跳到正文

Kaeso 0.3.0。发布于 2026年10月21日，包含 96 项变更。

发布日期
变更
96 项变更
本版本内容
新增、变更、修复和安全
GitHub 上的版本（在新标签页中打开）

Kaeso 0.3.0 adds six built-in providers, so DeepSeek, SpaceX (xAI's API), Together AI, Groq, OpenRouter and Mistral can be added with a key and called from any app format. It tightens access: only owners transfer ownership, single sign-on admits only linked accounts and verified email domains, and forwarded addresses are trusted only from loopback by default. Five changes need action when you upgrade, listed under breaking, and most of the rest make requests, streams, budgets and the console faster or more accurate.

  • Breaking: Only owners can transfer ownership: custom roles and individual grants lose the right, and the content logging right is renamed logs.content.manage, so grant it again where people switch content logging. (#229（在新标签页中打开）)
  • Breaking: The gateway trusts X-Forwarded-For only from loopback by default. Set KAESO_TRUSTED_PROXIES when a reverse proxy sits outside the Compose package, or every client shares the proxy's address in logs and throttles. (#247（在新标签页中打开）)
  • Breaking: Single sign-on signs in only accounts linked to the organization's identity provider. Existing members whose accounts predate their organization's single sign-on must link them once under Account, Security. (#252（在新标签页中打开）)
  • Breaking: Single sign-on admits only email domains the organization has verified with a DNS TXT record. Publish the record and choose Verify domains under Security before relying on single sign-on after upgrading. (#264（在新标签页中打开）)
  • Breaking: Single sign-on no longer trusts private-network identity providers by default, so set KAESO_AUTH_OIDC_ALLOW_PRIVATE_NETWORKS to true for one. Turn off required verified addresses only for providers that never send the claim. (#270（在新标签页中打开）)

Contributors: @dvnold

Full changes: v0.2.2...v0.3.0（在新标签页中打开）

新增

UI library

Documentation

  • The documentation explains how providers work in one concept page, and adds a supported providers page that lists each provider's formats, host and where its keys come from. (#217（在新标签页中打开）)

变更

  • The console no longer reloads every loaded page of a long list when the window regains focus, and a change under an organization no longer reloads every list inside it. (#221（在新标签页中打开）)
  • Provider logos follow each provider's brand guidelines in one colour per theme, and Anthropic and Groq show a letter where their terms don't allow the logo in an interface. (#223（在新标签页中打开）)
  • A request for a model the provider no longer serves is refused locally with the same 404, and the provider is asked again only once the last answer is five minutes old. (#228（在新标签页中打开）)
  • The console asks the gateway for less: one list per resource, no lookups one at a time, and a live request log that keeps up with bursts of more than 100 requests. (#233（在新标签页中打开）)
  • The gateway keeps serving from its caches while it cannot hear Valkey invalidations, and concurrent misses share one load instead of each querying PostgreSQL. (#235（在新标签页中打开）)
  • Large and long requests use less memory and CPU, because the gateway shares one copy of each request and translates large bodies off its async worker threads. (#236（在新标签页中打开）)
  • Every console page lines up on one edge, and boxes start and end on the gutter with their text 12 pixels further in, on phones as well as desktops. (#237（在新标签页中打开）)
  • Limit checks no longer wait behind large cache reads and writes on Valkey, because bulk transfers use their own connections. (#242（在新标签页中打开）)
  • When a provider refuses the project's provider key, apps get a 502 provider error without the key details, and the provider's reason is kept, redacted, in the request log. (#244（在新标签页中打开）)
  • The gateway trusts X-Forwarded-For only from loopback by default, so set KAESO_TRUSTED_PROXIES for a reverse proxy outside the Compose package. (#247（在新标签页中打开）)
  • Every model and provider choice in the console is searchable and grouped, and the Providers page lists only the providers the organization has keys for. (#258（在新标签页中打开）)
  • The key dialog links each provider's API key page, and Add models warns when a provider has no key yet or when a bulk add would be large. (#259（在新标签页中打开）)
  • The key dialog opens SpaceX's API keys page directly, and it links Mistral's key page with a hint that Mistral keys have no fixed prefix. (#275（在新标签页中打开）)
  • Every built-in provider shows its own logo in the console, including Anthropic and Groq, and SpaceX's mark stays readable at small sizes. (#279（在新标签页中打开）)
  • The console reads every provider's name, key page, key prefix and formats from the gateway's list, so providers the gateway adds appear without a console update. (#290（在新标签页中打开）)

Gateway

KPP

  • Long tool loops from Chat Completions apps on Claude or the Responses API restore kept reasoning in one pass per request, so requests late in a conversation translate faster. (#227（在新标签页中打开）)

Console

Documentation

  • The Release workflow can be re-run after a partial release, and it checks its release commit against an independent run of the version script before pushing only the tag. (#220（在新标签页中打开）)
  • The published crates kaeso-kpp and kaeso-codecs are packaged, documented and checked for API breaks on every change, and the KPP decoders are fuzzed nightly. (#231（在新标签页中打开）)
  • Code may carry a comment only where a careful reader would otherwise get it wrong, such as a workaround or a security invariant, and CI rejects leftover task notes in comments. (#254（在新标签页中打开）)

Self-hosting

  • Release images ship a gateway binary built with link-time optimisation, which is 28 percent smaller; local builds and CI keep the faster release profile. (#273（在新标签页中打开）)

修复

  • Anthropic-format streams no longer fail when an OpenAI-compatible provider sends running usage on every chunk, as vLLM-based providers do. (#219（在新标签页中打开）)
  • Hard budgets and token rates reserve a worst case for each concurrent request, so a burst of expensive requests cannot overrun them, and a long stream keeps its reservation. (#232（在新标签页中打开）)
  • Replies and streams that finish without usage are charged an estimate instead of nothing, and the request log marks the usage as estimated. (#238（在新标签页中打开）)
  • Tool calls and errors from OpenAI-compatible providers are no longer dropped, merged or taken for a finished reply, and non-object tool arguments are refused for Anthropic apps instead of changed. (#246（在新标签页中打开）)
  • Project pages say when their keys, members, service accounts or limits could not load, instead of showing an empty list. (#248（在新标签页中打开）)
  • Writes to Anthropic's one-hour prompt cache are charged at their own price, twice the input price, instead of the five-minute price. (#249（在新标签页中打开）)
  • A revoked API key or ended session stops working at once across instances, and shared cache entries are signed with a key derived from the master key, so planted entries are ignored. (#250（在新标签页中打开）)
  • A stream error from a provider stops the provider request, so it no longer keeps generating and charging after the error is reported. (#253（在新标签页中打开）)
  • Replies from OpenAI-compatible providers with unusual usage, ids or finish reasons reach every app intact, and a stream that ends before its finish is reported as an error. (#256（在新标签页中打开）)
  • Release links are https only, request logs no longer load remote images, and the docs and showcase send strict transport security, nosniff and a referrer policy. (#263（在新标签页中打开）)
  • Responses streams whose text or tool arguments arrive only in their final events reach apps in other formats instead of an empty reply. (#267（在新标签页中打开）)
  • Server-sent events whose first field name starts with a byte order mark are written so that they read back the same. (#268（在新标签页中打开）)
  • Shutdown closes connections still open after the grace period, startup retries an unreachable PostgreSQL, and log and usage writes no longer lose rows. (#269（在新标签页中打开）)
  • Three earlier changes that later merges had undone are back in place: Chat reply translation, key safeguards and signed cache entries. (#276（在新标签页中打开）)
  • DeepSeek stops at the output limit apps in every format send, because its chat profile now uses max_tokens, and budgets hold enough for SpaceX reasoning. (#278（在新标签页中打开）)
  • Reasoning from DeepSeek, Groq, Together AI, OpenRouter and SpaceX reaches Anthropic and Responses apps and the Playground, and the request log stores it as reasoning rather than raw blocks. (#283（在新标签页中打开）)
  • The Playground refuses a model the provider does not serve with the same 404 and message as the model API, and the request log shows that message from the first failure. (#288（在新标签页中打开）)
  • Finished Playground replies no longer show up as 499 errors, and a failed or cut-off reply says why in its column. (#289（在新标签页中打开）)
  • Certificate checks no longer trust the distrusted emSign roots and intermediates, as the advisories against the certificate stack require. (#293（在新标签页中打开）)
  • OpenRouter errors carry the upstream provider's reason, such as a shared rate limit, to Anthropic and Responses apps and the request log, instead of only Provider returned error. (#294（在新标签页中打开）)
  • Request log messages appear in the person's language, with backtick spans set as code, and the request sheet states each outcome once. (#295（在新标签页中打开）)
  • Account pages explain why an organization's only owner cannot leave, order sessions by last use with readable client names, and describe two-factor authentication the same way everywhere. (#297（在新标签页中打开）)
  • Numbers, dates, context sizes and prices read the same way across the console, in English, German and Chinese. (#298（在新标签页中打开）)
  • Members and projects can be searched, archived items have their own tab, and inviting people keeps the address that was typed. (#299（在新标签页中打开）)
  • The model picker filters by provider at any number of providers, opens with an empty search, and greys out models the provider does not serve. (#300（在新标签页中打开）)
  • Single sign-on shows the sign-in callback to register before a connection exists, each domain's verification state, and why it cannot be required yet. (#302（在新标签页中打开）)
  • Audit logs name every action and target in words, show the time zone, and keep the target column readable at every width. (#303（在新标签页中打开）)
  • The Playground keeps its conversation while the tab is open, Clear can be undone, and replies show tokens and costs in the same form as the request logs. (#304（在新标签页中打开）)
  • Add models shows prices, how many models match, and exactly how many Add every current would add, and the Models page shows each provider's logo once per group. (#305（在新标签页中打开）)
  • Instance admins see each user's organizations and can reopen What's new, and the instance pages show dates, badges and update states that make sense. (#309（在新标签页中打开）)
  • Enter confirms text in an input method without submitting a dialog, and Enter in a search field inside a dialog keeps filtering. (#311（在新标签页中打开）)
  • The Providers page keeps a search's result when a refresh fails and explains why the first key cannot be added, and folded values are labelled for screen readers. (#312（在新标签页中打开）)
  • Inviting people stops at an invalid address still being typed, splits a pasted row of addresses into one tag each, and keeps focus after a role change. (#313（在新标签页中打开）)
  • Step dialogs keep what was typed when someone clicks outside them, and confirmations opened over a sheet dim the page behind them. (#315（在新标签页中打开）)
  • Copyable values show in full, Enter submits dialogs, field edges reach 3 to 1 contrast, and sheets keep their content while they close. (#280（在新标签页中打开）)
  • Provider keys name their provider in dialogs and menus, the providers list keeps every detail on narrow screens, and large organizations can search it. (#282（在新标签页中打开）)
  • Usage charts name each UTC day by its own date in every time zone and mark the period that is still running. (#284（在新标签页中打开）)
  • The request log keeps the model and provider readable at every width, and its model filter follows the chosen provider. (#285（在新标签页中打开）)
  • Sign-in shows a wrong password under the field, opens the app when you are already signed in, and carries your address into a password reset. (#286（在新标签页中打开）)

Console

UI library

Documentation

安全

  • Each release's compose file pins the Kaeso images by digest, and manual upgrades can verify them with gh attestation verify. (#218（在新标签页中打开）)
  • The updater refuses to create a container with more rights than the one it replaces, and it pulls only Kaeso images by digest. (#226（在新标签页中打开）)
  • Only owners can transfer ownership, custom roles and grants can no longer include that right, and the content logging right is renamed logs.content.manage. (#229（在新标签页中打开）)
  • Caddy and the updater run unprivileged, the databases drop their Linux capabilities, and every service has memory, process and log limits. (#234（在新标签页中打开）)
  • Single sign-on signs in only accounts linked to the organization's identity provider, and existing members link their account once under Account, Security. (#252（在新标签页中打开）)
  • Sign-in links ask for the second factor, account changes need a code, and email changes can be cancelled from the old address. (#255（在新标签页中打开）)
  • Only a person re-enables a key that a person disabled, keys cannot create platform-access keys, and instance admin changes to people need a recent sign-in. (#262（在新标签页中打开）)
  • Single sign-on admits only addresses at email domains the organization has verified with a DNS TXT record. (#264（在新标签页中打开）)
  • Single sign-on refuses link-local and cloud metadata addresses, issuers with queries, reuse of a stored secret for a changed issuer, and unverified email addresses, and private networks are off by default. (#270（在新标签页中打开）)
  • The sign-in page shows its own message for an SSO failure instead of text taken from the address, so a crafted link cannot show arbitrary text. (#271（在新标签页中打开）)
  • Advisories against the certificate stack are resolved, so the gateway rejects certificates chained through distrusted emSign intermediates. (#292（在新标签页中打开）)

更多版本