This release is a focused batch of fixes.
Fixed
- OpenAI-compatible models now get the correct
max_tokenshandling based on the model itself rather than the upstream host, so sessions on newer OpenAI models (e.g. gpt-5.6) complete their turns reliably instead of erroring. - Bring-your-own-key provider credentials are now always shared across your team — the private "Only me" option has been removed end to end, matching how the gateway actually reads keys and avoiding silent "no upstream configured" failures.
- The in-terminal experience is more robust: the sandbox terminal now looks up or creates its pty on demand, so a reconnect no longer closes with "pty not found".
- Approving or denying a request that has already been resolved no longer double-fires a "not found" toast.
What's Changed
- chore(release): VERSION → 0.10.8 [skip ci] by @github-actions[bot] in #4851
- fix(sandbox-agent-server): terminal lookup-or-create pty, stop 'pty not found' close by @markokraemer in #4854
- chore(dev-eks): deploy dev-75e1a601 [skip ci] by @github-actions[bot] in #4855
- fix(web): stop approve/deny resolve from double-toasting a generic 'Failed to perform action: not found' by @markokraemer in #4857
- fix(llm): provider keys are always shared — remove the private/"Only me" option end-to-end by @markokraemer in #4856
- chore(dev-eks): deploy gateway dev-7aae7172 [skip ci] by @github-actions[bot] in #4859
- chore(dev-eks): deploy dev-7aae7172 [skip ci] by @github-actions[bot] in #4860
- fix(llm-gateway): scope OpenAI max_tokens translation by model, not hostname by @markokraemer in #4858
- chore(dev-eks): deploy gateway dev-4f42778e [skip ci] by @github-actions[bot] in #4861
- chore(dev-eks): deploy dev-4f42778e [skip ci] by @github-actions[bot] in #4862
- fix(deploy-prod): never fall back to a stale/unrelated image on release by @markokraemer in #4863
- fix(api): model-defaults (and read endpoints) degrade gracefully when no provider key connected — stop 500 by @markokraemer in #4866
- chore(dev-eks): deploy dev-c8b61b74 [skip ci] by @github-actions[bot] in #4869
- fix(web): easy session panel — terminal reliability, browser landing, truthful tool cards by @sutharjay1 in #4867
- feat(iam-web): Google Workspace SAML guide at Vercel parity by @Ino-Bagaric in #4868
- fix(security): remediate Trivy base-image npm CVEs (remove/patch bundled npm) + justify residual by @markokraemer in #4870
Full Changelog: v0.10.7...v0.10.8