v0.9.92 — Sandbox reliability fixes, per-project provider override, and gateway logging fix

New

• Per-project sandbox provider override — pin a project to a specific sandbox provider (e.g. Platinum) from Customize → Settings, instead of always following the platform's weighted default.

Fixed

• Sandboxes could fail on literally the first message in a silent retry loop, caused by a broken dependency bundle baked into the sandbox image. Sandbox image builds now verify the bundle actually works before shipping.
• A new session's first prompt could be silently dropped right after sandbox startup, requiring a resend. The app now waits for the sandbox to finish restarting before sending the prompt.
• Fixed a Postgres error that could interrupt request logging when an LLM request or response contained certain binary characters.
• Fixed a migration bug that could strand a retry in a failed state instead of resuming cleanly.
• Fixed an edge case in account membership repair.
• Improved error handling when an AgentMail inbox hits its limit.

Internal

• Restored the full staging release-verification pipeline (Vercel authentication bypass) after a temporary gate exclusion.
• Removed the manual prod-hotfix workflow — all production changes now go through the standard promotion flow.

What's Changed

• chore(release): VERSION → 0.9.92 [skip ci] by @github-actions[bot] in #4019
• fix(api): make suna-migration repo phase idempotent and pod-independent by @lillyboga in #4020
• chore(dev-eks): deploy dev-5824356b [skip ci] by @github-actions[bot] in #4021
• feat(web): consolidate agents, skills, and commands into Plugins view by @sutharjay1 in #4025
• Feat/iam rbac v1 by @Ino-Bagaric in #4027
• chore(dev-eks): deploy dev-6a3e0617 [skip ci] by @github-actions[bot] in #4028
• Fix/project invitation register flow by @Ino-Bagaric in #4029
• chore(dev-eks): deploy dev-fe201d25 [skip ci] by @github-actions[bot] in #4030
• chore(env): default dev sandbox provider to platinum by @markokraemer in #4036
• chore(dev-eks): deploy dev-7e731451 [skip ci] by @github-actions[bot] in #4038
• chore(security): add Deepsec audit setup and sandbox hardening by @markokraemer in #4037
• fix(billing): correct per-seat grant on checkout and seat-aware renewal by @agent-kortix in #4041
• chore(dev-eks): deploy dev-3fced612 [skip ci] by @github-actions[bot] in #4042
• feat(sandbox): per-project sandbox-provider override (Customize → Settings) by @kubet in #4044
• chore(dev-eks): deploy dev-10181ecb [skip ci] by @github-actions[bot] in #4045
• fix(sandbox-provider): move the provider picker into the Experimental list by @kubet in #4047
• feat(iam): self-serve enterprise demo toggle by @markokraemer in #4051
• chore(dev-eks): deploy dev-6eb551d9 [skip ci] by @github-actions[bot] in #4052
• chore(dev-eks): deploy dev-5a9d5e3b [skip ci] by @github-actions[bot] in #4053
• chore(deps): bump next from 15.5.14 to 15.5.18 in /apps/whitelabel-demo by @dependabot[bot] in #4008
• chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #3998
• chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #3997
• chore(deps): bump actions/attest-build-provenance from 2.1.0 to 4.1.0 by @dependabot[bot] in #3674
• chore(dev-eks): deploy dev-04652c44 [skip ci] by @github-actions[bot] in #4057
• fix(triggers): real agent/model pickers for schedules + webhooks by @markokraemer in #4063
• chore(mobile): delete dead agentpress chat stack (-45k lines) by @markokraemer in #4058
• chore(web,repo): delete dead code (components/thread, Tauri remnants, ghost package) by @markokraemer in #4055
• chore(dev-eks): deploy dev-07718196 [skip ci] by @github-actions[bot] in #4064
• refactor(web): adopt @kortix/sdk platform-client, delete duplicate by @markokraemer in #4054
• refactor(sdk): isomorphic core — remove use-client/next coupling from root entry by @markokraemer in #4056
• feat(contracts): @kortix/api-contract foundation, adopted for core project routes by @markokraemer in #4060
• chore(dev-eks): deploy gateway dev-360c175d [skip ci] by @github-actions[bot] in #4065
• chore(dev-eks): deploy dev-360c175d [skip ci] by @github-actions[bot] in #4066
• refactor(sdk): single turns implementation with merged web+mobile fixes by @markokraemer in #4062
• chore(dev-eks): deploy gateway dev-f2f08c53 [skip ci] by @github-actions[bot] in #4067
• refactor(web): adopt @kortix/sdk projects-client as the single data layer by @markokraemer in #4059
• chore(dev-eks): deploy dev-102680b7 [skip ci] by @github-actions[bot] in #4068
• refactor(web): split Plugins view back into Agents, Skills, Commands sections by @sutharjay1 in #4069
• feat(web): hide legacy-machine migration; move to /legacy-machines archive by @markokraemer in #4071
• fix(sandbox): lower Daytona auto-archive interval + self-healing disk-quota guard by @markokraemer in #4072
• chore(dev-eks): deploy dev-4fcf5e7d [skip ci] by @github-actions[bot] in #4074
• fix(sandbox): verify opencode-config-deps bundles at bake time by @markokraemer in #4073
• chore(dev-eks): deploy dev-910dfe7e [skip ci] by @github-actions[bot] in #4077
• test(sandbox): backfill coverage for the opencode-config-deps bake fix by @markokraemer in #4078
• chore(dev-eks): deploy dev-eea8fa4c [skip ci] by @github-actions[bot] in #4080
• fix(web): repoint legacy-machines page at the moved projects-client SDK export by @markokraemer in #4079
• feat(projects): read-only platform-admin bypass on the project access gate by @markokraemer in #4075

Full Changelog: v0.9.91...v0.9.92