kernel 0.74.0__tar.gz → 0.76.0__tar.gz

kernel-0.76.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.76.0"
+}

{kernel-0.74.0 → kernel-0.76.0}/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 0.76.0 (2026-07-09)
+
+Full Changelog: [v0.75.0...v0.76.0](https://github.com/kernel/kernel-python-sdk/compare/v0.75.0...v0.76.0)
+
+### Features
+
+* Layer telemetry request config onto the default set ([c6d6b65](https://github.com/kernel/kernel-python-sdk/commit/c6d6b651a377d4283af20ab631f2adf25354954f))
+* Return credential value keys and support removing values on update ([1c4af8e](https://github.com/kernel/kernel-python-sdk/commit/1c4af8ea100bd288182b38792ad87abab4136543))
+
+## 0.75.0 (2026-07-08)
+
+Full Changelog: [v0.74.0...v0.75.0](https://github.com/kernel/kernel-python-sdk/compare/v0.74.0...v0.75.0)
+
+### Features
+
+* Auto-flush pools when a managed auth profile re-authenticates ([430c07f](https://github.com/kernel/kernel-python-sdk/commit/430c07fc2bfd5ab80fe25cc4677b34729bf4b4ee))
+* Document env var redaction on deployment and app reads ([51d713b](https://github.com/kernel/kernel-python-sdk/commit/51d713b92b4c0ed0c2420ea2e128568530a81a14))
+* Expose resolved profile_id and extension_ids on browser pool reads ([56876e9](https://github.com/kernel/kernel-python-sdk/commit/56876e9a49fca34ec34b58ea8f5f85130c0c0315))
+* Reject API key self-deletion ([482f920](https://github.com/kernel/kernel-python-sdk/commit/482f9209f956e5615bdbaa6ec9c58081df56587b))
+* Revert "Store and return a sha256 checksum for uploaded extensions (#… ([74dbc54](https://github.com/kernel/kernel-python-sdk/commit/74dbc54d4d8d5b330f74985227fa09f7569457a7))
+* Store and return a sha256 checksum for uploaded extensions ([b266775](https://github.com/kernel/kernel-python-sdk/commit/b266775497fec10224e965c787c146494eecdae8))
+* Store and return a sha256 checksum for uploaded extensions (reland) ([98cfb28](https://github.com/kernel/kernel-python-sdk/commit/98cfb2835be3d321799bbfd0400e1bb59b39b218))
+
+
+### Documentation
+
+* **api:** clarify reuse/discard_all_idle pool config staleness ([e8641eb](https://github.com/kernel/kernel-python-sdk/commit/e8641ebe96926b22f8874a8ff79498a4cbe7e4ed))
+
 ## 0.74.0 (2026-07-06)
 
 Full Changelog: [v0.73.0...v0.74.0](https://github.com/kernel/kernel-python-sdk/compare/v0.73.0...v0.74.0)

{kernel-0.74.0 → kernel-0.76.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.74.0
+Version: 0.76.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk

{kernel-0.74.0 → kernel-0.76.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.74.0"
+version = "0.76.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.74.0"  # x-release-please-version
+__version__ = "0.76.0"  # x-release-please-version

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/resources/api_keys.py

@@ -266,8 +266,10 @@ class APIKeysResource(SyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> None:
-        """
-        Delete an API key.
+        """Delete an API key.
+
+        A key cannot delete itself; use a different key to delete
+        this one.
 
         Args:
           extra_headers: Send extra headers
@@ -575,8 +577,10 @@ class AsyncAPIKeysResource(AsyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> None:
-        """
-        Delete an API key.
+        """Delete an API key.
+
+        A key cannot delete itself; use a different key to delete
+        this one.
 
         Args:
           extra_headers: Send extra headers

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/resources/browser_pools.py

@@ -69,6 +69,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
@@ -110,16 +111,19 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -166,6 +170,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
@@ -225,6 +230,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         size: int | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
@@ -241,7 +247,9 @@ class BrowserPoolsResource(SyncAPIResource):
 
         As with creation,
         save_changes on the pool profile is ignored (not rejected); pooled browsers
-        never persist changes back to the profile.
+        never persist changes back to the profile. To clear the profile reference, send
+        `profile: { "id": "" }`. Clearing the profile also disables
+        `refresh_on_profile_update`.
 
         Args:
           chrome_policy: Custom Chrome enterprise policy overrides applied to all browsers in this pool.
@@ -249,8 +257,12 @@ class BrowserPoolsResource(SyncAPIResource):
               Blocked: kernel-managed policies (extensions, proxy, CDP/automation). See
               https://chromeenterprise.google/policies/
 
-          discard_all_idle: Whether to discard all idle browsers and rebuild the pool immediately. Defaults
-              to false.
+          discard_all_idle: Whether to discard all idle browsers and rebuild them immediately with the new
+              configuration. Defaults to false. Only browsers that are idle when the update
+              runs are rebuilt. A browser that is in use during the update keeps its original
+              configuration, and if it is later released with `reuse: true` it returns to the
+              pool with that stale configuration until it is discarded (by this flag on a
+              later update, or by flushing the pool).
 
           extensions: List of browser extensions to load into the session. Provide each by id or name.
 
@@ -265,16 +277,19 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           size: Number of browsers to maintain in the pool. The maximum size is determined by
               your organization's pooled sessions limit (the sum of all pool sizes cannot
               exceed your limit).
@@ -327,6 +342,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "size": size,
                     "start_url": start_url,
                     "stealth": stealth,
@@ -554,7 +570,10 @@ class BrowserPoolsResource(SyncAPIResource):
           session_id: Browser session ID to release back to the pool
 
           reuse: Whether to reuse the browser instance or destroy it and create a new one.
-              Defaults to true.
+              Defaults to true. A reused browser keeps the configuration it was created with,
+              so it does not pick up pool configuration changes made while it was in use.
+              Release with `reuse: false`, or flush the pool afterward, to rebuild it with the
+              current configuration.
 
           extra_headers: Send extra headers
 
@@ -617,6 +636,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         timeout_seconds: int | Omit = omit,
@@ -658,16 +678,19 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -714,6 +737,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "start_url": start_url,
                     "stealth": stealth,
                     "timeout_seconds": timeout_seconds,
@@ -773,6 +797,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
+        refresh_on_profile_update: bool | Omit = omit,
         size: int | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
@@ -789,7 +814,9 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
         As with creation,
         save_changes on the pool profile is ignored (not rejected); pooled browsers
-        never persist changes back to the profile.
+        never persist changes back to the profile. To clear the profile reference, send
+        `profile: { "id": "" }`. Clearing the profile also disables
+        `refresh_on_profile_update`.
 
         Args:
           chrome_policy: Custom Chrome enterprise policy overrides applied to all browsers in this pool.
@@ -797,8 +824,12 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
               Blocked: kernel-managed policies (extensions, proxy, CDP/automation). See
               https://chromeenterprise.google/policies/
 
-          discard_all_idle: Whether to discard all idle browsers and rebuild the pool immediately. Defaults
-              to false.
+          discard_all_idle: Whether to discard all idle browsers and rebuild them immediately with the new
+              configuration. Defaults to false. Only browsers that are idle when the update
+              runs are rebuilt. A browser that is in use during the update keeps its original
+              configuration, and if it is later released with `reuse: true` it returns to the
+              pool with that stale configuration until it is discarded (by this flag on a
+              later update, or by flushing the pool).
 
           extensions: List of browser extensions to load into the session. Provide each by id or name.
 
@@ -813,16 +844,19 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
-          profile: Profile selection for browsers in a pool. Provide either id or name. The
-              matching profile is loaded into every browser in the pool. Profiles must be
-              created beforehand. Unlike single browser sessions, pools load the profile
-              read-only and never persist changes back to it, so save_changes is omitted here.
-              Any save_changes value sent on a pool profile is silently ignored rather than
-              rejected, so callers reusing a single-session profile object will not error.
+          profile: Profile configuration for browsers in a pool. Provide either id or name.
+              Profiles must be created beforehand. Unlike single browser sessions, pools load
+              the profile read-only and never persist changes back to it, so save_changes is
+              omitted here. Any save_changes value sent on a pool profile is silently ignored
+              rather than rejected.
 
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session.
 
+          refresh_on_profile_update: When true, flush idle browsers when the profile the pool uses is updated, so
+              pool browsers pick up the latest profile data. Requires a profile to be set on
+              the pool.
+
           size: Number of browsers to maintain in the pool. The maximum size is determined by
               your organization's pooled sessions limit (the sum of all pool sizes cannot
               exceed your limit).
@@ -875,6 +909,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "name": name,
                     "profile": profile,
                     "proxy_id": proxy_id,
+                    "refresh_on_profile_update": refresh_on_profile_update,
                     "size": size,
                     "start_url": start_url,
                     "stealth": stealth,
@@ -1102,7 +1137,10 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           session_id: Browser session ID to release back to the pool
 
           reuse: Whether to reuse the browser instance or destroy it and create a new one.
-              Defaults to true.
+              Defaults to true. A reused browser keeps the configuration it was created with,
+              so it does not pick up pool configuration changes made while it was in use.
+              Release with `reuse: false`, or flush the pool afterward, to rebuild it with the
+              current configuration.
 
           extra_headers: Send extra headers
 

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/resources/credentials.py

@@ -7,7 +7,7 @@ from typing import Dict, Optional
 import httpx
 
 from ..types import credential_list_params, credential_create_params, credential_update_params
-from .._types import Body, Omit, Query, Headers, NoneType, NotGiven, omit, not_given
+from .._types import Body, Omit, Query, Headers, NoneType, NotGiven, SequenceNotStr, omit, not_given
 from .._utils import path_template, maybe_transform, async_maybe_transform
 from .._compat import cached_property
 from .._resource import SyncAPIResource, AsyncAPIResource
@@ -145,6 +145,7 @@ class CredentialsResource(SyncAPIResource):
         id_or_name: str,
         *,
         name: str | Omit = omit,
+        remove_value_keys: SequenceNotStr[str] | Omit = omit,
         sso_provider: Optional[str] | Omit = omit,
         totp_secret: str | Omit = omit,
         values: Dict[str, str] | Omit = omit,
@@ -163,6 +164,9 @@ class CredentialsResource(SyncAPIResource):
         Args:
           name: New name for the credential
 
+          remove_value_keys: Field names to remove from the credential's stored values. Removals are applied
+              before `values` are merged, so a key present in both is kept with its new value.
+
           sso_provider: If set, indicates this credential should be used with the specified SSO
               provider. Set to empty string or null to remove.
 
@@ -187,6 +191,7 @@ class CredentialsResource(SyncAPIResource):
             body=maybe_transform(
                 {
                     "name": name,
+                    "remove_value_keys": remove_value_keys,
                     "sso_provider": sso_provider,
                     "totp_secret": totp_secret,
                     "values": values,
@@ -445,6 +450,7 @@ class AsyncCredentialsResource(AsyncAPIResource):
         id_or_name: str,
         *,
         name: str | Omit = omit,
+        remove_value_keys: SequenceNotStr[str] | Omit = omit,
         sso_provider: Optional[str] | Omit = omit,
         totp_secret: str | Omit = omit,
         values: Dict[str, str] | Omit = omit,
@@ -463,6 +469,9 @@ class AsyncCredentialsResource(AsyncAPIResource):
         Args:
           name: New name for the credential
 
+          remove_value_keys: Field names to remove from the credential's stored values. Removals are applied
+              before `values` are merged, so a key present in both is kept with its new value.
+
           sso_provider: If set, indicates this credential should be used with the specified SSO
               provider. Set to empty string or null to remove.
 
@@ -487,6 +496,7 @@ class AsyncCredentialsResource(AsyncAPIResource):
             body=await async_maybe_transform(
                 {
                     "name": name,
+                    "remove_value_keys": remove_value_keys,
                     "sso_provider": sso_provider,
                     "totp_secret": totp_secret,
                     "values": values,

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/types/app_list_response.py

@@ -25,7 +25,12 @@ class AppListResponse(BaseModel):
     """Deployment ID"""
 
     env_vars: Dict[str, str]
-    """Environment variables configured for this app version"""
+    """Environment variables configured for this app version.
+
+    Values are redacted for API key, OAuth, and managed-auth callers, which receive
+    every key with an empty string value. Only dashboard sessions receive the actual
+    values.
+    """
 
     region: Literal["aws.us-east-1a"]
     """Deployment region code"""

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/types/browser_create_params.py

@@ -134,16 +134,26 @@ class Telemetry(TypedDict, total=False):
     browser: BrowserTelemetryCategoriesConfigParam
     """Per-category capture flags.
 
-    Selection is opt-in: only the categories set to enabled=true are captured;
-    anything omitted is off. If enabled is true and browser is omitted or empty, the
-    default category set is used. A browser config that enables nothing stops
-    capture on update and starts no capture on create.
+    The operational categories (control, connection, system, captcha) are captured
+    whenever telemetry is enabled; set one to enabled=false to opt out. The CDP
+    categories (console, network, page, interaction) and screenshot are off by
+    default; set enabled=true to opt in. On create, provided categories layer onto
+    the default set. On update, provided categories merge onto the session's current
+    config; when no telemetry is active this falls back to the default set (matching
+    create). If browser is omitted or empty, the default set is used. A browser
+    config that disables every category stops capture on update and starts no
+    capture on create.
     """
 
     enabled: bool
     """Request shortcut for browser telemetry capture.
 
-    True enables capture using the default category set unless browser category
-    settings are provided. False stops capture on update and starts no capture on
-    create. enabled=false cannot be combined with browser category settings.
+    True enables capture; with no browser category settings it captures the default
+    set (control, connection, system, captcha), and any browser category settings
+    are layered onto that default set. On update, enabled=true resolves the config
+    fresh from the default set plus any provided categories, replacing the session's
+    current selection rather than merging onto it; omit enabled to merge categories
+    onto the current selection instead. False stops capture on update and starts no
+    capture on create. enabled=false cannot be combined with browser category
+    settings.
     """

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/types/browser_pool.py

@@ -11,13 +11,12 @@ __all__ = ["BrowserPool", "BrowserPoolConfig", "BrowserPoolConfigProfile"]
 
 
 class BrowserPoolConfigProfile(BaseModel):
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is
-    loaded into every browser in the pool. Profiles must be created beforehand. Unlike single
-    browser sessions, pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is silently
-    ignored rather than rejected, so callers reusing a single-session profile object will not error.
+    Provide either id or name. Profiles must
+    be created beforehand. Unlike single browser sessions, pools load the profile read-only
+    and never persist changes back to it, so save_changes is omitted here. Any save_changes
+    value sent on a pool profile is silently ignored rather than rejected.
     """
 
     id: Optional[str] = None
@@ -74,14 +73,12 @@ class BrowserPoolConfig(BaseModel):
     """Optional name for the browser pool. Must be unique within the project."""
 
     profile: Optional[BrowserPoolConfigProfile] = None
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is loaded into every browser in
-    the pool. Profiles must be created beforehand. Unlike single browser sessions,
-    pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is
-    silently ignored rather than rejected, so callers reusing a single-session
-    profile object will not error.
+    Provide either id or name. Profiles must be created beforehand. Unlike single
+    browser sessions, pools load the profile read-only and never persist changes
+    back to it, so save_changes is omitted here. Any save_changes value sent on a
+    pool profile is silently ignored rather than rejected.
     """
 
     proxy_id: Optional[str] = None
@@ -90,6 +87,13 @@ class BrowserPoolConfig(BaseModel):
     Must reference a proxy in the same project as the browser session.
     """
 
+    refresh_on_profile_update: Optional[bool] = None
+    """
+    When true, flush idle browsers when the profile the pool uses is updated, so
+    pool browsers pick up the latest profile data. Requires a profile to be set on
+    the pool.
+    """
+
     start_url: Optional[str] = None
     """Optional URL to navigate to when a new browser is warmed into the pool.
 
@@ -146,5 +150,21 @@ class BrowserPool(BaseModel):
     created_at: datetime
     """Timestamp when the browser pool was created"""
 
+    extension_ids: List[str]
+    """Resolved extension IDs attached to the pool, in configured load order.
+
+    Empty when no extensions are attached. Authoritative for programmatic consumers;
+    the extensions inside `browser_pool_config` reflect the configured selector
+    (echoed as sent on create).
+    """
+
     name: Optional[str] = None
     """Browser pool name, if set"""
+
+    profile_id: Optional[str] = None
+    """Resolved profile ID the pool is attached to.
+
+    Omitted when no profile is attached. Authoritative for programmatic consumers;
+    the profile inside `browser_pool_config` reflects the configured selector
+    (echoed as sent on create).
+    """

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/types/browser_pool_create_params.py

@@ -53,14 +53,12 @@ class BrowserPoolCreateParams(TypedDict, total=False):
     """Optional name for the browser pool. Must be unique within the project."""
 
     profile: Profile
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is loaded into every browser in
-    the pool. Profiles must be created beforehand. Unlike single browser sessions,
-    pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is
-    silently ignored rather than rejected, so callers reusing a single-session
-    profile object will not error.
+    Provide either id or name. Profiles must be created beforehand. Unlike single
+    browser sessions, pools load the profile read-only and never persist changes
+    back to it, so save_changes is omitted here. Any save_changes value sent on a
+    pool profile is silently ignored rather than rejected.
     """
 
     proxy_id: str
@@ -69,6 +67,13 @@ class BrowserPoolCreateParams(TypedDict, total=False):
     Must reference a proxy in the same project as the browser session.
     """
 
+    refresh_on_profile_update: bool
+    """
+    When true, flush idle browsers when the profile the pool uses is updated, so
+    pool browsers pick up the latest profile data. Requires a profile to be set on
+    the pool.
+    """
+
     start_url: str
     """Optional URL to navigate to when a new browser is warmed into the pool.
 
@@ -108,13 +113,12 @@ class BrowserPoolCreateParams(TypedDict, total=False):
 
 
 class Profile(TypedDict, total=False):
-    """Profile selection for browsers in a pool.
+    """Profile configuration for browsers in a pool.
 
-    Provide either id or name. The matching profile is
-    loaded into every browser in the pool. Profiles must be created beforehand. Unlike single
-    browser sessions, pools load the profile read-only and never persist changes back to it, so
-    save_changes is omitted here. Any save_changes value sent on a pool profile is silently
-    ignored rather than rejected, so callers reusing a single-session profile object will not error.
+    Provide either id or name. Profiles must
+    be created beforehand. Unlike single browser sessions, pools load the profile read-only
+    and never persist changes back to it, so save_changes is omitted here. Any save_changes
+    value sent on a pool profile is silently ignored rather than rejected.
     """
 
     id: str

{kernel-0.74.0 → kernel-0.76.0}/src/kernel/types/browser_pool_release_params.py

@@ -14,5 +14,8 @@ class BrowserPoolReleaseParams(TypedDict, total=False):
     reuse: bool
     """Whether to reuse the browser instance or destroy it and create a new one.
 
-    Defaults to true.
+    Defaults to true. A reused browser keeps the configuration it was created with,
+    so it does not pick up pool configuration changes made while it was in use.
+    Release with `reuse: false`, or flush the pool afterward, to rebuild it with the
+    current configuration.
     """