feat(portal): support tunnel authorization header (#9597)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 120
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-96b0ac0a148db6fde2e8363ea2dcfaa63f2dc23cf35c30c5fcfffbefc222e5d1.yml
-openapi_spec_hash: 01b9dbab4b732e4b83952debd108e404
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-1fc91661b27bb65f33c23969c150c99919820c6750b0f40dfad0d22e8827a82c.yml
+openapi_spec_hash: 2659e11dc1a69ec327f5e7bb0c0c6fe2
 config_hash: ed1fdd7c9f0a25647e16b602bad4ff2e

src/resources/devboxes/devboxes.ts

@@ -169,8 +169,8 @@ export class Devboxes extends APIResource {
   /**
    * Create an ephemeral authenticated tunnel for terminal access to a running
    * Devbox. This tunnel is not persisted on the Devbox and is generated fresh on
-   * each request. The returned auth_token must be passed as a Bearer token in the
-   * Authorization header.
+   * each request. The returned auth_token should be passed as a Bearer token in the
+   * X-Runloop-Tunnel-Authorization header.
    */
   createPtyTunnel(id: string, options?: Core.RequestOptions): Core.APIPromise<PtyTunnelView> {
     return this._client.post(`/v1/devboxes/${id}/create_pty_tunnel`, options);
@@ -929,7 +929,8 @@ export interface DevboxView {
    * running inside a Devbox without requiring direct network access. Each tunnel is
    * uniquely identified by an encrypted tunnel_key and can be configured for either
    * open (public) or authenticated access. Usage:
-   * https://{port}-{tunnel_key}.tunnel.runloop.ai
+   * https://{port}-{tunnel_key}.tunnel.runloop.ai. Authenticated tunnels should pass
+   * auth_token as X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
    */
   tunnel?: TunnelView | null;
 }
@@ -994,11 +995,12 @@ export namespace DevboxView {
  * An ephemeral PTY tunnel providing authenticated terminal access to a Devbox.
  * These tunnels are not stored on the Devbox and are generated fresh on each
  * request. Usage: https://{port}-{tunnel_key}.tunnel.runloop.ai with
- * Authorization: Bearer {auth_token}
+ * X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
  */
 export interface PtyTunnelView {
   /**
-   * Bearer token for tunnel authentication. Always required for PTY tunnels.
+   * Bearer token for tunnel authentication. Always required for PTY tunnels. Pass as
+   * X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
    */
   auth_token: string;
 
@@ -1015,7 +1017,8 @@ export interface PtyTunnelView {
  * running inside a Devbox without requiring direct network access. Each tunnel is
  * uniquely identified by an encrypted tunnel_key and can be configured for either
  * open (public) or authenticated access. Usage:
- * https://{port}-{tunnel_key}.tunnel.runloop.ai
+ * https://{port}-{tunnel_key}.tunnel.runloop.ai. Authenticated tunnels should pass
+ * auth_token as X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
  */
 export interface TunnelView {
   /**
@@ -1048,7 +1051,7 @@ export interface TunnelView {
 
   /**
    * Bearer token for tunnel authentication. Only present when auth_mode is
-   * 'authenticated'.
+   * 'authenticated'. Pass as X-Runloop-Tunnel-Authorization: Bearer {auth_token}.
    */
   auth_token?: string | null;
 }