v0.10.14 — Session provisioning, sandbox runtime, and release reliability

• Use shared Daytona and Platinum runtime images for normal session boots.
• Disable automatic per-project commit-specific warm image builds.
• Fix snapshot collision recovery, warm archive handling, and repository Git metadata.
• Preserve sandbox URLs and reset readiness clocks across session restarts.
• Add responsive Cmd+J loading feedback and clearer runtime versus accelerator status.
• Remove the missing MACHINE.md failure and legacy migration eligibility request noise.
• Refactor release session fixtures to reuse managed repositories, bound SESS-2 to one session, and enforce teardown.
• Retry transient runtime-readiness failures without leaving failed sessions.
• Enforce account concurrent-session overrides consistently across API tasks.
• Correct compute pricing calculations and billing copy.
• Promote verified staging source d4f665a; staging RUN-8 and SESS-2 passed 2/2.

What's Changed

• chore(release): VERSION → 0.10.14 [skip ci] by @github-actions[bot] in #5135
• Privileged project session inventory by @markokraemer in #5137
• chore(dev-eks): deploy dev-e01813bc [skip ci] by @github-actions[bot] in #5138
• Bind owner-scoped connector profiles at session start by @markokraemer in #5139
• chore(dev-eks): deploy dev-68cc137c [skip ci] by @github-actions[bot] in #5140
• fix(billing): show top-up, not the Free-plan pitch, when a Team wallet is out of credits by @markokraemer in #5141
• chore(dev-eks): deploy dev-d99ed30c [skip ci] by @github-actions[bot] in #5142
• Revert owner-scoped connector profile bindings (#5139) by @markokraemer in #5143
• chore(dev-eks): deploy dev-1d613936 [skip ci] by @github-actions[bot] in #5145
• fix(runtime): disable passive continuation globally by @markokraemer in #5148
• chore(dev-eks): deploy dev-5696de72 [skip ci] by @github-actions[bot] in #5150
• chore(runtime): remove passive continuation residue by @markokraemer in #5151
• chore(dev-eks): deploy dev-7acd1a04 [skip ci] by @github-actions[bot] in #5153
• chore(dev-eks): deploy dev-d5746cc3 [skip ci] by @github-actions[bot] in #5155
• fix(api): harden owner-scoped connector profiles by @markokraemer in #5156
• chore(dev-eks): deploy dev-5c02647b [skip ci] by @github-actions[bot] in #5157
• chore(dev-eks): deploy dev-aa78c3e4 [skip ci] by @github-actions[bot] in #5158
• chore(dev-eks): deploy dev-2367c80d [skip ci] by @github-actions[bot] in #5159
• chore(dev-eks): deploy dev-527590d3 [skip ci] by @github-actions[bot] in #5160
• chore(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 by @dependabot[bot] in #5122
• chore(deps): bump actions/setup-node from 4 to 7 by @dependabot[bot] in #5121
• chore(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #5120
• test(ke2e): add TRG-11/12/13 triggers edge cases (authz, validation, activation lifecycle) by @agent-kortix in #5162
• fix(schema): regenerate stale snapshots after WhatsApp/Meet channel work by @agent-kortix in #5164
• chore(deps): bump pillow to 12.3.0 + regenerate embedded snapshot by @agent-kortix in #5161
• chore(deps): bump stale security override pins (axios, hono, js-yaml, protobufjs, brace-expansion) by @agent-kortix in #5163
• chore(dev-eks): deploy gateway dev-2ce865cd [skip ci] by @github-actions[bot] in #5166
• chore(dev-eks): deploy dev-2ce865cd [skip ci] by @github-actions[bot] in #5169
• chore(deps): bump stale security override pins batch 2 (svgo, fast-uri, dompurify, @opentelemetry/propagator-jaeger) by @agent-kortix in #5168
• chore(dev-eks): deploy gateway dev-7c6bb92a [skip ci] by @github-actions[bot] in #5170
• chore(dev-eks): deploy dev-7c6bb92a [skip ci] by @github-actions[bot] in #5171
• seo(aeo): populate last_modified for docs + marketing in /api/ai by @agent-kortix in #5165
• fix(web): filter Firefox Paper Shaders null-context getSupportedExtensions noise by @agent-kortix in #5172
• fix(web): match capitalized 'Window' storage SecurityError noise (BS 89b0a8e8…/b6927c9d…) by @agent-kortix in #5173
• fix(web): suppress Sentry 10.x 'No error message' placeholder chunk noise (BS 141dcca3/19ee7c2f) by @agent-kortix in #5174
• fix(ops): stop audit_events count from 500-ing /ops/overview + index it by @agent-kortix in #5176
• chore(dev-eks): deploy dev-b8cdbb8f [skip ci] by @github-actions[bot] in #5177
• fix(api): classify Daytona 429 out of Sentry across ALL call sites (ec26b248…) by @agent-kortix in #5167
• chore(dev-eks): deploy dev-1379e492 [skip ci] by @github-actions[bot] in #5178
• fix(api): classify Daytona transient 502/gateway failures out of Sentry (e98d61f1…) by @agent-kortix in #5175
• chore(dev-eks): deploy dev-c17ab86a [skip ci] by @github-actions[bot] in #5179
• chore(dev-eks): deploy dev-8d437e92 [skip ci] by @github-actions[bot] in #5184
• Prompt delivery reliability: durable trigger delivery, loud dead-letters that self-heal, undelivered-prompt reconciler, restart hardening by @markokraemer in #5180
• chore(dev-eks): deploy dev-3c297bae [skip ci] by @github-actions[bot] in #5186
• fix(web): filter Android WebView native-bridge postEvent noise (Java object is gone) by @agent-kortix in #5181
• fix(web): classify userscript-manager JSON.parse noise out of Sentry (BS 2249441898…) by @agent-kortix in #5182
• fix(web/sdk): classify expected no-compaction-model state out of Sentry (BS 9f72dd9a…) by @agent-kortix in #5183
• fix(web): filter Firefox React #327 scheduler re-entrancy noise (BS 0f03b24eb6) by @agent-kortix in #5185
• chore(dev-eks): deploy dev-1d002535 [skip ci] by @github-actions[bot] in #5187
• fix(api): normalize path-only Bun req.url from no-Host scanner probes (BS 28e9a65c…) by @agent-kortix in #5188
• chore(dev-eks): deploy dev-72cb5e7b [skip ci] by @github-actions[bot] in #5189
• chore(dev-eks): deploy dev-f72ff258 [skip ci] by @github-actions[bot] in #5190
• chore(dev-eks): deploy dev-4fe8c59e [skip ci] by @github-actions[bot] in #5191
• chore(dev-eks): deploy dev-6227dead [skip ci] by @github-actions[bot] in #5192
• fix(snapshots): stop the sandbox-template rebuild storm + Daytona 429 feedback loop by @markokraemer in #5193
• chore(dev-eks): deploy dev-359de189 [skip ci] by @github-actions[bot] in #5194
• docs: journey-based rebuild in controlled Simplified Technical English by @markokraemer in #5195
• chore(dev-eks): deploy dev-89637e9b [skip ci] by @github-actions[bot] in #5197
• chore(dev-eks): deploy dev-1334bac5 [skip ci] by @github-actions[bot] in #5198
• fix(web): filter Sentry non-Error undefined promise rejection noise (BS 5cfc90e5) by @agent-kortix in #5200
• feat(api): session origin + canOverride gate for backend-vouched sessions by @Ino-Bagaric in #5147
• chore(dev-eks): deploy dev-4a6e8fdf [skip ci] by @github-actions[bot] in #5202
• fix(runtime): route explicit models through Kortix gateway by @markokraemer in #5208
• chore(dev-eks): deploy dev-c75d3a67 [skip ci] by @github-actions[bot] in #5209
• chore(dev-eks): deploy dev-9db97511 [skip ci] by @github-actions[bot] in #5211
• feat(web): support standard LaTeX markdown delimiters by @markokraemer in #5213
• fix(billing): out-of-credits UX — real balance, valid success URL, on-brand modal, confetti by @markokraemer in #5146
• chore(dev-eks): deploy gateway dev-ea017504 [skip ci] by @github-actions[bot] in #5217
• chore(dev-eks): deploy dev-ea017504 [skip ci] by @github-actions[bot] in #5219
• fix: reduce dev project load latency by @markokraemer in #5220
• chore(dev-eks): deploy dev-696a7479 [skip ci] by @github-actions[bot] in #5224
• Non-duplicating prompt delivery + accurate session status label by @markokraemer in #5222
• chore(dev-eks): deploy dev-9d45d93b [skip ci] by @github-actions[bot] in #5227
• feat(web): publish agent discovery endpoints by @markokraemer in #5229
• fix(security): resolve critical and high scan findings by @markokraemer in #5228
• chore(dev-eks): deploy gateway dev-812c26ec [skip ci] by @github-actions[bot] in #5230
• chore(dev-eks): deploy dev-812c26ec [skip ci] by @github-actions[bot] in #5231
• fix(web): preserve agent discovery link headers by @markokraemer in #5234
• fix(codeql): remove dead API scripts by @markokraemer in #5236
• chore(dev-eks): deploy dev-71a5fdae [skip ci] by @github-actions[bot] in #5238
• fix: make GitHub repository import bounded and explicit by @markokraemer in #5232
• chore(dev-eks): deploy dev-c000047e [skip ci] by @github-actions[bot] in #5242
• fix(web): filter frameless OperationError popErrorScope rejection noise (BS 5e1aca20) by @agent-kortix in #5237
• fix(executor): classify optional-capability 501 as typed feature_not_supported out of Sentry (BS 1f3c4d96) by @agent-kortix in #5240
• chore(dev-eks): deploy dev-efe832b5 [skip ci] by @github-actions[bot] in #5244
• fix(release): stabilize staging QA flows by @markokraemer in #5245
• Fix remaining Checkov infrastructure gaps by @markokraemer in #5248
• Reconcile security baseline apply by @markokraemer in #5249
• Permit CloudTrail encrypted SNS delivery by @markokraemer in #5250
• Update Hono node server security override by @markokraemer in #5251
• chore(dev-eks): deploy gateway dev-f06e8d4a [skip ci] by @github-actions[bot] in #5252
• feat(api): per-session secrets allowlist (KaaB Phase 2) by @Ino-Bagaric in #5154
• chore(dev-eks): deploy dev-a485a458 [skip ci] by @github-actions[bot] in #5253
• feat: complete the Kortix-as-a-Backend DX (origin_ref runtime, SDK/CLI, e2e proof, docs) by @Ino-Bagaric in #5201
• chore(dev-eks): deploy dev-2cbc61a8 [skip ci] by @github-actions[bot] in #5257
• Add SEO department marketplace project by @lillyboga in #5210
• chore(dev-eks): deploy dev-99eab67b [skip ci] by @github-actions[bot] in #5262
• Fix project session inventory authorization by @markokraemer in #5266
• chore(dev-eks): deploy dev-2bf83d35 [skip ci] by @github-actions[bot] in #5268
• docs: accuracy sweep — manifest defaults, SDK ensureReady polling, CLI flags, channels by @agent-kortix in #5264
• Add SEO Department install guide by @lillyboga in #5276
• chore(dev-eks): deploy dev-d95f48ba [skip ci] by @github-actions[bot] in #5277
• test: retry transient release gate failures by @markokraemer in #5278
• fix(git): refresh mirror after missing branch by @markokraemer in #5280
• chore(dev-eks): deploy dev-7e1abd52 [skip ci] by @github-actions[bot] in #5281
• Guide SEO Department setup in the install session by @lillyboga in #5283
• chore(dev-eks): deploy dev-93b56c08 [skip ci] by @github-actions[bot] in #5284
• content(blog): wire 4 orphan posts into the internal-link graph by @agent-kortix in #5285
• test: tolerate release gate host transients by @markokraemer in #5286
• fix(staging): cap API database pools by @markokraemer in #5289
• fix(web): cover modern JSC Paper Shaders null-WebGL wording (BS a8754de5) by @agent-kortix in #5292
• Improve SEO Department install handoff by @lillyboga in #5293
• chore(dev-eks): deploy dev-2a297163 [skip ci] by @github-actions[bot] in #5294
• fix(deps): upgrade PostCSS past CVE-2026-45623 by @markokraemer in #5296
• chore(dev-eks): deploy gateway dev-05586895 [skip ci] by @github-actions[bot] in #5297
• chore(dev-eks): deploy dev-05586895 [skip ci] by @github-actions[bot] in #5299
• Fix API starter contract tests by @markokraemer in #5301
• chore(dev-eks): deploy dev-1ecd7840 [skip ci] by @github-actions[bot] in #5302
• fix(github): link existing app installations by @markokraemer in #5300
• chore(dev-eks): deploy dev-e181b0de [skip ci] by @github-actions[bot] in #5304
• refactor(session): bound synchronization and persist project navigation by @markokraemer in #5306
• chore(dev-eks): deploy dev-6ee04945 [skip ci] by @github-actions[bot] in #5307
• Fix release infra gate for Lambda Python 3.13 by @markokraemer in #5308
• chore: standarzied and managed sandbox node+python runtime by @BlankParticle in #5206
• chore(dev-eks): deploy gateway dev-4ab7d6c5 [skip ci] by @github-actions[bot] in #5310
• chore(dev-eks): deploy dev-4ab7d6c5 [skip ci] by @github-actions[bot] in #5311
• Fix dev session provisioning and terminal startup state by @markokraemer in #5314
• chore(dev-eks): deploy dev-b63dfdc1 [skip ci] by @github-actions[bot] in #5315
• fix: make session startup and shell recovery reliable by @markokraemer in #5316
• chore(dev-eks): deploy gateway dev-cd18974b [skip ci] by @github-actions[bot] in #5317
• chore(dev-eks): deploy dev-cd18974b [skip ci] by @github-actions[bot] in #5319
• fix(sandbox): invalidate broken v31 runtime image by @markokraemer in #5318
• chore(dev-eks): deploy gateway dev-3956467f [skip ci] by @github-actions[bot] in #5320
• chore(dev-eks): deploy dev-3956467f [skip ci] by @github-actions[bot] in #5321
• fix(sessions): preserve runtime URL on restart by @markokraemer in #5323
• chore(dev-eks): deploy dev-228b3cde [skip ci] by @github-actions[bot] in #5324
• fix(sessions): reset restart readiness clocks by @markokraemer in #5326
• feat(provider-transition): durable prepare→verify→activate provider migration by @allenabraham999 in #5243
• chore(dev-eks): deploy gateway dev-1a9325c0 [skip ci] by @github-actions[bot] in #5327
• chore(dev-eks): deploy dev-1a9325c0 [skip ci] by @github-actions[bot] in #5328
• fix(snapshots): preserve git metadata in warm build contexts by @markokraemer in #5329
• chore(dev-eks): deploy gateway dev-493ab7d3 [skip ci] by @github-actions[bot] in #5330
• chore(dev-eks): deploy dev-493ab7d3 [skip ci] by @github-actions[bot] in #5331
• fix(daytona): restore warm repository Git metadata from archive by @markokraemer in #5332
• chore(dev-eks): deploy gateway dev-47a0fdb4 [skip ci] by @github-actions[bot] in #5333
• chore(dev-eks): deploy dev-47a0fdb4 [skip ci] by @github-actions[bot] in #5334
• fix(daytona): tolerate immutable warm archive by @markokraemer in #5335
• chore(dev-eks): deploy gateway dev-f78037af [skip ci] by @github-actions[bot] in #5336
• chore(dev-eks): deploy dev-f78037af [skip ci] by @github-actions[bot] in #5337
• fix(sandboxes): separate session runtime from project acceleration by @markokraemer in #5338
• chore(dev-eks): deploy dev-8b0f0d01 [skip ci] by @github-actions[bot] in #5339
• Enforce paid access for managed models by @markokraemer in #5341
• chore(dev-eks): deploy gateway dev-a32b2d12 [skip ci] by @github-actions[bot] in #5343
• chore(dev-eks): deploy dev-a32b2d12 [skip ci] by @github-actions[bot] in #5345
• Remove stale Auto output from agents CLI by @markokraemer in #5344
• chore(dev-eks): deploy dev-76c12bad [skip ci] by @github-actions[bot] in #5346
• fix(api): gate Teams + Slack channel writes on project.connector.write by @Ino-Bagaric in #5105
• fix(api): atomic SCIM group-park append + branch-GC forward progress by @Ino-Bagaric in #5106
• fix(api): reject replayed/consumed execution ids in the approval wait gate by @Ino-Bagaric in #5107
• chore(api): remove dead install-authz gate + fix misleading marketplace comments by @Ino-Bagaric in #5108
• fix(iam-web): surface the member-detail actions (View as / permissions) by @Ino-Bagaric in #5109
• fix(iam-web): confirm role changes + use one role-descriptor source by @Ino-Bagaric in #5110
• test(api): cover tunnel-revoke, system-secret-delete guard, oauth-delete by @Ino-Bagaric in #5112
• hardening(kaab): ensureReady transient-null fix, hot-push SLACK_BOT_TOKEN scrub, tests + docs by @Ino-Bagaric in #5259
• fix(connectors): auto email binding no longer disables default fallback for other connectors by @Ino-Bagaric in #5272
• chore(dev-eks): deploy dev-6c0f3be2 [skip ci] by @github-actions[bot] in #5347
• docs: Kortix-as-a-Backend v1 — session-start overrides, origin gate, service-account auth by @Ino-Bagaric in #5101
• fix(security): reject cross-account idempotency-key collisions (session disclosure) by @Ino-Bagaric in #5267
• fix(secrets): resolve per-user secret overrides as the session owner, not the provisioner by @Ino-Bagaric in #5275
• fix(sdk): scoped runtime() cross-tenant sandbox bleed (top-level escape hatch) by @Ino-Bagaric in #5295
• chore(dev-eks): deploy dev-b6aafda6 [skip ci] by @github-actions[bot] in #5348
• docs: accuracy sweep — scoped runtime() throw, channel token injection, provider transition by @agent-kortix in #5350
• hardening(kaab): model fail-fast + idempotency identity guards + KaaB test suite & audit by @Ino-Bagaric in #5288
• test(shared): de-flake url-autolink ReDoS perf bound (2s → 10s) by @Ino-Bagaric in #5351
• chore(dev-eks): deploy gateway dev-8b7b5b2f [skip ci] by @github-actions[bot] in #5352
• chore(dev-eks): deploy dev-8b7b5b2f [skip ci] by @github-actions[bot] in #5353
• Adjust compute pricing by @markokraemer in #5355
• chore(dev-eks): deploy dev-6abb77e4 [skip ci] by @github-actions[bot] in #5356
• Correct model billing copy by @markokraemer in #5357
• fix(billing): prevent machine-sub hijack from orphaning paid plan subscriptions by @agent-kortix in #5358
• chore(dev-eks): deploy dev-2c85d2db [skip ci] by @github-actions[bot] in #5361
• fix(sessions): apply project model defaults by @markokraemer in #5359
• chore(dev-eks): deploy dev-2660e219 [skip ci] by @github-actions[bot] in #5362
• feat(kaab): personal connectors + inherit_unbound + Connection ID UI + public backend docs by @Ino-Bagaric in #5360
• content(web): rename deprecated CTA labels to sanctioned "Request demo" by @agent-kortix in #5363
• fix(ke2e): bound session release gate flows by @markokraemer in #5369
• chore(dev-eks): deploy dev-dc0b6c47 [skip ci] by @github-actions[bot] in #5371
• update pricing details by @markokraemer in #5373
• fix(api): resolve session limits across ECS tasks by @markokraemer in #5376
• chore(dev-eks): deploy dev-4694319b [skip ci] by @github-actions[bot] in #5377
• fix: retry transient read transport failures by @markokraemer in #5382
• chore(dev-eks): deploy dev-93058e0e [skip ci] by @github-actions[bot] in #5384
• fix(web): drop @embedpdf tiling tile-destructure noise (BS 3e579401/70272e1e) by @agent-kortix in #5367
• fix(web): drop Paper Shaders WebGL-unsupported noise (BS f1abf79e) by @agent-kortix in #5368
• fix(web): classify 25s server-processing-deadline as expected (BS a330bea1) by @agent-kortix in #5375
• fix(web): drop frameless bare 'network error' rejection noise (BS 2403c9ba) by @agent-kortix in #5380
• feat(web): restore session panel surfaces, fix show rendering, rework viewers by @sutharjay1 in #5378

New Contributors

• @BlankParticle made their first contribution in #5206
• @allenabraham999 made their first contribution in #5243

Full Changelog: v0.10.13...v0.10.14