feat: Forward egress deploy owner attribution

Stainless-Generated-From: 00e953c7c4e06216815d4e9f8e53ab7596262ca7

Author: kernel-internal[bot]

api.md

@@ -81,6 +81,9 @@ Types:
 ```python
 from kernel.types import (
     BrowserPoolRef,
+    BrowserProxy,
+    BrowserProxyConfig,
+    BrowserProxyMode,
     BrowserUsage,
     Profile,
     Tags,
@@ -314,6 +317,7 @@ Types:
 from kernel.types.auth import (
     LoginResponse,
     ManagedAuth,
+    ManagedAuthBrowserConfig,
     ManagedAuthCreateRequest,
     ManagedAuthTimelineEvent,
     ManagedAuthUpdateRequest,

src/kernel/resources/auth/connections.py

@@ -33,6 +33,7 @@
 from ...types.auth.submit_fields_response import SubmitFieldsResponse
 from ...types.auth.connection_follow_response import ConnectionFollowResponse
 from ...types.auth.managed_auth_timeline_event import ManagedAuthTimelineEvent
+from ...types.auth.managed_auth_browser_config_param import ManagedAuthBrowserConfigParam
 
 __all__ = ["ConnectionsResource", "AsyncConnectionsResource"]
 
@@ -66,6 +67,7 @@ def create(
         profile_name: str,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_create_params.BrowserTelemetry] | Omit = omit,
         credential: connection_create_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -120,9 +122,11 @@ def create(
               false, expired sessions are marked as `NEEDS_AUTH` instead of attempting
               re-auth. Defaults to true.
 
-          browser_telemetry: Browser telemetry configuration used by this connection's browser sessions by
-              default. Uses the exact create-browser configuration. Can be overridden
-              per-login.
+          browser: Default browser configuration for login, reauthentication, and health-check
+              sessions.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -144,10 +148,7 @@ def create(
 
           login_url: Optional login page URL to skip discovery
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default. Useful for
               debugging. Can be overridden per-login. Defaults to false.
@@ -171,6 +172,7 @@ def create(
                     "profile_name": profile_name,
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -229,6 +231,7 @@ def update(
         *,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_update_params.BrowserTelemetry] | Omit = omit,
         credential: connection_update_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -260,9 +263,11 @@ def update(
               when `health_checks` is false. When false, expired sessions detected by a health
               check are marked as `NEEDS_AUTH` instead of attempting re-auth.
 
-          browser_telemetry: Browser telemetry configuration used by future browser sessions for this
-              connection. Uses the exact create-browser configuration. Set enabled to false to
-              disable telemetry.
+          browser: Browser configuration updates for future login, reauthentication, and
+              health-check sessions. Omitted properties remain unchanged.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -280,10 +285,7 @@ def update(
 
           login_url: Login page URL. Set to empty string to clear.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default
 
@@ -305,6 +307,7 @@ def update(
                 {
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -464,6 +467,7 @@ def login(
         self,
         id: str,
         *,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_login_params.BrowserTelemetry] | Omit = omit,
         proxy: connection_login_params.Proxy | Omit = omit,
         record_session: bool | Omit = omit,
@@ -481,14 +485,13 @@ def login(
         credentials are stored.
 
         Args:
-          browser_telemetry: Override the connection's default browser telemetry configuration for this
-              login. When omitted, the connection's browser_telemetry default is used. Uses
-              the exact create-browser configuration.
+          browser: Browser configuration override for this login. Omitted properties inherit the
+              connection defaults.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Override the connection's default for recording this login's browser session.
               When omitted, the connection's record_session default is used.
@@ -507,6 +510,7 @@ def login(
             path_template("/auth/connections/{id}/login", id=id),
             body=maybe_transform(
                 {
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "proxy": proxy,
                     "record_session": record_session,
@@ -675,6 +679,7 @@ async def create(
         profile_name: str,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_create_params.BrowserTelemetry] | Omit = omit,
         credential: connection_create_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -729,9 +734,11 @@ async def create(
               false, expired sessions are marked as `NEEDS_AUTH` instead of attempting
               re-auth. Defaults to true.
 
-          browser_telemetry: Browser telemetry configuration used by this connection's browser sessions by
-              default. Uses the exact create-browser configuration. Can be overridden
-              per-login.
+          browser: Default browser configuration for login, reauthentication, and health-check
+              sessions.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -753,10 +760,7 @@ async def create(
 
           login_url: Optional login page URL to skip discovery
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default. Useful for
               debugging. Can be overridden per-login. Defaults to false.
@@ -780,6 +784,7 @@ async def create(
                     "profile_name": profile_name,
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -838,6 +843,7 @@ async def update(
         *,
         allowed_domains: SequenceNotStr[str] | Omit = omit,
         auto_reauth: bool | Omit = omit,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_update_params.BrowserTelemetry] | Omit = omit,
         credential: connection_update_params.Credential | Omit = omit,
         health_check_interval: int | Omit = omit,
@@ -869,9 +875,11 @@ async def update(
               when `health_checks` is false. When false, expired sessions detected by a health
               check are marked as `NEEDS_AUTH` instead of attempting re-auth.
 
-          browser_telemetry: Browser telemetry configuration used by future browser sessions for this
-              connection. Uses the exact create-browser configuration. Set enabled to false to
-              disable telemetry.
+          browser: Browser configuration updates for future login, reauthentication, and
+              health-check sessions. Omitted properties remain unchanged.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
           credential:
               Reference to credentials for the auth connection. Use one of:
@@ -889,10 +897,7 @@ async def update(
 
           login_url: Login page URL. Set to empty string to clear.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Whether to record browser sessions for this connection by default
 
@@ -914,6 +919,7 @@ async def update(
                 {
                     "allowed_domains": allowed_domains,
                     "auto_reauth": auto_reauth,
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "credential": credential,
                     "health_check_interval": health_check_interval,
@@ -1073,6 +1079,7 @@ async def login(
         self,
         id: str,
         *,
+        browser: ManagedAuthBrowserConfigParam | Omit = omit,
         browser_telemetry: Optional[connection_login_params.BrowserTelemetry] | Omit = omit,
         proxy: connection_login_params.Proxy | Omit = omit,
         record_session: bool | Omit = omit,
@@ -1090,14 +1097,13 @@ async def login(
         credentials are stored.
 
         Args:
-          browser_telemetry: Override the connection's default browser telemetry configuration for this
-              login. When omitted, the connection's browser_telemetry default is used. Uses
-              the exact create-browser configuration.
+          browser: Browser configuration override for this login. Omitted properties inherit the
+              connection defaults.
+
+          browser_telemetry: Deprecated. Use browser.telemetry. Retained during migration for existing
+              clients.
 
-          proxy: Proxy selection. Provide either id or name. The proxy must be in the same
-              project as the resource referencing it. When selecting by name, the name must
-              match exactly one active proxy in the project. Ambiguous names return a 400; use
-              id for stable references.
+          proxy: Deprecated. Use browser.proxy. Retained during migration for existing clients.
 
           record_session: Override the connection's default for recording this login's browser session.
               When omitted, the connection's record_session default is used.
@@ -1116,6 +1122,7 @@ async def login(
             path_template("/auth/connections/{id}/login", id=id),
             body=await async_maybe_transform(
                 {
+                    "browser": browser,
                     "browser_telemetry": browser_telemetry,
                     "proxy": proxy,
                     "record_session": record_session,