kortix-ai/suna v0.13.43

v0.13.43 — Every kortix CLI command over MCP, connectors as MCP tools, and US-region sessions.

on GitHub

Every kortix CLI command over MCP, connectors as MCP tools, and US-region sessions.

New

• The hosted MCP server reaches full kortix CLI parity through a sandboxed kortix tool, and serves project skills.
• Connectors are first-class MCP tools.
• Projects can run their sessions in the US East region.
• A GDPR-complete privacy policy and a public subprocessors page at /legal/subprocessors.

Improved

• GLM 5.3 Flash is served from OpenCode Zen first, with the OpenRouter pool as fallback.
• Slack channels have defaults, and Teams and Slack permissions cover roles, identity links, join policies, and the bot's own scope.
• MCP OAuth refresh tokens get a grace period, a sweeper, and code-reuse revocation. Reads after a push return fresh data.

Fixed

• A session that was open across a deploy keeps accepting prompts. A runtime restart no longer ends a turn it already accepted, and every turn end reaches the API.
• A live session no longer goes to sleep after a short network interruption.
• A session whose sandbox lost its OpenCode root pin resumes the right conversation.
• A pi model that stops responding ends with a visible timeout.
• Deleting a user revokes their API tokens, OAuth tokens, and pending authorization codes.

What's Changed

• feat(platinum): us_region project flag — run a project's sessions in Platinum's US East region by @kubet in #8291
• refactor(web): reuse SDK billing transaction types (KRTX-721) by @agent-kortix in #8298
• fix(channels): Teams and Slack permissions — roles, identity links, join policies, own-bot scope by @Ino-Bagaric in #8302
• feat(gateway): fail GLM 5.3 Flash over to OpenCode Zen when the OpenRouter pool is busy by @markokraemer in #8303
• fix(compliance): clear Drata test 8003 and 28 IaC findings; delete the dead ECS preview root by @markokraemer in #8304
• refactor(web): delete dead attachment-tiles-logic module (KRTX-382) by @agent-kortix in #8301
• refactor(web): delete unused tab-strip actions and dead stacks in tab-store (KRTX-705) by @agent-kortix in #8308
• docs(compliance): record Drata test 225 risk acceptance by @markokraemer in #8309
• chore(release): staging VERSION → 0.13.43 [skip ci] by @github-actions[bot] in #8311
• chore(release): VERSION → 0.13.43 [skip ci] by @github-actions[bot] in #8312
• docs(release): promote current main is the default; staging PR is the gate by @markokraemer in #8279
• feat(gateway): serve GLM 5.3 Flash from OpenCode Zen first, OpenRouter pool as fallback by @markokraemer in #8313
• feat(mcp): connectors as first-class MCP tools; OAuth refresh grace, sweeper, code-reuse revoke; fresh reads after push by @markokraemer in #8314
• feat(legal): GDPR-complete privacy policy and /legal/subprocessors page by @markokraemer in #8315
• ci(compliance): make the Drata IaC gate blocking again by @markokraemer in #8316
• feat(mcp): complete kortix CLI parity via a sandboxed kortix tool; project skills; Slack channel defaults by @markokraemer in #8317
• fix(auth): revoke a user's credentials when the auth user is deleted by @markokraemer in #8318
• Promote main 88c1791 to staging (v0.13.43) by @markokraemer in #8319
• fix(tests): OAuth refresh rotation leaves the old access token live (#8314) by @markokraemer in #8320
• fix(runtime): resume the pinned OpenCode root when the box lost its pin file by @markokraemer in #8322
• docs(learnings): OpenCode root resolves from the control plane's pin by @markokraemer in #8324
• refactor(web): extract file viewer header and JSON tree (KRTX-399) by @agent-kortix in #8321
• fix(api): distinguish observed admission refusal from replacement (KRTX-822) by @agent-kortix in #8323
• fix(pi): end silent model stalls with a visible timeout (KRTX-835) by @agent-kortix in #8328
• fix(runtime): never sever an accepted turn on a restart; relay every turn end by identity by @markokraemer in #8329
• docs(learnings): a runtime restart must never kill an accepted turn by @markokraemer in #8330
• fix(web): exempt the English-only legal texts from the hardcoded UI audit by @markokraemer in #8331
• fix(session): a live session never goes to sleep on an ingress blip by @markokraemer in #8332
• Promote main 20732ef to staging (v0.13.43) by @markokraemer in #8333
• v0.13.43 — Every kortix CLI command over MCP, connectors as MCP tools, and US-region sessions. by @github-actions[bot] in #8334

Full Changelog: v0.13.42...v0.13.43