feat: Prepare native OAuth for MCP: path resource, exchange targets, static exchange client, retention, Clerk OAuth cutoff

Stainless-Generated-From: 12fe170984ea55c209e28a34cebb74700e9754f7

Author: kernel-internal[bot]

api.md

@@ -436,6 +436,7 @@ from kernel.types.auth import (
     LoginResponse,
     ManagedAuth,
     ManagedAuthBrowserConfig,
+    ManagedAuthBrowserLocation,
     ManagedAuthCreateRequest,
     ManagedAuthTimelineEvent,
     ManagedAuthUpdateRequest,

src/kernel/types/auth/__init__.py

@@ -15,4 +15,6 @@
 from .connection_timeline_params import ConnectionTimelineParams as ConnectionTimelineParams
 from .managed_auth_browser_config import ManagedAuthBrowserConfig as ManagedAuthBrowserConfig
 from .managed_auth_timeline_event import ManagedAuthTimelineEvent as ManagedAuthTimelineEvent
+from .managed_auth_browser_location import ManagedAuthBrowserLocation as ManagedAuthBrowserLocation
 from .managed_auth_browser_config_param import ManagedAuthBrowserConfigParam as ManagedAuthBrowserConfigParam
+from .managed_auth_browser_location_param import ManagedAuthBrowserLocationParam as ManagedAuthBrowserLocationParam

src/kernel/types/auth/managed_auth_browser_config.py

@@ -5,6 +5,7 @@
 
 from ..._models import BaseModel
 from ..browser_proxy_config import BrowserProxyConfig
+from .managed_auth_browser_location import ManagedAuthBrowserLocation
 from ..browsers.browser_telemetry_categories_config import BrowserTelemetryCategoriesConfig
 
 __all__ = [
@@ -117,6 +118,12 @@ class ManagedAuthBrowserConfig(BaseModel):
     Browser configuration applied to browser sessions created for a managed auth connection. Managed auth controls the profile, headless mode, timeout, start URL, kiosk mode, and viewport.
     """
 
+    location: Optional[ManagedAuthBrowserLocation] = None
+    """
+    Browser locale for the connection's login, reauthentication, and health-check
+    sessions. Set on create or update; not supported on login.
+    """
+
     proxy: Optional[BrowserProxyConfig] = None
     """Proxy configuration for managed auth browser sessions.
 

src/kernel/types/auth/managed_auth_browser_config_param.py

@@ -6,6 +6,7 @@
 from typing_extensions import Literal, TypedDict
 
 from ..browser_proxy_config_param import BrowserProxyConfigParam
+from .managed_auth_browser_location_param import ManagedAuthBrowserLocationParam
 from ..browsers.browser_telemetry_categories_config_param import BrowserTelemetryCategoriesConfigParam
 
 __all__ = [
@@ -118,6 +119,12 @@ class ManagedAuthBrowserConfigParam(TypedDict, total=False):
     Browser configuration applied to browser sessions created for a managed auth connection. Managed auth controls the profile, headless mode, timeout, start URL, kiosk mode, and viewport.
     """
 
+    location: ManagedAuthBrowserLocationParam
+    """
+    Browser locale for the connection's login, reauthentication, and health-check
+    sessions. Set on create or update; not supported on login.
+    """
+
     proxy: BrowserProxyConfigParam
     """Proxy configuration for managed auth browser sessions.
 

src/kernel/types/auth/managed_auth_browser_location.py

@@ -0,0 +1,20 @@
+# File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+from typing import Optional
+
+from ..._models import BaseModel
+
+__all__ = ["ManagedAuthBrowserLocation"]
+
+
+class ManagedAuthBrowserLocation(BaseModel):
+    """
+    Browser locale applied to browser sessions created for a managed auth connection.
+    """
+
+    locale: Optional[str] = None
+    """
+    Supported canonical BCP 47 locale for the browser's language and Accept-Language
+    header. Omit to use the default for the browser's region, or omit on update to
+    keep the current locale. Null clears it on update.
+    """

src/kernel/types/auth/managed_auth_browser_location_param.py

@@ -0,0 +1,21 @@
+# File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+from __future__ import annotations
+
+from typing import Optional
+from typing_extensions import TypedDict
+
+__all__ = ["ManagedAuthBrowserLocationParam"]
+
+
+class ManagedAuthBrowserLocationParam(TypedDict, total=False):
+    """
+    Browser locale applied to browser sessions created for a managed auth connection.
+    """
+
+    locale: Optional[str]
+    """
+    Supported canonical BCP 47 locale for the browser's language and Accept-Language
+    header. Omit to use the default for the browser's region, or omit on update to
+    keep the current locale. Null clears it on update.
+    """

tests/api_resources/auth/test_connections.py

@@ -41,6 +41,7 @@ def test_method_create_with_all_params(self, client: Kernel) -> None:
             allowed_domains=["login.netflix.com", "auth.netflix.com"],
             auto_reauth=True,
             browser={
+                "location": {"locale": "sv-SE"},
                 "proxy": {
                     "id": "x",
                     "mode": "direct",
@@ -210,6 +211,7 @@ def test_method_update_with_all_params(self, client: Kernel) -> None:
             allowed_domains=["login.netflix.com", "auth.netflix.com"],
             auto_reauth=True,
             browser={
+                "location": {"locale": "sv-SE"},
                 "proxy": {
                     "id": "x",
                     "mode": "direct",
@@ -464,6 +466,7 @@ def test_method_login_with_all_params(self, client: Kernel) -> None:
         connection = client.auth.connections.login(
             id="id",
             browser={
+                "location": {"locale": "sv-SE"},
                 "proxy": {
                     "id": "x",
                     "mode": "direct",
@@ -712,6 +715,7 @@ async def test_method_create_with_all_params(self, async_client: AsyncKernel) ->
             allowed_domains=["login.netflix.com", "auth.netflix.com"],
             auto_reauth=True,
             browser={
+                "location": {"locale": "sv-SE"},
                 "proxy": {
                     "id": "x",
                     "mode": "direct",
@@ -881,6 +885,7 @@ async def test_method_update_with_all_params(self, async_client: AsyncKernel) ->
             allowed_domains=["login.netflix.com", "auth.netflix.com"],
             auto_reauth=True,
             browser={
+                "location": {"locale": "sv-SE"},
                 "proxy": {
                     "id": "x",
                     "mode": "direct",
@@ -1135,6 +1140,7 @@ async def test_method_login_with_all_params(self, async_client: AsyncKernel) ->
         connection = await async_client.auth.connections.login(
             id="id",
             browser={
+                "location": {"locale": "sv-SE"},
                 "proxy": {
                     "id": "x",
                     "mode": "direct",