feat: Deprecate datacenter proxies in the API

Stainless-Generated-From: 4b982125185eccb56b10a1e62c1b0f3359daf186

Author: kernel-internal[bot]

api.md

@@ -107,6 +107,7 @@ Params Types:
 
 - <a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk">kernel</a>.<a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk#BrowserMemoryRequest">BrowserMemoryRequest</a>
 - <a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk">kernel</a>.<a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk#BrowserNetworkConfigParam">BrowserNetworkConfigParam</a>
+- <a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk">kernel</a>.<a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk#BrowserNetworkUpdateParam">BrowserNetworkUpdateParam</a>
 - <a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk">kernel</a>.<a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk#BrowserProxyConfigParam">BrowserProxyConfigParam</a>
 - <a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk">kernel</a>.<a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk#BrowserProxyMode">BrowserProxyMode</a>
 - <a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk">kernel</a>.<a href="https://pkg.go.dev/github.com/kernel/kernel-go-sdk#BrowserReplRequestParam">BrowserReplRequestParam</a>

browser.go

@@ -232,8 +232,9 @@ type BrowserNetworkConfig struct {
 	// or reserved IP ranges are rejected, as are entries that overlap private_hosts.
 	// Enforced at Kernel's egress proxy only: destinations in private_hosts, and
 	// processes in the browser VM that do not use the browser's proxy, are not
-	// filtered, and Kernel's own control traffic is always allowed. Requires proxy v3.
-	// Not supported on browser pools.
+	// filtered, and Kernel's own control traffic is always allowed. Can be replaced or
+	// removed while the session runs with PATCH /browsers/{id_or_name}. Requires proxy
+	// v3. Not supported on browser pools.
 	AllowedHosts []string `json:"allowed_hosts"`
 	// Destinations the browser reaches directly through the session's own network
 	// instead of through Kernel-managed egress — for private hosts reachable over a
@@ -359,8 +360,9 @@ type BrowserNetworkConfigParam struct {
 	// or reserved IP ranges are rejected, as are entries that overlap private_hosts.
 	// Enforced at Kernel's egress proxy only: destinations in private_hosts, and
 	// processes in the browser VM that do not use the browser's proxy, are not
-	// filtered, and Kernel's own control traffic is always allowed. Requires proxy v3.
-	// Not supported on browser pools.
+	// filtered, and Kernel's own control traffic is always allowed. Can be replaced or
+	// removed while the session runs with PATCH /browsers/{id_or_name}. Requires proxy
+	// v3. Not supported on browser pools.
 	AllowedHosts []string `json:"allowed_hosts,omitzero"`
 	// Destinations the browser reaches directly through the session's own network
 	// instead of through Kernel-managed egress — for private hosts reachable over a
@@ -446,6 +448,32 @@ func (r *BrowserNetworkConfigProxyRouteProxyParam) UnmarshalJSON(data []byte) er
 	return apijson.UnmarshalRoot(data, r)
 }
 
+// Network configuration changes for a running browser session. Other network
+// settings can only be set at creation.
+type BrowserNetworkUpdateParam struct {
+	// Replaces the session's egress allowlist, using the same entry rules as
+	// network.allowed_hosts on create. Omit to leave the allowlist unchanged, or set
+	// to null to remove it and return to unfiltered egress; an empty list is invalid.
+	// The new list applies without restarting the browser: new requests to
+	// destinations it no longer allows are refused within a few seconds, and open
+	// connections to them are closed within about 30 seconds, or up to 10 minutes
+	// during a Kernel deploy. Connections to destinations it still allows, such as
+	// WebSockets, stay open. A start_url in the same request must be allowed by the
+	// updated list, and is loaded only after the list takes effect. Requires a browser
+	// created with proxy v3, and not supported on pooled browsers. If the request
+	// fails, retry it: the new list may already apply to some requests.
+	AllowedHosts []string `json:"allowed_hosts,omitzero"`
+	paramObj
+}
+
+func (r BrowserNetworkUpdateParam) MarshalJSON() (data []byte, err error) {
+	type shadow BrowserNetworkUpdateParam
+	return param.MarshalObject(r, (*shadow)(&r))
+}
+func (r *BrowserNetworkUpdateParam) UnmarshalJSON(data []byte) error {
+	return apijson.UnmarshalRoot(data, r)
+}
+
 // Browser pool this session was acquired from, if any.
 type BrowserPoolRef struct {
 	// Browser pool ID
@@ -1580,7 +1608,8 @@ type BrowserNewParams struct {
 	//
 	// Any of "8GiB", "16GiB".
 	Memory BrowserMemoryRequest `json:"memory,omitzero"`
-	// Network configuration for the browser session. Cannot be changed after creation.
+	// Network configuration for the browser session. Only allowed_hosts can be changed
+	// after creation, with PATCH /browsers/{id_or_name}.
 	Network BrowserNetworkConfigParam `json:"network,omitzero"`
 	// Profile selection for the browser session. Provide either id or name. If
 	// specified, the matching profile will be loaded into the browser session.
@@ -1791,6 +1820,8 @@ type BrowserUpdateParams struct {
 	// category settings for per-category updates. Explicitly disabling all four
 	// categories also stops capture.
 	Telemetry BrowserUpdateParamsTelemetry `json:"telemetry,omitzero"`
+	// Network configuration changes to apply to the running browser session.
+	Network BrowserNetworkUpdateParam `json:"network,omitzero"`
 	// Profile to load into the browser session. Only allowed if the session does not
 	// already have a profile loaded.
 	Profile shared.BrowserProfileParam `json:"profile,omitzero"`

browser_test.go

@@ -190,6 +190,9 @@ func TestBrowserUpdateWithOptionalParams(t *testing.T) {
 		kernel.BrowserUpdateParams{
 			DisableDefaultProxy: kernel.Bool(true),
 			Name:                kernel.String("checkout-flow-1"),
+			Network: kernel.BrowserNetworkUpdateParam{
+				AllowedHosts: []string{"example.com", "*.example.com"},
+			},
 			Profile: shared.BrowserProfileParam{
 				ID:          kernel.String("id"),
 				Name:        kernel.String("name"),

configregistry.go

@@ -470,14 +470,11 @@ func (r *ProxyManaged) UnmarshalJSON(data []byte) error {
 
 // Configuration for routing traffic through a proxy.
 type ProxyManagedCreate struct {
-	// Proxy type to use. In terms of quality for avoiding bot-detection, from best to
-	// worst: `mobile` > `residential` > `isp` > `datacenter`.
-	//
-	// Any of "datacenter", "isp", "residential", "mobile", "custom".
+	// Any of "isp", "residential", "mobile", "custom".
 	Type string `json:"type" api:"required"`
 	// Hostnames that should bypass the parent proxy and connect directly.
 	BypassHosts []string `json:"bypass_hosts"`
-	// Configuration specific to the selected proxy `type`.
+	// Configuration for an ISP proxy.
 	Config ProxyManagedCreateConfigUnion `json:"config"`
 	// Readable name of the proxy.
 	Name string `json:"name"`
@@ -504,9 +501,8 @@ func (r *ProxyManagedCreate) UnmarshalJSON(data []byte) error {
 }
 
 // ProxyManagedCreateConfigUnion contains all possible properties and values from
-// [ProxyManagedCreateConfigDatacenter], [ProxyManagedCreateConfigIsp],
-// [ProxyManagedCreateConfigResidential], [ProxyManagedCreateConfigMobile],
-// [ProxyManagedCreateConfigCustom].
+// [ProxyManagedCreateConfigIsp], [ProxyManagedCreateConfigResidential],
+// [ProxyManagedCreateConfigMobile], [ProxyManagedCreateConfigCustom].
 //
 // Use the methods beginning with 'As' to cast the union to one of its variants.
 type ProxyManagedCreateConfigUnion struct {
@@ -545,11 +541,6 @@ type ProxyManagedCreateConfigUnion struct {
 	} `json:"-"`
 }
 
-func (u ProxyManagedCreateConfigUnion) AsDatacenter() (v ProxyManagedCreateConfigDatacenter) {
-	apijson.UnmarshalRoot(json.RawMessage(u.JSON.raw), &v)
-	return
-}
-
 func (u ProxyManagedCreateConfigUnion) AsIsp() (v ProxyManagedCreateConfigIsp) {
 	apijson.UnmarshalRoot(json.RawMessage(u.JSON.raw), &v)
 	return
@@ -577,24 +568,6 @@ func (r *ProxyManagedCreateConfigUnion) UnmarshalJSON(data []byte) error {
 	return apijson.UnmarshalRoot(data, r)
 }
 
-// Configuration for a datacenter proxy.
-type ProxyManagedCreateConfigDatacenter struct {
-	// ISO 3166 country code. Defaults to US if not provided.
-	Country string `json:"country"`
-	// JSON contains metadata for fields, check presence with [respjson.Field.Valid].
-	JSON struct {
-		Country     respjson.Field
-		ExtraFields map[string]respjson.Field
-		raw         string
-	} `json:"-"`
-}
-
-// Returns the unmodified JSON received from the API
-func (r ProxyManagedCreateConfigDatacenter) RawJSON() string { return r.JSON.raw }
-func (r *ProxyManagedCreateConfigDatacenter) UnmarshalJSON(data []byte) error {
-	return apijson.UnmarshalRoot(data, r)
-}
-
 // Configuration for an ISP proxy.
 type ProxyManagedCreateConfigIsp struct {
 	// ISO 3166 country code. Supported countries are US, GB, FR, DE, and SG. Defaults