feat: Expose plan-derived auth limits on GET /org/limits

Stainless-Generated-From: f793e2f1d478198a0f75f553437b8b554b75368f

Author: kernel-internal[bot]

src/kernel/resources/organization/limits.py

@@ -55,11 +55,7 @@ def retrieve(
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> OrgLimits:
-        """
-        Get the organization's concurrency limit — the maximum browsers running at once
-        across on-demand sessions and browser pool reservations — and the default
-        per-project concurrency cap applied to projects without an explicit override.
-        """
+        """Get the organization's effective limits and managed auth usage."""
         return self._get(
             "/org/limits",
             options=make_request_options(
@@ -142,11 +138,7 @@ async def retrieve(
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> OrgLimits:
-        """
-        Get the organization's concurrency limit — the maximum browsers running at once
-        across on-demand sessions and browser pool reservations — and the default
-        per-project concurrency cap applied to projects without an explicit override.
-        """
+        """Get the organization's effective limits and managed auth usage."""
         return await self._get(
             "/org/limits",
             options=make_request_options(

src/kernel/types/organization/org_limits.py

@@ -8,6 +8,27 @@
 
 
 class OrgLimits(BaseModel):
+    auth_connections_used: int
+    """
+    The organization's current non-deleted managed auth connections, counted
+    org-wide across every project. Compare against max_auth_connections to show
+    remaining capacity before a create is rejected with 403 insufficient_plan.
+    """
+
+    max_auth_connections: Optional[int] = None
+    """Maximum managed auth connections the organization's plan allows.
+
+    Null means unlimited. Counted org-wide, so it cannot be multiplied across
+    projects.
+    """
+
+    min_health_check_interval_seconds: int
+    """
+    Smallest health_check_interval the organization's plan accepts on a managed auth
+    connection. Requests below this are rejected with 400. Existing connections
+    stored below the floor are grandfathered until edited.
+    """
+
     default_project_max_concurrent_sessions: Optional[int] = None
     """
     Default maximum concurrent browsers applied to every project that has no