Changelog

Stops the infinite refresh/reconnect storm on the session page when a sandbox is stopped. A stopped box answers /kortix/health with 503; the frontend misread that as connected+booting and fast-polled every 150ms forever, which re-fired all health-gated file/SSE queries (walls of /global/event 503s, auth0 CORS redirects, /file/content?path=.opencode 400s). Now the 503 boot window is bounded (120s -> mark unreachable, 5s poll), and .opencode/.kortix/.git are never read as file content.

What's Changed

• chore(release): VERSION → 0.9.96 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4156
• feat(sdk+whitelabel): Kortix-as-a-Backend — wrapper-backend reference + server-grade SDK surface by @markokraemer in https://github.com/kortix-ai/suna/pull/4145
• chore(dev-eks): deploy dev-533a23be [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4160

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.95...v0.9.96

Agent sessions now automatically resume a turn killed by a transient provider failure (e.g. a model host stall ending in "Upstream idle timeout exceeded", connection resets, 5xx after retries) instead of surfacing a dead error turn. Root sessions only, max 3 resumes per 15 minutes with backoff, never for user aborts or auth/credit errors, kill switch KORTIX_TURN_AUTO_RESUME=0. Completes the v0.9.94 GLM routing fix.

What's Changed

• chore(release): VERSION → 0.9.95 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4151
• feat(sandbox-agent): auto-resume root turns killed by transient provider errors (main backsync of #4152) by @markokraemer in https://github.com/kortix-ai/suna/pull/4153
• chore(dev-eks): deploy dev-b33eedaa [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4155

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.94...v0.9.95

Fixes the production "Upstream idle timeout exceeded" turn failures on GLM 5.2.

• Managed glm-5.2 requests now carry OpenRouter provider routing preferences (order: [z-ai], fallbacks allowed) so they land on Z.AI's first-party endpoint (99.9% uptime, native fp8) instead of being load-balanced across ~20 hosts including low-uptime fp4 requantizations that stall mid-generation until OpenRouter kills the stream.
• The LLM gateway now detects in-stream upstream error frames (a 200 stream carrying {"error": ...}) and settles the request as upstream_stream_error with a warn log, instead of tracing a dead turn as a success — this failure class is now visible and alertable.
• Pre-content error frames keep flowing into the existing empty-completion retry/failover path (now regression-tested).

What's Changed

• chore(release): VERSION → 0.9.94 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4110
• Feat/review center by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4003
• chore(dev-eks): deploy dev-7a7af2fb [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4111
• fix(sandbox): default LLM catalog to baked image file on cold boot (~2s off spawn) by @kubet in https://github.com/kortix-ai/suna/pull/4112
• chore(dev-eks): deploy dev-fef2ecb5 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4113
• feat(sandbox): per-project rootfs warm bake — bake repo into a cold image, no memory snapshot by @kubet in https://github.com/kortix-ai/suna/pull/4115
• chore(dev-eks): deploy dev-875c3a02 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4116
• fix(api): never 402 the per-session audit endpoint — it is the approval control plane by @markokraemer in https://github.com/kortix-ai/suna/pull/4117
• chore(dev-eks): deploy dev-f2f43435 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4118
• feat(iam): agent-scoped secrets & connectors, Review Center, per-agent model by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4114
• chore(dev-eks): deploy gateway dev-c5db3ce9 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4122
• chore(dev-eks): deploy dev-c5db3ce9 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4123
• Fix API transport hardening and runtime DB grants by @markokraemer in https://github.com/kortix-ai/suna/pull/4125
• Desktop: align chrome with macOS traffic lights + offcanvas sidebar by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4119
• feat(web): Google Drive-style Files UX + plain-language git semantics by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4094
• refactor(sdk+web): make @kortix/sdk the single entry point for session handling and the web data layer by @markokraemer in https://github.com/kortix-ai/suna/pull/4124
• chore(dev-eks): deploy gateway dev-13d7ee90 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4126
• chore(dev-eks): deploy dev-13d7ee90 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4127
• feat(sdk+web): wave 2 — kortix-master client, facade coverage 85→157, typed errors wired end-to-end by @markokraemer in https://github.com/kortix-ai/suna/pull/4128
• chore(dev-eks): deploy dev-6eff189e [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4129
• refactor(sdk+web): wave 3 — framework-free event stream, send-cluster extraction, /v1/p fix, sharing e2e by @markokraemer in https://github.com/kortix-ai/suna/pull/4130
• chore(dev-eks): deploy dev-6f449848 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4131
• feat(web): show live boot progress inline in the thread by @lillyboga in https://github.com/kortix-ai/suna/pull/4132
• feat(sdk+mobile+api): wave 4 — mobile adopts the SDK, anonymous share viewing, files-twin stage 1, facade completion by @markokraemer in https://github.com/kortix-ai/suna/pull/4133
• chore(dev-eks): deploy dev-55d6fba0 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4134
• feat(iam): finalise IAM/RBAC v1 — security fixes, legacy purge, coverage, enterprise UX by @markokraemer in https://github.com/kortix-ai/suna/pull/4135
• chore(dev-eks): deploy dev-22fda9f2 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4136
• chore(dev-eks): deploy gateway dev-5c3bafbb [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4138
• chore(dev-eks): deploy dev-5c3bafbb [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4139
• feat(agents): agent-first config & authz foundation — manifest v2, compiler, identity, enforcement by @markokraemer in https://github.com/kortix-ai/suna/pull/4140
• chore(dev-eks): deploy dev-d4d0ee71 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4141
• Revert #4140 — hold agent-first foundation for review before merge by @markokraemer in https://github.com/kortix-ai/suna/pull/4142
• chore(dev-eks): deploy dev-b2e45872 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4143
• feat(web): wallpaper shader overhaul by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4093
• feat(web): sidebar — full offcanvas collapse + edge-hover flyout by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4144
• fix(llm-gateway): pin managed GLM to Z.AI host + surface in-stream upstream error frames (main backsync of #4146) by @markokraemer in https://github.com/kortix-ai/suna/pull/4147
• chore(dev-eks): deploy gateway dev-82786802 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4148
• chore(dev-eks): deploy dev-82786802 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4150

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.93...v0.9.94

Fixed

• The LLM gateway no longer returns a blank, empty reply when a model provider silently produces nothing (a rare but real upstream failure mode). It now retries the same provider a few times, then fails over to another configured provider if one is available, before ever giving up — so a transient provider hiccup resolves invisibly instead of showing up as an empty response.
• The gateway strips stray NUL bytes from request/response logs before saving them, avoiding an occasional database error that could drop a log entry.
• Fixed a case where the first message of a new session could fail right after an environment restart, instead of waiting for the runtime to come back up.
• Made the internal migration step idempotent so it no longer depends on which pod happens to run it.
• Narrowed an account-membership repair path to be safer and more precise.

Improved

• Platform admins get read-only access to the project access gate for support/investigation, without full write access.
• Projects can now override which sandbox provider they use on a per-project basis.
• Slack identity verification is now enabled on staging, matching production.
• Handle AgentMail inbox-limit errors gracefully instead of surfacing a raw failure.

What's Changed

• chore(release): VERSION → 0.9.93 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4081
• chore(dev-eks): deploy dev-d0f1947e [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4082
• chore: resolve high dependency alerts by @markokraemer in https://github.com/kortix-ai/suna/pull/4061
• fix(web): render footer copyright symbol by @agent-kortix in https://github.com/kortix-ai/suna/pull/4049
• fix(reaper): stop the maintenance loop from silently wedging forever by @markokraemer in https://github.com/kortix-ai/suna/pull/4086
• chore(dev-eks): deploy dev-17242f9c [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4087
• fix(sandbox-agent): fail fast when opencode is wedged instead of hanging forever by @markokraemer in https://github.com/kortix-ai/suna/pull/4088
• fix(mobile): stub node readline builtin in Metro resolver by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4084
• fix(sessions): stuck-session restart bug + manual restart fallback by @markokraemer in https://github.com/kortix-ai/suna/pull/4089
• chore(dev-eks): deploy dev-09168b83 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4090
• Cold-only Platinum sandboxes — remove stateful/warm-fork machinery (Kortix-side) by @kubet in https://github.com/kortix-ai/suna/pull/4091
• IAM: department sharing for connectors/secrets + unify secret access on one model by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4039
• chore(dev-eks): deploy dev-26e551c7 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4092
• chore(admin): remove the dead warm-fork sessions toggle (leftover from #4091) by @kubet in https://github.com/kortix-ai/suna/pull/4095
• chore(dev-eks): deploy dev-79f08e8a [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4096
• feat(sessions): add manual stop action (API + SDK + UI) by @markokraemer in https://github.com/kortix-ai/suna/pull/4097
• chore(dev-eks): deploy dev-092738be [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4098
• fix(llm-gateway): fail over on empty-choices completions instead of forwarding them by @markokraemer in https://github.com/kortix-ai/suna/pull/4099
• chore(dev-eks): deploy gateway dev-d23ca769 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4101
• chore(dev-eks): deploy dev-d23ca769 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4102
• fix(llm-gateway): auto-retry the same candidate on an empty completion before failing over by @markokraemer in https://github.com/kortix-ai/suna/pull/4103
• chore(dev-eks): deploy gateway dev-ff62e6d9 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4105
• chore(dev-eks): deploy dev-ff62e6d9 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4106
• Extend entitlement gating to custom RBAC and audit access by @markokraemer in https://github.com/kortix-ai/suna/pull/4107
• chore(dev-eks): deploy dev-64f62763 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4108

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.92...v0.9.93

Promote the staging hotfix that strips NUL bytes before persisting gateway request/response traces to gateway_request_logs, preventing Postgres 22P05 unsupported Unicode escape sequence alerts from recurring in production.

What's Changed

• chore(release): VERSION → 0.9.91 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3995
• fix(api): wait for opencode ready after first-prompt env restart by @markokraemer in https://github.com/kortix-ai/suna/pull/3994
• chore(dev-eks): deploy dev-10093b7d [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3996
• feat(web): unify checkpoints and change requests in customize timeline by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4000
• feat(marketplace): public browse directory with company and item pages by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4001
• chore(dev-eks): deploy dev-33bf8c94 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4004
• fix(gateway): stop laundering Codex/GPT-5.x stream failures into a clean stop by @markokraemer in https://github.com/kortix-ai/suna/pull/4005
• chore(dev-eks): deploy gateway dev-78abaead [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4006
• chore(dev-eks): deploy dev-78abaead [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4007
• feat(sdk): extract the frontend data layer into @kortix/sdk — and rip out the legacy local_docker/server-instance system by @markokraemer in https://github.com/kortix-ai/suna/pull/3825
• chore(dev-eks): deploy gateway dev-9cbf57dd [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4009
• chore(dev-eks): deploy dev-9cbf57dd [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4010
• ci(release): publish @kortix/sdk + @kortix/llm-catalog to npm (lockstep, OIDC) by @markokraemer in https://github.com/kortix-ai/suna/pull/4011
• chore(dev-eks): deploy gateway dev-e87e4e33 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4012
• chore(dev-eks): deploy dev-e87e4e33 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4013
• fix(gateway): strip NUL bytes before persisting gateway request logs (prod 22P05) by @markokraemer in https://github.com/kortix-ai/suna/pull/4014
• chore(dev-eks): deploy gateway dev-54c581ca [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4016
• chore(dev-eks): deploy dev-54c581ca [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4017

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.90...v0.9.91

Fixed

• The first message in a new session now runs reliably. Previously the very first prompt in a brand-new project could silently do nothing, leaving you to send it again. A new session briefly restarts the agent runtime to load its configuration, and the first message was being sent into that restart window and dropped. The first message now waits for the runtime to be ready before it's sent, so it lands on the first try.

What's Changed

• chore(release): VERSION → 0.9.90 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3977
• refactor(customize): improve customize panel by @sutharjay1 in https://github.com/kortix-ai/suna/pull/3687
• chore(dev-eks): deploy gateway dev-6388a7ac [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3978
• chore(dev-eks): deploy dev-6388a7ac [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3979
• feat(meet): Meetings notetaker channel (Recall.ai) — join, transcribe, converse, speak, auto-recap by @lillyboga in https://github.com/kortix-ai/suna/pull/3980
• chore(dev-eks): deploy gateway dev-b06d2801 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3981
• chore(dev-eks): deploy dev-b06d2801 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3982
• fix(meet): materialize kortix_meet connector when the Meetings flag is toggled on by @lillyboga in https://github.com/kortix-ai/suna/pull/3983
• chore(dev-eks): deploy dev-1c31648e [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3986
• fix(meet): half-duplex guard against the bot's own speech echoing back by @lillyboga in https://github.com/kortix-ai/suna/pull/3987
• chore(dev-eks): deploy dev-30d10b4f [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/3988
• fix(qa-portal): stream reports from S3, end the disk-fill crashloop (qa.kortix.com 503) by @lillyboga in https://github.com/kortix-ai/suna/pull/3990
• fix(qa-portal): supply gateway S3 creds via sidecar file (fix report 404s) by @lillyboga in https://github.com/kortix-ai/suna/pull/3991
• refactor(customize): enhance gateway ui by @sutharjay1 in https://github.com/kortix-ai/suna/pull/3984
• Feat/iam rbac v1 by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/3732
• enhance command palette ui ux by @sutharjay1 in https://github.com/kortix-ai/suna/pull/3985

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.89...v0.9.90