custom Chrome enterprise policy overrides applied to all browsers in this pool.
@@ -797,8 +824,12 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
               Blocked: kernel-managed policies (extensions, proxy, CDP/automation). See
               https://chromeenterprise.google/policies/
 
-          discard_all_idle: Whether to discard all idle browsers and rebuild the pool immediately. Defaults
-              to false.
+          discard_all_idle: Whether to discard all idle browsers and rebuild them immediately with the new
+              configuration. Defaults to false. Only browsers that are idle when the update
+              runs are rebuilt. A browser that is in use during the update keeps its original
+              configuration, and if it is later released with `reuse: true` it returns to the
+              pool with that stale configuration until it is discarded (by this flag on a
+              later update, or by flushing the pool).
 
           extensions: List of browser extensions to load into the session. Provide each by id or name.
 
@@ -813,16 +844,19 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           size: Number of browsers to maintain in the pool. The maximum size is determined by
               your organization's pooled sessions limit (the sum of all pool sizes cannot
               exceed your limit).
@@ -875,6 +909,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "size": size,
                     "start_url": start_url,
                     "stealth": stealth,
@@ -1102,7 +1137,10 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           session_id: Browser session ID to release back to the pool
 
           reuse: Whether to reuse the browser instance or destroy it and create a new one.
-              Defaults to true.
+              Defaults to true. A reused browser keeps the configuration it was created with,
+              so it does not pick up pool configuration changes made while it was in use.
+              Release with `reuse: false`, or flush the pool afterward, to rebuild it with the
+              current configuration.
 
           extra_headers: Send extra headers
 

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/app_list_response.py

@@ -25,7 +25,12 @@ class AppListResponse(BaseModel):
     """Deployment ID"""
 
     env_vars: Dict[str, str]
-    """Environment variables configured for this app version"""
+    """Environment variables configured for this app version.
+
+    Values are redacted for API key, OAuth, and managed-auth callers, which receive
+    every key with an empty string value. Only dashboard sessions receive the actual
+    values.
+    """
 
     region: Literal["aws.us-east-1a"]
     """Deployment region code"""

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/browser_pool.py

@@ -11,13 +11,12 @@ __all__ = ["BrowserPool", "BrowserPoolConfig", "BrowserPoolConfigProfile"]
 
 
 class BrowserPoolConfigProfile(BaseModel):
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is
-    loaded into every browser in the pool. Profiles must be created beforehand. Unlike single
-    browser sessions, pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is silently
-    ignored rather than rejected, so callers reusing a single-session profile object will not error.
+    Provide either id or name. Profiles must
+    be created beforehand. Unlike single browser sessions, pools load the profile read-only
+    and never persist changes back to it, so save_changes is omitted here. Any save_changes
+    value sent on a pool profile is silently ignored rather than rejected.
     """
 
     id: Optional[str] = None
@@ -74,14 +73,12 @@ class BrowserPoolConfig(BaseModel):
     """Optional name for the browser pool. Must be unique within the project."""
 
     profile: Optional[BrowserPoolConfigProfile] = None
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is loaded into every browser in
-    the pool. Profiles must be created beforehand. Unlike single browser sessions,
-    pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is
-    silently ignored rather than rejected, so callers reusing a single-session
-    profile object will not error.
+    Provide either id or name. Profiles must be created beforehand. Unlike single
+    browser sessions, pools load the profile read-only and never persist changes
+    back to it, so save_changes is omitted here. Any save_changes value sent on a
+    pool profile is silently ignored rather than rejected.
     """
 
     proxy_id: Optional[str] = None
@@ -90,6 +87,13 @@ class BrowserPoolConfig(BaseModel):
     Must reference a proxy in the same project as the browser session.
     """
 
+    refresh_on_profile_update: Optional[bool] = None
+    """
+    When true, flush idle browsers when the profile the pool uses is updated, so
+    pool browsers pick up the latest profile data. Requires a profile to be set on
+    the pool.
+    """
+
     start_url: Optional[str] = None
     """Optional URL to navigate to when a new browser is warmed into the pool.
 
@@ -146,5 +150,21 @@ class BrowserPool(BaseModel):
     created_at: datetime
     """Timestamp when the browser pool was created"""
 
+    extension_ids: List[str]
+    """Resolved extension IDs attached to the pool, in configured load order.
+
+    Empty when no extensions are attached. Authoritative for programmatic consumers;
+    the extensions inside `browser_pool_config` reflect the configured selector
+    (echoed as sent on create).
+    """
+
     name: Optional[str] = None
     """Browser pool name, if set"""
+
+    profile_id: Optional[str] = None
+    """Resolved profile ID the pool is attached to.
+
+    Omitted when no profile is attached. Authoritative for programmatic consumers;
+    the profile inside `browser_pool_config` reflects the configured selector
+    (echoed as sent on create).
+    """

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/browser_pool_create_params.py

@@ -53,14 +53,12 @@ class BrowserPoolCreateParams(TypedDict, total=False):
     """Optional name for the browser pool. Must be unique within the project."""
 
     profile: Profile
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is loaded into every browser in
-    the pool. Profiles must be created beforehand. Unlike single browser sessions,
-    pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is
-    silently ignored rather than rejected, so callers reusing a single-session
-    profile object will not error.
+    Provide either id or name. Profiles must be created beforehand. Unlike single
+    browser sessions, pools load the profile read-only and never persist changes
+    back to it, so save_changes is omitted here. Any save_changes value sent on a
+    pool profile is silently ignored rather than rejected.
     """
 
     proxy_id: str
@@ -69,6 +67,13 @@ class BrowserPoolCreateParams(TypedDict, total=False):
     Must reference a proxy in the same project as the browser session.
     """
 
+    refresh_on_profile_update: bool
+    """
+    When true, flush idle browsers when the profile the pool uses is updated, so
+    pool browsers pick up the latest profile data. Requires a profile to be set on
+    the pool.
+    """
+
     start_url: str
     """Optional URL to navigate to when a new browser is warmed into the pool.
 
@@ -108,13 +113,12 @@ class BrowserPoolCreateParams(TypedDict, total=False):
 
 
 class Profile(TypedDict, total=False):
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is
-    loaded into every browser in the pool. Profiles must be created beforehand. Unlike single
-    browser sessions, pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is silently
-    ignored rather than rejected, so callers reusing a single-session profile object will not error.
+    Provide either id or name. Profiles must
+    be created beforehand. Unlike single browser sessions, pools load the profile read-only
+    and never persist changes back to it, so save_changes is omitted here. Any save_changes
+    value sent on a pool profile is silently ignored rather than rejected.
     """
 
     id: str

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/browser_pool_release_params.py

@@ -14,5 +14,8 @@ class BrowserPoolReleaseParams(TypedDict, total=False):
     reuse: bool
     """Whether to reuse the browser instance or destroy it and create a new one.
 
-    Defaults to true.
+    Defaults to true. A reused browser keeps the configuration it was created with,
+    so it does not pick up pool configuration changes made while it was in use.
+    Release with `reuse: false`, or flush the pool afterward, to rebuild it with the
+    current configuration.
     """

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/browser_pool_update_params.py

@@ -21,9 +21,13 @@ class BrowserPoolUpdateParams(TypedDict, total=False):
     """
 
     discard_all_idle: bool
-    """Whether to discard all idle browsers and rebuild the pool immediately.
-
-    Defaults to false.
+    """
+    Whether to discard all idle browsers and rebuild them immediately with the new
+    configuration. Defaults to false. Only browsers that are idle when the update
+    runs are rebuilt. A browser that is in use during the update keeps its original
+    configuration, and if it is later released with `reuse: true` it returns to the
+    pool with that stale configuration until it is discarded (by this flag on a
+    later update, or by flushing the pool).
     """
 
     extensions: Iterable[BrowserExtension]
@@ -52,14 +56,12 @@ class BrowserPoolUpdateParams(TypedDict, total=False):
     """Optional name for the browser pool. Must be unique within the project."""
 
     profile: Profile
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is loaded into every browser in
-    the pool. Profiles must be created beforehand. Unlike single browser sessions,
-    pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is
-    silently ignored rather than rejected, so callers reusing a single-session
-    profile object will not error.
+    Provide either id or name. Profiles must be created beforehand. Unlike single
+    browser sessions, pools load the profile read-only and never persist changes
+    back to it, so save_changes is omitted here. Any save_changes value sent on a
+    pool profile is silently ignored rather than rejected.
     """
 
     proxy_id: str
@@ -68,6 +70,13 @@ class BrowserPoolUpdateParams(TypedDict, total=False):
     Must reference a proxy in the same project as the browser session.
     """
 
+    refresh_on_profile_update: bool
+    """
+    When true, flush idle browsers when the profile the pool uses is updated, so
+    pool browsers pick up the latest profile data. Requires a profile to be set on
+    the pool.
+    """
+
     size: int
     """Number of browsers to maintain in the pool.
 
@@ -114,13 +123,12 @@ class BrowserPoolUpdateParams(TypedDict, total=False):
 
 
 class Profile(TypedDict, total=False):
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is
-    loaded into every browser in the pool. Profiles must be created beforehand. Unlike single
-    browser sessions, pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is silently
-    ignored rather than rejected, so callers reusing a single-session profile object will not error.
+    Provide either id or name. Profiles must
+    be created beforehand. Unlike single browser sessions, pools load the profile read-only
+    and never persist changes back to it, so save_changes is omitted here. Any save_changes
+    value sent on a pool profile is silently ignored rather than rejected.
     """
 
     id: str

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/deployment_create_response.py

@@ -28,7 +28,12 @@ class DeploymentCreateResponse(BaseModel):
     """Relative path to the application entrypoint"""
 
     env_vars: Optional[Dict[str, str]] = None
-    """Environment variables configured for this deployment"""
+    """Environment variables configured for this deployment.
+
+    Values are redacted for API key, OAuth, and managed-auth callers, which receive
+    every key with an empty string value. Only dashboard sessions receive the actual
+    values.
+    """
 
     status_reason: Optional[str] = None
     """Status reason"""

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/deployment_follow_response.py

@@ -40,7 +40,10 @@ class AppVersionSummaryEvent(BaseModel):
     """Version label for the application"""
 
     env_vars: Optional[Dict[str, str]] = None
-    """Environment variables configured for this app version"""
+    """Environment variables configured for this app version.
+
+    Not currently populated on streamed app_version_summary events.
+    """
 
 
 DeploymentFollowResponse: TypeAlias = Annotated[

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/deployment_list_response.py

@@ -28,7 +28,12 @@ class DeploymentListResponse(BaseModel):
     """Relative path to the application entrypoint"""
 
     env_vars: Optional[Dict[str, str]] = None
-    """Environment variables configured for this deployment"""
+    """Environment variables configured for this deployment.
+
+    Values are redacted for API key, OAuth, and managed-auth callers, which receive
+    every key with an empty string value. Only dashboard sessions receive the actual
+    values.
+    """
 
     status_reason: Optional[str] = None
     """Status reason"""

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/deployment_retrieve_response.py

@@ -28,7 +28,12 @@ class DeploymentRetrieveResponse(BaseModel):
     """Relative path to the application entrypoint"""
 
     env_vars: Optional[Dict[str, str]] = None
-    """Environment variables configured for this deployment"""
+    """Environment variables configured for this deployment.
+
+    Values are redacted for API key, OAuth, and managed-auth callers, which receive
+    every key with an empty string value. Only dashboard sessions receive the actual
+    values.
+    """
 
     status_reason: Optional[str] = None
     """Status reason"""

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/deployment_state_event.py

@@ -28,7 +28,12 @@ class Deployment(BaseModel):
     """Relative path to the application entrypoint"""
 
     env_vars: Optional[Dict[str, str]] = None
-    """Environment variables configured for this deployment"""
+    """Environment variables configured for this deployment.
+
+    Values are redacted for API key, OAuth, and managed-auth callers, which receive
+    every key with an empty string value. Only dashboard sessions receive the actual
+    values.
+    """
 
     status_reason: Optional[str] = None
     """Status reason"""

{kernel-0.74.0 → kernel-0.75.0}/src/kernel/types/extension_get_response.py

@@ -20,6 +20,15 @@ class ExtensionGetResponse(BaseModel):
     size_bytes: int
     """Size of the extension archive in bytes"""
 
+    checksum: Optional[str] = None
+    """
+    SHA-256 checksum, encoded as lowercase hexadecimal, of the exact uploaded
+    extension archive bytes. This is not a normalized checksum of the extension
+    contents; archive metadata, file ordering, and compression can change the
+    checksum for otherwise identical contents. Omitted for legacy rows and
+    server-repackaged Chrome Web Store extensions.
+    """
+
     last_used_at: Optional[datetime] = None
     """Timestamp when the extension was last used"""