v1.12

## Release Notes

- **Fixed PTY file descriptor leaks in code execution** — POSIX PTY master descriptors are now properly closed when terminal sessions end, preventing `/dev/ptmx` descriptor exhaustion under sustained use. Additionally, closed or exited PTY sessions are detected before writes, with automatic retry/recovery on failure, and double-close of reused file descriptors is prevented through idempotent shutdown handling.

- **Browser runtime recovers from stale Playwright contexts** — Cached browser contexts that have already closed are now detected before reuse. Stale pages, screencasts, and interaction state are cleared, and the Playwright instance restarts cleanly on next use.

- **Desktop URLs open in the Agent Zero Browser** — Clicking URLs in the Xfce Desktop environment now routes them into the Browser tool on the opposite canvas/modal surface. Floating Browser and Desktop modals also pass through outside clicks while preserving interaction inside the modal window.

- **Self-update no longer fails on broken symlinks** — Dangling symlinks in `/usr` (e.g., host-created virtualenv links) are logged and skipped during backup, allowing updates to complete without aborting.

- **Deferred Office/Desktop startup** — The Desktop environment now starts only when the Desktop surface is opened or an Office document is created/opened, rather than eagerly on mount. A loading indicator provides immediate feedback while Xpra initializes.

- **ARM64 Xpra codec gaps handled gracefully** — Optional local Xpra GUI client packages are treated as best-effort on ARM64, so missing codec dependencies no longer surface as startup warnings when the browser-hosted Desktop is already functional.