This release includes 3 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Moderate signalModel presets are now global and project-scoped definitions have been removed; legacy logs in /a0/logs are deleted on startup.
Why it matters: The shift to a single, reusable model preset collection changes configuration management for all users. Deleting legacy filesystem logs at startup eliminates prior log artifacts, affecting any system relying on those files.
Summary
AI summaryUpdates Highlights, Breaking changes, and Agent Zero v2.4 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Model presets become global; project-scoped definitions removed. Model presets become global; project-scoped definitions removed. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Breaking | High |
Launcher host access controls removed from Core WebUI. Launcher host access controls removed from Core WebUI. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Breaking | High |
Legacy filesystem logs in /a0/logs are deleted on startup. Legacy filesystem logs in /a0/logs are deleted on startup. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Global model presets overhaul: single collection, reusable setups for main, utility, embedding models. Global model presets overhaul: single collection, reusable setups for main, utility, embedding models. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Default model updated to OpenRouter's openai/gpt-5.6-terra. Default model updated to OpenRouter's openai/gpt-5.6-terra. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
LaTeX rendering in chat with inline and display TeX delimiters. LaTeX rendering in chat with inline and display TeX delimiters. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
A0 Launcher host gateway integration with access controls and lifecycle management. A0 Launcher host gateway integration with access controls and lifecycle management. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Editor improvements: full‑document editing, undo/redo, downloads, safe archive extraction. Editor improvements: full‑document editing, undo/redo, downloads, safe archive extraction. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Desktop session hardening: LibreOffice save targeting, fail‑fast on dead XFCE startup, atomic manifests, Pillow XWD decoding. Desktop session hardening: LibreOffice save targeting, fail‑fast on dead XFCE startup, atomic manifests, Pillow XWD decoding. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Notifications no longer skipped during state snapshots; action‑required notifications persist until dismissed or acted on. Notifications no longer skipped during state snapshots; action‑required notifications persist until dismissed or acted on. Source: llm_adapter@2026-07-17 Confidence: high |
— |
Full changelog
Agent Zero v2.4
Highlights
- Global model presets overhaul — Model presets are now a single global collection. Presets are reusable setups covering main, utility, and embedding models. Project-scoped preset definitions have been removed; scope configs now store only a preset name. Includes rename/retire propagation across plugin configs, saved chats, and live contexts, startup migration from remote or bundled fallback, and embedding-model support throughout the switcher and override APIs.
- Default model updated — The global default, Balance preset, and onboarding defaults now use OpenRouter's
openai/gpt-5.6-terra. - LaTeX rendering in chat — Standard inline and display TeX delimiters are now converted and rendered in chat messages, including agent-thought math. KaTeX font assets are bundled so math renders without missing local fonts.
- A0 Launcher host gateway integration — Added Launcher gateway protocol support with host access controls, file permission scoping (read/write/exec), sync-status integration, Computer Use approval routing, and reconnect/disconnect lifecycle management. Host access is now fully owned by A0 Launcher; the Core WebUI gateway menu has been removed.
- Editor improvements — Full-document editing replaces heading-based Markdown pagination. Plain text documents now get the same preview, formatting, save, and file-action toolbar as Markdown. Added keyboard undo/redo, file downloads, and safe archive extraction (ZIP, TAR, RAR, 7z).
- Desktop session hardening — LibreOffice saves now target the requested document window with content-change reporting. Fail-fast on dead XFCE startup, live X display probing, atomic session manifests, and XWD screenshot decoding via Pillow's raw decoder.
Improvements
- Notifications — Fixed notifications being skipped during state snapshots by capturing payloads with GUIDs under lock. Action-required notifications (plugin reload, update available) now persist until dismissed or acted on. Opening the Self Update modal auto-dismisses its toast.
- Model preset reset — Added a confirmed "Reset to default" action to the preset editor with proper draft refresh. Toast helper is resolved at action time so resets cannot abort prematurely.
- Goal handling — Active goals now continue through response attempts until completed or genuinely blocked. Goals reactivated by a terminal edit are automatically resumed with the revised objective.
- Slash commands — Known slash commands are now parsed in both prefix and trailing position.
- Code execution — Trailing framework status is treated as execution guidance rather than command output, preserving correct wait, reset, rerun, and continuation decisions.
- Secrets masking — Runtime
.envvalues are now masked in tool results, history, logs, and streamed output via the agent-facing SecretsManager. - Responses API metadata — Only durable continuation metadata is persisted, preventing history bloat from repeated prompts and raw payloads. Legacy AI message metadata is normalized on load.
- MCP tool aliases — Provider-safe Responses tool names are resolved back to canonical MCP names before dispatch, fixing lookup failures for tools like Google Workspace-style names.
- Browser settings — Host-browser discovery now accepts
host:portand HTTP discovery addresses with preserved endpoint casing. - Project model config — "Current project" config selection is correctly treated as inherited when no project-scoped config exists.
- File picker paths — Normalized File Browser picker paths so container paths are not doubled as
/a0/a0/. - Sync status indicator — Fixed overlapping connected/disconnected visuals after reconnects by rendering a single reactive SVG circle.
- WebUI extension loading — Serialized extension discovery requests to prevent embedded Chromium resource exhaustion; loading placeholders are always cleared after failures.
- Extension API —
unified_callandunified_turnare now decorated so community plugins can observe logical model-call boundaries. - Skills CLI — Unified with runtime helpers so CLI behavior cannot drift from the runtime contract.
- Legacy logs removed — Per-process HTML log files under
/a0/logsare no longer created. Existing legacy log directories are cleaned up automatically during startup migration. - Progress indicator cleanup — Removed redundant progress cue DOM wrapper and associated CSS.
Breaking changes
- Model presets are now global only. Project-scoped preset definitions have been removed. Existing project presets will not be recognized; scope configs now reference a preset by name only. The
Defaultpreset is always present and immutable. - Launcher Host access controls removed from Core WebUI. Host access changes must be made through A0 Launcher or the A0 CLI.
- Legacy filesystem logs removed. The
/a0/logsdirectory and per-process HTML files are deleted on startup. Debugging output should be read from Docker logs.
Breaking Changes
- Project-scoped preset definitions removed; all presets are global and referenced by name only. Existing project presets will not be recognized.
- Launcher host access controls moved out of Core WebUI; changes must now be performed via A0 Launcher or the A0 CLI.
- Legacy per‑process HTML log files in /a0/logs are deleted on startup; debugging output should be read from Docker logs.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.16 Legacy speech settings and APIs removed; use _kokoro_tts and _whisper_stt plugins instead.
- v1.14 Multi-action tools standardized around tool_args.action with backward compatibility
- v1.14 A0 connector remote workflow split into separate text-editor and code-execution skills
- v1.14 Office skills renamed to task-oriented names: Writer, Calc, Impress
Beta — feedback welcome: [email protected]