kortix-ai/suna v0.13.16 on GitHub

Project-level provider and model access controls. Owners and admins choose which model providers and which models a project may use, from one model management view that also holds provider links. Kortix managed models sit beside your own providers in the same list, a ChatGPT subscription shows its access beside its credentials, and the picker distinguishes "not shown" from "blocked" so a member sees why a model is unavailable.
GPT-6 Astra is in the managed catalog. Select kortix/gpt-6-astra with image input, tools, and the supported reasoning efforts. Routing, prices, capability limits, and sandbox fallbacks are all in step.
The desktop app always has a way out. The shell has no browser toolbar, so a page without an in-app exit was a dead end. Every such page now has Close, the Go menu has Back (Cmd/Ctrl+[) and Home (Cmd/Ctrl+Shift+H), a renderer crash offers Reload or Go Home instead of an empty window, and the Electron route allowlist now matches the web middleware's exactly.

One noun: project. The interface said "workspace" while the SDK, CLI, API, routes, manifest, and docs all said "project". Screen copy now says project in every one of the nine languages, each with its own word rather than a find-and-replace. The sandbox /workspace directory, the manifest's per-agent workspace: boundary, and Slack workspaces keep their names.
Create a project in a specific account. The Switch project menu, already grouped by account, gains a "Create a project in {account}" row for each account where you are an owner or admin, including accounts that have no projects yet. The old global link never said which account it would land in.
The SSO and SCIM setup wizards work again. Picking a provider did nothing, and Back or the step rail snapped you to the first step with a render loop in the console. Both are fixed, and a browser journey now walks every step of both wizards on every deploy.
Tunnel file transfers are verified end to end. Binary files sent through the Computer Tunnel are checked by digest at the destination, an approval for one exact file no longer grants its parent directory, permission decisions are serialized so an approve and a deny cannot both win, and orphaned upload tasks are stopped.

The sandbox model proxy asked upstream for compressed responses and could not decode them. It now requests identity encoding, so a session on a model that answered with zstd no longer fails its first turn.

Project snapshot config provider v2 (S3). Sessions can boot from a prebuilt, blob-less snapshot of the project's committed tree with the history hydrated off the boot path, falling back to Git when no snapshot is ready. Every environment gets a private snapshot bucket and the task-role grant; only staging names its bucket, so production sessions keep the Git path until the in-region measurement lands.
The project-snapshot task role gets s3:ListBucket, so a missing object is a 404 and not a denied build, and the grant is gated on a plan-time boolean so terraform plan succeeds on a root that creates the bucket in the same apply.
The deployed release gate's contracts were corrected for previews: marketing stays enabled while the browser gate exercises /pricing, App domains are not expected on a sandbox origin, cold Daytona boots get a budget above their measured image builds, encoded-path probes accept the exact auth redirect, and the project submenu is required before a row is selected.
The connector connection-flow routing change (#7074) was merged and reverted within the same window; it ships no behavior.

What's Changed

feat(web): route connector connection flows by @sutharjay1 in #7074
feat: S3 project-snapshot config provider v2 — blob-less boot object + hydrated blob pack, Git fallback (local-verified; AWS/staging deferred) by @DimitrijeGlibic in #7221
fix(infra): project-snapshot grant count known at plan time (unblocks Deploy Dev) by @markokraemer in #7232
Revert "feat(web): route connector connection flows" (#7074) by @sutharjay1 in #7235
fix(infra): project-snapshot task role gets s3:ListBucket (dev producer 403) by @markokraemer in #7237
fix(web): one noun — project — and a way to create one in a specific account by @markokraemer in #7229
fix(web): SSO and SCIM setup wizards advance past the provider picker again by @markokraemer in #7239
fix(tunnel): verify binary file delivery and permission decisions by @markokraemer in #7241
Add project provider and model access controls by @markokraemer in #7233
feat(models): add GPT-6 Astra to Kortix by @Ino-Bagaric in #7245
fix(desktop): remove desktop soft locks — Close, Go Back/Home, crash recovery by @sutharjay1 in #7246
Release main to staging — September 15 candidate by @markokraemer in #7244
Release v0.13.16 — Project model access controls, GPT-6 Astra, and a desktop app you can always leave by @github-actions[bot] in #7250

Full Changelog: v0.13.15...v0.13.16