🛡️ Security

Chat markdown rendering sanitized — The web UI chat renderer now blocks unsafe markdown output that could execute cross-site scripting payloads.

📝 Markdown Editor

Dedicated _editor plugin — Markdown files now open in a purpose-built Editor surface instead of being routed through Desktop or Office.
ACE-backed source editing — The editor adds a full source-editing mode with browser-style tabs, toolbar actions, file actions, and active-context synchronization.
Safe rendered preview — Preview mode supports search, inline editing from the rendered view, clickable task-list checkboxes, and safe rendering for rich Markdown content.
Rich Markdown support — Code blocks, tables, math, images, local links, and footnotes render in the new surface so documents stay readable while remaining editable.
Live refresh for saved tool edits — Open Markdown documents stay synchronized with active context and saved tool changes without reopening the file.

Obsolete Office markdown UI removed — Retired the older Office markdown editor and handoff paths now that Markdown has a dedicated Editor surface.
Desktop and Office focus clarified — Desktop and Office now concentrate on LibreOffice-compatible formats, with updated prompts, menus, and compatibility shims.

Remote exec reset forwarding — code_execution_remote replacement commands now pass reset=true to the connected CLI, letting stuck host sessions be torn down before the next command runs.
Connector message queue protocol — The connector backend now advertises message-queue support, exposes WebSocket handlers for queue add, remove, and send operations, and includes queue snapshots in context subscriptions.
Queue state stays synchronized — Queue updates now emit state changes so the CLI can stay aligned with Agent Zero as messages are added, removed, or sent.

Docker publish runners cleaned before build — The multi-platform Docker publish job now removes unused toolchains and stale Docker data before building, reducing disk-space exhaustion on hosted runners.