feat(portal): support tunnel authorization header (#9597)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 120
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-96b0ac0a148db6fde2e8363ea2dcfaa63f2dc23cf35c30c5fcfffbefc222e5d1.yml
-openapi_spec_hash: 01b9dbab4b732e4b83952debd108e404
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-1fc91661b27bb65f33c23969c150c99919820c6750b0f40dfad0d22e8827a82c.yml
+openapi_spec_hash: 2659e11dc1a69ec327f5e7bb0c0c6fe2
 config_hash: ed1fdd7c9f0a25647e16b602bad4ff2e

src/runloop_api_client/resources/devboxes/devboxes.py

@@ -600,8 +600,8 @@ def create_pty_tunnel(
         Devbox.
 
         This tunnel is not persisted on the Devbox and is generated fresh on
-        each request. The returned auth_token must be passed as a Bearer token in the
-        Authorization header.
+        each request. The returned auth_token should be passed as a Bearer token in the
+        X-Runloop-Tunnel-Authorization header.
 
         Args:
           extra_headers: Send extra headers
@@ -2263,8 +2263,8 @@ async def create_pty_tunnel(
         Devbox.
 
         This tunnel is not persisted on the Devbox and is generated fresh on
-        each request. The returned auth_token must be passed as a Bearer token in the
-        Authorization header.
+        each request. The returned auth_token should be passed as a Bearer token in the
+        X-Runloop-Tunnel-Authorization header.
 
         Args:
           extra_headers: Send extra headers

src/runloop_api_client/types/devbox_view.py

@@ -146,5 +146,6 @@ class DevboxView(BaseModel):
     services running inside a Devbox without requiring direct network access. Each
     tunnel is uniquely identified by an encrypted tunnel_key and can be configured
     for either open (public) or authenticated access. Usage:
-    https://{port}-{tunnel_key}.tunnel.runloop.ai
+    https://{port}-{tunnel_key}.tunnel.runloop.ai. Authenticated tunnels should pass
+    auth_token as X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
     """

src/runloop_api_client/types/pty_tunnel_view.py

@@ -8,11 +8,15 @@
 class PtyTunnelView(BaseModel):
     """An ephemeral PTY tunnel providing authenticated terminal access to a Devbox.
 
-    These tunnels are not stored on the Devbox and are generated fresh on each request. Usage: https://{port}-{tunnel_key}.tunnel.runloop.ai with Authorization: Bearer {auth_token}
+    These tunnels are not stored on the Devbox and are generated fresh on each request. Usage: https://{port}-{tunnel_key}.tunnel.runloop.ai with X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
     """
 
     auth_token: str
-    """Bearer token for tunnel authentication. Always required for PTY tunnels."""
+    """Bearer token for tunnel authentication.
+
+    Always required for PTY tunnels. Pass as X-Runloop-Tunnel-Authorization: Bearer
+    {auth_token}.
+    """
 
     tunnel_key: str
     """The encrypted tunnel key used to construct the tunnel URL.

src/runloop_api_client/types/tunnel_view.py

@@ -12,7 +12,7 @@ class TunnelView(BaseModel):
     """A V2 tunnel provides secure HTTP access to services running on a Devbox.
 
     Tunnels allow external clients to reach web servers, APIs, or other HTTP services running inside a Devbox without requiring direct network access. Each tunnel is uniquely identified by an encrypted tunnel_key and can be configured for either open (public) or authenticated access.
-    Usage: https://{port}-{tunnel_key}.tunnel.runloop.ai
+    Usage: https://{port}-{tunnel_key}.tunnel.runloop.ai. Authenticated tunnels should pass auth_token as X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
     """
 
     auth_mode: Literal["open", "authenticated"]
@@ -42,5 +42,6 @@ class TunnelView(BaseModel):
     auth_token: Optional[str] = None
     """Bearer token for tunnel authentication.
 
-    Only present when auth_mode is 'authenticated'.
+    Only present when auth_mode is 'authenticated'. Pass as
+    X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
     """