v1.10

# Agent Zero v1.10

## Highlights

- **New built-in Browser** — Replaces the legacy `browser-use` agent with a direct Playwright-powered browser, live WebUI viewer with CDP screencast streaming, floating/dockable canvas panel, tab management, Chrome extension support, annotation mode (Cmd/Ctrl+.), and persistent Chromium runtime. The old `_browser_agent` plugin has been extracted as a community plugin via the Plugin Index.

- **ChatGPT/Codex Account OAuth** — Connect your existing OpenAI Codex plan through a device-code OAuth flow. Agent Zero exposes a local OpenAI-compatible wrapper so LiteLLM can use account-backed models without a separate API key. Includes SSE streaming support and a discovery banner in the integrations UI.

- **Time Travel workspace history** — Shadow Git snapshots for `/a0/usr` workspaces with history, diff, preview, travel, and revert APIs. Debounced via the existing watchdog (one snapshot per workspace every 10 seconds). Replaces the earlier `_diff_viewer` plugin.

- **Universal Canvas & dockable panels** — Browser and Office surfaces can run in the right canvas or as floating modals. Automatic canvas handoffs open Office documents and Browser sessions from tool results. Right-canvas rail redesigned as a centered floating socket to preserve chat space.

- **Office canvas** — Read/edit support for DOCX, XLSX, and PPTX artifacts with version history, native XLSX chart creation (line/bar/pie/OHLC/etc.), file tabs with session switching, document card dashboard with previews, and tighter auto-handoff rules to avoid false positives.

- **Agent Profile switcher** — Profiles are now context-scoped and switchable from the chat composer. A guided creation wizard (`a0-create-agent` skill) walks through scope, behavior, and prompt overrides with a structured blueprint flow.

- **Project-scoped LLM presets** — Assign LLM presets per project; chat/utility settings copy into project-scoped config while embedding settings follow the effective global config.

## Security

- **CVE-2026-32871 remediation** — FastMCP upgraded to 3.2.4 and MCP to 1.27.0 to fix an OpenAPI path-parameter traversal vulnerability. Regression test added for path-encoding safety.

## Connector & Remote Tools

- Execution config (`exec_config`) is now sent in the connector WebSocket hello, removing the implicit host-side Core dependency and fixing Windows remote execution.
- Stale-read protection added to remote text editing (freshness checks before patch operations).
- Remote tool guidance is lazy-loaded as skills and gated on actual CLI capabilities instead of always injected.
- Shell write actions blocked in read-only mode.

## Text Editor

- Context-based `patch_text` support added to the Docker-local text editor, sharing validation and freshness logic with the remote editor while preserving legacy line-number edits.

## UI & Settings

- API key fields moved out of collapsed Advanced Settings into the main model form.
- Active model names shown in the chat model switcher (refreshed on settings save).
- Plugin Hub gains a "New" filter (last 14 days) with newest-sort and badge styling.
- Plugin settings modal title now shows the active plugin name.
- Settings and modals restyled with a left-rail layout, clearer hierarchy, and advanced disclosures.
- Onboarding progression improved for Main/Utility model setup.
- Email integration reworked with provider-first selection and guided defaults.
- Remote Link / tunnel UX refreshed with QR/mobile affordances.
- Active skills cap raised to 20 with a simpler checklist UI.
- Voice/STT transcription fix — text now correctly appears in the chat input via Alpine store.

## Integrations & Infrastructure

- Telegram and WhatsApp integration config persistence and project binding fixed.
- SearXNG `wikidata` engine disabled to prevent Docker bootstrap failure.
- Socket.IO disconnect handler updated to accept the `reason` parameter (python-socketio ≥5.14.2 compat).
- Tool request validation crash on non-canonical field names fixed.

## Breaking Changes

- **`_browser_agent` removed from core** — Users relying on the browser-use-based agent will be able to install it from the Plugin Index as a community plugin after its release.
- **`browser-use` Python dependency removed** — No longer bundled; only needed if using the community plugin.
- **Image attachments stored as path refs** — Vision and computer-use captures are now file-path references in history; inline base64/data-URL attachments are rejected on the connector WebSocket path.
- **FastMCP 3.x** — Upgraded from 2.x; plugins using FastMCP internals may need updates.