kernel 0.88.0__tar.gz → 0.89.0__tar.gz

kernel-0.89.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.89.0"
+}

{kernel-0.88.0 → kernel-0.89.0}/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## [0.89.0](https://github.com/kernel/kernel-python-sdk/compare/v0.88.0...v0.89.0) (2026-08-12)
+
+
+### Features
+
+* Add region as a first-class API field with plan and flag gating ([fdb020d](https://github.com/kernel/kernel-python-sdk/commit/fdb020d437b3b410b2d5758691f2818d5e744580))
+* Add typed network config with private_hosts to browsers and pools ([b30c0e3](https://github.com/kernel/kernel-python-sdk/commit/b30c0e31182f09247bbf32823c256e27725fdbfc))
+* Expose plan-derived auth limits on GET /org/limits ([9ff1b44](https://github.com/kernel/kernel-python-sdk/commit/9ff1b445f8f2bb3f9bb24f613e22c8b940fc1d5a))
+
 ## [0.88.0](https://github.com/kernel/kernel-python-sdk/compare/v0.87.0...v0.88.0) (2026-08-10)
 
 ### Features

{kernel-0.88.0 → kernel-0.89.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: kernel
-Version: 0.88.0
+Version: 0.89.0
 Summary: The official Python library for the kernel API
 Project-URL: Homepage, https://github.com/kernel/kernel-python-sdk
 Project-URL: Repository, https://github.com/kernel/kernel-python-sdk
@@ -238,9 +238,9 @@ from kernel import Kernel
 client = Kernel()
 
 browser = client.browsers.create(
-    profile={},
+    network={},
 )
-print(browser.profile)
+print(browser.network)
 ```
 
 ## File uploads

{kernel-0.88.0 → kernel-0.89.0}/README.md

@@ -203,9 +203,9 @@ from kernel import Kernel
 client = Kernel()
 
 browser = client.browsers.create(
-    profile={},
+    network={},
 )
-print(browser.profile)
+print(browser.network)
 ```
 
 ## File uploads

{kernel-0.88.0 → kernel-0.89.0}/api.md

@@ -80,6 +80,7 @@ Types:
 
 ```python
 from kernel.types import (
+    BrowserNetworkConfig,
     BrowserPoolRef,
     BrowserProxy,
     BrowserProxyConfig,

{kernel-0.88.0 → kernel-0.89.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kernel"
-version = "0.88.0"
+version = "0.89.0"
 description = "The official Python library for the kernel API"
 dynamic = ["readme"]
 license = "Apache-2.0"

{kernel-0.88.0 → kernel-0.89.0}/release-please-config.json

@@ -10,6 +10,7 @@
   "bump-minor-pre-major": true,
   "bump-patch-for-minor-pre-major": false,
   "pull-request-header": "Automated Release PR",
+  "pull-request-footer": "Merge this pull request with a merge commit. Merging creates the GitHub release and publishes the package.",
   "pull-request-title-pattern": "release: ${version}",
   "changelog-sections": [
     {

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "kernel"
-__version__ = "0.88.0"  # x-release-please-version
+__version__ = "0.89.0"  # x-release-please-version

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/resources/browser_pools.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 from typing import Dict, Iterable, Optional
+from typing_extensions import Literal
 
 import httpx
 
@@ -28,6 +29,7 @@ from ..pagination import SyncOffsetPagination, AsyncOffsetPagination
 from .._base_client import AsyncPaginator, make_request_options
 from ..types.tags_param import TagsParam
 from ..types.browser_pool import BrowserPool
+from ..types.browser_network_config_param import BrowserNetworkConfigParam
 from ..types.browser_pool_acquire_response import BrowserPoolAcquireResponse
 from ..types.shared_params.browser_viewport import BrowserViewport
 from ..types.shared_params.browser_extension import BrowserExtension
@@ -67,9 +69,11 @@ class BrowserPoolsResource(SyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         telemetry: Optional[browser_pool_create_params.Telemetry] | Omit = omit,
@@ -113,6 +117,8 @@ class BrowserPoolsResource(SyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
+          network: Network configuration applied to browsers in this pool.
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -126,6 +132,10 @@ class BrowserPoolsResource(SyncAPIResource):
               pool browsers pick up the latest profile data. When a profile is provided during
               creation, this defaults to true. Requires a profile to be set on the pool.
 
+          region: Geographic region for the browser pool. It is fixed once the pool is created.
+              Region selection requires a Start-Up or Enterprise plan, defaults to us-east
+              when omitted on create.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -177,9 +187,11 @@ class BrowserPoolsResource(SyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
+                    "region": region,
                     "start_url": start_url,
                     "stealth": stealth,
                     "telemetry": telemetry,
@@ -238,6 +250,7 @@ class BrowserPoolsResource(SyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
@@ -291,6 +304,12 @@ class BrowserPoolsResource(SyncAPIResource):
           name: If provided, replaces the pool name. Empty string is a no-op; the pool name
               cannot be cleared or reset to empty once assigned.
 
+          network: If provided, replaces the pool's network configuration. Omit to leave the
+              existing configuration unchanged; an empty object ({}) removes it, while
+              network: {private_hosts: []} sets an explicit empty list. Only applied to
+              browsers created in the pool after the update; browsers already in the pool keep
+              their configuration until discarded (see discard_all_idle).
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -361,6 +380,7 @@ class BrowserPoolsResource(SyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
@@ -386,6 +406,7 @@ class BrowserPoolsResource(SyncAPIResource):
         name: str | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -409,6 +430,8 @@ class BrowserPoolsResource(SyncAPIResource):
           query: Case-insensitive substring match against browser pool name. IDs match by exact
               value.
 
+          region: Filter pools by geographic region. Omit to list pools in all regions.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -431,6 +454,7 @@ class BrowserPoolsResource(SyncAPIResource):
                         "name": name,
                         "offset": offset,
                         "query": query,
+                        "region": region,
                     },
                     browser_pool_list_params.BrowserPoolListParams,
                 ),
@@ -675,9 +699,11 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_create_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         telemetry: Optional[browser_pool_create_params.Telemetry] | Omit = omit,
@@ -721,6 +747,8 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
 
           name: Optional name for the browser pool. Must be unique within the project.
 
+          network: Network configuration applied to browsers in this pool.
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -734,6 +762,10 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
               pool browsers pick up the latest profile data. When a profile is provided during
               creation, this defaults to true. Requires a profile to be set on the pool.
 
+          region: Geographic region for the browser pool. It is fixed once the pool is created.
+              Region selection requires a Start-Up or Enterprise plan, defaults to us-east
+              when omitted on create.
+
           start_url: Optional URL to navigate to when a new browser is warmed into the pool.
               Best-effort: failures to navigate do not fail pool fill. Only applied to
               newly-warmed browsers; browsers reused via release/acquire keep whatever URL the
@@ -785,9 +817,11 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
+                    "region": region,
                     "start_url": start_url,
                     "stealth": stealth,
                     "telemetry": telemetry,
@@ -846,6 +880,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         headless: bool | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: browser_pool_update_params.Profile | Omit = omit,
         proxy_id: str | Omit = omit,
         refresh_on_profile_update: bool | Omit = omit,
@@ -899,6 +934,12 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           name: If provided, replaces the pool name. Empty string is a no-op; the pool name
               cannot be cleared or reset to empty once assigned.
 
+          network: If provided, replaces the pool's network configuration. Omit to leave the
+              existing configuration unchanged; an empty object ({}) removes it, while
+              network: {private_hosts: []} sets an explicit empty list. Only applied to
+              browsers created in the pool after the update; browsers already in the pool keep
+              their configuration until discarded (see discard_all_idle).
+
           profile: Profile configuration for browsers in a pool. Provide either id or name.
               Profiles must be created beforehand. Unlike single browser sessions, pools load
               the profile read-only and never persist changes back to it, so save_changes is
@@ -969,6 +1010,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                     "headless": headless,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy_id": proxy_id,
                     "refresh_on_profile_update": refresh_on_profile_update,
@@ -994,6 +1036,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
         name: str | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -1017,6 +1060,8 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
           query: Case-insensitive substring match against browser pool name. IDs match by exact
               value.
 
+          region: Filter pools by geographic region. Omit to list pools in all regions.
+
           extra_headers: Send extra headers
 
           extra_query: Add additional query parameters to the request
@@ -1039,6 +1084,7 @@ class AsyncBrowserPoolsResource(AsyncAPIResource):
                         "name": name,
                         "offset": offset,
                         "query": query,
+                        "region": region,
                     },
                     browser_pool_list_params.BrowserPoolListParams,
                 ),

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/resources/browsers/browsers.py

@@ -98,6 +98,7 @@ from ...types.browser_create_response import BrowserCreateResponse
 from ...types.browser_update_response import BrowserUpdateResponse
 from ...types.browser_retrieve_response import BrowserRetrieveResponse
 from ...types.browser_proxy_config_param import BrowserProxyConfigParam
+from ...types.browser_network_config_param import BrowserNetworkConfigParam
 from ...types.shared_params.browser_profile import BrowserProfile
 from ...types.shared_params.browser_viewport import BrowserViewport
 from ...types.shared_params.browser_extension import BrowserExtension
@@ -172,9 +173,11 @@ class BrowsersResource(SyncAPIResource):
         invocation_id: str | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy: BrowserProxyConfigParam | Omit = omit,
         proxy_id: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         tags: TagsParam | Omit = omit,
@@ -214,6 +217,8 @@ class BrowsersResource(SyncAPIResource):
               the dashboard. Must be unique among active sessions within the project. Can be
               changed later via PATCH /browsers/{id_or_name}.
 
+          network: Network configuration for the browser session. Cannot be changed after creation.
+
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
               Profiles must be created beforehand.
@@ -229,6 +234,10 @@ class BrowsersResource(SyncAPIResource):
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session. Deprecated in favor of proxy.
 
+          region: Geographic region for the browser session. It is fixed once the session is
+              created. Region selection requires a Start-Up or Enterprise plan, defaults to
+              us-east when omitted on create.
+
           start_url: Optional URL to open when the browser session is created. Navigation is
               best-effort, so navigation failures do not prevent the session from being
               created.
@@ -287,9 +296,11 @@ class BrowsersResource(SyncAPIResource):
                     "invocation_id": invocation_id,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy": proxy,
                     "proxy_id": proxy_id,
+                    "region": region,
                     "start_url": start_url,
                     "stealth": stealth,
                     "tags": tags,
@@ -440,6 +451,7 @@ class BrowsersResource(SyncAPIResource):
         limit: int | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         status: Literal["active", "deleted", "all"] | Omit = omit,
         tags: Dict[str, str] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -464,6 +476,8 @@ class BrowsersResource(SyncAPIResource):
 
           query: Search browsers by name, session ID, profile name or ID, proxy ID, or pool name.
 
+          region: Filter sessions by geographic region. Omit to list sessions in all regions.
+
           status: Filter sessions by status. "active" returns only active sessions (default),
               "deleted" returns only soft-deleted sessions, "all" returns both.
 
@@ -493,6 +507,7 @@ class BrowsersResource(SyncAPIResource):
                         "limit": limit,
                         "offset": offset,
                         "query": query,
+                        "region": region,
                         "status": status,
                         "tags": tags,
                     },
@@ -772,9 +787,11 @@ class AsyncBrowsersResource(AsyncAPIResource):
         invocation_id: str | Omit = omit,
         kiosk_mode: bool | Omit = omit,
         name: str | Omit = omit,
+        network: BrowserNetworkConfigParam | Omit = omit,
         profile: BrowserProfile | Omit = omit,
         proxy: BrowserProxyConfigParam | Omit = omit,
         proxy_id: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         start_url: str | Omit = omit,
         stealth: bool | Omit = omit,
         tags: TagsParam | Omit = omit,
@@ -814,6 +831,8 @@ class AsyncBrowsersResource(AsyncAPIResource):
               the dashboard. Must be unique among active sessions within the project. Can be
               changed later via PATCH /browsers/{id_or_name}.
 
+          network: Network configuration for the browser session. Cannot be changed after creation.
+
           profile: Profile selection for the browser session. Provide either id or name. If
               specified, the matching profile will be loaded into the browser session.
               Profiles must be created beforehand.
@@ -829,6 +848,10 @@ class AsyncBrowsersResource(AsyncAPIResource):
           proxy_id: Optional proxy to associate to the browser session. Must reference a proxy in
               the same project as the browser session. Deprecated in favor of proxy.
 
+          region: Geographic region for the browser session. It is fixed once the session is
+              created. Region selection requires a Start-Up or Enterprise plan, defaults to
+              us-east when omitted on create.
+
           start_url: Optional URL to open when the browser session is created. Navigation is
               best-effort, so navigation failures do not prevent the session from being
               created.
@@ -887,9 +910,11 @@ class AsyncBrowsersResource(AsyncAPIResource):
                     "invocation_id": invocation_id,
                     "kiosk_mode": kiosk_mode,
                     "name": name,
+                    "network": network,
                     "profile": profile,
                     "proxy": proxy,
                     "proxy_id": proxy_id,
+                    "region": region,
                     "start_url": start_url,
                     "stealth": stealth,
                     "tags": tags,
@@ -1040,6 +1065,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
         limit: int | Omit = omit,
         offset: int | Omit = omit,
         query: str | Omit = omit,
+        region: Literal["us-east", "eu-west"] | Omit = omit,
         status: Literal["active", "deleted", "all"] | Omit = omit,
         tags: Dict[str, str] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -1064,6 +1090,8 @@ class AsyncBrowsersResource(AsyncAPIResource):
 
           query: Search browsers by name, session ID, profile name or ID, proxy ID, or pool name.
 
+          region: Filter sessions by geographic region. Omit to list sessions in all regions.
+
           status: Filter sessions by status. "active" returns only active sessions (default),
               "deleted" returns only soft-deleted sessions, "all" returns both.
 
@@ -1093,6 +1121,7 @@ class AsyncBrowsersResource(AsyncAPIResource):
                         "limit": limit,
                         "offset": offset,
                         "query": query,
+                        "region": region,
                         "status": status,
                         "tags": tags,
                     },

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/resources/organization/limits.py

@@ -55,11 +55,7 @@ class LimitsResource(SyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> OrgLimits:
-        """
-        Get the organization's concurrency limit — the maximum browsers running at once
-        across on-demand sessions and browser pool reservations — and the default
-        per-project concurrency cap applied to projects without an explicit override.
-        """
+        """Get the organization's effective limits and managed auth usage."""
         return self._get(
             "/org/limits",
             options=make_request_options(
@@ -142,11 +138,7 @@ class AsyncLimitsResource(AsyncAPIResource):
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> OrgLimits:
-        """
-        Get the organization's concurrency limit — the maximum browsers running at once
-        across on-demand sessions and browser pool reservations — and the default
-        per-project concurrency cap applied to projects without an explicit override.
-        """
+        """Get the organization's effective limits and managed auth usage."""
         return await self._get(
             "/org/limits",
             options=make_request_options(

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/types/__init__.py

@@ -58,6 +58,7 @@ from .project_create_params import ProjectCreateParams as ProjectCreateParams
 from .project_update_params import ProjectUpdateParams as ProjectUpdateParams
 from .proxy_create_response import ProxyCreateResponse as ProxyCreateResponse
 from .proxy_update_response import ProxyUpdateResponse as ProxyUpdateResponse
+from .browser_network_config import BrowserNetworkConfig as BrowserNetworkConfig
 from .credential_list_params import CredentialListParams as CredentialListParams
 from .deployment_list_params import DeploymentListParams as DeploymentListParams
 from .deployment_state_event import DeploymentStateEvent as DeploymentStateEvent
@@ -96,6 +97,7 @@ from .invocation_follow_response import InvocationFollowResponse as InvocationFo
 from .invocation_update_response import InvocationUpdateResponse as InvocationUpdateResponse
 from .browser_pool_acquire_params import BrowserPoolAcquireParams as BrowserPoolAcquireParams
 from .browser_pool_release_params import BrowserPoolReleaseParams as BrowserPoolReleaseParams
+from .browser_network_config_param import BrowserNetworkConfigParam as BrowserNetworkConfigParam
 from .deployment_retrieve_response import DeploymentRetrieveResponse as DeploymentRetrieveResponse
 from .invocation_retrieve_response import InvocationRetrieveResponse as InvocationRetrieveResponse
 from .audit_log_export_chunk_params import AuditLogExportChunkParams as AuditLogExportChunkParams

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/types/browser_create_params.py

@@ -3,10 +3,11 @@
 from __future__ import annotations
 
 from typing import Dict, Iterable, Optional
-from typing_extensions import TypedDict
+from typing_extensions import Literal, TypedDict
 
 from .tags_param import TagsParam
 from .browser_proxy_config_param import BrowserProxyConfigParam
+from .browser_network_config_param import BrowserNetworkConfigParam
 from .shared_params.browser_profile import BrowserProfile
 from .shared_params.browser_viewport import BrowserViewport
 from .shared_params.browser_extension import BrowserExtension
@@ -64,6 +65,12 @@ class BrowserCreateParams(TypedDict, total=False):
     changed later via PATCH /browsers/{id_or_name}.
     """
 
+    network: BrowserNetworkConfigParam
+    """Network configuration for the browser session.
+
+    Cannot be changed after creation.
+    """
+
     profile: BrowserProfile
     """Profile selection for the browser session.
 
@@ -90,6 +97,13 @@ class BrowserCreateParams(TypedDict, total=False):
     favor of proxy.
     """
 
+    region: Literal["us-east", "eu-west"]
+    """Geographic region for the browser session.
+
+    It is fixed once the session is created. Region selection requires a Start-Up or
+    Enterprise plan, defaults to us-east when omitted on create.
+    """
+
     start_url: str
     """Optional URL to open when the browser session is created.
 

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/types/browser_create_response.py

@@ -2,6 +2,7 @@
 
 from typing import Dict, Optional
 from datetime import datetime
+from typing_extensions import Literal
 
 from .tags import Tags
 from .profile import Profile
@@ -9,6 +10,7 @@ from .._models import BaseModel
 from .browser_proxy import BrowserProxy
 from .browser_usage import BrowserUsage
 from .browser_pool_ref import BrowserPoolRef
+from .browser_network_config import BrowserNetworkConfig
 from .shared.browser_viewport import BrowserViewport
 from .browsers.browser_telemetry_config import BrowserTelemetryConfig
 
@@ -25,6 +27,9 @@ class BrowserCreateResponse(BaseModel):
     headless: bool
     """Whether the browser session is running in headless mode."""
 
+    region: Literal["us-east", "eu-west"]
+    """Geographic region of the browser session. Fixed once the session is created."""
+
     session_id: str
     """Unique identifier for the browser session"""
 
@@ -68,6 +73,12 @@ class BrowserCreateResponse(BaseModel):
     name: Optional[str] = None
     """Human-readable name of the browser session, if one was set at creation."""
 
+    network: Optional[BrowserNetworkConfig] = None
+    """Network configuration the session was created with, if any.
+
+    Omitted when the session has no network configuration.
+    """
+
     pool: Optional[BrowserPoolRef] = None
     """Browser pool this session was acquired from, if any."""
 

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/types/browser_list_params.py

@@ -27,6 +27,9 @@ class BrowserListParams(TypedDict, total=False):
     Search browsers by name, session ID, profile name or ID, proxy ID, or pool name.
     """
 
+    region: Literal["us-east", "eu-west"]
+    """Filter sessions by geographic region. Omit to list sessions in all regions."""
+
     status: Literal["active", "deleted", "all"]
     """Filter sessions by status.
 

{kernel-0.88.0 → kernel-0.89.0}/src/kernel/types/browser_list_response.py

@@ -2,6 +2,7 @@
 
 from typing import Dict, Optional
 from datetime import datetime
+from typing_extensions import Literal
 
 from .tags import Tags
 from .profile import Profile
@@ -9,6 +10,7 @@ from .._models import BaseModel
 from .browser_proxy import BrowserProxy
 from .browser_usage import BrowserUsage
 from .browser_pool_ref import BrowserPoolRef
+from .browser_network_config import BrowserNetworkConfig
 from .shared.browser_viewport import BrowserViewport
 from .browsers.browser_telemetry_config import BrowserTelemetryConfig
 
@@ -25,6 +27,9 @@ class BrowserListResponse(BaseModel):
     headless: bool
     """Whether the browser session is running in headless mode."""
 
+    region: Literal["us-east", "eu-west"]
+    """Geographic region of the browser session. Fixed once the session is created."""
+
     session_id: str
     """Unique identifier for the browser session"""
 
@@ -68,6 +73,12 @@ class BrowserListResponse(BaseModel):
     name: Optional[str] = None
     """Human-readable name of the browser session, if one was set at creation."""
 
+    network: Optional[BrowserNetworkConfig] = None
+    """Network configuration the session was created with, if any.
+
+    Omitted when the session has no network configuration.
+    """
+
     pool: Optional[BrowserPoolRef] = None
     """Browser pool this session was acquired from, if any."""
 

kernel-0.89.0/src/kernel/types/browser_network_config.py

@@ -0,0 +1,37 @@
+# File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+from typing import List, Optional
+
+from .._models import BaseModel
+
+__all__ = ["BrowserNetworkConfig"]
+
+
+class BrowserNetworkConfig(BaseModel):
+    """Network configuration for a browser session or browser pool."""
+
+    private_hosts: Optional[List[str]] = None
+    """
+    Destinations the browser reaches directly through the session's own network
+    instead of through Kernel-managed egress — for private hosts reachable over a
+    VPN or tunnel the session has joined (e.g. a Tailscale tailnet). By default,
+    private IP ranges already route directly: RFC1918 (10.0.0.0/8, 172.16.0.0/12,
+    192.168.0.0/16), CGNAT/Tailscale (100.64.0.0/10), and IPv6 ULA (fc00::/7). An
+    explicitly supplied list replaces those defaults with exactly the entries given,
+    and an empty list ([]) disables them so all traffic uses Kernel-managed egress;
+    omit private_hosts to keep the defaults. Entries are hostname patterns
+    ("_.example.ts.net", "preview.internal") or IP/CIDR literals ("100.64.0.0/10",
+    "10.1.30.63"). IP and CIDR entries only match URLs written with a literal IP
+    address; they never match hostnames that resolve into the range, so private DNS
+    names need a hostname entry even when they resolve inside the default ranges.
+    CIDRs must be in canonical masked form (host bits zero), and only the private
+    ranges listed above are accepted; public, loopback, link-local, and unspecified
+    ranges are rejected. Exact IPv6 addresses must be bracketed ("[fd00::1]"); IPv6
+    CIDR ranges are unbracketed ("fd00::/8"). Wildcards are limited to one leading
+    "_." over a suffix with at least two labels that is not a public suffix (so
+    "_.co.uk" or "_.ts.net" are rejected, while "\\**.example.ts.net" is accepted).
+    Hostname and IP entries may carry a port; CIDR ranges may not. Hostname entries
+    are not resolved during validation, so callers must ensure they identify private
+    destinations. Not related to a proxy's bypass_hosts, which selects between
+    upstream-proxy and Kernel-managed direct egress and cannot reach into a VPN.
+    """