diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 2ad9e20..efb7bd9 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.94.0"
+  ".": "0.95.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7e49193..11384fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.95.0](https://github.com/kernel/kernel-node-sdk/compare/v0.94.0...v0.95.0) (2026-08-26)
+
+
+### Features
+
+* Add OTLP destination delivery health storage ([29d5ec5](https://github.com/kernel/kernel-node-sdk/commit/29d5ec569698b091f5063f491bc09e52a814fa43))
+* route process calls directly to browser VMs ([9e1a053](https://github.com/kernel/kernel-node-sdk/commit/9e1a0535a4dde5ff635a7a6fc1f57c8119d410ff))
+
 ## [0.94.0](https://github.com/kernel/kernel-node-sdk/compare/v0.93.0...v0.94.0) (2026-08-24)
 
 
diff --git a/package.json b/package.json
index 9c16133..4cf4466 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.94.0",
+  "version": "0.95.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "dist/index.d.ts",
diff --git a/src/resources/auth/connections.ts b/src/resources/auth/connections.ts
index c82652b..e50b5bc 100644
--- a/src/resources/auth/connections.ts
+++ b/src/resources/auth/connections.ts
@@ -261,8 +261,10 @@ export interface ManagedAuth {
   status: 'AUTHENTICATED' | 'NEEDS_AUTH';
 
   /**
-   * Additional domains that are valid for this auth flow (besides the primary
-   * domain). Useful when login pages redirect to different domains.
+   * Additional hostname roots valid for this auth flow, besides the primary domain.
+   * Each value allows credential entry on that exact hostname and its subdomains.
+   * Leading `www.` and `*.` labels are normalized away. When omitted or empty,
+   * credential entry is unrestricted.
    *
    * The following SSO/OAuth provider domains are automatically allowed by default
    * and do not need to be specified:
@@ -1016,8 +1018,10 @@ export interface ManagedAuthCreateRequest {
   profile_name: string;
 
   /**
-   * Additional domains valid for this auth flow (besides the primary domain). Useful
-   * when login pages redirect to different domains.
+   * Additional hostname roots valid for this auth flow, besides the primary domain.
+   * Each value allows credential entry on that exact hostname and its subdomains.
+   * Leading `www.` and `*.` labels are normalized away. When omitted or empty,
+   * credential entry is unrestricted.
    *
    * The following SSO/OAuth provider domains are automatically allowed by default
    * and do not need to be specified:
@@ -1336,7 +1340,10 @@ export interface ManagedAuthTimelineEvent {
  */
 export interface ManagedAuthUpdateRequest {
   /**
-   * Additional domains valid for this auth flow (replaces existing list)
+   * Additional hostname roots valid for this auth flow. Each value allows credential
+   * entry on that exact hostname and its subdomains; leading `www.` and `*.` labels
+   * are normalized away. An empty list leaves credential entry unrestricted.
+   * Replaces the existing list.
    */
   allowed_domains?: Array<string>;
 
@@ -1967,8 +1974,10 @@ export interface ConnectionCreateParams {
   profile_name: string;
 
   /**
-   * Additional domains valid for this auth flow (besides the primary domain). Useful
-   * when login pages redirect to different domains.
+   * Additional hostname roots valid for this auth flow, besides the primary domain.
+   * Each value allows credential entry on that exact hostname and its subdomains.
+   * Leading `www.` and `*.` labels are normalized away. When omitted or empty,
+   * credential entry is unrestricted.
    *
    * The following SSO/OAuth provider domains are automatically allowed by default
    * and do not need to be specified:
@@ -2199,7 +2208,10 @@ export namespace ConnectionCreateParams {
 
 export interface ConnectionUpdateParams {
   /**
-   * Additional domains valid for this auth flow (replaces existing list)
+   * Additional hostname roots valid for this auth flow. Each value allows credential
+   * entry on that exact hostname and its subdomains; leading `www.` and `*.` labels
+   * are normalized away. An empty list leaves credential entry unrestricted.
+   * Replaces the existing list.
    */
   allowed_domains?: Array<string>;
 
diff --git a/src/resources/browser-pools.ts b/src/resources/browser-pools.ts
index b789b8d..dc0ed12 100644
--- a/src/resources/browser-pools.ts
+++ b/src/resources/browser-pools.ts
@@ -199,7 +199,7 @@ export interface BrowserPool {
   /**
    * Geographic region of the browser pool. Fixed once the pool is created.
    */
-  region: 'us-east' | 'eu-west';
+  region: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Browser pool name, if set
@@ -382,7 +382,7 @@ export interface BrowserPoolAcquireResponse {
   /**
    * Geographic region of the browser session. Fixed once the session is created.
    */
-  region: 'us-east' | 'eu-west';
+  region: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Unique identifier for the browser session
@@ -595,7 +595,7 @@ export interface BrowserPoolCreateParams {
    * Region selection requires a Start-Up or Enterprise plan, defaults to us-east
    * when omitted on create.
    */
-  region?: 'us-east' | 'eu-west';
+  region?: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Optional URL to navigate to when a new browser is warmed into the pool.
@@ -1028,7 +1028,7 @@ export interface BrowserPoolListParams extends OffsetPaginationParams {
   /**
    * Filter pools by geographic region. Omit to list pools in all regions.
    */
-  region?: 'us-east' | 'eu-west';
+  region?: 'us-east' | 'eu-west' | 'ap-southeast';
 }
 
 export interface BrowserPoolDeleteParams {
diff --git a/src/resources/browsers/browsers.ts b/src/resources/browsers/browsers.ts
index 70c7aec..a601fe8 100644
--- a/src/resources/browsers/browsers.ts
+++ b/src/resources/browsers/browsers.ts
@@ -258,8 +258,8 @@ export class Browsers extends APIResource {
   }
 
   /**
-   * Loads one or more unpacked extensions and restarts Chromium on the browser
-   * instance.
+   * Loads one or more unpacked extensions using live CDP activation when eligible.
+   * Chromium restarts when enterprise policy requires it or live activation fails.
    *
    * @example
    * ```ts
@@ -479,7 +479,7 @@ export interface BrowserCreateResponse {
   /**
    * Geographic region of the browser session. Fixed once the session is created.
    */
-  region: 'us-east' | 'eu-west';
+  region: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Unique identifier for the browser session
@@ -639,7 +639,7 @@ export interface BrowserRetrieveResponse {
   /**
    * Geographic region of the browser session. Fixed once the session is created.
    */
-  region: 'us-east' | 'eu-west';
+  region: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Unique identifier for the browser session
@@ -799,7 +799,7 @@ export interface BrowserUpdateResponse {
   /**
    * Geographic region of the browser session. Fixed once the session is created.
    */
-  region: 'us-east' | 'eu-west';
+  region: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Unique identifier for the browser session
@@ -959,7 +959,7 @@ export interface BrowserListResponse {
   /**
    * Geographic region of the browser session. Fixed once the session is created.
    */
-  region: 'us-east' | 'eu-west';
+  region: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Unique identifier for the browser session
@@ -1203,7 +1203,7 @@ export interface BrowserCreateParams {
    * created. Region selection requires a Start-Up or Enterprise plan, defaults to
    * us-east when omitted on create.
    */
-  region?: 'us-east' | 'eu-west';
+  region?: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Optional URL to open when the browser session is created. Navigation is
@@ -1542,7 +1542,7 @@ export interface BrowserListParams extends OffsetPaginationParams {
   /**
    * Filter sessions by geographic region. Omit to list sessions in all regions.
    */
-  region?: 'us-east' | 'eu-west';
+  region?: 'us-east' | 'eu-west' | 'ap-southeast';
 
   /**
    * Filter sessions by status. "active" returns only active sessions (default),
diff --git a/src/resources/invocations.ts b/src/resources/invocations.ts
index 8e8798f..34b690a 100644
--- a/src/resources/invocations.ts
+++ b/src/resources/invocations.ts
@@ -442,7 +442,7 @@ export namespace InvocationListBrowsersResponse {
     /**
      * Geographic region of the browser session. Fixed once the session is created.
      */
-    region: 'us-east' | 'eu-west';
+    region: 'us-east' | 'eu-west' | 'ap-southeast';
 
     /**
      * Unique identifier for the browser session
diff --git a/src/version.ts b/src/version.ts
index a914c67..d1d9522 100644
--- a/src/version.ts
+++ b/src/version.ts
@@ -1 +1 @@
-export const VERSION = '0.94.0'; // x-release-please-version
+export const VERSION = '0.95.0'; // x-release-please-version