🌐 Interactive Browser Runtime

A more resilient browser surface — Chromium now runs headfully through Patchright on a private Xvfb display, with page helpers isolated in Patchright's own world and consistent package pinning across fresh and self-updated installations.
A real interactive viewport — The Browser page uses an authenticated Xpra session with CDP screencast and snapshot fallbacks. Viewport resizing stays synchronized across canvas and modal handoffs without fullscreen, decoration, or cursor artifacts.
One persistent browser for every chat — Chats share a long-lived Chromium, Xvfb, and Xpra runtime, including sign-ins. Tab ownership and per-chat limits remain isolated, and only the owning chat's tabs close on reset or removal.
Tabs return after restart — Browser ownership and URLs persist in KVP storage so tabs restore automatically for shared and per-chat scopes without Chromium's crash advisory.
Browser work gets the right model — The selected Browser preset activates after the first Browser tool call while the main model stays available as a safe fallback.

🔁 Responses & Subordinate Reliability

Completed tool calls survive streaming gaps — Function calls are recovered when the terminal Responses event omits them, and the final response tool now advertises a strict text-only schema across agent profiles.
Codex utility calls keep their output — Completed SSE items remain available when the final Codex response envelope leaves them out; the strict text response schema applies only at the Codex OAuth boundary.
Subordinates share one durable lifecycle — Direct and parallel call_subordinate execution use the same persisted child-context machinery, keeping failed children resumable with reset=false and preserving nested task ownership.

Reference the current scope — The composer supports inert @ references for profiles, tool policies, skills, and workspaces.
Drafts belong to their chat — Unsent text persists per chat in session storage across context switches and refreshes, including the Welcome composer prompt that creates the first chat.
Goal mode is one action away — A composer popover action pre-fills /goal and focuses the input.
Scoped plugin changes refresh quietly — Reload prompts are reserved for global changes that affect the loaded WebUI bundle; project- and agent-scoped updates refresh silently.

Built-in ACP session bridge — Agent Zero now includes an ACP bridge with editor-hosted A0 CLI transport and migrates retired a0_acp installations and scoped overrides at startup.
Contained user routes — usr/api provides a fallback after built-in and plugin handlers, while authenticated usr/extensions/webui assets stay root-contained without changing built-in extension paths.
Simpler Browser setup — Dependency reconciliation, cache migration, and Chromium installation now use one setup lock.

Restores preserve the destination URL — Backup restores keep the destination's ALLOWED_ORIGINS, avoiding lockouts when the backup came from a different address.
Desktop dependencies are pinned — LibreOffice and Xpra use the last successful multi-architecture packages, while the base snapshot stays fixed to avoid an unintended Python 3.14 upgrade.