kernel 0.87.0__tar.gz → 0.89.0__tar.gz

kernel-0.89.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.89.0"
+}

{kernel-0.87.0 → kernel-0.89.0}/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.89.0](https://github.com/kernel/kernel-python-sdk/compare/v0.88.0...v0.89.0) (2026-08-12)
+
+
+### Features
+
+* Add region as a first-class API field with plan and flag gating ([fdb020d](https://github.com/kernel/kernel-python-sdk/commit/fdb020d437b3b410b2d5758691f2818d5e744580))
+* Add typed network config with private_hosts to browsers and pools ([b30c0e3](https://github.com/kernel/kernel-python-sdk/commit/b30c0e31182f09247bbf32823c256e27725fdbfc))
+* Expose plan-derived auth limits on GET /org/limits ([9ff1b44](https://github.com/kernel/kernel-python-sdk/commit/9ff1b445f8f2bb3f9bb24f613e22c8b940fc1d5a))
+
+## [0.88.0](https://github.com/kernel/kernel-python-sdk/compare/v0.87.0...v0.88.0) (2026-08-10)
+
+### Features
+
+* Add typed browser proxy configuration using `mode`, `id`, or `name`
+* Add nested managed-auth browser configuration and per-login browser overrides
+
 ## 0.87.0 (2026-08-08)
 
 Full Changelog: [v0.86.1...v0.87.0](https://github.com/kernel/kernel-python-sdk/compare/v0.86.1...v0.87.0)

{kernel-0.87.0 → kernel-0.89.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.87.0
+Version: 0.89.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk
@@ -238,9 +238,9 @@ from kernel import Kernel
 client = Kernel()
 
 browser = client.browsers.create(
-    profile={},
+    network={},
 )
-print(browser.profile)
+print(browser.network)
 ```
 
 ## File uploads

{kernel-0.87.0 → kernel-0.89.0}/README.md

@@ -203,9 +203,9 @@ from kernel import Kernel
 client = Kernel()
 
 browser = client.browsers.create(
-    profile={},
+    network={},
 )
-print(browser.profile)
+print(browser.network)
 ```
 
 ## File uploads

{kernel-0.87.0 → kernel-0.89.0}/api.md

@@ -80,7 +80,11 @@ Types:
 
 ```python
 from kernel.types import (
+    BrowserNetworkConfig,
     BrowserPoolRef,
+    BrowserProxy,
+    BrowserProxyConfig,
+    BrowserProxyMode,
     BrowserUsage,
     Profile,
     Tags,
@@ -314,6 +318,7 @@ Types:
 from kernel.types.auth import (
     LoginResponse,
     ManagedAuth,
+    ManagedAuthBrowserConfig,
     ManagedAuthCreateRequest,
     ManagedAuthTimelineEvent,
     ManagedAuthUpdateRequest,

{kernel-0.87.0 → kernel-0.89.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.87.0"
+version = "0.89.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.87.0 → kernel-0.89.0}/release-please-config.json

@@ -10,6 +10,7 @@
   "bump-minor-pre-major": true,
   "bump-patch-for-minor-pre-major": false,
   "pull-request-header": "Automated Release PR",
+  "pull-request-footer": "Merge this pull request with a merge commit. Merging creates the GitHub release and publishes the package.",
   "pull-request-title-pattern": "release: ${version}",
   "changelog-sections": [
     {

{kernel-0.87.0 → kernel-0.89.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.87.0"  # x-release-please-version
+__version__ = "0.89.0"  # x-release-please-version

{kernel-0.87.0 → kernel-0.89.0}/src/kernel/resources/auth/connections.py

@@ -33,6 +33,7 @@ from ...types.auth.login_response import LoginResponse
 from ...types.auth.submit_fields_response import SubmitFieldsResponse
 from ...types.auth.connection_follow_response import ConnectionFollowResponse
 from ...types.auth.managed_auth_timeline_event import ManagedAuthTimelineEvent
+from ...types.auth.managed_auth_browser_config_param import ManagedAuthBrowserConfigParam
 
 __all__ = ["ConnectionsResource", "AsyncConnectionsResource"]
 
@@ -66,6 +67,7 @@ class ConnectionsResource(SyncAPIResource):
         profile_name: str,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_create_params.BrowserTelemetry] | Omit = omit,
         credential: connection_create_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -120,9 +122,11 @@ class ConnectionsResource(SyncAPIResource):
               false, expired sessions are marked as `NEEDS_AUTH` instead of attempting
               re-auth. Defaults to true.
 
-          browser_telemetry: Browser telemetry configuration used by this connection's browser sessions by
-              default. Uses the exact create-browser configuration. Can be overridden
-              per-login.
+          browser: Default browser configuration for login, reauthentication, and health-check
+              sessions.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -133,9 +137,10 @@ class ConnectionsResource(SyncAPIResource):
 
           health_check_interval: Interval in seconds between automatic health checks. When set, the system
               periodically verifies the authentication status and triggers re-authentication
-              if needed. Maximum is 86400 (24 hours). Default is 3600 (1 hour). The minimum
-              depends on your plan: Enterprise: 300 (5 minutes), Startup: 1200 (20 minutes),
-              Hobbyist: 3600 (1 hour).
+              if needed. Maximum is 86400 (24 hours). Default is 3600 (1 hour) or your plan
+              minimum, whichever is larger. The minimum depends on your plan: Enterprise: 300
+              (5 minutes), Startup: 1200 (20 minutes), Hobbyist: 3600 (1 hour), Free: 21600 (6
+              hours).
 
           health_checks: Whether to enable periodic health checks. When false, the system will not
               automatically verify authentication status, and `auto_reauth` has no effect on
@@ -144,10 +149,7 @@ class ConnectionsResource(SyncAPIResource):
 
           login_url: Optional login page URL to skip discovery
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default. Useful for
               debugging. Can be overridden per-login. Defaults to false.
@@ -171,6 +173,7 @@ class ConnectionsResource(SyncAPIResource):
                     "profile_name": profile_name,
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -229,6 +232,7 @@ class ConnectionsResource(SyncAPIResource):
         *,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_update_params.BrowserTelemetry] | Omit = omit,
         credential: connection_update_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -260,9 +264,11 @@ class ConnectionsResource(SyncAPIResource):
               when `health_checks` is false. When false, expired sessions detected by a health
               check are marked as `NEEDS_AUTH` instead of attempting re-auth.
 
-          browser_telemetry: Browser telemetry configuration used by future browser sessions for this
-              connection. Uses the exact create-browser configuration. Set enabled to false to
-              disable telemetry.
+          browser: Browser configuration updates for future login, reauthentication, and
+              health-check sessions. Omitted properties remain unchanged.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -280,10 +286,7 @@ class ConnectionsResource(SyncAPIResource):
 
           login_url: Login page URL. Set to empty string to clear.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default
 
@@ -305,6 +308,7 @@ class ConnectionsResource(SyncAPIResource):
                 {
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -464,6 +468,7 @@ class ConnectionsResource(SyncAPIResource):
         self,
         id: str,
         *,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_login_params.BrowserTelemetry] | Omit = omit,
         proxy: connection_login_params.Proxy | Omit = omit,
         record_session: bool | Omit = omit,
@@ -481,14 +486,13 @@ class ConnectionsResource(SyncAPIResource):
         credentials are stored.
 
         Args:
-          browser_telemetry: Override the connection's default browser telemetry configuration for this
-              login. When omitted, the connection's browser_telemetry default is used. Uses
-              the exact create-browser configuration.
+          browser: Browser configuration override for this login. Omitted properties inherit the
+              connection defaults.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Override the connection's default for recording this login's browser session.
               When omitted, the connection's record_session default is used.
@@ -507,6 +511,7 @@ class ConnectionsResource(SyncAPIResource):
             path_template("/auth/connections/{id}/login", id=id),
             body=maybe_transform(
                 {
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "proxy": proxy,
                     "record_session": record_session,
@@ -675,6 +680,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
         profile_name: str,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_create_params.BrowserTelemetry] | Omit = omit,
         credential: connection_create_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -729,9 +735,11 @@ class AsyncConnectionsResource(AsyncAPIResource):
               false, expired sessions are marked as `NEEDS_AUTH` instead of attempting
               re-auth. Defaults to true.
 
-          browser_telemetry: Browser telemetry configuration used by this connection's browser sessions by
-              default. Uses the exact create-browser configuration. Can be overridden
-              per-login.
+          browser: Default browser configuration for login, reauthentication, and health-check
+              sessions.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -742,9 +750,10 @@ class AsyncConnectionsResource(AsyncAPIResource):
 
           health_check_interval: Interval in seconds between automatic health checks. When set, the system
               periodically verifies the authentication status and triggers re-authentication
-              if needed. Maximum is 86400 (24 hours). Default is 3600 (1 hour). The minimum
-              depends on your plan: Enterprise: 300 (5 minutes), Startup: 1200 (20 minutes),
-              Hobbyist: 3600 (1 hour).
+              if needed. Maximum is 86400 (24 hours). Default is 3600 (1 hour) or your plan
+              minimum, whichever is larger. The minimum depends on your plan: Enterprise: 300
+              (5 minutes), Startup: 1200 (20 minutes), Hobbyist: 3600 (1 hour), Free: 21600 (6
+              hours).
 
           health_checks: Whether to enable periodic health checks. When false, the system will not
               automatically verify authentication status, and `auto_reauth` has no effect on
@@ -753,10 +762,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
 
           login_url: Optional login page URL to skip discovery
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default. Useful for
               debugging. Can be overridden per-login. Defaults to false.
@@ -780,6 +786,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
                     "profile_name": profile_name,
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -838,6 +845,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
         *,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_update_params.BrowserTelemetry] | Omit = omit,
         credential: connection_update_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -869,9 +877,11 @@ class AsyncConnectionsResource(AsyncAPIResource):
               when `health_checks` is false. When false, expired sessions detected by a health
               check are marked as `NEEDS_AUTH` instead of attempting re-auth.
 
-          browser_telemetry: Browser telemetry configuration used by future browser sessions for this
-              connection. Uses the exact create-browser configuration. Set enabled to false to
-              disable telemetry.
+          browser: Browser configuration updates for future login, reauthentication, and
+              health-check sessions. Omitted properties remain unchanged.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -889,10 +899,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
 
           login_url: Login page URL. Set to empty string to clear.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default
 
@@ -914,6 +921,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
                 {
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -1073,6 +1081,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
         self,
         id: str,
         *,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_login_params.BrowserTelemetry] | Omit = omit,
         proxy: connection_login_params.Proxy | Omit = omit,
         record_session: bool | Omit = omit,
@@ -1090,14 +1099,13 @@ class AsyncConnectionsResource(AsyncAPIResource):
         credentials are stored.
 
         Args:
-          browser_telemetry: Override the connection's default browser telemetry configuration for this
-              login. When omitted, the connection's browser_telemetry default is used. Uses
-              the exact create-browser configuration.
+          browser: Browser configuration override for this login. Omitted properties inherit the
+              connection defaults.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Override the connection's default for recording this login's browser session.
               When omitted, the connection's record_session default is used.
@@ -1116,6 +1124,7 @@ class AsyncConnectionsResource(AsyncAPIResource):
             path_template("/auth/connections/{id}/login", id=id),
             body=await async_maybe_transform(
                 {
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "proxy": proxy,
                     "record_session": record_session,

{kernel-0.87.0 → kernel-0.89.0}/src/kernel/resources/browser_pools.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 from typing import Dict, Iterable, Optional
+from typing_extensions import Literal
 
 import httpx
 
@@ -28,6 +29,7 @@ from ..pagination import SyncOffsetPagination, AsyncOffsetPagination
 from .._base_client import AsyncPaginator, make_request_options
 from ..types.tags_param import TagsParam
 from ..types.browser_pool import BrowserPool
+from ..types.browser_network_config_param import BrowserNetworkConfigParam
 from ..types.browser_pool_acquire_response import BrowserPoolAcquireResponse
 from ..types.shared_params.browser_viewport import BrowserViewport
 from ..types.shared_params.browser_extension import BrowserExtension
@@ -67,9 +69,11 @@ class BrowserPoolsResource(SyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         telemetry: Optional[browser_pool_create_params.Telemetry] | Omit = omit,
@@ -113,6 +117,8 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
+          network: Network configuration applied to browsers in this pool.
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -126,6 +132,10 @@ class BrowserPoolsResource(SyncAPIResource):
               pool browsers pick up the latest profile data. When a profile is provided during
               creation, this defaults to true. Requires a profile to be set on the pool.
 
+          region: Geographic region for the browser pool. It is fixed once the pool is created.
+              Region selection requires a Start-Up or Enterprise plan, defaults to us-east
+              when omitted on create.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -177,9 +187,11 @@ class BrowserPoolsResource(SyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
+                    "region": region,
                     "start_url": start_url,
                     "stealth": stealth,
                     "telemetry": telemetry,
@@ -238,6 +250,7 @@ class BrowserPoolsResource(SyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
@@ -291,6 +304,12 @@ class BrowserPoolsResource(SyncAPIResource):
           name: If provided, replaces the pool name. Empty string is a no-op; the pool name
               cannot be cleared or reset to empty once assigned.
 
+          network: If provided, replaces the pool's network configuration. Omit to leave the
+              existing configuration unchanged; an empty object ({}) removes it, while
+              network: {private_hosts: []} sets an explicit empty list. Only applied to
+              browsers created in the pool after the update; browsers already in the pool keep
+              their configuration until discarded (see discard_all_idle).
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -361,6 +380,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
@@ -386,6 +406,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -409,6 +430,8 @@ class BrowserPoolsResource(SyncAPIResource):
           query: Case-insensitive substring match against browser pool name. IDs match by exact
               value.
 
+          region: Filter pools by geographic region. Omit to list pools in all regions.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -431,6 +454,7 @@ class BrowserPoolsResource(SyncAPIResource):
                         "name": name,
                         "offset": offset,
                         "query": query,
+                        "region": region,
                     },
                     browser_pool_list_params.BrowserPoolListParams,
                 ),
@@ -675,9 +699,11 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         telemetry: Optional[browser_pool_create_params.Telemetry] | Omit = omit,
@@ -721,6 +747,8 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
+          network: Network configuration applied to browsers in this pool.
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -734,6 +762,10 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
               pool browsers pick up the latest profile data. When a profile is provided during
               creation, this defaults to true. Requires a profile to be set on the pool.
 
+          region: Geographic region for the browser pool. It is fixed once the pool is created.
+              Region selection requires a Start-Up or Enterprise plan, defaults to us-east
+              when omitted on create.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -785,9 +817,11 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
+                    "region": region,
                     "start_url": start_url,
                     "stealth": stealth,
                     "telemetry": telemetry,
@@ -846,6 +880,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
@@ -899,6 +934,12 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           name: If provided, replaces the pool name. Empty string is a no-op; the pool name
               cannot be cleared or reset to empty once assigned.
 
+          network: If provided, replaces the pool's network configuration. Omit to leave the
+              existing configuration unchanged; an empty object ({}) removes it, while
+              network: {private_hosts: []} sets an explicit empty list. Only applied to
+              browsers created in the pool after the update; browsers already in the pool keep
+              their configuration until discarded (see discard_all_idle).
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -969,6 +1010,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
@@ -994,6 +1036,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -1017,6 +1060,8 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           query: Case-insensitive substring match against browser pool name. IDs match by exact
               value.
 
+          region: Filter pools by geographic region. Omit to list pools in all regions.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -1039,6 +1084,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                         "name": name,
                         "offset": offset,
                         "query": query,
+                        "region": region,
                     },
                     browser_pool_list_params.BrowserPoolListParams,
                 ),