Changelog

July 19, 2026

The LLM Gateway, rebuilt on the Vercel AI SDK and live models.dev — per-model controls, OpenAI/Anthropic APIs, and a full UX overhaul

v0.10.11

LLM Gateway

Rebuilt on the Vercel AI SDK + live models.dev. The gateway now runs a single AI-SDK transport for every provider (OpenAI, Anthropic, Bedrock, OpenRouter and more), with the model catalog served verbatim from models.dev. The old per-provider transports and the LiteLLM sidecar have been removed.
Per-model generation controls. Set reasoning effort, temperature, top_p, and max output tokens per model — each control only appears when the model actually supports it (driven by the live catalog), and applies to every client (chat, SDK, and direct API).
Reasoning-effort selector in the chat composer for models that expose it (including a thinking-effort control for Claude models).
Two drop-in API surfaces: OpenAI-compatible /v1/chat/completions and Anthropic-compatible /v1/messages, plus /v1/models — all now documented in the API reference.
Provider & model manager overhaul: connect providers (incl. Bedrock via bearer token), browse models with pricing, context windows, and capabilities, verify that a key actually works, and see everything grouped under its real provider.
Anthropic extended thinking and prompt caching are applied correctly, and cost/usage are recorded accurately per request.
A gen_ai.* OpenTelemetry span is emitted per gateway call for downstream observability.

Templates

Many new business use-case templates across finance, sales, customer support, marketing, data, and recruiting — each with its own cover art.

Fixes & hardening

Sandbox proxy no longer times out healthy long reasoning/tool turns.
Blank projects can start sessions immediately (no more "agent not declared").
Project-scoped API tokens can drive their own project's sessions.
Per-project agent model pins no longer collide across projects.
Faster session/gateway paths and clearer errors on upstream failures.
Security & compliance: GuardDuty runtime monitoring, IAM baseline, root-login and patch/detection alerting, and corrected SSO/SCIM setup guides.

What's Changed

chore(release): VERSION → 0.10.11 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4890
feat(iam-web): 4 more SAML providers + change-provider confirmation by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4892
feat(iam-web): OneLogin, JumpCloud, PingOne Directory Sync (SCIM) guides by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4894
fix(llm): Bedrock connects with bearer+region, live verbatim models.dev catalog by @markokraemer in https://github.com/kortix-ai/suna/pull/4893
chore(dev-eks): deploy gateway dev-5392ac7b [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4895
chore(dev-eks): deploy dev-5392ac7b [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4896
fix(compliance): close AWS patch and detection gaps by @markokraemer in https://github.com/kortix-ai/suna/pull/4897
feat(connectors): add first-class Postman ingestion by @markokraemer in https://github.com/kortix-ai/suna/pull/4898
feat(web): overhaul LLM gateway + provider/key manager UX by @markokraemer in https://github.com/kortix-ai/suna/pull/4899
chore(dev-eks): deploy gateway dev-0919c1c2 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4901
chore(dev-eks): deploy dev-0919c1c2 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4903
feat(llm-gateway): AI-SDK transport engine (flag-gated) behind LLM_TRANSPORT_ENGINE by @markokraemer in https://github.com/kortix-ai/suna/pull/4902
chore(dev-eks): deploy gateway dev-25b574fd [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4904
chore(dev-eks): deploy dev-25b574fd [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4905
feat(llm-gateway): gen_ai.* OTel span per gateway call by @markokraemer in https://github.com/kortix-ai/suna/pull/4906
feat(llm-gateway): Anthropic /v1/messages ingress on the gateway by @markokraemer in https://github.com/kortix-ai/suna/pull/4907
chore(dev-eks): deploy gateway dev-dad64456 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4909
feat(api): /v1/generation + /v1/usage OpenRouter-parity read endpoints by @markokraemer in https://github.com/kortix-ai/suna/pull/4908
chore(dev-eks): deploy dev-cc465f35 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4910
fix(compliance): codify EC2 CPU alarm coverage by @markokraemer in https://github.com/kortix-ai/suna/pull/4900
content: publish AGI-ready architecture blog post by @agent-kortix in https://github.com/kortix-ai/suna/pull/4911
fix(llm-gateway): AI-SDK streaming error handling + bedrock tool-loop + cost-hint parity by @markokraemer in https://github.com/kortix-ai/suna/pull/4914
chore(dev-eks): deploy gateway dev-2072d456 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4915
chore(dev-eks): deploy dev-2072d456 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4916
feat: 12 more business use-case templates (marketing, CS, data, revops) by @lillyboga in https://github.com/kortix-ai/suna/pull/4917
chore(dev-eks): deploy dev-754cf631 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4918
fix(compliance): safely adopt IAM group baseline by @markokraemer in https://github.com/kortix-ai/suna/pull/4913
feat(use-cases): cover art for the 12 new use-case templates by @lillyboga in https://github.com/kortix-ai/suna/pull/4919
feat(connectors): add unified Discover marketplace by @markokraemer in https://github.com/kortix-ai/suna/pull/4920
chore(dev-eks): deploy dev-be5dce44 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4921
feat(llm-gateway): absorb OpenAI Responses API into the ai-sdk engine by @markokraemer in https://github.com/kortix-ai/suna/pull/4924
chore(dev-eks): deploy gateway dev-760450fa [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4925
feat(llm-gateway): mount Anthropic /v1/messages ingress, delete legacy /router/messages by @markokraemer in https://github.com/kortix-ai/suna/pull/4922
chore(dev-eks): deploy gateway dev-bf7de02b [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4926
fix(llm-gateway): fail fast on terminal upstream auth errors instead of hanging by @markokraemer in https://github.com/kortix-ai/suna/pull/4923
chore(dev-eks): deploy gateway dev-81e47a87 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4928
feat: 20 more business use-case templates + covers (USE CASE MAX, 42→62) by @lillyboga in https://github.com/kortix-ai/suna/pull/4927
revert(connectors): move unified Discover marketplace back to draft by @markokraemer in https://github.com/kortix-ai/suna/pull/4929
chore(dev-eks): deploy dev-14e31468 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4931
fix(llm-gateway): strip Bedrock cross-region prefix for pricing lookup by @markokraemer in https://github.com/kortix-ai/suna/pull/4932
fix(llm-gateway): terminal upstream auth errors surface as non-retryable, not silent 502 by @markokraemer in https://github.com/kortix-ai/suna/pull/4933
fix(llm-gateway): ai-sdk engine parity — response_format, seed, penalties, logit_bias/logprobs/etc by @markokraemer in https://github.com/kortix-ai/suna/pull/4934
chore(dev-eks): deploy gateway dev-369cde6e [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4935
chore(dev-eks): deploy dev-369cde6e [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4936
fix(llm-gateway): fail fast + clear on a descriptor with no usable baseUrl by @markokraemer in https://github.com/kortix-ai/suna/pull/4938
chore(dev-eks): deploy gateway dev-0d0bb114 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4939
chore(dev-eks): deploy dev-0d0bb114 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4940
fix(compliance): allow Drata SNS subscription inspection by @markokraemer in https://github.com/kortix-ai/suna/pull/4937
test(llm-gateway): remove unused test declarations by @markokraemer in https://github.com/kortix-ai/suna/pull/4942
chore(dev-eks): deploy gateway dev-ebf18dfa [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4944
chore(dev-eks): deploy dev-ebf18dfa [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4945
test(accessibility): scope decorative contrast audit by @markokraemer in https://github.com/kortix-ai/suna/pull/4946
feat(llm-gateway): make ai-sdk the sole transport engine; delete native transports + LiteLLM sidecar by @markokraemer in https://github.com/kortix-ai/suna/pull/4943
chore(dev-eks): deploy gateway dev-ba6b2364 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4948
chore(dev-eks): deploy dev-ba6b2364 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4949
Fix release QA staging environment isolation by @markokraemer in https://github.com/kortix-ai/suna/pull/4951
fix(llm-gateway): catch GatewayResolutionError in /resolve-upstream — stop "Connect Codex" spike (incident 991624588) by @agent-kortix in https://github.com/kortix-ai/suna/pull/4953
chore(dev-eks): deploy gateway dev-22c1e4ca [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4955
chore(dev-eks): deploy dev-22c1e4ca [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4956
Fix staging release QA contracts by @markokraemer in https://github.com/kortix-ai/suna/pull/4954
chore(dev-eks): deploy dev-06332c1c [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4957
Fix residual release QA contracts by @markokraemer in https://github.com/kortix-ai/suna/pull/4959
chore(dev-eks): deploy dev-3cd55231 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4960
Fix release QA runtime identities by @markokraemer in https://github.com/kortix-ai/suna/pull/4962
Preserve staging secrets during deployment by @markokraemer in https://github.com/kortix-ai/suna/pull/4964
test(release): authenticate protected metrics coverage by @markokraemer in https://github.com/kortix-ai/suna/pull/4966
fix(self-host): isolate black-box compose probes by @markokraemer in https://github.com/kortix-ai/suna/pull/4968
chore(dev-eks): deploy dev-88330aaa [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4969
fix(llm-gateway): agent-scope model pins now apply to sessions on the 'default' sentinel by @markokraemer in https://github.com/kortix-ai/suna/pull/4971
chore(dev-eks): deploy dev-c92f20b0 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4972
fix(sandbox-proxy): stop 502ing healthy long reasoning/tool turns on blocking POST /session/:id/message by @markokraemer in https://github.com/kortix-ai/suna/pull/4975
fix(projects): synthesize v2 manifest w/ declared agent for blank projects by @markokraemer in https://github.com/kortix-ai/suna/pull/4974
fix(snapshots): retry Platinum template builds that never register by @markokraemer in https://github.com/kortix-ai/suna/pull/4977
fix(auth): project-scoped PATs can drive their own project's sandbox proxy by @markokraemer in https://github.com/kortix-ai/suna/pull/4973
fix(llm-gateway): scope agent-model pins per project, not per account by @markokraemer in https://github.com/kortix-ai/suna/pull/4978
chore(dev-eks): deploy dev-7722d516 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4979
fix(projects): close blank-project AGENT_NOT_DECLARED gaps #4974 left open by @markokraemer in https://github.com/kortix-ai/suna/pull/4980
chore(dev-eks): deploy dev-e05b805b [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4981
feat(connectors): auto-discover source authentication by @markokraemer in https://github.com/kortix-ai/suna/pull/4982
chore(dev-eks): deploy dev-0b9f4edb [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4985
docs(llm-gateway): register inference routes in OpenAPI spec by @markokraemer in https://github.com/kortix-ai/suna/pull/4986
feat(llm-gateway): Models tab in depth — pricing, capabilities, copyable ids by @markokraemer in https://github.com/kortix-ai/suna/pull/4984
feat(gateway): in-UI API reference for OpenAI/Anthropic/models endpoints by @markokraemer in https://github.com/kortix-ai/suna/pull/4983
docs(self-host): correct stale ':stable not yet published' claim by @agent-kortix in https://github.com/kortix-ai/suna/pull/4988
feat(gateway): add Playground tab for comparing models side by side by @markokraemer in https://github.com/kortix-ai/suna/pull/4989
feat(llm-gateway): verify BYOK provider keys live + disclose custom-provider gateway bypass by @markokraemer in https://github.com/kortix-ai/suna/pull/4990
docs(self-host): add Backup & DR (enterprise) subsection with RPO/RTO + restore drill by @agent-kortix in https://github.com/kortix-ai/suna/pull/4992
feat(gateway): routing availability preview + vision-model override editor by @markokraemer in https://github.com/kortix-ai/suna/pull/4991
ci(self-host): bump fast e2e per-test timeout to 30s (fix release-blocker flake) by @agent-kortix in https://github.com/kortix-ai/suna/pull/4993
feat(llm-gateway): per-model generation controls (ingest, UI, persistence, injection) by @markokraemer in https://github.com/kortix-ai/suna/pull/4995
chore(dev-eks): deploy gateway dev-bb305e48 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4997
chore(dev-eks): deploy dev-bb305e48 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4998
fix(api): block sandbox agent tokens from account-scoped usage + gateway forensics reads by @agent-kortix in https://github.com/kortix-ai/suna/pull/4999
chore(dev-eks): deploy dev-9971614f [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5001
feat(connectors): feature-flag Discover beside Easy Connect by @markokraemer in https://github.com/kortix-ai/suna/pull/5000
chore(dev-eks): deploy dev-73a5f282 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5003
feat(session): reasoning-effort selector in the chat composer by @markokraemer in https://github.com/kortix-ai/suna/pull/5002
fix(llm-catalog): only show reasoning-effort control for models with real reasoning_options by @markokraemer in https://github.com/kortix-ai/suna/pull/5004
fix(routing): routing-policy PUT 500 when defaultModel is set (missed partial-index ON CONFLICT predicate from #4978) by @markokraemer in https://github.com/kortix-ai/suna/pull/5006
fix(llm-gateway): linear-time trimTrailingSlash (CodeQL js/polynomial-redos, high) by @agent-kortix in https://github.com/kortix-ai/suna/pull/5005
chore(dev-eks): deploy gateway dev-832d9fea [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5008
chore(dev-eks): deploy dev-832d9fea [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5009
apps/web: React Doctor cleanup — dead code purge, session hot-path perf, correctness + a11y fixes by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4994
chore(dev-eks): deploy gateway dev-0823ba05 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5011
chore(dev-eks): deploy dev-0823ba05 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5012
fix(llm-gateway): full models.dev field fidelity + fix selector provider-grouping bug by @markokraemer in https://github.com/kortix-ai/suna/pull/5010
chore(dev-eks): deploy gateway dev-f4127030 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5015
chore(dev-eks): deploy dev-f4127030 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5016
test(ke2e): refresh two stale flow assertions (GW-4 modelGenerationConfig, PROJ-19 v2 blank manifest) by @markokraemer in https://github.com/kortix-ai/suna/pull/5017
chore(db): reconcile main to staging's shipped migration (main<>staging sync) by @markokraemer in https://github.com/kortix-ai/suna/pull/5020
chore(dev-eks): deploy dev-266366e9 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5021
test(ke2e): cover github-app + managed-git + marketplace install-session routes → 83.8% by @agent-kortix in https://github.com/kortix-ai/suna/pull/5023
chore: remove 11 unused imports flagged by CodeQL js/unused-local-variable by @agent-kortix in https://github.com/kortix-ai/suna/pull/5025
chore(dev-eks): deploy dev-434498d0 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5026
test(ke2e): cover the remaining API routes → ~100% coverage by @markokraemer in https://github.com/kortix-ai/suna/pull/5024
chore: remove 27 more unused imports (CodeQL js/unused-local-variable batch 2) by @agent-kortix in https://github.com/kortix-ai/suna/pull/5028
chore(dev-eks): deploy dev-a3a87883 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5029
feat(git-backends): code.storage (Pierre) managed git provider, flag-gated by @markokraemer in https://github.com/kortix-ai/suna/pull/5027
chore(dev-eks): deploy dev-08787efc [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5030
docs(runbooks): add enterprise onboarding packet (customer-facing) by @agent-kortix in https://github.com/kortix-ai/suna/pull/5031
spec(session-boot): 1-second threshold gap analysis + attack sequence by @agent-kortix in https://github.com/kortix-ai/suna/pull/5032
spec(teams): MS Teams connector Phase D scoping — backend done, CLI surface is the gap by @agent-kortix in https://github.com/kortix-ai/suna/pull/5033
feat(cli): kortix channels --platform teams (status/connect/manifest) by @agent-kortix in https://github.com/kortix-ai/suna/pull/5034
fix(github-app): install-callback no longer 500s on a bare hit (no state) by @agent-kortix in https://github.com/kortix-ai/suna/pull/5035
chore(dev-eks): deploy dev-bf38c80b [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5037
test(ke2e): add AUD-5 audit surface edge cases (authz, pagination, SSRF, secret-once, cross-account isolation) by @agent-kortix in https://github.com/kortix-ai/suna/pull/5036
bench(session-boot): Phase 0 benchmark harness — measure create→ready P50/P95/P99 by @agent-kortix in https://github.com/kortix-ai/suna/pull/5038
chore(dev-eks): deploy dev-3f0aa945 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5039
spec(llm-gateway): routing/fallback/cost/latency/evals audit + proposal by @agent-kortix in https://github.com/kortix-ai/suna/pull/5040
seo(aeo): order /api/ai recency-first so freshest content leads by @agent-kortix in https://github.com/kortix-ai/suna/pull/4976
fix(sandbox): decouple Chromium bake from per-project warm-repo cache miss by @markokraemer in https://github.com/kortix-ai/suna/pull/5042
chore(dev-eks): deploy gateway dev-03ce16b7 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5043
chore(dev-eks): deploy dev-03ce16b7 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/5045
content: publish self-hosted AI agent platforms listicle by @agent-kortix in https://github.com/kortix-ai/suna/pull/5041

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.10...v0.10.11

Read the full release on GitHub

July 17, 2026

Session panel layout fix and inline file previews in chat

v0.10.10

Fixed

The workspace could get stuck shifted sideways — chat and panel cards clipped at the left edge, dead space on the right — after opening the browser or terminal in the session panel. Opening those views no longer nudges the layout, and the layout can no longer be scrolled out of place.
When the agent shares files or images in the chat, the carousel and file previews render inline again instead of collapsing to a bare one-line row. Clicking the row still opens the full viewer in the side panel.

What's Changed

chore(release): VERSION → 0.10.10 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4887

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.9...v0.10.10

Release on GitHub

July 17, 2026

Easy panel polish: reliable terminal, browser landing, truthful tool cards

v0.10.9

Improved

The session panel's terminal now connects reliably and recovers cleanly instead of failing with "pty not found".
Browser sessions in the panel now land on a proper starting page instead of a blank view.
Tool cards in the session panel now show exactly what each tool did — no more misleading summaries.

What's Changed

chore(release): VERSION → 0.10.9 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4874
chore(dev-eks): deploy gateway dev-ae54bfb0 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4876
feat(iam-web): Cloudflare Access SAML guide by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4872
fix(k8s): set ingress.wafAclArn on prod gateway-values so Argo can render the gateway app by @markokraemer in https://github.com/kortix-ai/suna/pull/4879
chore(dev-eks): deploy dev-1cfc7743 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4881
fix(web): self-host SSO/OAuth redirect lands on 0.0.0.0:3000 instead of the public host by @markokraemer in https://github.com/kortix-ai/suna/pull/4882
fix(web): session panel stuck-shifted layout + show tool's inline carousel by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4884

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.8...v0.10.9

July 17, 2026

Fixes for OpenAI model routing, provider keys, terminals, and toasts

v0.10.8

This release is a focused batch of fixes.

Fixed

OpenAI-compatible models now get the correct max_tokens handling based on the model itself rather than the upstream host, so sessions on newer OpenAI models (e.g. gpt-5.6) complete their turns reliably instead of erroring.
Bring-your-own-key provider credentials are now always shared across your team — the private "Only me" option has been removed end to end, matching how the gateway actually reads keys and avoiding silent "no upstream configured" failures.
The in-terminal experience is more robust: the sandbox terminal now looks up or creates its pty on demand, so a reconnect no longer closes with "pty not found".
Approving or denying a request that has already been resolved no longer double-fires a "not found" toast.

What's Changed

chore(release): VERSION → 0.10.8 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4851
fix(sandbox-agent-server): terminal lookup-or-create pty, stop 'pty not found' close by @markokraemer in https://github.com/kortix-ai/suna/pull/4854
chore(dev-eks): deploy dev-75e1a601 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4855
fix(web): stop approve/deny resolve from double-toasting a generic 'Failed to perform action: not found' by @markokraemer in https://github.com/kortix-ai/suna/pull/4857
fix(llm): provider keys are always shared — remove the private/"Only me" option end-to-end by @markokraemer in https://github.com/kortix-ai/suna/pull/4856
chore(dev-eks): deploy gateway dev-7aae7172 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4859
chore(dev-eks): deploy dev-7aae7172 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4860
fix(llm-gateway): scope OpenAI max_tokens translation by model, not hostname by @markokraemer in https://github.com/kortix-ai/suna/pull/4858
chore(dev-eks): deploy gateway dev-4f42778e [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4861
chore(dev-eks): deploy dev-4f42778e [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4862
fix(deploy-prod): never fall back to a stale/unrelated image on release by @markokraemer in https://github.com/kortix-ai/suna/pull/4863
fix(api): model-defaults (and read endpoints) degrade gracefully when no provider key connected — stop 500 by @markokraemer in https://github.com/kortix-ai/suna/pull/4866
chore(dev-eks): deploy dev-c8b61b74 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4869
fix(web): easy session panel — terminal reliability, browser landing, truthful tool cards by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4867
feat(iam-web): Google Workspace SAML guide at Vercel parity by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4868
fix(security): remediate Trivy base-image npm CVEs (remove/patch bundled npm) + justify residual by @markokraemer in https://github.com/kortix-ai/suna/pull/4870

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.7...v0.10.8

July 17, 2026

v0.10.7

This release is a top-to-bottom overhaul of the LLM gateway — the layer that carries every model request — plus a round of security hardening and sandbox tooling work.

LLM gateway

The gateway now speaks each provider's API correctly instead of approximately.

OpenAI routing and parameters. Genuine-OpenAI reasoning models that also use tools now route to the /v1/responses API, where they belong. We translate max_tokens to max_completion_tokens, correct the gpt-5.5 fallback temperature flag, and pin the playground wire shape so what you test is what you ship.
Anthropic and Bedrock. When extended thinking is on, we stop forwarding temperature/top_p (they conflict with thinking), and Bedrock request/response frames are handled correctly. Bedrock is now available as a standalone bring-your-own-key provider, with its region read from the project's own secret.
Transport correctness. Safer tool_choice handling, per-provider parameter quirks, message-role normalization, and correct streaming frames across providers.
A LiteLLM translation sidecar now sits behind the control plane as a stateless translation layer, so provider-shape differences are handled in one place.
Streaming reliability. Aborts propagate end to end, mid-stream errors surface instead of hanging, buffers are bounded, and requests carry deadlines.
Error taxonomy. Failures now come back as honest, actionable errors rather than opaque ones.
Billing correctness. Accurate usage capture, cache-write pricing, and atomic budget holds, with tests to keep them honest.
A published capability matrix documents exactly what each model and provider supports.

Security

A DNS-resolving egress guard replaces the old hostname-string regex, closing SSRF gaps.
Teams bot connector tokens can no longer leak to a caller-supplied serviceUrl.
Sessions reject client attempts to forge deletedAt/deletedBy metadata.
Preview shares enforce a view-mode method gate; the Slack file proxy is narrowed to file subdomains; GET /files/history gets the resource denier; the MFA-required setting requires an explicit boolean; and malformed AgentMail webhook bodies are rejected before acknowledgement.

Sandbox and CLI

New pre-push sandbox gate: the CLI lints your Dockerfile in validate and can build sandboxes locally with sandboxes build --local.
The Python floor is venv-isolated, custom /workspace contents are preserved, and PTY terminals compile on a supported Bun and recover across providers.
A stopped sandbox now auto-resumes on active OpenCode access, flipping the session to ready.

Web and fixes

Rebuilt session panel with Easy/Advanced modes, new file viewers, and modular tool renderers.
The project no longer reveals the resolved sandbox provider when the project's provider is set to Automatic.
Clearer CLI install guidance, corrected OpenCode proxy targeting, and "Kortix Computer is starting" renamed to "Kortix Session is starting."
Infrastructure: HTTPS-only load-balancer listeners, durable WAF ownership, restored prod gateway origin TLS, and recovered prod migrations and session uploads.

What's Changed

fix(llm-gateway): translate max_tokens -> max_completion_tokens for genuine OpenAI by @markokraemer in https://github.com/kortix-ai/suna/pull/4805
chore(dev-eks): deploy dev-e437e6c0 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4807
chore(dev-eks): deploy gateway dev-e437e6c0 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4806
ci: enforce complete compliance monitor coverage by @markokraemer in https://github.com/kortix-ai/suna/pull/4786
fix(terminal): make PTY tabs recover across providers by @markokraemer in https://github.com/kortix-ai/suna/pull/4808
chore(dev-eks): deploy dev-cd096417 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4810
fix(llm): correct gpt-5.5 fallback temperature flag + pin playground wire shape by @markokraemer in https://github.com/kortix-ai/suna/pull/4809
feat(web): Easy/Advanced session panel, rebuilt file viewers, modular tool renderers by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4120
chore(dev-eks): deploy gateway dev-ea1e1680 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4811
chore(dev-eks): deploy gateway dev-614010f8 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4812
chore(dev-eks): deploy dev-614010f8 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4813
fix(llm-gateway): transport correctness — tool_choice safety, param quirks, role normalization, bedrock frames by @markokraemer in https://github.com/kortix-ai/suna/pull/4814
chore(dev-eks): deploy gateway dev-758505c6 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4818
ci: document reviewed IaC scanner exceptions by @markokraemer in https://github.com/kortix-ai/suna/pull/4816
fix(terminal): compile sandbox PTYs with supported Bun by @markokraemer in https://github.com/kortix-ai/suna/pull/4819
feat(llm-gateway): LiteLLM stateless translation sidecar behind the control plane by @markokraemer in https://github.com/kortix-ai/suna/pull/4817
chore(dev-eks): deploy gateway dev-2d706ac3 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4822
fix(llm-gateway): honest, actionable error taxonomy end-to-end by @markokraemer in https://github.com/kortix-ai/suna/pull/4820
chore(dev-eks): deploy gateway dev-866ab491 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4823
chore(dev-eks): deploy dev-866ab491 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4824
fix(llm-gateway): streaming reliability — abort propagation, mid-stream error surfacing, bounded buffers, deadlines by @markokraemer in https://github.com/kortix-ai/suna/pull/4821
chore(dev-eks): deploy gateway dev-c957b0b6 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4826
chore(dev-eks): deploy dev-c957b0b6 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4827
test(llm-gateway): close coverage gaps + backlog hygiene (correlation id, key validation) by @markokraemer in https://github.com/kortix-ai/suna/pull/4815
chore(dev-eks): deploy gateway dev-7986e1a2 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4828
chore(dev-eks): deploy dev-7986e1a2 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4829
fix(llm-gateway): billing correctness — usage capture, cache-write pricing, atomic budget, tests by @markokraemer in https://github.com/kortix-ai/suna/pull/4825
chore(dev-eks): deploy gateway dev-b8e392fd [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4831
chore(deps): bump actions/cache from 4 to 6 by @dependabot[bot] in https://github.com/kortix-ai/suna/pull/4581
chore(deps): bump bridgecrewio/checkov-action from 12.3112.0 to 12.3114.0 by @dependabot[bot] in https://github.com/kortix-ai/suna/pull/4582
chore(deps): bump hashicorp/setup-terraform from 3.1.2 to 4.0.1 by @dependabot[bot] in https://github.com/kortix-ai/suna/pull/4583
chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in https://github.com/kortix-ai/suna/pull/4584
chore(deps): bump github/codeql-action/upload-sarif from 3.27.5 to 4.37.0 by @dependabot[bot] in https://github.com/kortix-ai/suna/pull/4585
security(teams): block bot connector token leak to caller-supplied serviceUrl (F-7) by @markokraemer in https://github.com/kortix-ai/suna/pull/4561
security(sessions): forbid client forge of metadata.deletedAt/deletedBy (SSR-7) by @markokraemer in https://github.com/kortix-ai/suna/pull/4562
security(ssrf): DNS-resolving egress guard, replacing hostname-string regex (F-1) by @markokraemer in https://github.com/kortix-ai/suna/pull/4563
security: pentest run #4 low-severity hardening (S3-2, NEW-1, MFA-1, F-5, SSR-PV1) by @markokraemer in https://github.com/kortix-ai/suna/pull/4564
fix(sdk): record hasUsableModel in the public surface snapshots by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4473
fix(web): don't reveal the resolved sandbox provider when project provider is Automatic by @markokraemer in https://github.com/kortix-ai/suna/pull/4832
fix(web): 'Kortix Computer is starting' -> 'Kortix Session is starting' by @agent-kortix in https://github.com/kortix-ai/suna/pull/4750
fix(llm-gateway): route genuine-OpenAI reasoning+tools BYOK traffic to /v1/responses by @markokraemer in https://github.com/kortix-ai/suna/pull/4830
chore(release): VERSION → 0.10.7 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4803
chore(dev-eks): deploy gateway dev-cb28a245 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4834
refactor(sandbox): move the Dockerfile layer into @kortix/shared and split it by @markokraemer in https://github.com/kortix-ai/suna/pull/4799
fix(llm-gateway): stop forwarding temperature/top_p when Anthropic thinking is enabled by @markokraemer in https://github.com/kortix-ai/suna/pull/4833
Fix CLI sandbox OpenCode proxy targeting by @markokraemer in https://github.com/kortix-ai/suna/pull/4458
fix(sandbox): venv-isolate the Python floor, stop wiping custom /workspace, stop blaming users by @markokraemer in https://github.com/kortix-ai/suna/pull/4800
fix: manage regional compliance monitoring by @markokraemer in https://github.com/kortix-ai/suna/pull/4835
Fix CLI install guidance by @agent-kortix in https://github.com/kortix-ai/suna/pull/4707
docs(llm-gateway): gateway capability matrix — the flawless-gateway scorecard by @markokraemer in https://github.com/kortix-ai/suna/pull/4836
feat(cli): pre-push sandbox gate — Dockerfile lint in validate, sandboxes build --local by @markokraemer in https://github.com/kortix-ai/suna/pull/4801
chore(dev-eks): deploy dev-2456ea69 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4837
fix: enforce HTTPS-only ALB listeners by @markokraemer in https://github.com/kortix-ai/suna/pull/4838
fix: make ALB WAF ownership durable by @markokraemer in https://github.com/kortix-ai/suna/pull/4839
fix: prevent preview compliance drift by @markokraemer in https://github.com/kortix-ai/suna/pull/4841
fix: remove legacy ECS HTTP listeners by @markokraemer in https://github.com/kortix-ai/suna/pull/4842
feat(llm-gateway): Bedrock as a standalone BYOK provider by @markokraemer in https://github.com/kortix-ai/suna/pull/4843
chore(dev-eks): deploy gateway dev-eb3f28cb [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4845
chore(dev-eks): deploy dev-eb3f28cb [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4846
feat(cli): kortix gateway — full LLM-gateway control-plane by @markokraemer in https://github.com/kortix-ai/suna/pull/4840
chore(dev-eks): deploy dev-49a53b46 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4848
fix(compliance): codify all-region AWS controls by @markokraemer in https://github.com/kortix-ai/suna/pull/4849

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.6...v0.10.7

July 16, 2026

Restore EKS gateway release parity

v0.10.6

Stamp KORTIX_VERSION in the EKS gateway Helm chart and in staging/production GitOps bumps so the standby gateway reports the exact promoted release version. This completes the gateway origin TLS recovery and restores six-endpoint version parity across ECS, EKS, and the public router.

What's Changed

chore(release): VERSION → 0.10.5 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4793
fix(infra): restore prod EKS gateway origin TLS by @markokraemer in https://github.com/kortix-ai/suna/pull/4794
fix(gateway): stamp promoted release version by @markokraemer in https://github.com/kortix-ai/suna/pull/4797

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.4...v0.10.6

July 16, 2026

Restore Kortix managed model availability

v0.10.4

Refresh the authenticated managed-model catalog when adopting warm-fork sandboxes, restarting OpenCode only when the live catalog changes. Also preserve the staging Cloudflare Worker gateway bindings so managed inference reaches the configured gateway backend.

Verified on dev and staging with fresh real sandboxes: kortix/glm-5.2 returned exactly PONG. Staging proof used a real Stripe test-mode paid subscription and cleaned up all resources.

What's Changed

chore(release): VERSION → 0.10.4 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4778
chore(dev-eks): deploy dev-0c110523 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4780
fix(runtime): refresh managed model catalog on warm fork by @markokraemer in https://github.com/kortix-ai/suna/pull/4781
chore(dev-eks): deploy dev-0a88c34c [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4783
chore(infra): retire deployments/ (moved to customer's own infra repo) by @markokraemer in https://github.com/kortix-ai/suna/pull/4782
chore(infra): retire monorepo vps-demo Terraform root -> kortix-vps-demo-infra by @markokraemer in https://github.com/kortix-ai/suna/pull/4785
fix(release): preserve staging gateway worker bindings by @markokraemer in https://github.com/kortix-ai/suna/pull/4788
fix(web): document required PAT scopes in the Use-a-token panel by @markokraemer in https://github.com/kortix-ai/suna/pull/4775
fix(llm): private BYOK keys — shared-by-default, session-owner fallback, loud misconfig warning by @markokraemer in https://github.com/kortix-ai/suna/pull/4776
feat(selfhost-ec2): auto-recovery + first-class vertical scaling by @markokraemer in https://github.com/kortix-ai/suna/pull/4777
fix(self-host): warn when non-interactive init leaves no platform admin by @markokraemer in https://github.com/kortix-ai/suna/pull/4769
chore: replace deployment-specific references with codename by @markokraemer in https://github.com/kortix-ai/suna/pull/4787
chore(dev-eks): deploy dev-04382ec1 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4791

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.3...v0.10.4

July 16, 2026

Self-host hardening, experimental local-docker sandboxes, and an auth refresh fix

v0.10.3

Self-host hardening wave from the production-readiness audit, an experimental local-docker sandbox provider, and an auth refresh fix.

New

Experimental local-docker sandbox provider for self-host — run agent sandboxes as plain Docker containers on the same machine as your Kortix instance, with no cloud sandbox account. All sandbox-facing URLs resolve over the Docker network. Listed last in the provider picker and not recommended for production: it builds sandbox images locally and is noticeably slower than Daytona or Platinum.
Moving dev / staging / prod image tags — self-host instances can now track a channel-style tag (kortix self-host init --tag dev|staging|prod); CI re-tags the deployed build by digest, no rebuild.
Smoother SSO/SCIM setup — mint the SCIM token and paste it into your IdP on one page, live SSO verification with a resume story, complete Directory Sync and Google guide screenshots, and a visible "Use single sign-on (SSO)" entry on the sign-in page.

Improved

Self-host updater — resilient update runs with visible outcomes (kortix self-host status now shows the last update result), rotated container logs, and per-service memory limits so one service can't starve the box.
Self-host EC2 (Terraform) — the data volume now survives instance replacement (AZ pinned to the subnet, not the instance), reboot-surviving bootstrap, containerd relocated to the data volume, and CloudWatch status/disk/memory alarms.
Zero-downtime migration policy — every new database migration is linted by squawk plus deterministic mixed-version and enum-value guards in CI, with a rewritten migrations runbook.

Fixed

Silent auth refresh — sessions renew in the background; an expired token no longer leaves a dead, blank page.
Git PAT import — a saved managed-git personal access token is now recognized as a connected GitHub account, so repo import works without reconnecting.
SCIM Tenant URL is now correct on same-origin and self-hosted deployments.
Removed the legacy SANDBOX_IMAGE configuration surface from self-host.
Scoped the ECS deploy role's describe/list IAM actions to Kortix ARNs.

What's Changed

chore(release): VERSION → 0.10.3 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4760
feat(iam-web): complete the setup-guide screenshots + guard test by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4767
feat(iam-web): setup polish — live SSO verify, resume story, self-hosted SCIM fix by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4768
fix(iam): scope ECS deploy-role describe/list actions to kortix ARNs by @markokraemer in https://github.com/kortix-ai/suna/pull/4759
chore(self-host): remove legacy SANDBOX_IMAGE surface by @markokraemer in https://github.com/kortix-ai/suna/pull/4758
feat(ci): moving dev/staging/prod image tags for self-host tracking by @markokraemer in https://github.com/kortix-ai/suna/pull/4755
fix(git): recognize a saved managed-git PAT as a connected GitHub account by @markokraemer in https://github.com/kortix-ai/suna/pull/4757
refactor(db): zero-downtime migration policy — squawk + deterministic guards by @markokraemer in https://github.com/kortix-ai/suna/pull/4762
fix(selfhost-ec2): data-volume survival, resilient bootstrap, containerd on data volume, alarms by @markokraemer in https://github.com/kortix-ai/suna/pull/4763
fix(self-host): updater resilience, run visibility, log rotation, memory limits by @markokraemer in https://github.com/kortix-ai/suna/pull/4764
chore(dev-eks): deploy dev-2081ad42 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4770
feat(sandbox): experimental local-docker provider (same-machine sandboxes) by @markokraemer in https://github.com/kortix-ai/suna/pull/4765
fix(auth): silent token refresh + never render a dead auth page by @markokraemer in https://github.com/kortix-ai/suna/pull/4766
fix(local-docker): resolve every sandbox-facing URL over the Docker network by @markokraemer in https://github.com/kortix-ai/suna/pull/4771
chore(dev-eks): deploy dev-7e7cc29b [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4773

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.2...v0.10.3

July 16, 2026

Self-host SSO out of the box, unified sign-in, and safer defaults

v0.10.2

New

Unified sign-in — login and registration are now one email-first flow: enter your email and Kortix routes you to sign-in, sign-up, or your company's SSO automatically (with closed-signup and enforce-SSO support).
SSO out of the box on self-host — SAML is enabled by default, each instance generates its own SAML signing key at init, and SSO/SCIM setup is fully documented.
Identity setup wizard overhaul — reworked Entra wizard, SAML-before-SCIM ordering guidance, a provisioning health panel, an enforce-SSO toggle with clear domain consequences, and illustrated guides for all four SSO/SCIM flows.
Admin-controlled account creation on self-host — creating additional accounts is now restricted to the server admin by default (signups, teams, and SSO provisioning are unaffected), and the UI hides account creation when restricted.
Simpler self-host CLI — one env command, an uninstall command, and a friendlier init: a missing sandbox key warns instead of refusing to boot.
Enterprise license availability is now exposed on account state (API + SDK).

Fixed

Managed model provider now follows billing configuration by default, fixing managed models being unavailable on some deployments.
Self-host updater no longer fails on Docker-in-Docker mounts; the provider menu is always visible; configure records the admin email.
Non-admins no longer see a spurious Git-status error.

Behind the scenes

Production deploys are now hard-gated end to end: the release only publishes after the API and gateway deploys verify the live version.
Demo requests notify the team directly with lead-domain classification, and new signups sync to the contact list that powers onboarding emails.
Repo cleanup: self-host layout consolidated, stale roots removed, self-host docs moved under Guides.

What's Changed

chore(release): VERSION → 0.10.2 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4742
chore(dev-eks): deploy dev-2b63add6 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4744
Self-host wave 3: SSO by default, single-account removal, minimal CLI by @markokraemer in https://github.com/kortix-ai/suna/pull/4745
chore(dev-eks): deploy dev-07979b4c [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4748
feat(accounts): sync new signups to Mailtrap contact lists for email automations by @markokraemer in https://github.com/kortix-ai/suna/pull/4700
chore(dev-eks): deploy dev-46c4deda [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4752
feat(leads): demo-request notifications to marko@ + hey@kortix.ai, kortix.ai sender, lead domain classification by @markokraemer in https://github.com/kortix-ai/suna/pull/4751
chore(dev-eks): deploy dev-ebebd434 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4753
Self-host wave: identity polish, account-creation restriction, managed-provider billing-aware default by @markokraemer in https://github.com/kortix-ai/suna/pull/4754

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.1...v0.10.2

July 15, 2026

Self-host: verified laptop and VPS deployments, guided setup

v0.10.1

Self-host hardening — everything live-verified

Agent sessions work everywhere: fixed the LLM base URL handed to cloud sandboxes and the in-API gateway path shape — BYOK model keys now carry real agent turns on local machines (Cloudflare tunnel) and VPS (domain) alike, proven end-to-end.
Guided setup, VPS-first: kortix self-host init walks domain/reachability → admin email → deployment shape → sandbox provider (Daytona/E2B/Platinum) → optional connectors → update schedule. Help text cut to a page. Auto-update on by default.
GitHub connection hardening: personal-account installs route correctly, torn configs are detected, the Git settings tab never renders blank, and 'New project' takes you to Git settings when GitHub isn't connected yet.
CLI against your self-host: kortix login opens your deployment's dashboard and the full login → projects → ship flow is verified.
kortix-selfhost/: one-README distribution with an optional thin Terraform for AWS/EC2 — durable data volume, automatic EBS-snapshot backups (configurable cadence, keeps N), DNS via Route53 or your own provider.

What's Changed

chore(release): VERSION → 0.10.1 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4733
Self-host hardening: verified laptop+VPS e2e, init overhaul, git/login fixes by @markokraemer in https://github.com/kortix-ai/suna/pull/4732
chore(dev-eks): deploy dev-f1043e06 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4738
feat(mfa): members-list MFA status + verification recovers the screen by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4737
chore(dev-eks): deploy dev-7cc3f6f1 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4741
fix(api): free the SAML domain on SSO disconnect by @markokraemer in https://github.com/kortix-ai/suna/pull/4739

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.10.0...v0.10.1

Run your whole company from one repo you own.

Run your whole company from one repo you own.

Changelog

The LLM Gateway, rebuilt on the Vercel AI SDK and live models.dev — per-model controls, OpenAI/Anthropic APIs, and a full UX overhaul

LLM Gateway

Templates

Fixes & hardening

What's Changed

Session panel layout fix and inline file previews in chat

What's Changed

Easy panel polish: reliable terminal, browser landing, truthful tool cards

Improved

What's Changed

Fixes for OpenAI model routing, provider keys, terminals, and toasts

What's Changed

v0.10.7

LLM gateway

Security

Sandbox and CLI

Web and fixes

What's Changed

Restore EKS gateway release parity

What's Changed

Restore Kortix managed model availability

What's Changed

Self-host hardening, experimental local-docker sandboxes, and an auth refresh fix

What's Changed

Self-host SSO out of the box, unified sign-in, and safer defaults

New

Fixed

Behind the scenes

What's Changed

Self-host: verified laptop and VPS deployments, guided setup

Self-host hardening — everything live-verified

What's Changed