Release history

Fixed

• Switching between sessions no longer flashes a "Something went wrong" screen. A brief "runtime still starting" state during a session switch now shows a short loader and recovers on its own instead of surfacing as an error.
• The review inbox (sidebar and Review Center) keeps loading even when one of its sources is temporarily unavailable — it now degrades gracefully instead of failing the whole panel.
• Session file uploads are recoverable again after an interruption.
• PDF previews now open at 100% zoom instead of 50%.
• Sign-in polish on mobile: the mark is pinned top-left, gutters are wider, and the tagline is refreshed.

New and improved

• Signing in now defaults to a one-time email code, with password kept as a secondary option.
• Projects still on the older manifest now show a clear v1 → v2 upgrade prompt in the sidebar.
• Maintenance mode: admins can bypass a full lockdown through a signed session, and deploys now raise a heads-up banner while a rollout is in progress and clear it automatically once the API is healthy.

What's Changed

• chore(release): VERSION → 0.9.105 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4486
• chore(dev-eks): deploy dev-9f6fa472 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4488
• fix(web): render nothing for transient runtime-not-ready (info, not an error) by @markokraemer in https://github.com/kortix-ai/suna/pull/4489

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.104...v0.9.105

• Session uploads no longer fail at the generic 15-second proxy cutoff.\n- Failed sends preserve and restore the full prompt and attachments.\n- Legacy personal connector credentials migrate safely into member-owned profiles.\n- Restores missing runtime-context and executor-profile schema.

What's Changed

• chore(release): VERSION → 0.9.104 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4479
• chore(dev-eks): deploy gateway dev-0fc33d40 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4480
• chore(dev-eks): deploy dev-0fc33d40 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4481
• fix(web,api): stop transient runtime-not-ready throw from crashing every session switch + harden review inbox by @markokraemer in https://github.com/kortix-ai/suna/pull/4483
• feat(maintenance): admin bypass + auto rollout banner in CI/CD by @markokraemer in https://github.com/kortix-ai/suna/pull/4484

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.103...v0.9.104

Adds slack bind-thread (bind a session to a Slack thread for approval-reply loops; #4385) plus all other pending main changes promoted through staging (v0.9.102-staging, commit 6275ff93). Enables the WRING funding-request APPROVE-in-thread flow.

What's Changed

• chore(release): VERSION → 0.9.102 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4367
• fix(desktop): keep the Files page title clear of the macOS window controls by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4370
• fix(iam-web): hide Supabase internals from the SSO card by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4369
• feat(markdown): clean, minimal code blocks + refreshed Shiki palette in unified markdown by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4288
• feat(docs): fumadocs UI overhaul + unified-markdown content styling by @sutharjay1 in https://github.com/kortix-ai/suna/pull/4374
• fix(security): full security pass — 30 verified findings (2 crit, 14 high, 8 med, 6 low) by @markokraemer in https://github.com/kortix-ai/suna/pull/4373
• chore(dev-eks): deploy dev-7536a7d4 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4375
• fix: no red error-toast storm when joining a project as a member by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4376
• chore(dev-eks): deploy dev-7cf19a42 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4377
• feat(iam): enterprise-gate Groups/Roles/Audit/SSO with upsell UI + surface SAML SP details by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4371
• chore(dev-eks): deploy dev-3957ae79 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4378
• feat(iam-web): ship wizard step screenshots (temporary placeholders) by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4381
• feat(slack): slack bind-thread — bind current session to a Slack thread by @markokraemer in https://github.com/kortix-ai/suna/pull/4385
• fix(slack): recover from a deleted channel agent + honest session-start errors by @markokraemer in https://github.com/kortix-ai/suna/pull/4386
• chore(dev-eks): deploy dev-499841bb [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4388
• test(slack): integration-cover the deleted-agent recovery wiring (follow-up to #4386) by @markokraemer in https://github.com/kortix-ai/suna/pull/4390
• chore(dev-eks): deploy dev-8f162e29 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4391

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.101...v0.9.102

This release fixes a timing bug that could make an agent miss the very first message of a session, tightens single sign-on for teams, makes gateway errors say what actually went wrong, and hardens how OAuth tokens are stored.

Fixed

• Agents now reliably reply to your first message. On a fast cold start, the agent could fire your opening prompt before it had finished subscribing to its own event stream — so a quick first turn finished in that gap and the reply was lost (most visible as a silent first message in Slack). The agent now subscribes first, reconciles anything it missed on connect, and delivers each turn's end exactly once.
• Clearer gateway errors instead of a generic failure. When an upstream model provider failed mid-response (for example, an overloaded or request-too-large error on an otherwise-started stream), the gateway used to bury it as a generic "empty completion" and retry the same failing provider until it gave up. It now surfaces the real upstream error and message, drops the failed provider immediately, and fails over to another one when available.
• SSO group-to-role sync now works for SAML. SAML providers weren't registered with a group-claim mapping, so the group attribute never reached the token and group-driven role assignment silently did nothing (login still worked). Providers now register with the correct mapping, and the SSO setup card documents the common identity-provider gotchas.
• SCIM group membership applies to pending invites. A user provisioned via SCIM but not yet signed in was silently dropped from pushed groups. Their group is now recorded on the invite and applied automatically when they accept, matching how project access already works.

Improved

• Sandbox templates show which provider they use. Each template card and recent build now carries a small provider chip (Daytona, Platinum, Managed), and the templates section is tidier and less cluttered.
• CLI secrets match the web app. kortix secrets set --identifier KEY=VALUE lets you store more than one value under the same key from the terminal, and kortix secrets ls now lists by identifier and flags any missing required keys — bringing the CLI in line with the web Add-secret experience.
• CLI token context shows your environment grant. kortix token / whoami --token-only now include the env part of an agent grant (not just connectors and CLI access), and a bound default project points you at kortix projects use to switch.

Behind the scenes

• OAuth server access and refresh tokens are now stored with peppered scrypt, matching every other credential (previously plain SHA-256). Existing tokens keep working until they expire.
• All OpenRouter usage now attributes to one canonical app (www.kortix.com) instead of splitting across per-environment entries.
• Removed an unused internal session-LLM route that no client called.
• Trimmed frontend build spend by skipping builds that don't touch the frontend and gating preview builds.

Kortix is open and source-available.

What's Changed

• chore(release): VERSION → 0.9.101 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4347
• feat(web/sandbox): provider badge + declutter Sandbox templates by @kubet in https://github.com/kortix-ai/suna/pull/4348
• feat(cli): surface env grant in token context + switch hint on bare landing by @markokraemer in https://github.com/kortix-ai/suna/pull/4342
• chore(dev-eks): deploy dev-5d19382c [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4350
• fix(api): hash OAuth tokens with peppered scrypt, not bare sha256 by @markokraemer in https://github.com/kortix-ai/suna/pull/4344
• chore(api): remove the dead session-LLM router feature by @markokraemer in https://github.com/kortix-ai/suna/pull/4349
• chore(dev-eks): deploy dev-5f686f74 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4351
• fix(llm-gateway): surface real upstream stream errors instead of generic empty_completion by @markokraemer in https://github.com/kortix-ai/suna/pull/4352
• chore(dev-eks): deploy gateway dev-463b0b1f [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4353
• chore(dev-eks): deploy dev-463b0b1f [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4354
• chore(dev-eks): deploy dev-067f48cf [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4355
• fix(sandbox-agent): subscribe to opencode /event before firing initial prompt (+ reconcile-on-connect, exactly-once turn-end) — fixes first-message-no-reply on fast cold boots by @kubet in https://github.com/kortix-ai/suna/pull/4356
• chore(dev-eks): deploy dev-2179947d [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4357
• fix(iam): SAML providers missing group-claim attribute_mapping (SSO groups never synced) by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/4358
• chore(dev-eks): deploy dev-32e8b0d5 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4359
• chore(dev-eks): deploy dev-15506687 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4361
• feat(cli): consistent styled help + tiered command layout by @markokraemer in https://github.com/kortix-ai/suna/pull/4365
• chore(dev-eks): deploy dev-bdf08d8c [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/4366

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.9.100...v0.9.101