Suna Files

Every kortix CLI command over MCP, connectors as MCP tools, and US-region sessions.

New

• The hosted MCP server reaches full kortix CLI parity through a sandboxed kortix tool, and serves project skills.
• Connectors are first-class MCP tools.
• Projects can run their sessions in the US East region.
• A GDPR-complete privacy policy and a public subprocessors page at /legal/subprocessors.

Improved

• GLM 5.3 Flash is served from OpenCode Zen first, with the OpenRouter pool as fallback.
• Slack channels have defaults, and Teams and Slack permissions cover roles, identity links, join policies, and the bot's own scope.
• MCP OAuth refresh tokens get a grace period, a sweeper, and code-reuse revocation. Reads after a push return fresh data.

Fixed

• A session that was open across a deploy keeps accepting prompts. A runtime restart no longer ends a turn it already accepted, and every turn end reaches the API.
• A live session no longer goes to sleep after a short network interruption.
• A session whose sandbox lost its OpenCode root pin resumes the right conversation.
• A pi model that stops responding ends with a visible timeout.
• Deleting a user revokes their API tokens, OAuth tokens, and pending authorization codes.

What's Changed

• feat(platinum): us_region project flag — run a project's sessions in Platinum's US East region by @kubet in https://github.com/kortix-ai/suna/pull/8291
• refactor(web): reuse SDK billing transaction types (KRTX-721) by @agent-kortix in https://github.com/kortix-ai/suna/pull/8298
• fix(channels): Teams and Slack permissions — roles, identity links, join policies, own-bot scope by @Ino-Bagaric in https://github.com/kortix-ai/suna/pull/8302
• feat(gateway): fail GLM 5.3 Flash over to OpenCode Zen when the OpenRouter pool is busy by @markokraemer in https://github.com/kortix-ai/suna/pull/8303
• fix(compliance): clear Drata test 8003 and 28 IaC findings; delete the dead ECS preview root by @markokraemer in https://github.com/kortix-ai/suna/pull/8304
• refactor(web): delete dead attachment-tiles-logic module (KRTX-382) by @agent-kortix in https://github.com/kortix-ai/suna/pull/8301
• refactor(web): delete unused tab-strip actions and dead stacks in tab-store (KRTX-705) by @agent-kortix in https://github.com/kortix-ai/suna/pull/8308
• docs(compliance): record Drata test 225 risk acceptance by @markokraemer in https://github.com/kortix-ai/suna/pull/8309
• chore(release): staging VERSION → 0.13.43 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/8311
• chore(release): VERSION → 0.13.43 [skip ci] by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/8312
• docs(release): promote current main is the default; staging PR is the gate by @markokraemer in https://github.com/kortix-ai/suna/pull/8279
• feat(gateway): serve GLM 5.3 Flash from OpenCode Zen first, OpenRouter pool as fallback by @markokraemer in https://github.com/kortix-ai/suna/pull/8313
• feat(mcp): connectors as first-class MCP tools; OAuth refresh grace, sweeper, code-reuse revoke; fresh reads after push by @markokraemer in https://github.com/kortix-ai/suna/pull/8314
• feat(legal): GDPR-complete privacy policy and /legal/subprocessors page by @markokraemer in https://github.com/kortix-ai/suna/pull/8315
• ci(compliance): make the Drata IaC gate blocking again by @markokraemer in https://github.com/kortix-ai/suna/pull/8316
• feat(mcp): complete kortix CLI parity via a sandboxed kortix tool; project skills; Slack channel defaults by @markokraemer in https://github.com/kortix-ai/suna/pull/8317
• fix(auth): revoke a user's credentials when the auth user is deleted by @markokraemer in https://github.com/kortix-ai/suna/pull/8318
• Promote main 88c1791dbf to staging (v0.13.43) by @markokraemer in https://github.com/kortix-ai/suna/pull/8319
• fix(tests): OAuth refresh rotation leaves the old access token live (#8314) by @markokraemer in https://github.com/kortix-ai/suna/pull/8320
• fix(runtime): resume the pinned OpenCode root when the box lost its pin file by @markokraemer in https://github.com/kortix-ai/suna/pull/8322
• docs(learnings): OpenCode root resolves from the control plane's pin by @markokraemer in https://github.com/kortix-ai/suna/pull/8324
• refactor(web): extract file viewer header and JSON tree (KRTX-399) by @agent-kortix in https://github.com/kortix-ai/suna/pull/8321
• fix(api): distinguish observed admission refusal from replacement (KRTX-822) by @agent-kortix in https://github.com/kortix-ai/suna/pull/8323
• fix(pi): end silent model stalls with a visible timeout (KRTX-835) by @agent-kortix in https://github.com/kortix-ai/suna/pull/8328
• fix(runtime): never sever an accepted turn on a restart; relay every turn end by identity by @markokraemer in https://github.com/kortix-ai/suna/pull/8329
• docs(learnings): a runtime restart must never kill an accepted turn by @markokraemer in https://github.com/kortix-ai/suna/pull/8330
• fix(web): exempt the English-only legal texts from the hardcoded UI audit by @markokraemer in https://github.com/kortix-ai/suna/pull/8331
• fix(session): a live session never goes to sleep on an ingress blip by @markokraemer in https://github.com/kortix-ai/suna/pull/8332
• Promote main 20732efa66 to staging (v0.13.43) by @markokraemer in https://github.com/kortix-ai/suna/pull/8333
• v0.13.43 — Every kortix CLI command over MCP, connectors as MCP tools, and US-region sessions. by @github-actions[bot] in https://github.com/kortix-ai/suna/pull/8334

Full Changelog: https://github.com/kortix-ai/suna/compare/v0.13.42...v0.13.43