Upload folder using huggingface_hub (part 2)

.gitattributes

@@ -1,3 +1,236 @@
 version https://git-lfs.github.com/spec/v1
 oid sha256:56c89d9018842070bb8dd1397378f26b814d30f4f7c56d8ff8788dbae1f83682
 size 72
+docker/base/Dockerfile filter=lfs diff=lfs merge=lfs -text
+docker/base/build.txt filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/etc/searxng/limiter.toml filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/etc/searxng/settings.yml filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/after_install.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/configure_ssh.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/install_base_packages1.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/install_base_packages2.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/install_base_packages3.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/install_base_packages4.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/install_python.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/install_searxng.sh filter=lfs diff=lfs merge=lfs -text
+docker/base/fs/ins/install_searxng2.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/AGENTS.md filter=lfs diff=lfs merge=lfs -text
+docker/run/Dockerfile filter=lfs diff=lfs merge=lfs -text
+docker/run/build.txt filter=lfs diff=lfs merge=lfs -text
+docker/run/docker-compose.yml filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/etc/nginx/nginx.conf filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/etc/searxng/limiter.toml filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/etc/searxng/settings.yml filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/etc/supervisor/conf.d/supervisord.conf filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/huggingface-entrypoint.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/initialize.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/node_eval.js filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/run_A0.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/run_searxng.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/run_tunnel_api.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/self_update_manager.py filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/supervisor_event_listener.py filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/exe/trigger_self_update.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/copy_A0.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/install_A0.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/install_A02.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/install_additional.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/install_playwright.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/post_install.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/pre_install.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/setup_ssh.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/ins/setup_venv.sh filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/per/root/.bashrc filter=lfs diff=lfs merge=lfs -text
+docker/run/fs/per/root/.profile filter=lfs diff=lfs merge=lfs -text
+docs/AGENTS.md filter=lfs diff=lfs merge=lfs -text
+docs/README.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/architecture.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/connectivity.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/contributing-skills.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/extensions.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/mcp-configuration.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/notifications.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/plugins.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/sharing-and-safety.md filter=lfs diff=lfs merge=lfs -text
+docs/developer/websockets.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/a0-cli-connector.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/a2a-setup.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/agent-profiles.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/api-integration.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/browser.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/contribution.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/create-plugin.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/desktop.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/launcher.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/local-model-tool-use.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/mcp-setup.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/memory.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/model-presets.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/onboarding.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/projects.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/self-update.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/skills.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/troubleshooting.md filter=lfs diff=lfs merge=lfs -text
+docs/guides/usage.md filter=lfs diff=lfs merge=lfs -text
+docs/quickstart.md filter=lfs diff=lfs merge=lfs -text
+docs/res/a0-vector-graphics/banner.svg filter=lfs diff=lfs merge=lfs -text
+docs/res/a0-vector-graphics/dark.svg filter=lfs diff=lfs merge=lfs -text
+docs/res/a0-vector-graphics/darkSymbol.svg filter=lfs diff=lfs merge=lfs -text
+docs/res/a0-vector-graphics/horizontal_banner.svg filter=lfs diff=lfs merge=lfs -text
+docs/res/a0-vector-graphics/light.svg filter=lfs diff=lfs merge=lfs -text
+docs/res/a0-vector-graphics/lightSymbol.svg filter=lfs diff=lfs merge=lfs -text
+docs/res/banner.png filter=lfs diff=lfs merge=lfs -text
+docs/res/banner_high.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dark.svg filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-11.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-12.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-13.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-14.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-3.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-4.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-5.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-6.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-7.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-8.png filter=lfs diff=lfs merge=lfs -text
+docs/res/dev/devinst-9.png filter=lfs diff=lfs merge=lfs -text
+docs/res/favicon.png filter=lfs diff=lfs merge=lfs -text
+docs/res/favicon_round.png filter=lfs diff=lfs merge=lfs -text
+docs/res/header.png filter=lfs diff=lfs merge=lfs -text
+docs/res/install_guide.png filter=lfs diff=lfs merge=lfs -text
+docs/res/profiles.png filter=lfs diff=lfs merge=lfs -text
+docs/res/quickstart/image-24.png filter=lfs diff=lfs merge=lfs -text
+docs/res/quickstart/ui_chat_management.png filter=lfs diff=lfs merge=lfs -text
+docs/res/quickstart/ui_newchat1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/settings-page-ui1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/1-docker-image-search.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/2-docker-image-run-3.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/2-docker-image-run.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/3-docker-port-mapping.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/4-docker-container-started.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/5-docker-click-to-open.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/6-docker-a0-running-new.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/9-rfc-devpage-on-docker-instance-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/9-rfc-devpage-on-local-sbs-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/a2a/a2a-conn.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/a2a/a2a2.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/docker-delete-image-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-10.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-11.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-12.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-13.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-14-u.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-14.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-15.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-16.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-17.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-18.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-2.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-20.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-21.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-22-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-23-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-3.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-4.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-5.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-6.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-7.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-8.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image-9.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/image.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/macsocket.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/mcp/mcp-example-config.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/mcp/mcp-open-config.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/oses/apple.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/oses/linux.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/oses/windows.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/settings/1-agentConfig.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/settings/2-chat-model.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/settings/3-auth.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/settings/4-local-models.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/thumb_setup.png filter=lfs diff=lfs merge=lfs -text
+docs/res/setup/update-initialize.png filter=lfs diff=lfs merge=lfs -text
+docs/res/splash.webp filter=lfs diff=lfs merge=lfs -text
+docs/res/splash_wide.png filter=lfs diff=lfs merge=lfs -text
+docs/res/thumbnail-install.webp filter=lfs diff=lfs merge=lfs -text
+docs/res/time-travel.png filter=lfs diff=lfs merge=lfs -text
+docs/res/ui_screen2.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-browser-host-mode.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-browser-privacy.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-browser-status.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-command-browser.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-command-palette.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-host-picker.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-permissions.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-profile-created.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-profile-menu.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/a0-cli/a0-cli-start.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/action-btns.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/api-int/api-int-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/api-int/api-int-2image-gen-api2.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/api-int/api-int-3-api-key-missing-secrets.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/api-int/api-int-4-secrets-setting.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/api-int/api-int-5-finish.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/attachments-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/attachments-2.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/browser-annotation-comment.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/browser-canvas-example.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/browser-canvas-wide.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/browser-plugin-settings.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/browser-tool-history-expanded.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/browser-toolbar-settings.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/host-browser-remote-debugging-allow.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/browser/host-browser-remote-debugging-setting.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/file-browser.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/file-edit.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/first-task.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/launcher/launcher-installs.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/launcher/launcher-runtime-setup.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/memory-dashboard.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/memory-editing.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/multi-agent.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/nudge.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-account-provider.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-agent-zero-api-key-model.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-agent-zero-api-model-dropdown.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-cloud-provider.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-local-ollama-main.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-model-gate.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-ready.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-start.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/onboarding/onboarding-utility-same-model.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/projects/projects-activate-project.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/projects/projects-creation.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/projects/projects-desc-and-instructions.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/projects/projects-first-ops.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/projects/projects-git-projects-tree.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/projects/projects-gitprojects-clone.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/restart.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/tasks/edit-task.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/tasks/scheduler-1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/ui-context1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/ui-history1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/ui-katex-2.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/ui-settings-5-speech-to-text.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/ui-tts-stop-speech1.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/updating/self-update-v1-to-v2-warning.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/updating/self-update-v2-current.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/agent-editor-advanced-prompts.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/agent-editor-advanced-tools.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/agent-editor-easy-permissions.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/agent-editor-easy.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/agent-editor-review.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/agent-profile-manager.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/agent-profile-selector.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/chat-more-actions-skills.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/dashboard.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/desktop-canvas.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/desktop-new-menu.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/desktop-writer.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/memory-dashboard-controls.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/model-preset-selector.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/model-presets-add.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/model-presets-editor.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/project-active-chat.png filter=lfs diff=lfs merge=lfs -text
+docs/res/usage/webui/project-create-filled.png filter=lfs diff=lfs merge=lfs -text

docker/base/Dockerfile

@@ -1,40 +1,3 @@
-# Use the latest slim version of Kali Linux
-FROM kalilinux/kali-rolling
-
-
-# Set locale to en_US.UTF-8 and timezone to UTC
-RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y locales tzdata
-RUN sed -i -e 's/# \(en_US\.UTF-8 .*\)/\1/' /etc/locale.gen && \
-    dpkg-reconfigure --frontend=noninteractive locales && \
-    update-locale LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
-RUN ln -sf /usr/share/zoneinfo/UTC /etc/localtime
-RUN echo "UTC" > /etc/timezone
-RUN dpkg-reconfigure -f noninteractive tzdata
-ENV LANG=en_US.UTF-8
-ENV LANGUAGE=en_US:en
-ENV LC_ALL=en_US.UTF-8
-ENV TZ=UTC
-
-# Copy contents of the project to /
-COPY ./fs/ /
-
-# install packages software (split for better cache management)
-RUN bash /ins/install_base_packages1.sh
-RUN bash /ins/install_base_packages2.sh
-RUN bash /ins/install_base_packages3.sh
-RUN bash /ins/install_base_packages4.sh
-
-# install python after packages to ensure version overriding
-RUN bash /ins/install_python.sh
-
-# install searxng
-RUN bash /ins/install_searxng.sh
-
-# configure ssh
-RUN bash /ins/configure_ssh.sh
-
-# after install
-RUN bash /ins/after_install.sh
-
-# Keep container running infinitely
-CMD ["tail", "-f", "/dev/null"]
+version https://git-lfs.github.com/spec/v1
+oid sha256:234bdf6caffd5a7ddac176efea5b3060f1de4d38f26790277876370304b05034
+size 1196

docker/base/build.txt

@@ -1,18 +1,3 @@
-# local image with smart cache
-docker build -t agent-zero-base:local --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S)  .
-
-# local image without cache
-docker build -t agent-zero-base:local --no-cache  .
-
-# dockerhub push:
-
-docker login
-
-# with cache
-docker buildx build -t agent0ai/agent-zero-base:latest --platform linux/amd64,linux/arm64 --push --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-# without cache
-docker buildx build -t agent0ai/agent-zero-base:latest --platform linux/amd64,linux/arm64 --push --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) --no-cache .
-
-# plain output
---progress=plain
+version https://git-lfs.github.com/spec/v1
+oid sha256:7e6132c3b52e84a646dfc752ccea6a278c01ef1f6b1c7d20a217496cb0dda743
+size 608

docker/base/fs/etc/searxng/limiter.toml

@@ -1,33 +1,3 @@
-[botdetection]
-# Number of values to trust for X-Forwarded-For.
-trusted_proxies = ["127.0.0.1"]
-
-# The prefix defines the number of leading bits in an address that are compared
-# to determine whether or not an address is part of a (client) network.
-ipv4_prefix = 32
-ipv6_prefix = 48
-
-[botdetection.ip_limit]
-# To get unlimited access in a local network, by default link-local addresses
-# (networks) are not monitored by the ip_limit
-filter_link_local = false
-
-# Activate link_token method in the ip_limit method
-link_token = false
-
-[botdetection.ip_lists]
-# In the limiter, the ip_lists method has priority over all other methods.
-# If an IP is in the pass_ip list, it has unrestricted access and is not
-# checked if, for example, the "user agent" suggests a bot (e.g., curl).
-block_ip = [
-    # '93.184.216.34',  # Example IPv4 address
-    # '257.1.1.1',      # Invalid IP --> will be ignored, logged in ERROR class
-]
-pass_ip = [
-    # '192.168.0.0/16',  # IPv4 private network
-    # 'fe80::/10',       # IPv6 link-local; overrides botdetection.ip_limit.filter_link_local
-]
-
-# Activate passlist of (hardcoded) IPs from the SearXNG organization,
-# e.g., `check.searx.space`.
-pass_searxng_org = true
+version https://git-lfs.github.com/spec/v1
+oid sha256:0823d3680c926766580465b06b07ffb2198c9e4e53ca56a2ca3a45fc4a5811be
+size 1199

docker/base/fs/etc/searxng/settings.yml

@@ -1,91 +1,3 @@
-# SearXNG settings
-
-# Keep a minimal default engine set. Wikidata currently returns
-# variant payloads that break the 2026.04 searxng bootstrap init path.
-use_default_settings:
-  engines:
-    remove:
-      - wikidata
-
-general:
-  debug: false
-  instance_name: "SearXNG"
-
-search:
-  safe_search: 0
-  # autocomplete: 'duckduckgo'
-  formats:
-    - json
-    # - html
-
-server:
-  # Is overwritten by ${SEARXNG_SECRET}
-  secret_key: "dummy"
-  port: 55510
-  limiter: false
-  image_proxy: false
-  # public URL of the instance, to ensure correct inbound links. Is overwritten
-  # by ${SEARXNG_URL}.
-  # base_url: http://example.com/location
-
-# redis:
-#   # URL to connect redis database. Is overwritten by ${SEARXNG_REDIS_URL}.
-#   url: unix:///usr/local/searxng-redis/run/redis.sock?db=0
-
-ui:
-  static_use_hash: true
-
-# preferences:
-#   lock:
-#     - autocomplete
-#     - method
-
-enabled_plugins:
-  - 'Hash plugin'
-  - 'Self Informations'
-  - 'Tracker URL remover'
-  # - 'Ahmia blacklist'
-  # - 'Hostnames plugin'  # see 'hostnames' configuration below
-  # - 'Open Access DOI rewrite'
-
-# plugins:
-#   - only_show_green_results
-
-# hostnames:
-#   replace:
-#     '(.*\.)?youtube\.com$': 'invidious.example.com'
-#     '(.*\.)?youtu\.be$': 'invidious.example.com'
-#   remove:
-#     - '(.*\.)?facebook.com$'
-#   low_priority:
-#     - '(.*\.)?google\.com$'
-#   high_priority:
-#     - '(.*\.)?wikipedia.org$'
-
-engines:
-
-  - name: ahmia
-    disabled: true
-    inactive: true
-
-  - name: torch
-    disabled: true
-    inactive: true
-
-#   - name: fdroid
-#     disabled: false
-#
-#   - name: apk mirror
-#     disabled: false
-#
-#   - name: mediathekviewweb
-#     categories: TV
-#     disabled: false
-#
-#   - name: invidious
-#     disabled: false
-#     base_url:
-#       - https://invidious.snopyta.org
-#       - https://invidious.tiekoetter.com
-#       - https://invidio.xamh.de
-#       - https://inv.riverside.rocks
+version https://git-lfs.github.com/spec/v1
+oid sha256:285a75924555f7ce3e2c31020eb0ea48d9d86cdaae5488b4eedf07b0d3006d89
+size 1890

docker/base/fs/ins/after_install.sh

@@ -1,5 +1,3 @@
-#!/bin/bash
-set -e
-
-# clean up apt cache
-sudo apt-get clean
+version https://git-lfs.github.com/spec/v1
+oid sha256:307cbee5297787e5f380cd77003e559f66e5f18aa88e8dc8ea07c94971ad7af5
+size 60

docker/base/fs/ins/configure_ssh.sh

@@ -1,6 +1,3 @@
-#!/bin/bash
-set -e
-
-# Set up SSH
-mkdir -p /var/run/sshd && \
-    sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config
+version https://git-lfs.github.com/spec/v1
+oid sha256:16e50ddfdac1068376d23490242d51cfbad1297a3a686b2c70fbebe54b5c95d8
+size 152

docker/base/fs/ins/install_base_packages1.sh

@@ -1,11 +1,3 @@
-#!/bin/bash
-set -e
-
-echo "====================BASE PACKAGES1 START===================="
-
-apt-get update && apt-get upgrade -y
-
-apt-get install -y --no-install-recommends \
-    sudo curl wget git cron unzip 7zip
-
-echo "====================BASE PACKAGES1 END===================="
+version https://git-lfs.github.com/spec/v1
+oid sha256:a8fdbbaf67375fd8ce6691a7e5dafef875649687b8355ab3c4f9fefbb4cdb1ca
+size 278

docker/base/fs/ins/install_base_packages2.sh

@@ -1,10 +1,3 @@
-#!/bin/bash
-set -e
-
-echo "====================BASE PACKAGES2 START===================="
-
-
-apt-get install -y --no-install-recommends \
-    openssh-server ffmpeg supervisor
-
-echo "====================BASE PACKAGES2 END===================="
+version https://git-lfs.github.com/spec/v1
+oid sha256:91b5a734921d9be8fe70705f9d8a1c6ce731ef718b8bfb1cd92d5133498a4c59
+size 239

docker/base/fs/ins/install_base_packages3.sh

@@ -1,13 +1,3 @@
-#!/bin/bash
-set -e
-
-echo "====================BASE PACKAGES3 START===================="
-
-apt-get install -y --no-install-recommends \
-    nodejs npm
-
-echo "====================BASE PACKAGES3 NPM===================="
-
-# we shall not install npx separately, it's discontinued and some versions are broken
-# npm i -g npx
-echo "====================BASE PACKAGES3 END===================="
+version https://git-lfs.github.com/spec/v1
+oid sha256:964b5a3d7f2afdaf2e27bf60bb28e77b6bcc8d19476722615d47254529e352c7
+size 384

docker/base/fs/ins/install_base_packages4.sh

@@ -1,9 +1,3 @@
-#!/bin/bash
-set -e
-
-echo "====================BASE PACKAGES4 START===================="
-
-apt-get install -y --no-install-recommends \
-    tesseract-ocr tesseract-ocr-script-latn poppler-utils
-
-echo "====================BASE PACKAGES4 END===================="
+version https://git-lfs.github.com/spec/v1
+oid sha256:2d7ac6e3c9ed2b10e886ef56de073e35643981181e1f9b77b22e9541d771b7ce
+size 258

docker/base/fs/ins/install_python.sh

@@ -1,73 +1,3 @@
-#!/bin/bash
-set -e
-
-echo "====================PYTHON START===================="
-
-echo "====================PYTHON 3.13===================="
-
-apt clean && apt-get update && apt-get -y upgrade
-
-# install python 3.13 globally
-apt-get install -y --no-install-recommends \
-    python3.13 python3.13-venv 
-    #python3.13-dev
-
-
-echo "====================PYTHON 3.13 VENV===================="
-
-# create and activate default venv
-python3.13 -m venv /opt/venv
-source /opt/venv/bin/activate
-
-# upgrade pip and install static packages
-pip install --no-cache-dir --upgrade pip pipx ipython requests
-
-echo "====================PYTHON PYVENV===================="
-
-# Install pyenv build dependencies.
-apt-get install -y --no-install-recommends \
-    make build-essential libssl-dev zlib1g-dev libbz2-dev \
-    libreadline-dev libsqlite3-dev wget curl llvm \
-    libncursesw5-dev xz-utils tk-dev libxml2-dev \
-    libxmlsec1-dev libffi-dev liblzma-dev
-
-# Install pyenv globally
-git clone https://github.com/pyenv/pyenv.git /opt/pyenv
-
-# Setup environment variables for pyenv to be available system-wide
-cat > /etc/profile.d/pyenv.sh <<'EOF'
-export PYENV_ROOT="/opt/pyenv"
-export PATH="$PYENV_ROOT/bin:$PATH"
-eval "$(pyenv init --path)"
-EOF
-
-# fix permissions
-chmod +x /etc/profile.d/pyenv.sh
-
-# Source pyenv environment to make it available in this script
-source /etc/profile.d/pyenv.sh
-
-# Install Python 3.12.4
-echo "====================PYENV 3.12 VENV===================="
-pyenv install 3.12.4
-
-/opt/pyenv/versions/3.12.4/bin/python -m venv /opt/venv-a0
-source /opt/venv-a0/bin/activate
-
-# upgrade pip and install static packages
-pip install --no-cache-dir --upgrade pip pipx
-
-# Install some packages in specific variants
-pip install --no-cache-dir \
-    torch==2.4.0 \
-    torchvision==0.19.0 \
-    --index-url https://download.pytorch.org/whl/cpu
-
-echo "====================PYTHON UV ===================="
-
-curl -Ls https://astral.sh/uv/install.sh | UV_INSTALL_DIR=/usr/local/bin sh
-
-# clean up pip cache
-pip cache purge
-
-echo "====================PYTHON END===================="
+version https://git-lfs.github.com/spec/v1
+oid sha256:9c83793cf9f40cc2f1c318e3014f53b540e1056954eba409bc13712b0fc8579d
+size 2068

docker/base/fs/ins/install_searxng.sh

@@ -1,29 +1,3 @@
-#!/bin/bash
-set -e
-
-echo "====================SEARXNG1 START===================="
-
-# Install necessary packages
-apt-get install -y \
-    git build-essential libxslt-dev zlib1g-dev libffi-dev libssl-dev
-#    python3.12-babel uwsgi uwsgi-plugin-python3
-
-
-# Add the searxng system user
-useradd --shell /bin/bash --system \
-    --home-dir "/usr/local/searxng" \
-    --comment 'Privacy-respecting metasearch engine' \
-    searxng
-
-# Add the searxng user to the sudo group
-usermod -aG sudo searxng
-
-# Create the searxng directory and set ownership
-mkdir "/usr/local/searxng"
-chown -R "searxng:searxng" "/usr/local/searxng"
-
-echo "====================SEARXNG1 END===================="
-
-# Start a new shell as the searxng user and run the installation script
-su - searxng -c "bash /ins/install_searxng2.sh"
-
+version https://git-lfs.github.com/spec/v1
+oid sha256:b9fdb44b3ed98908f44fdc0dda73946afe22a12e56067863da837bfefc528b8e
+size 800

docker/base/fs/ins/install_searxng2.sh

@@ -1,36 +1,3 @@
-#!/bin/bash
-set -e
-
-echo "====================SEARXNG2 START===================="
-
-
-# clone SearXNG repo
-git clone "https://github.com/searxng/searxng" \
-                   "/usr/local/searxng/searxng-src"
-
-echo "====================SEARXNG2 VENV===================="
-
-# create virtualenv:
-python3.13 -m venv "/usr/local/searxng/searx-pyenv"
-
-# make it default
-echo ". /usr/local/searxng/searx-pyenv/bin/activate" \
-                   >>  "/usr/local/searxng/.profile"
-
-# activate venv
-source "/usr/local/searxng/searx-pyenv/bin/activate"
-
-echo "====================SEARXNG2 INST===================="
-
-# update pip's boilerplate
-pip install --no-cache-dir -U pip setuptools wheel pyyaml lxml msgspec typing_extensions
-
-# jump to SearXNG's working tree and install SearXNG into virtualenv
-cd "/usr/local/searxng/searxng-src"
-# pip install --no-cache-dir --use-pep517 --no-build-isolation -e .
-pip install --no-cache-dir --use-pep517 --no-build-isolation .
-
-# cleanup cache
-pip cache purge
-
-echo "====================SEARXNG2 END===================="
+version https://git-lfs.github.com/spec/v1
+oid sha256:ea486499849de2f7bc02febb8cac390b94d01e10dcdf3415f9b126c5f1be6726
+size 1048

docker/run/AGENTS.md

@@ -1,43 +1,3 @@
-# Docker Runtime Image DOX
-
-## Purpose
-
-- Own the runnable Agent Zero image context and local compose example.
-- Install Agent Zero from a selected branch onto the base image and prepare runtime entrypoints.
-
-## Ownership
-
-- `Dockerfile` owns branch-based image assembly, exposed ports, and container startup command.
-- `docker-compose.yml` owns the local compose service example.
-- `build.txt` owns maintainer build and push command notes.
-- `fs/exe/` owns runtime entrypoint, supervisor, self-update, Node eval, and service scripts.
-- `fs/exe/huggingface-entrypoint.sh` owns Space-specific startup defaults, including disabling outbound Cloudflare tunnels and enabling A2A.
-- `fs/ins/` owns preinstall, installation, virtualenv, Playwright, SSH, and postinstall scripts.
-- Files under `fs/` are copied to container root during the runtime build.
-
-## Local Contracts
-
-- `BRANCH` is required for branch-based Docker builds.
-- Preserve exposed ports for SSH, HTTP, and tunneled services unless docs and workflows are updated together.
-- Keep the two-runtime Python model aligned with the root contract.
-- Keep runtime desktop packages on `kali-last-snapshot`; carry the rolling base's matching ATK introspection package into that transaction, then pin the verified Python 3.13-compatible LibreOffice and complete Xpra runtime versions in `fs/ins/install_additional.sh` for both published architectures.
-- Do not bake secrets, local `.env` values, or user data into the image.
-- Runtime startup must ensure `/a0/usr/uploads` exists before supervised services start.
-- Runtime startup raises the soft open-file limit toward `A0_NOFILE_LIMIT` (default `65535`) before supervisord starts, bounded by the container hard limit.
-- Self-update user-data backups skip Time Travel shadow history under `usr/.time_travel/` and transient Desktop agent state.
-- Self-update waits up to 180 seconds for the updated or restored WebUI health check by default; `A0_SELF_UPDATE_HEALTH_TIMEOUT_SECONDS` may override it.
-- Successful or already-current self-updates refresh an installed Codex CLI with npm on a best-effort basis; missing CLIs and registry failures must not block Agent Zero startup.
-
-## Work Guidance
-
-- Keep startup scripts explicit about framework runtime versus execution runtime.
-- Coordinate tag, branch, and publishing changes with GitHub workflow automation.
-
-## Verification
-
-- Build `docker/run` when changing Dockerfile or install scripts.
-- Smoke-test container startup after entrypoint, supervisor, port, or compose changes.
-
-## Child DOX Index
-
-No child DOX files.
+version https://git-lfs.github.com/spec/v1
+oid sha256:17bbe98c21959fe36a5b7fe507d326495d066b9cd55358e6244b65c9b375ec6f
+size 2574

docker/run/Dockerfile

@@ -1,36 +1,3 @@
-# Use the pre-built base image for A0
-# FROM agent-zero-base:local
-# FROM agent0ai/agent-zero-base:testing
-FROM agent0ai/agent-zero-base:latest
-
-# Check if the argument is provided, else throw an error
-ARG BRANCH
-RUN if [ -z "$BRANCH" ]; then echo "ERROR: BRANCH is not set!" >&2; exit 1; fi
-ENV BRANCH=$BRANCH
-
-# Copy filesystem files to root
-COPY ./fs/ /
-
-# pre installation steps
-RUN bash /ins/pre_install.sh $BRANCH
-
-# install A0
-RUN bash /ins/install_A0.sh $BRANCH
-
-# install additional software
-RUN bash /ins/install_additional.sh $BRANCH
-
-# cleanup repo and install A0 without caching, this speeds up builds
-ARG CACHE_DATE=none
-RUN echo "cache buster $CACHE_DATE" && bash /ins/install_A02.sh $BRANCH
-
-# post installation steps
-RUN bash /ins/post_install.sh $BRANCH
-
-# Expose ports
-EXPOSE 22 80 9000-9009
-
-RUN chmod +x /exe/initialize.sh /exe/run_A0.sh /exe/run_searxng.sh /exe/run_tunnel_api.sh /exe/trigger_self_update.sh
-
-# initialize runtime and switch to supervisord
-CMD ["/exe/initialize.sh", "$BRANCH"]
+version https://git-lfs.github.com/spec/v1
+oid sha256:e3ae715c51dbf449efa619d79149742eb9bae802d722a75b8476b0a32ba3e8dd
+size 1016

docker/run/build.txt

@@ -1,42 +1,3 @@
-
-# LOCAL BUILDS
-# Run these commands from the project root folder
-
-# local development image based on local files with smart cache
-docker build -f DockerfileLocal -t agent-zero-local --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-# local development image based on local files without cache
-docker build -f DockerfileLocal -t agent-zero-local --no-cache .
-
-
-# GIT BASED BUILDS
-# Run these commands from the /docker/run directory
-
-# local image based on development branch instead of local files
-docker build -t agent-zero-development --build-arg BRANCH=development --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-# local image based on testing branch instead of local files
-docker build -t agent-zero-testing --build-arg BRANCH=testing --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-# local image based on main branch instead of local files
-docker build -t agent-zero-main --build-arg BRANCH=main --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-
-
-# DOCKERHUB PUSH
-# Run these commands from the /docker/run directory
-
-docker login
-
-# development:
-docker buildx build -t agent0ai/agent-zero:development --platform linux/amd64,linux/arm64 --push --build-arg BRANCH=development --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-# testing:
-docker buildx build -t agent0ai/agent-zero:testing --platform linux/amd64,linux/arm64 --push --build-arg BRANCH=testing --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-# main
-docker buildx build -t agent0ai/agent-zero:vx.x.x -t agent0ai/agent-zero:latest --platform linux/amd64,linux/arm64 --push --build-arg BRANCH=main --build-arg CACHE_DATE=$(date +%Y-%m-%d:%H:%M:%S) .
-
-
-# plain output
---progress=plain
+version https://git-lfs.github.com/spec/v1
+oid sha256:75dc51ca78f49f9860ab89813aedc3d37d7f7003863b465a6c02655729c25ae0
+size 1671

docker/run/docker-compose.yml

@@ -1,14 +1,3 @@
-services:
-  agent-zero:
-    container_name: agent-zero
-    image: agent0ai/agent-zero:latest
-    volumes:
-      - ./agent-zero:/a0
-    ports:
-      - "50080:80"
-    ulimits:
-      nofile:
-        soft: 65535
-        hard: 65535
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
+version https://git-lfs.github.com/spec/v1
+oid sha256:a7d6aec3bf1bc9e292ccf8f1dafe513bfb869d5093244cad97b8441375edeca6
+size 289

docker/run/fs/etc/nginx/nginx.conf

@@ -1,31 +1,3 @@
-daemon            off;
-worker_processes  2;
-user              www-data;
-
-events {
-    use           epoll;
-    worker_connections  128;
-}
-
-error_log         /var/log/nginx/error.log info;
-
-http {
-    server_tokens off;
-    include       mime.types;
-    charset       utf-8;
-
-    access_log    /var/log/nginx/access.log  combined;
-
-    server {
-        server_name   127.0.0.1:31735;
-        listen        127.0.0.1:31735;
-
-        error_page    500 502 503 504  /50x.html;
-
-        location      / {
-            root      /;
-        }
-
-    }
-
-}
+version https://git-lfs.github.com/spec/v1
+oid sha256:f9e58e00c90a7bbe25c26087c7c52ff49dcdbedce331cc4ac24f980104743337
+size 545

docker/run/fs/etc/searxng/limiter.toml

@@ -1,33 +1,3 @@
-[botdetection]
-# Number of values to trust for X-Forwarded-For.
-trusted_proxies = ["127.0.0.1"]
-
-# The prefix defines the number of leading bits in an address that are compared
-# to determine whether or not an address is part of a (client) network.
-ipv4_prefix = 32
-ipv6_prefix = 48
-
-[botdetection.ip_limit]
-# To get unlimited access in a local network, by default link-local addresses
-# (networks) are not monitored by the ip_limit
-filter_link_local = false
-
-# Activate link_token method in the ip_limit method
-link_token = false
-
-[botdetection.ip_lists]
-# In the limiter, the ip_lists method has priority over all other methods.
-# If an IP is in the pass_ip list, it has unrestricted access and is not
-# checked if, for example, the "user agent" suggests a bot (e.g., curl).
-block_ip = [
-    # '93.184.216.34',  # Example IPv4 address
-    # '257.1.1.1',      # Invalid IP --> will be ignored, logged in ERROR class
-]
-pass_ip = [
-    # '192.168.0.0/16',  # IPv4 private network
-    # 'fe80::/10',       # IPv6 link-local; overrides botdetection.ip_limit.filter_link_local
-]
-
-# Activate passlist of (hardcoded) IPs from the SearXNG organization,
-# e.g., `check.searx.space`.
-pass_searxng_org = true
+version https://git-lfs.github.com/spec/v1
+oid sha256:0823d3680c926766580465b06b07ffb2198c9e4e53ca56a2ca3a45fc4a5811be
+size 1199

docker/run/fs/etc/searxng/settings.yml

@@ -1,98 +1,3 @@
-# SearXNG settings
-
-use_default_settings:
-  engines:
-    remove:
-      - radio browser
-      - wikidata
-# TODO enable radio_browser when it works again
-# currently it crashes on x86 on gethostbyaddr
-
-general:
-  debug: false
-  instance_name: "SearXNG"
-
-search:
-  safe_search: 0
-  # autocomplete: 'duckduckgo'
-  formats:
-    - json
-    # - html
-
-server:
-  # Is overwritten by ${SEARXNG_SECRET}
-  secret_key: "dummy"
-  port: 55510
-  limiter: false
-  image_proxy: false
-  # public URL of the instance, to ensure correct inbound links. Is overwritten
-  # by ${SEARXNG_URL}.
-  # base_url: http://example.com/location
-
-# redis:
-#   # URL to connect redis database. Is overwritten by ${SEARXNG_REDIS_URL}.
-#   url: unix:///usr/local/searxng-redis/run/redis.sock?db=0
-
-ui:
-  static_use_hash: true
-
-# preferences:
-#   lock:
-#     - autocomplete
-#     - method
-
-enabled_plugins:
-  - 'Hash plugin'
-  - 'Self Informations'
-  - 'Tracker URL remover'
-  # - 'Ahmia blacklist'
-  # - 'Hostnames plugin'  # see 'hostnames' configuration below
-  # - 'Open Access DOI rewrite'
-
-# plugins:
-#   - only_show_green_results
-
-# hostnames:
-#   replace:
-#     '(.*\.)?youtube\.com$': 'invidious.example.com'
-#     '(.*\.)?youtu\.be$': 'invidious.example.com'
-#   remove:
-#     - '(.*\.)?facebook.com$'
-#   low_priority:
-#     - '(.*\.)?google\.com$'
-#   high_priority:
-#     - '(.*\.)?wikipedia.org$'
-
-engines:
-  - name: radio browser
-    engine: radio_browser
-    disabled: true
-    inactive: true
-
-  - name: ahmia
-    disabled: true
-    inactive: true
-
-  - name: torch
-    disabled: true
-    inactive: true
-# TODO enable radio_browser when it works again
-# currently it crashes on x86 on gethostbyaddr
-
-#   - name: fdroid
-#     disabled: false
-#
-#   - name: apk mirror
-#     disabled: false
-#
-#   - name: mediathekviewweb
-#     categories: TV
-#     disabled: false
-#
-#   - name: invidious
-#     disabled: false
-#     base_url:
-#       - https://invidious.snopyta.org
-#       - https://invidious.tiekoetter.com
-#       - https://invidio.xamh.de
-#       - https://inv.riverside.rocks
+version https://git-lfs.github.com/spec/v1
+oid sha256:b06e7385e5a7a2e2daad711852551cd82c3c2d7923c1cd5d55ddd085e7a04fad
+size 2055

docker/run/fs/etc/supervisor/conf.d/supervisord.conf

@@ -1,95 +1,3 @@
-[supervisord]
-nodaemon=true
-user=root
-logfile=/dev/stdout
-logfile_maxbytes=0
-pidfile=/var/run/supervisord.pid
-exitcodes=0,2
-directory=/
-
-[unix_http_server]
-file=/var/run/supervisor.sock
-chmod=0777
-
-[rpcinterface:supervisor]
-supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
-
-[supervisorctl]
-serverurl=unix:///var/run/supervisor.sock
-
-[program:run_sshd]
-command=/usr/sbin/sshd -D
-environment=
-stopwaitsecs=1
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-startretries=3
-stopasgroup=true
-killasgroup=true
-
-[program:run_cron]
-command=/usr/sbin/cron -f
-environment=
-stopwaitsecs=1
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-startretries=3
-stopasgroup=true
-killasgroup=true
-
-[program:run_searxng]
-command=/exe/run_searxng.sh
-environment=SEARXNG_SETTINGS_PATH=/etc/searxng/settings.yml
-user=searxng
-directory=/usr/local/searxng/searxng-src
-stopwaitsecs=1
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-startretries=3
-stopasgroup=true
-killasgroup=true
-
-[program:run_ui]
-command=/exe/run_A0.sh
-environment=
-user=root
-stopwaitsecs=60
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-startretries=3
-stopasgroup=true
-killasgroup=true
-
-[program:run_tunnel_api]
-command=/exe/run_tunnel_api.sh
-environment=
-user=root
-stopwaitsecs=60
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-startretries=3
-stopasgroup=true
-killasgroup=true
-
-[eventlistener:the_listener]
-command=python3 /exe/supervisor_event_listener.py
-events=PROCESS_STATE_FATAL
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
+version https://git-lfs.github.com/spec/v1
+oid sha256:056f6fddc74b8dae60f17e99049605871faf6b1722b199447bd159d156663dd3
+size 1941

docker/run/fs/exe/huggingface-entrypoint.sh

@@ -1,42 +1,3 @@
-#!/bin/bash
-set -euo pipefail
-
-# Hugging Face provides the public HTTPS edge; never start an outbound tunnel.
-if [ "${A0_CLOUDFLARE_DISABLED:-true}" != "true" ]; then
-    echo "A0_CLOUDFLARE_DISABLED must remain true on Hugging Face Spaces." >&2
-    exit 1
-fi
-
-mkdir -p /a0/usr
-
-# Settings normalization fills all other defaults. This deployment default makes
-# the authenticated A2A endpoint available immediately after the Space starts.
-python3 - <<'PY'
-import json
-import os
-from pathlib import Path
-
-settings_path = Path("/a0/usr/settings.json")
-try:
-    settings = json.loads(settings_path.read_text(encoding="utf-8"))
-except (FileNotFoundError, json.JSONDecodeError):
-    settings = {}
-
-settings["a2a_server_enabled"] = True
-if api_key := os.environ.get("SPYNEL_AGENT_ZERO_API_KEY", "").strip():
-    # Use one secret for the loopback client and the existing API-key verifier.
-    # It is persisted in the private runtime settings file and never printed.
-    settings["mcp_server_token"] = api_key
-settings_path.write_text(json.dumps(settings, indent=2) + "\n", encoding="utf-8")
-PY
-
-echo "Space URL: ${A0_PUBLIC_URL:-https://leon4gr45-agent.hf.space}"
-echo "A2A enabled at /a2a; authenticated incoming API enabled at /api_message."
-echo "Starting Agent Zero as uid=$(id -u) on ${WEB_UI_HOST:-0.0.0.0}:${WEB_UI_PORT:-7860}."
-
-# The general Docker initializer is intentionally not used in a Space: it starts
-# privileged SSH/cron/supervisor services and inherited images may include
-# password initialization. Space dependencies and model data are installed at
-# image-build time, so runtime package installation is disabled by the image.
-cd /a0
-exec /opt/venv-a0/bin/python run_ui.py
+version https://git-lfs.github.com/spec/v1
+oid sha256:f23cde5677afd1c14ea00d92d8c827198d6b18adb3b70f967875d2577396a126
+size 1689

docker/run/fs/exe/initialize.sh

@@ -1,63 +1,3 @@
-#!/bin/bash
-
-echo "Running initialization script..."
-
-# branch from parameter
-if [ -z "$1" ]; then
-    echo "Error: Branch parameter is empty. Please provide a valid branch name."
-    exit 1
-fi
-BRANCH="$1"
-
-raise_open_file_limit() {
-    local requested="${A0_NOFILE_LIMIT:-65535}"
-    local soft
-    local hard
-    local target
-
-    if ! [[ "$requested" =~ ^[0-9]+$ ]] || [ "$requested" -lt 1 ]; then
-        echo "Warning: invalid A0_NOFILE_LIMIT='$requested'; keeping open file limit at $(ulimit -S -n)." >&2
-        return
-    fi
-
-    soft="$(ulimit -S -n)"
-    hard="$(ulimit -H -n)"
-
-    if [ "$soft" = "unlimited" ]; then
-        echo "Open file limit is already unlimited."
-        return
-    fi
-
-    target="$requested"
-    if [ "$hard" != "unlimited" ] && [ "$target" -gt "$hard" ]; then
-        target="$hard"
-    fi
-
-    if [ "$target" -gt "$soft" ]; then
-        if ulimit -S -n "$target"; then
-            echo "Raised open file soft limit from $soft to $(ulimit -S -n) (hard: $hard)."
-        else
-            echo "Warning: failed to raise open file soft limit from $soft to $target (hard: $hard)." >&2
-        fi
-    else
-        echo "Open file soft limit is $soft (target: $requested, hard: $hard)."
-    fi
-}
-
-raise_open_file_limit
-
-# Copy all contents from persistent /per to root directory (/) without overwriting
-cp -r --no-preserve=ownership,mode /per/* /
-
-# Ensure upload storage exists before API and connector callers can reference it.
-mkdir -p /a0/usr/uploads
-
-# allow execution of /root/.bashrc and /root/.profile
-chmod 444 /root/.bashrc
-chmod 444 /root/.profile
-
-# update package list to save time later
-apt-get update > /dev/null 2>&1 &
-
-# let supervisord handle the services
-exec /usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf
+version https://git-lfs.github.com/spec/v1
+oid sha256:1fc7c1d54b3d7e6174087f9b63e4b73fc87fd836dc159e544349d73601441d5b
+size 1774

docker/run/fs/exe/node_eval.js

@@ -1,62 +1,3 @@
-#!/usr/bin/env node
-
-const vm = require('vm');
-const path = require('path');
-const Module = require('module');
-
-// Enhance `require` to search CWD first, then globally
-function customRequire(moduleName) {
-  try {
-    // Try resolving from CWD's node_modules using Node's require.resolve
-    const cwdPath = require.resolve(moduleName, { paths: [path.join(process.cwd(), 'node_modules')] });
-    // console.log("resolved path:", cwdPath);
-    return require(cwdPath);
-  } catch (cwdErr) {
-    try {
-      // Try resolving as a global module
-      return require(moduleName);
-    } catch (globalErr) {
-      console.error(`Cannot find module: ${moduleName}`);
-      throw globalErr;
-    }
-  }
-}
-
-// Create the VM context
-const context = vm.createContext({
-  ...global,
-  require: customRequire, // Use the custom require
-  __filename: path.join(process.cwd(), 'eval.js'),
-  __dirname: process.cwd(),
-  module: { exports: {} },
-  exports: module.exports,
-  console: console,
-  process: process,
-  Buffer: Buffer,
-  setTimeout: setTimeout,
-  setInterval: setInterval,
-  setImmediate: setImmediate,
-  clearTimeout: clearTimeout,
-  clearInterval: clearInterval,
-  clearImmediate: clearImmediate,
-});
-
-// Retrieve the code from the command-line argument
-const code = process.argv[2];
-
-const wrappedCode = `
-  (async function() {
-    try {
-      const __result__ = await eval(${JSON.stringify(code)});
-      if (__result__ !== undefined) console.log('Out[1]:', __result__);
-    } catch (error) {
-      console.error(error);
-    }
-  })();
-`;
-
-vm.runInContext(wrappedCode, context, {
-  filename: 'eval.js',
-  lineOffset: -2,
-  columnOffset: 0,
-}).catch(console.error);
+version https://git-lfs.github.com/spec/v1
+oid sha256:b6ddc75ed432d14246ac6c5682634d7467ec632368f163530cbcc46b7b8c3499
+size 1659

docker/run/fs/exe/run_A0.sh

@@ -1,7 +1,3 @@
-#!/bin/bash
-
-. "/ins/setup_venv.sh" "$@"
-. "/ins/copy_A0.sh" "$@"
-
-echo "Starting A0 bootstrap manager..."
-exec python /exe/self_update_manager.py docker-run-ui
+version https://git-lfs.github.com/spec/v1
+oid sha256:bbc42594385f5c3187721ce83b2c69886e707bcfd03acee7fc00f0c6763f5ff0
+size 161

docker/run/fs/exe/run_searxng.sh

@@ -1,10 +1,3 @@
-#!/bin/bash
-
-# start webapp
-cd /usr/local/searxng/searxng-src
-export SEARXNG_SETTINGS_PATH="/etc/searxng/settings.yml"
-
-# activate venv
-source "/usr/local/searxng/searx-pyenv/bin/activate"
-
-exec python /usr/local/searxng/searxng-src/searx/webapp.py
+version https://git-lfs.github.com/spec/v1
+oid sha256:aa30cf09ba3759f0ec369bb7559347d8478e412cd34f46e1be8ab5bcf4ba561f
+size 249

docker/run/fs/exe/run_tunnel_api.sh

@@ -1,18 +1,3 @@
-#!/bin/bash
-
-# Wait until run_tunnel.py exists
-echo "Starting tunnel API..."
-
-sleep 1
-while [ ! -f /a0/run_tunnel.py ]; do
-    echo "Waiting for /a0/run_tunnel.py to be available..."
-    sleep 1
-done
-
-. "/ins/setup_venv.sh" "$@"
-
-exec python /a0/run_tunnel.py \
-    --dockerized=true \
-    --port=80 \
-    --tunnel_api_port=55520 \
-    --host="0.0.0.0"
+version https://git-lfs.github.com/spec/v1
+oid sha256:1fda7945842d129c82a418731ea0f9f04fc8c196caf19201675375605699a0d3
+size 353

docker/run/fs/exe/self_update_manager.py

@@ -1,1507 +1,3 @@
-#!/usr/bin/env python3
-from __future__ import annotations
-
-import argparse
-import importlib.util
-import json
-import os
-import re
-import shutil
-import signal
-import stat
-import subprocess
-import sys
-import tempfile
-import time
-import urllib.error
-import urllib.request
-import zipfile
-from datetime import UTC, datetime
-from pathlib import Path
-from typing import Any
-
-import yaml
-
-
-OFFICIAL_REPO_URL = os.environ.get(
-    "A0_SELF_UPDATE_REMOTE_URL",
-    "https://github.com/agent0ai/agent-zero.git",
-)
-REPO_DIR = Path("/a0")
-TRIGGER_FILE = Path("/exe/a0-self-update.yaml")
-STATUS_FILE = Path("/exe/a0-self-update-status.yaml")
-LOG_FILE = Path("/exe/a0-self-update.log")
-DEFAULT_HEALTH_URL = os.environ.get(
-    "A0_SELF_UPDATE_HEALTH_URL",
-    "http://127.0.0.1:80/api/health",
-)
-DEFAULT_HEALTH_TIMEOUT_SECONDS = int(
-    os.environ.get("A0_SELF_UPDATE_HEALTH_TIMEOUT_SECONDS", "180")
-)
-DEFAULT_HEALTH_POLL_INTERVAL_SECONDS = float(
-    os.environ.get("A0_SELF_UPDATE_HEALTH_POLL_INTERVAL_SECONDS", "2")
-)
-DEFAULT_BACKUP_DIR = "/root/update-backups"
-DEFAULT_BACKUP_CONFLICT_POLICY = "rename"
-BACKUP_CONFLICT_POLICIES = {"rename", "overwrite", "fail"}
-MIN_SELECTOR_VERSION = (1, 0)
-LATEST_SELECTOR_TAG = "latest"
-DESKTOP_PROFILE_STATE_RELATIVE_DIRS = (
-    Path("usr/plugins/_desktop/profiles"),
-    Path("usr/_desktop/profiles"),
-    Path("tmp/_office/desktop/profiles"),
-)
-
-
-def now_iso() -> str:
-    return datetime.now(UTC).isoformat().replace("+00:00", "Z")
-
-
-class AttemptLogger:
-    def __init__(self, path: Path):
-        self.path = path
-
-    def reset(self) -> None:
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        self.path.write_text("", encoding="utf-8")
-
-    def log(self, message: str = "") -> None:
-        line = f"[{now_iso()}] {message}".rstrip()
-        print(f"[a0-self-update] {message}", flush=True)
-        with self.path.open("a", encoding="utf-8") as handle:
-            handle.write(line + "\n")
-
-    def log_block(self, title: str, content: str) -> None:
-        cleaned = content.rstrip()
-        self.log(f"{title}:")
-        if not cleaned:
-            self.log("(empty)")
-            return
-        with self.path.open("a", encoding="utf-8") as handle:
-            for line in cleaned.splitlines():
-                handle.write(f"    {line}\n")
-
-
-class NullLogger:
-    def reset(self) -> None:
-        return
-
-    def log(self, message: str = "") -> None:
-        return
-
-    def log_block(self, title: str, content: str) -> None:
-        return
-
-
-def load_yaml(path: Path) -> dict[str, Any] | None:
-    if not path.exists():
-        return None
-    loaded = yaml.safe_load(path.read_text(encoding="utf-8"))
-    return loaded if isinstance(loaded, dict) else None
-
-
-def write_yaml(path: Path, payload: dict[str, Any]) -> None:
-    path.parent.mkdir(parents=True, exist_ok=True)
-    path.write_text(
-        yaml.safe_dump(payload, allow_unicode=True, sort_keys=False),
-        encoding="utf-8",
-    )
-
-
-def write_status(payload: dict[str, Any]) -> None:
-    write_yaml(STATUS_FILE, payload)
-
-
-def git_output(repo_dir: Path, *args: str) -> str:
-    completed = subprocess.run(
-        ["git", "-C", str(repo_dir), *args],
-        check=True,
-        text=True,
-        capture_output=True,
-        env={**os.environ, "GIT_TERMINAL_PROMPT": "0"},
-    )
-    return completed.stdout.strip()
-
-
-def normalize_describe_to_version(describe: str) -> str:
-    match = re.fullmatch(r"(.+)-\d+-g[0-9a-f]+", describe)
-    if match:
-        return match.group(1)
-    return describe
-
-
-def split_describe_version(describe: str) -> tuple[str, int]:
-    normalized = describe.strip()
-    match = re.fullmatch(r"(.+)-(\d+)-g[0-9a-f]+", normalized)
-    if not match:
-        return normalized, 0
-    return match.group(1), int(match.group(2))
-
-
-def parse_selector_version(tag: str) -> tuple[int, int] | None:
-    match = re.fullmatch(r"v(\d+)\.(\d+)", tag.strip())
-    if not match:
-        return None
-    return int(match.group(1)), int(match.group(2))
-
-
-def is_valid_selector_tag(tag: str) -> bool:
-    return parse_selector_version(tag) is not None
-
-
-def is_supported_selector_tag(tag: str) -> bool:
-    parsed = parse_selector_version(tag)
-    return parsed is not None and parsed >= MIN_SELECTOR_VERSION
-
-
-def sort_selector_supported_tags(tags: list[str]) -> list[str]:
-    return sorted(
-        tags,
-        key=lambda tag: parse_selector_version(tag) or (-1, -1),
-        reverse=True,
-    )
-
-
-def parse_major_version(tag: str) -> int | None:
-    match = re.fullmatch(r"v(\d+)(?:[.-].*)?", tag.strip())
-    if not match:
-        return None
-    return int(match.group(1))
-
-
-def is_latest_selector_tag(tag: str) -> bool:
-    return tag.strip().lower() == LATEST_SELECTOR_TAG
-
-
-def get_tag_commit_ref(tag: str) -> str:
-    return f"refs/tags/{tag}^{{commit}}"
-
-
-def build_default_backup_name() -> str:
-    timestamp = datetime.now(UTC).strftime("%Y%m%d-%H%M%S")
-    return f"usr-{timestamp}.zip"
-
-
-def normalize_requested_tag(tag: str) -> str:
-    normalized = (tag or "").strip()
-    if not normalized:
-        return LATEST_SELECTOR_TAG
-    if is_latest_selector_tag(normalized):
-        return LATEST_SELECTOR_TAG
-    if not is_valid_selector_tag(normalized):
-        raise ValueError("Release tag must use the format vX.Y.")
-    if not is_supported_selector_tag(normalized):
-        raise ValueError("Release tag must be v1.0 or newer.")
-    return normalized
-
-
-def normalize_backup_conflict_policy(conflict_policy: str) -> str:
-    normalized = (conflict_policy or DEFAULT_BACKUP_CONFLICT_POLICY).strip().lower()
-    if normalized not in BACKUP_CONFLICT_POLICIES:
-        raise ValueError("Backup conflict policy must be one of: rename, overwrite, fail.")
-    return normalized
-
-
-def get_latest_same_major_tag(
-    repo_dir: Path,
-    *,
-    branch_ref: str,
-    current_version: str,
-) -> str:
-    current_major = parse_major_version(current_version)
-    if current_major is None:
-        raise RuntimeError(
-            f"Could not determine the installed major version from {current_version}. "
-            "Use an explicit tag instead of latest."
-        )
-
-    output = git_output(repo_dir, "tag", "--merged", branch_ref)
-    same_major_tags = [
-        tag
-        for tag in (line.strip() for line in output.splitlines())
-        if is_supported_selector_tag(tag) and parse_major_version(tag) == current_major
-    ]
-    if not same_major_tags:
-        raise RuntimeError(
-            f"No v{current_major}.x release tags are reachable from branch "
-            f"{branch_ref.rsplit('/', 1)[-1]}."
-        )
-    return sort_selector_supported_tags(same_major_tags)[0]
-
-
-def ensure_latest_target_matches_current_major(
-    *,
-    branch: str,
-    current_version: str,
-    target_version: str,
-) -> None:
-    current_major = parse_major_version(current_version)
-    if current_major is None:
-        raise RuntimeError(
-            f"Could not determine the installed major version from {current_version}. "
-            "Use an explicit tag instead of latest."
-        )
-
-    target_major = parse_major_version(target_version)
-    if target_major is None or not is_supported_selector_tag(target_version):
-        raise RuntimeError(
-            f"Could not resolve latest on branch {branch} to a supported vX.Y release. "
-            "Use an explicit tag instead."
-        )
-
-    if target_major != current_major:
-        raise RuntimeError(
-            f"Latest on branch {branch} resolves to {target_version}, but the installed "
-            f"version is {current_version}. Use an explicit tag to change major versions."
-        )
-
-
-def get_repo_version_info(repo_dir: Path) -> dict[str, str]:
-    describe = git_output(repo_dir, "describe", "--tags", "--always")
-    commit = git_output(repo_dir, "rev-parse", "HEAD")
-    branch = git_optional_output(repo_dir, "branch", "--show-current")
-    return {
-        "branch": branch,
-        "describe": describe,
-        "short_tag": normalize_describe_to_version(describe),
-        "commit": commit,
-        "short_commit": commit[:7],
-    }
-
-
-def git_optional_output(repo_dir: Path, *args: str) -> str:
-    completed = subprocess.run(
-        ["git", "-C", str(repo_dir), *args],
-        check=False,
-        text=True,
-        capture_output=True,
-        env={**os.environ, "GIT_TERMINAL_PROMPT": "0"},
-    )
-    if completed.returncode != 0:
-        return ""
-    return completed.stdout.strip()
-
-
-def remove_path(path: Path) -> None:
-    if path.is_symlink() or path.is_file():
-        path.unlink(missing_ok=True)
-        return
-    if path.exists():
-        shutil.rmtree(path)
-
-
-def get_repo_relative_path(repo_dir: Path, path: Path) -> str | None:
-    try:
-        return path.resolve().relative_to(repo_dir.resolve()).as_posix()
-    except ValueError:
-        return None
-
-
-def sanitize_filename(name: str, default_name: str) -> str:
-    raw = (name or "").strip()
-    if not raw:
-        raw = default_name
-    raw = Path(raw).name
-    raw = re.sub(r"[^A-Za-z0-9._-]+", "-", raw).strip(".-") or default_name
-    if not raw.lower().endswith(".zip"):
-        raw = f"{raw}.zip"
-    return raw
-
-
-def resolve_backup_destination(
-    directory: Path,
-    filename: str,
-    conflict_policy: str,
-) -> Path:
-    normalized_policy = conflict_policy.strip().lower()
-    directory.mkdir(parents=True, exist_ok=True)
-    destination = directory / filename
-    if not destination.exists():
-        return destination
-
-    if normalized_policy == "overwrite":
-        remove_path(destination)
-        return destination
-    if normalized_policy == "fail":
-        raise FileExistsError(f"Backup file already exists: {destination}")
-    if normalized_policy != "rename":
-        raise ValueError("backup_conflict_policy must be rename, overwrite, or fail.")
-
-    stem = destination.stem
-    suffix = destination.suffix
-    index = 2
-    while True:
-        candidate = directory / f"{stem}-{index}{suffix}"
-        if not candidate.exists():
-            return candidate
-        index += 1
-
-
-def create_usr_backup(
-    *,
-    repo_dir: Path,
-    backup_path: str,
-    backup_name: str,
-    conflict_policy: str,
-    logger: AttemptLogger,
-) -> Path:
-    usr_dir = repo_dir / "usr"
-    if not usr_dir.exists():
-        raise FileNotFoundError(f"User directory not found: {usr_dir}")
-
-    destination_dir = Path(backup_path)
-    if not destination_dir.is_absolute():
-        destination_dir = (repo_dir / destination_dir).resolve()
-    else:
-        destination_dir = destination_dir.resolve()
-    destination_name = sanitize_filename(backup_name, "agent-zero-usr-backup.zip")
-    destination = resolve_backup_destination(destination_dir, destination_name, conflict_policy)
-
-    temp_fd, temp_path = tempfile.mkstemp(suffix=".zip")
-    os.close(temp_fd)
-    temporary_backup = Path(temp_path)
-
-    try:
-        with zipfile.ZipFile(
-            temporary_backup,
-            "w",
-            compression=zipfile.ZIP_DEFLATED,
-            compresslevel=6,
-        ) as archive:
-            for root, dirs, files in os.walk(usr_dir):
-                root_path = Path(root)
-                root_relative = root_path.relative_to(usr_dir)
-                dirs[:] = [
-                    dirname
-                    for dirname in dirs
-                    if not should_exclude_from_usr_backup(
-                        root_relative / dirname,
-                        logger,
-                    )
-                ]
-                for filename in files:
-                    source_file = root_path / filename
-                    if not should_include_usr_backup_entry(source_file, logger):
-                        continue
-                    archive_name = Path("usr") / source_file.relative_to(usr_dir)
-                    try:
-                        archive.write(source_file, archive_name.as_posix())
-                    except FileNotFoundError:
-                        logger.log(f"Skipping vanished usr backup entry: {source_file}")
-                    except OSError as exc:
-                        logger.log(f"Skipping usr backup entry after read error: {source_file}: {exc}")
-
-        destination.parent.mkdir(parents=True, exist_ok=True)
-        shutil.move(str(temporary_backup), str(destination))
-        logger.log(f"Created usr backup at {destination}")
-        return destination
-    finally:
-        if temporary_backup.exists():
-            temporary_backup.unlink(missing_ok=True)
-
-
-def should_exclude_from_usr_backup(
-    relative_dir: Path,
-    logger: AttemptLogger,
-) -> bool:
-    parts = relative_dir.parts
-    if parts and parts[0] == ".time_travel":
-        logger.log(
-            f"Skipping Time Travel history during usr backup: {Path('usr') / relative_dir}"
-        )
-        return True
-    if (
-        len(parts) >= 6
-        and parts[0] == "plugins"
-        and parts[1] == "_desktop"
-        and parts[2] == "profiles"
-        and parts[-2] == ".ssh"
-        and parts[-1] == "agent"
-    ):
-        logger.log(f"Skipping transient usr backup directory: {Path('usr') / relative_dir}")
-        return True
-    return False
-
-
-def should_include_usr_backup_entry(source_file: Path, logger: AttemptLogger) -> bool:
-    try:
-        source_stat = source_file.lstat()
-    except FileNotFoundError:
-        logger.log(f"Skipping vanished usr backup entry: {source_file}")
-        return False
-    except OSError as exc:
-        logger.log(f"Skipping unreadable usr backup entry: {source_file}: {exc}")
-        return False
-
-    if stat.S_ISLNK(source_stat.st_mode):
-        try:
-            target_stat = source_file.stat()
-        except FileNotFoundError:
-            logger.log(f"Skipping broken symlink during usr backup: {source_file}")
-            return False
-        except OSError as exc:
-            logger.log(
-                f"Skipping unreadable symlink target during usr backup: {source_file}: {exc}"
-            )
-            return False
-        if not stat.S_ISREG(target_stat.st_mode):
-            logger.log(
-                f"Skipping non-regular symlink target during usr backup: {source_file}"
-            )
-            return False
-        return True
-
-    if not stat.S_ISREG(source_stat.st_mode):
-        logger.log(f"Skipping non-regular usr backup entry: {source_file}")
-        return False
-
-    return True
-
-
-def clean_transient_desktop_agent_state(
-    repo_dir: Path,
-    logger: AttemptLogger,
-) -> None:
-    profile_roots = 0
-    removed = 0
-    for relative_root in DESKTOP_PROFILE_STATE_RELATIVE_DIRS:
-        profile_root = repo_dir / relative_root
-        if not _is_cleanup_directory(
-            profile_root,
-            logger,
-            "Desktop profile state",
-            missing_ok=True,
-        ):
-            continue
-        profile_roots += 1
-        try:
-            profiles = list(profile_root.iterdir())
-        except OSError as exc:
-            logger.log(f"Desktop profile state could not be listed: {profile_root}: {exc}")
-            continue
-        for profile_dir in profiles:
-            if not _is_cleanup_directory(profile_dir, logger, "Desktop profile"):
-                continue
-            removed += _clean_directory_entries(
-                profile_dir / ".ssh" / "agent",
-                logger,
-                label="desktop SSH agent",
-            )
-            removed += _clean_gnupg_agent_entries(profile_dir / ".gnupg", logger)
-
-    if removed:
-        logger.log(f"Removed {removed} transient desktop agent entries.")
-    elif profile_roots:
-        logger.log("Transient desktop agent state already clean.")
-    else:
-        logger.log("No desktop profile runtime state found, skipping transient agent cleanup.")
-
-
-def _clean_gnupg_agent_entries(gnupg_dir: Path, logger: AttemptLogger) -> int:
-    if not _is_cleanup_directory(gnupg_dir, logger, "desktop GnuPG state", missing_ok=True):
-        return 0
-    try:
-        entries = list(gnupg_dir.iterdir())
-    except OSError as exc:
-        logger.log(f"Desktop GnuPG state could not be listed: {gnupg_dir}: {exc}")
-        return 0
-
-    removed = 0
-    for entry in entries:
-        if not entry.name.startswith("S.gpg-agent"):
-            continue
-        try:
-            entry_stat = entry.lstat()
-        except FileNotFoundError:
-            continue
-        except OSError as exc:
-            logger.log(f"Skipping transient desktop GnuPG agent entry after stat error: {entry}: {exc}")
-            continue
-        if stat.S_ISREG(entry_stat.st_mode):
-            continue
-        if _remove_cleanup_entry(entry, entry_stat, logger, label="desktop GnuPG agent"):
-            removed += 1
-    return removed
-
-
-def _clean_directory_entries(directory: Path, logger: AttemptLogger, *, label: str) -> int:
-    if not _is_cleanup_directory(directory, logger, label, missing_ok=True):
-        return 0
-    try:
-        entries = list(directory.iterdir())
-    except OSError as exc:
-        logger.log(f"Transient {label} directory could not be listed: {directory}: {exc}")
-        return 0
-
-    removed = 0
-    for entry in entries:
-        try:
-            entry_stat = entry.lstat()
-        except FileNotFoundError:
-            continue
-        except OSError as exc:
-            logger.log(f"Skipping transient {label} entry after stat error: {entry}: {exc}")
-            continue
-        if _remove_cleanup_entry(entry, entry_stat, logger, label=label):
-            removed += 1
-    return removed
-
-
-def _is_cleanup_directory(
-    directory: Path,
-    logger: AttemptLogger,
-    label: str,
-    *,
-    missing_ok: bool = False,
-) -> bool:
-    try:
-        directory_stat = directory.lstat()
-    except FileNotFoundError:
-        if not missing_ok:
-            logger.log(f"{label} directory not found, skipping: {directory}")
-        return False
-    except OSError as exc:
-        logger.log(f"{label} directory could not be inspected: {directory}: {exc}")
-        return False
-
-    if stat.S_ISLNK(directory_stat.st_mode) or not stat.S_ISDIR(directory_stat.st_mode):
-        logger.log(f"{label} path is not a directory, skipping: {directory}")
-        return False
-    return True
-
-
-def _remove_cleanup_entry(
-    entry: Path,
-    entry_stat: os.stat_result,
-    logger: AttemptLogger,
-    *,
-    label: str,
-) -> bool:
-    try:
-        if stat.S_ISDIR(entry_stat.st_mode):
-            shutil.rmtree(entry)
-        else:
-            entry.unlink(missing_ok=True)
-        return True
-    except FileNotFoundError:
-        return False
-    except OSError as exc:
-        logger.log(f"Skipping transient {label} entry after error: {entry}: {exc}")
-        return False
-
-
-def run_command(
-    command: list[str],
-    *,
-    cwd: Path | None,
-    logger: AttemptLogger,
-    error_message: str | None = None,
-) -> subprocess.CompletedProcess[str]:
-    logger.log(f"$ {' '.join(command)}")
-    completed = subprocess.run(
-        command,
-        cwd=cwd,
-        text=True,
-        capture_output=True,
-        env={**os.environ, "GIT_TERMINAL_PROMPT": "0"},
-    )
-    if completed.stdout:
-        logger.log_block("stdout", completed.stdout)
-    if completed.stderr:
-        logger.log_block("stderr", completed.stderr)
-    if completed.returncode != 0:
-        raise RuntimeError(
-            error_message
-            or f"Command failed with exit code {completed.returncode}: {' '.join(command)}"
-        )
-    return completed
-
-
-def clean_uv_cache(logger: AttemptLogger) -> None:
-    uv_path = shutil.which("uv")
-    if not uv_path:
-        logger.log("uv executable not found, skipping uv cache clean.")
-        return
-
-    logger.log("Cleaning uv cache before continuing self-update startup.")
-    try:
-        run_command(
-            [uv_path, "cache", "clean"],
-            cwd=None,
-            logger=logger,
-            error_message="Failed to clean uv cache during self-update.",
-        )
-    except Exception as exc:
-        logger.log(f"uv cache clean skipped after error: {exc}")
-
-
-def refresh_codex_cli(logger: AttemptLogger) -> None:
-    codex_path = shutil.which("codex")
-    if not codex_path:
-        logger.log("Codex CLI not installed, skipping Codex refresh.")
-        return
-
-    npm_path = shutil.which("npm")
-    if not npm_path:
-        logger.log("npm executable not found, skipping Codex refresh.")
-        return
-
-    logger.log("Refreshing the installed Codex CLI after self-update.")
-    try:
-        run_command(
-            [npm_path, "install", "--global", "@openai/codex@latest"],
-            cwd=None,
-            logger=logger,
-            error_message="Failed to refresh the installed Codex CLI.",
-        )
-    except Exception as exc:
-        logger.log(f"Codex CLI refresh skipped after error: {exc}")
-
-
-def has_local_rollback_changes(repo_dir: Path) -> bool:
-    status = git_output(repo_dir, "status", "--porcelain=v1", "--untracked-files=all")
-    return bool(status.strip())
-
-
-def get_top_stash_ref(repo_dir: Path) -> str:
-    return git_optional_output(repo_dir, "stash", "list", "--format=%gd", "-n", "1")
-
-
-def create_rollback_stash(repo_dir: Path, logger: AttemptLogger) -> str | None:
-    if not has_local_rollback_changes(repo_dir):
-        logger.log("No tracked or non-ignored untracked changes need rollback protection.")
-        return None
-
-    previous_top = get_top_stash_ref(repo_dir)
-    message = f"a0-self-update rollback snapshot {now_iso()}"
-    run_command(
-        [
-            "git",
-            "-C",
-            str(repo_dir),
-            "stash",
-            "push",
-            "--include-untracked",
-            "--message",
-            message,
-        ],
-        cwd=None,
-        logger=logger,
-        error_message="Failed to save local tracked/untracked changes before updating.",
-    )
-    stash_ref = get_top_stash_ref(repo_dir)
-    if not stash_ref or stash_ref == previous_top:
-        raise RuntimeError("Failed to create the pre-update rollback stash.")
-    logger.log(
-        f"Saved local tracked/untracked changes into {stash_ref}. "
-        "Ignored files stay in place and are not stashed."
-    )
-    return stash_ref
-
-
-def drop_stash(repo_dir: Path, stash_ref: str, logger: AttemptLogger) -> None:
-    if not stash_ref:
-        return
-    run_command(
-        ["git", "-C", str(repo_dir), "stash", "drop", stash_ref],
-        cwd=None,
-        logger=logger,
-        error_message=f"Failed to drop temporary rollback stash {stash_ref}.",
-    )
-
-
-def apply_stash(repo_dir: Path, stash_ref: str, logger: AttemptLogger) -> None:
-    if not stash_ref:
-        return
-    run_command(
-        ["git", "-C", str(repo_dir), "stash", "apply", "--index", stash_ref],
-        cwd=None,
-        logger=logger,
-        error_message=(
-            f"Failed to restore local tracked/untracked changes from {stash_ref}. "
-            "The stash entry has been kept so it can be recovered manually."
-        ),
-    )
-    try:
-        drop_stash(repo_dir, stash_ref, logger)
-    except Exception as exc:
-        logger.log(
-            f"Rollback stash {stash_ref} was restored but could not be dropped automatically: {exc}"
-        )
-
-
-def clean_repo_worktree(
-    repo_dir: Path,
-    logger: AttemptLogger,
-    *,
-    exclude_paths: list[Path] | None = None,
-) -> None:
-    command = ["git", "-C", str(repo_dir), "clean", "-ffd"]
-    for path in exclude_paths or []:
-        relative_path = get_repo_relative_path(repo_dir, path)
-        if relative_path:
-            command.extend(["-e", relative_path])
-    run_command(
-        command,
-        cwd=None,
-        logger=logger,
-        error_message="Failed to remove leftover non-ignored files after checkout.",
-    )
-
-
-def fetch_release_refs(repo_dir: Path, branch: str, tag: str, logger: AttemptLogger) -> None:
-    remote_branch_ref = f"refs/remotes/a0-self-update/{branch}"
-    tag_commit_ref = get_tag_commit_ref(tag)
-    logger.log(f"Fetching branch {branch} and tag {tag} from {OFFICIAL_REPO_URL}")
-    run_command(
-        [
-            "git",
-            "-C",
-            str(repo_dir),
-            "fetch",
-            "--force",
-            OFFICIAL_REPO_URL,
-            f"+refs/heads/{branch}:{remote_branch_ref}",
-            f"+refs/tags/{tag}:refs/tags/{tag}",
-        ],
-        cwd=None,
-        logger=logger,
-        error_message=f"Failed to fetch branch {branch} and tag {tag} from the official repository.",
-    )
-    run_command(
-        [
-            "git",
-            "-C",
-            str(repo_dir),
-            "merge-base",
-            "--is-ancestor",
-            tag_commit_ref,
-            remote_branch_ref,
-        ],
-        cwd=None,
-        logger=logger,
-        error_message=f"Requested tag {tag} is not reachable from official branch {branch}.",
-    )
-
-
-def fetch_branch_refs(repo_dir: Path, branch: str, logger: AttemptLogger) -> str:
-    remote_branch_ref = f"refs/remotes/a0-self-update/{branch}"
-    logger.log(f"Fetching branch {branch} and tags from {OFFICIAL_REPO_URL}")
-    run_command(
-        [
-            "git",
-            "-C",
-            str(repo_dir),
-            "fetch",
-            "--force",
-            "--tags",
-            OFFICIAL_REPO_URL,
-            f"+refs/heads/{branch}:{remote_branch_ref}",
-        ],
-        cwd=None,
-        logger=logger,
-        error_message=f"Failed to fetch branch {branch} from the official repository.",
-    )
-    return remote_branch_ref
-
-
-def resolve_requested_target(
-    repo_dir: Path,
-    branch: str,
-    tag: str,
-    current_version: str,
-    logger: AttemptLogger,
-) -> dict[str, str]:
-    normalized_tag = tag.strip()
-
-    if not is_latest_selector_tag(normalized_tag):
-        fetch_release_refs(repo_dir, branch, normalized_tag, logger)
-        tag_commit_ref = get_tag_commit_ref(normalized_tag)
-        return {
-            "requested_tag": normalized_tag,
-            "effective_tag": normalized_tag,
-            "target_ref": f"refs/tags/{normalized_tag}",
-            "expected_short_tag": normalized_tag,
-            "expected_commit": git_output(repo_dir, "rev-parse", tag_commit_ref),
-            "target_description": f"tag {normalized_tag}",
-        }
-
-    remote_branch_ref = fetch_branch_refs(repo_dir, branch, logger)
-    if branch == "main":
-        effective_tag = get_latest_same_major_tag(
-            repo_dir,
-            branch_ref=remote_branch_ref,
-            current_version=current_version,
-        )
-        tag_commit_ref = get_tag_commit_ref(effective_tag)
-        logger.log(f"Resolved latest on main to tag {effective_tag}")
-        return {
-            "requested_tag": LATEST_SELECTOR_TAG,
-            "effective_tag": effective_tag,
-            "target_ref": f"refs/tags/{effective_tag}",
-            "expected_short_tag": effective_tag,
-            "expected_commit": git_output(repo_dir, "rev-parse", tag_commit_ref),
-            "target_description": f"latest tag {effective_tag}",
-        }
-
-    head_describe = git_output(repo_dir, "describe", "--tags", "--always", remote_branch_ref)
-    head_short_tag = normalize_describe_to_version(head_describe)
-    head_commit = git_output(repo_dir, "rev-parse", remote_branch_ref)
-    ensure_latest_target_matches_current_major(
-        branch=branch,
-        current_version=current_version,
-        target_version=head_short_tag,
-    )
-    logger.log(
-        f"Resolved latest on branch {branch} to commit {head_commit[:7]} ({head_describe})"
-    )
-    return {
-        "requested_tag": LATEST_SELECTOR_TAG,
-        "effective_tag": head_short_tag,
-        "target_ref": remote_branch_ref,
-        "expected_short_tag": head_short_tag,
-        "expected_commit": head_commit,
-        "target_description": f"latest branch state {head_describe}",
-    }
-
-
-def checkout_target_release(
-    repo_dir: Path,
-    branch: str,
-    target_ref: str,
-    target_description: str,
-    logger: AttemptLogger,
-    *,
-    exclude_paths: list[Path] | None = None,
-) -> None:
-    logger.log(f"Checking out branch {branch} at {target_description}")
-    run_command(
-        [
-            "git",
-            "-C",
-            str(repo_dir),
-            "checkout",
-            "-B",
-            branch,
-            target_ref,
-        ],
-        cwd=None,
-        logger=logger,
-        error_message=f"Failed to check out requested {target_description} on branch {branch}.",
-    )
-    clean_repo_worktree(repo_dir, logger, exclude_paths=exclude_paths)
-
-
-def restore_git_state(
-    repo_dir: Path,
-    *,
-    head: str,
-    branch: str,
-    logger: AttemptLogger,
-    exclude_paths: list[Path] | None = None,
-) -> None:
-    logger.log(f"Restoring repository state to commit {head}")
-    if branch:
-        run_command(
-            [
-                "git",
-                "-C",
-                str(repo_dir),
-                "checkout",
-                "-B",
-                branch,
-                head,
-            ],
-            cwd=None,
-            logger=logger,
-            error_message=f"Failed to restore branch {branch} to commit {head}.",
-        )
-    else:
-        run_command(
-            [
-                "git",
-                "-C",
-                str(repo_dir),
-                "checkout",
-                "--detach",
-                head,
-            ],
-            cwd=None,
-            logger=logger,
-            error_message=f"Failed to restore detached HEAD at commit {head}.",
-        )
-    clean_repo_worktree(repo_dir, logger, exclude_paths=exclude_paths)
-
-
-def launch_ui_process(repo_dir: Path, logger: AttemptLogger) -> subprocess.Popen[bytes]:
-    run_office_cleanup_hook(repo_dir, logger)
-
-    prepare_script = repo_dir / "prepare.py"
-    if prepare_script.exists():
-        logger.log("Running prepare.py before UI start")
-        run_command([sys.executable, str(prepare_script), "--dockerized=true"], cwd=repo_dir, logger=logger)
-    else:
-        logger.log("prepare.py not found, skipping prepare step")
-
-    logger.log("Starting Agent Zero UI")
-    return subprocess.Popen(
-        [
-            sys.executable,
-            str(repo_dir / "run_ui.py"),
-            "--dockerized=true",
-            "--port=80",
-            "--host=0.0.0.0",
-        ],
-        cwd=repo_dir,
-    )
-
-
-def run_office_cleanup_hook(repo_dir: Path, logger: AttemptLogger) -> None:
-    hook_path = repo_dir / "plugins" / "_office" / "hooks.py"
-    if not hook_path.exists():
-        return
-    try:
-        if str(repo_dir) not in sys.path:
-            sys.path.insert(0, str(repo_dir))
-        spec = importlib.util.spec_from_file_location("a0_office_hooks", hook_path)
-        if spec is None or spec.loader is None:
-            logger.log("Office cleanup hook could not be loaded.")
-            return
-        module = importlib.util.module_from_spec(spec)
-        spec.loader.exec_module(module)
-        cleanup = getattr(module, "cleanup_stale_runtime_state", None)
-        if not callable(cleanup):
-            return
-        result = cleanup()
-        if isinstance(result, dict) and result.get("errors"):
-            logger.log(f"Office cleanup hook reported errors: {result.get('errors')}")
-        else:
-            logger.log("Office cleanup hook completed.")
-    except Exception as exc:
-        logger.log(f"Office cleanup hook skipped after error: {exc}")
-
-
-def wait_for_health(
-    process: subprocess.Popen[bytes],
-    *,
-    health_url: str,
-    timeout_seconds: int,
-    poll_interval_seconds: float,
-    expected_version: str | None = None,
-    expected_commit: str | None = None,
-    logger: AttemptLogger,
-) -> tuple[bool, dict[str, Any] | str]:
-    deadline = time.monotonic() + timeout_seconds
-    last_error = "Health check did not return a successful response."
-
-    while time.monotonic() < deadline:
-        if process.poll() is not None:
-            return (
-                False,
-                f"UI process exited with code {process.returncode} before passing the health check.",
-            )
-        try:
-            request = urllib.request.Request(
-                health_url,
-                headers={"Cache-Control": "no-cache"},
-                method="GET",
-            )
-            with urllib.request.urlopen(request, timeout=5) as response:
-                body = response.read().decode("utf-8")
-                payload = json.loads(body) if body else {}
-                git_info = payload.get("gitinfo") or {}
-                current_version = (git_info.get("short_tag") or "").strip()
-                current_commit = (git_info.get("commit_hash") or "").strip()
-                if expected_commit and current_commit and current_commit != expected_commit:
-                    last_error = (
-                        f"Health check responded, but commit {current_commit} does not match "
-                        f"expected {expected_commit}."
-                    )
-                elif expected_version and current_version and current_version != expected_version:
-                    last_error = (
-                        f"Health check responded, but version {current_version} does not match "
-                        f"expected {expected_version}."
-                    )
-                elif response.status == 200:
-                    logger.log(f"Health check passed at {health_url}")
-                    return True, payload
-        except (urllib.error.URLError, TimeoutError, ValueError, json.JSONDecodeError) as exc:
-            last_error = str(exc)
-
-        time.sleep(poll_interval_seconds)
-
-    return False, last_error
-
-
-def terminate_process(process: subprocess.Popen[bytes], timeout_seconds: int = 20) -> None:
-    if process.poll() is not None:
-        return
-    process.terminate()
-    try:
-        process.wait(timeout=timeout_seconds)
-    except subprocess.TimeoutExpired:
-        process.kill()
-        process.wait(timeout=5)
-
-
-def wait_for_process(process: subprocess.Popen[bytes]) -> int:
-    def forward_signal(signum, _frame) -> None:
-        if process.poll() is None:
-            process.send_signal(signum)
-
-    for sig in (signal.SIGTERM, signal.SIGINT):
-        try:
-            signal.signal(sig, forward_signal)
-        except ValueError:
-            pass
-
-    return process.wait()
-
-
-def record_result(
-    *,
-    status: str,
-    message: str,
-    request_data: dict[str, Any],
-    source_info: dict[str, str],
-    current_version: str,
-    started_at: str,
-    backup_zip_path: str = "",
-    rollback_applied: bool = False,
-    error: str = "",
-) -> None:
-    payload: dict[str, Any] = {
-        "status": status,
-        "message": message,
-        "branch": str(request_data.get("branch", "")),
-        "tag": str(request_data.get("tag", "")),
-        "source_version": source_info["short_tag"],
-        "source_commit": source_info["commit"],
-        "current_version": current_version,
-        "requested_at": str(request_data.get("requested_at", "")),
-        "started_at": started_at,
-        "finished_at": now_iso(),
-        "log_file_path": str(LOG_FILE),
-        "update_file_path": str(TRIGGER_FILE),
-        "rollback_applied": rollback_applied,
-    }
-    if backup_zip_path:
-        payload["backup_zip_path"] = backup_zip_path
-    if error:
-        payload["error"] = error
-    write_status(payload)
-
-
-def execute_pending_update(
-    request_data: dict[str, Any],
-    *,
-    logger: AttemptLogger,
-) -> subprocess.Popen[bytes]:
-    source_info = get_repo_version_info(REPO_DIR)
-    started_at = now_iso()
-    backup_zip_path = ""
-    stash_ref: str | None = None
-    repository_changed = False
-    branch = str(request_data.get("branch", "")).strip()
-    tag = str(request_data.get("tag", "")).strip()
-    backup_exclusions: list[Path] = []
-    resolved_target: dict[str, str] | None = None
-
-    try:
-        if not branch:
-            raise ValueError("Update file is missing the branch field.")
-        if not tag:
-            raise ValueError("Update file is missing the tag field.")
-
-        stash_ref = create_rollback_stash(REPO_DIR, logger)
-
-        if bool(request_data.get("backup_usr", True)):
-            backup_destination = create_usr_backup(
-                repo_dir=REPO_DIR,
-                backup_path=str(request_data.get("backup_path", "/root/update-backups")),
-                backup_name=str(request_data.get("backup_name", "agent-zero-usr-backup.zip")),
-                conflict_policy=str(request_data.get("backup_conflict_policy", "rename")),
-                logger=logger,
-            )
-            backup_zip_path = str(backup_destination)
-            backup_exclusions.append(backup_destination)
-
-        resolved_target = resolve_requested_target(
-            REPO_DIR,
-            branch,
-            tag,
-            source_info["short_tag"],
-            logger,
-        )
-
-        repository_changed = True
-        logger.log(
-            "Applying the requested release with native Git checkout. "
-            "Ignored files remain untouched; tracked files and non-ignored leftovers are replaced."
-        )
-        checkout_target_release(
-            REPO_DIR,
-            branch,
-            resolved_target["target_ref"],
-            resolved_target["target_description"],
-            logger,
-            exclude_paths=backup_exclusions,
-        )
-
-        current_info = get_repo_version_info(REPO_DIR)
-        if resolved_target.get("expected_commit") and current_info["commit"] != resolved_target["expected_commit"]:
-            raise RuntimeError(
-                "Git checkout completed but the repository commit does not match the requested target. "
-                f"Expected {resolved_target['expected_commit']}, got {current_info['commit']}."
-            )
-        if resolved_target.get("expected_short_tag") and current_info["short_tag"] != resolved_target["expected_short_tag"]:
-            raise RuntimeError(
-                "Git checkout completed but the repository version does not match the requested tag. "
-                f"Expected {resolved_target['expected_short_tag']}, got {current_info['short_tag']}."
-            )
-
-        updated_process = launch_ui_process(REPO_DIR, logger)
-        healthy, details = wait_for_health(
-            updated_process,
-            health_url=DEFAULT_HEALTH_URL,
-            timeout_seconds=DEFAULT_HEALTH_TIMEOUT_SECONDS,
-            poll_interval_seconds=DEFAULT_HEALTH_POLL_INTERVAL_SECONDS,
-            expected_version=resolved_target.get("expected_short_tag"),
-            expected_commit=resolved_target.get("expected_commit"),
-            logger=logger,
-        )
-        if healthy:
-            refresh_codex_cli(logger)
-            record_result(
-                status="success",
-                message=f"Updated Agent Zero to branch {branch}, {resolved_target['target_description']}.",
-                request_data=request_data,
-                source_info=source_info,
-                current_version=current_info["short_tag"],
-                started_at=started_at,
-                backup_zip_path=backup_zip_path,
-                rollback_applied=False,
-            )
-            if stash_ref:
-                logger.log(
-                    f"Update succeeded, dropping temporary rollback stash {stash_ref}. "
-                    "Tracked and non-ignored local changes were not reapplied."
-                )
-                try:
-                    drop_stash(REPO_DIR, stash_ref, logger)
-                except Exception as exc:
-                    logger.log(
-                        f"Temporary rollback stash {stash_ref} could not be dropped automatically: {exc}"
-                    )
-            return updated_process
-
-        logger.log(f"Updated UI failed health check, rolling back: {details}")
-        terminate_process(updated_process)
-        restore_git_state(
-            REPO_DIR,
-            head=source_info["commit"],
-            branch=source_info.get("branch", ""),
-            logger=logger,
-            exclude_paths=backup_exclusions,
-        )
-        apply_stash(REPO_DIR, stash_ref or "", logger)
-        stash_ref = None
-
-        rollback_process = launch_ui_process(REPO_DIR, logger)
-        rollback_healthy, rollback_details = wait_for_health(
-            rollback_process,
-            health_url=DEFAULT_HEALTH_URL,
-            timeout_seconds=DEFAULT_HEALTH_TIMEOUT_SECONDS,
-            poll_interval_seconds=DEFAULT_HEALTH_POLL_INTERVAL_SECONDS,
-            expected_version=source_info["short_tag"],
-            logger=logger,
-        )
-
-        if rollback_healthy:
-            record_result(
-                status="rolled_back",
-                message=(
-                    "Updated version failed its health check and the previous version was restored. "
-                    f"Reason: {details}"
-                ),
-                request_data=request_data,
-                source_info=source_info,
-                current_version=source_info["short_tag"],
-                started_at=started_at,
-                backup_zip_path=backup_zip_path,
-                rollback_applied=True,
-                error=str(details),
-            )
-            return rollback_process
-
-        terminate_process(rollback_process)
-        record_result(
-            status="rollback_failed",
-            message=(
-                "Updated version failed its health check and rollback also failed to become healthy."
-            ),
-            request_data=request_data,
-            source_info=source_info,
-            current_version=source_info["short_tag"],
-            started_at=started_at,
-            backup_zip_path=backup_zip_path,
-            rollback_applied=True,
-            error=f"Update error: {details}. Rollback error: {rollback_details}",
-        )
-        raise RuntimeError(str(rollback_details))
-    except Exception as exc:
-        restore_error = ""
-        if repository_changed or stash_ref:
-            logger.log(f"Restoring pre-update repository state after error: {exc}")
-            try:
-                restore_git_state(
-                    REPO_DIR,
-                    head=source_info["commit"],
-                    branch=source_info.get("branch", ""),
-                    logger=logger,
-                    exclude_paths=backup_exclusions,
-                )
-                if stash_ref:
-                    apply_stash(REPO_DIR, stash_ref, logger)
-                    stash_ref = None
-            except Exception as restore_exc:
-                restore_error = str(restore_exc)
-                logger.log(f"Automatic restore failed: {restore_exc}")
-
-        failure_message = str(exc)
-        if restore_error:
-            failure_message = f"{failure_message} | Restore error: {restore_error}"
-
-        failure_status = "failed"
-        if repository_changed:
-            failure_status = "rollback_failed" if restore_error else "rolled_back"
-
-        record_result(
-            status=failure_status,
-            message=failure_message,
-            request_data=request_data,
-            source_info=source_info,
-            current_version=source_info["short_tag"],
-            started_at=started_at,
-            backup_zip_path=backup_zip_path,
-            rollback_applied=repository_changed,
-            error=failure_message,
-        )
-        logger.log(f"Update flow failed: {failure_message}")
-        return launch_ui_process(REPO_DIR, logger)
-
-
-def load_request_file() -> tuple[dict[str, Any] | None, str]:
-    if not TRIGGER_FILE.exists():
-        return None, ""
-    raw_text = TRIGGER_FILE.read_text(encoding="utf-8")
-    try:
-        loaded = yaml.safe_load(raw_text)
-        return (loaded if isinstance(loaded, dict) else None), raw_text
-    finally:
-        TRIGGER_FILE.unlink(missing_ok=True)
-
-
-def queue_update_request(
-    *,
-    branch: str = "main",
-    tag: str = LATEST_SELECTOR_TAG,
-    backup_usr: bool = True,
-    backup_path: str = DEFAULT_BACKUP_DIR,
-    backup_name: str = "",
-    backup_conflict_policy: str = DEFAULT_BACKUP_CONFLICT_POLICY,
-) -> dict[str, Any]:
-    source_info = get_repo_version_info(REPO_DIR)
-    normalized_branch = (branch or "").strip().lower() or "main"
-    normalized_tag = normalize_requested_tag(tag)
-    normalized_policy = normalize_backup_conflict_policy(backup_conflict_policy)
-    normalized_backup_path = (backup_path or "").strip() or DEFAULT_BACKUP_DIR
-    normalized_backup_name = sanitize_filename(
-        backup_name,
-        build_default_backup_name(),
-    )
-
-    payload = {
-        "branch": normalized_branch,
-        "tag": normalized_tag,
-        "source_version": source_info["short_tag"],
-        "source_describe": source_info["describe"],
-        "source_commit": source_info["commit"],
-        "requested_at": now_iso(),
-        "backup_usr": bool(backup_usr),
-        "backup_path": normalized_backup_path,
-        "backup_name": normalized_backup_name,
-        "backup_conflict_policy": normalized_policy,
-    }
-    write_yaml(TRIGGER_FILE, payload)
-    return payload
-
-
-def installed_target_matches_request(
-    current_info: dict[str, str],
-    *,
-    requested_branch: str,
-    requested_tag: str,
-) -> bool:
-    normalized_tag = requested_tag.strip()
-    if not normalized_tag or is_latest_selector_tag(normalized_tag):
-        return False
-
-    current_branch = current_info.get("branch", "").strip()
-    if requested_branch.strip() and current_branch != requested_branch.strip():
-        return False
-
-    return current_info.get("describe", "").strip() == normalized_tag
-
-
-def trigger_update_command(args: list[str]) -> int:
-    parser = argparse.ArgumentParser(
-        prog="trigger_self_update.sh",
-        description="Queue an Agent Zero self-update for the next startup attempt.",
-    )
-    parser.add_argument(
-        "branch",
-        nargs="?",
-        default="main",
-        help="Target official branch. Default: main",
-    )
-    parser.add_argument(
-        "tag",
-        nargs="?",
-        default=LATEST_SELECTOR_TAG,
-        help='Target release tag such as v1.10 or "latest". Default: latest',
-    )
-    parser.add_argument(
-        "--backup-dir",
-        default=DEFAULT_BACKUP_DIR,
-        help=f"Directory for the usr backup zip. Default: {DEFAULT_BACKUP_DIR}",
-    )
-    parser.add_argument(
-        "--backup-name",
-        default="",
-        help="Backup zip filename. Default: autogenerated usr-YYYYMMDD-HHMMSS.zip",
-    )
-    parser.add_argument(
-        "--backup-conflict-policy",
-        default=DEFAULT_BACKUP_CONFLICT_POLICY,
-        choices=sorted(BACKUP_CONFLICT_POLICIES),
-        help="How to handle an existing backup zip. Default: rename",
-    )
-    parser.add_argument(
-        "--no-backup",
-        action="store_true",
-        help="Skip creating a usr backup before the update.",
-    )
-    parsed = parser.parse_args(args)
-
-    try:
-        payload = queue_update_request(
-            branch=parsed.branch,
-            tag=parsed.tag,
-            backup_usr=not parsed.no_backup,
-            backup_path=parsed.backup_dir,
-            backup_name=parsed.backup_name,
-            backup_conflict_policy=parsed.backup_conflict_policy,
-        )
-    except Exception as exc:
-        print(f"Failed to queue self-update: {exc}", file=sys.stderr)
-        return 1
-
-    print("Queued Agent Zero self-update for the next startup attempt.")
-    print(f"Branch: {payload['branch']}")
-    print(f"Version: {payload['tag']}")
-    if payload["backup_usr"]:
-        print(f"Backup dir: {payload['backup_path']}")
-        print(f"Backup name: {payload['backup_name']}")
-        print(f"Backup conflict policy: {payload['backup_conflict_policy']}")
-    else:
-        print("Backup: disabled")
-    print(f"Trigger file: {TRIGGER_FILE}")
-    print(f"Log file: {LOG_FILE}")
-    print("Restart the container or Agent Zero process to apply it.")
-    return 0
-
-
-def docker_run_ui() -> int:
-    request_data, raw_text = load_request_file()
-    logger = AttemptLogger(LOG_FILE)
-    quiet_logger = NullLogger()
-
-    if request_data:
-        logger.reset()
-        logger.log(f"Consumed update file at {TRIGGER_FILE}")
-        logger.log_block("Trigger file content", raw_text)
-        clean_uv_cache(logger)
-        try:
-            clean_transient_desktop_agent_state(REPO_DIR, logger)
-        except Exception as exc:
-            logger.log(f"Transient desktop agent cleanup skipped after error: {exc}")
-
-        try:
-            current = get_repo_version_info(REPO_DIR)
-            requested_branch = str(request_data.get("branch", "")).strip()
-            requested_tag = str(request_data.get("tag", "")).strip()
-            if installed_target_matches_request(
-                current,
-                requested_branch=requested_branch,
-                requested_tag=requested_tag,
-            ):
-                logger.log(
-                    "Requested tag already matches the installed version, skipping file replacement."
-                )
-                refresh_codex_cli(logger)
-                record_result(
-                    status="skipped",
-                    message="Requested tag already matches the installed version.",
-                    request_data=request_data,
-                    source_info=current,
-                    current_version=current["short_tag"],
-                    started_at=now_iso(),
-                    rollback_applied=False,
-                )
-                process = launch_ui_process(REPO_DIR, logger)
-            else:
-                process = execute_pending_update(request_data, logger=logger)
-        except Exception as exc:
-            logger.log(f"Self-update bootstrap failed unexpectedly: {exc}")
-            process = launch_ui_process(REPO_DIR, logger)
-    elif raw_text:
-        logger.reset()
-        logger.log(f"Consumed invalid update file at {TRIGGER_FILE}")
-        logger.log_block("Trigger file content", raw_text)
-        source_info = get_repo_version_info(REPO_DIR)
-        record_result(
-            status="failed",
-            message="Update file was not valid YAML.",
-            request_data={},
-            source_info=source_info,
-            current_version=source_info["short_tag"],
-            started_at=now_iso(),
-            rollback_applied=False,
-            error="Update file was not valid YAML.",
-        )
-        process = launch_ui_process(REPO_DIR, logger)
-    else:
-        process = launch_ui_process(REPO_DIR, quiet_logger)
-
-    return wait_for_process(process)
-
-
-def main(argv: list[str] | None = None) -> int:
-    args = list(argv if argv is not None else sys.argv[1:])
-    if not args or args[0] == "docker-run-ui":
-        return docker_run_ui()
-    if args[0] == "trigger-update":
-        return trigger_update_command(args[1:])
-    if args[0] == "refresh-codex":
-        refresh_codex_cli(AttemptLogger(LOG_FILE))
-        return 0
-    if args[0] in {"-h", "--help"}:
-        print("Usage: self_update_manager.py [docker-run-ui | trigger-update ... | refresh-codex]")
-        return 0
-    print(f"Unknown command: {args[0]}", file=sys.stderr)
-    return 1
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())
+version https://git-lfs.github.com/spec/v1
+oid sha256:f382c6ca87739be6bd9353616a6edc05a4eeaa0e02a6b7f970cb9f5ee25d90b4
+size 50698

docker/run/fs/exe/supervisor_event_listener.py

@@ -1,47 +1,3 @@
-#!/usr/bin/python
-import sys
-import os
-import logging
-import subprocess
-import time
-
-from supervisor.childutils import listener # type: ignore
-
-
-def main(args):
-    logging.basicConfig(stream=sys.stderr, level=logging.DEBUG, format='%(asctime)s %(levelname)s %(filename)s: %(message)s')
-    logger = logging.getLogger("supervisord-watchdog")
-    debug_mode = True if 'DEBUG' in os.environ else False
-
-    while True:
-        logger.info("Listening for events...")
-        headers, body = listener.wait(sys.stdin, sys.stdout)
-        body = dict([pair.split(":") for pair in body.split(" ")])
-
-        logger.debug("Headers: %r", repr(headers))
-        logger.debug("Body: %r", repr(body))
-        logger.debug("Args: %r", repr(args))
-
-        if debug_mode:
-            continue
-
-        try:
-            if headers["eventname"] == "PROCESS_STATE_FATAL":
-                logger.info("Process entered FATAL state...")
-                if not args or body["processname"] in args:
-                    logger.error("Killing off supervisord instance ...")
-                    _ = subprocess.call(["/bin/kill", "-15", "1"], stdout=sys.stderr)
-                    logger.info("Sent TERM signal to init process")
-                    time.sleep(5)
-                    logger.critical("Why am I still alive? Send KILL to all processes...")
-                    _ = subprocess.call(["/bin/kill", "-9", "-1"], stdout=sys.stderr)
-        except Exception as e:
-            logger.critical("Unexpected Exception: %s", str(e))
-            listener.fail(sys.stdout)
-            exit(1)
-        else:
-            listener.ok(sys.stdout)
-
-
-if __name__ == '__main__':
-    main(sys.argv[1:])
+version https://git-lfs.github.com/spec/v1
+oid sha256:9ff1c038b17944bf5b5d77ce5cce96fde37553a57700f13369716a39250ebb35
+size 1670

docker/run/fs/exe/trigger_self_update.sh

@@ -1,6 +1,3 @@
-#!/bin/sh
-set -eu
-
-SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-
-exec python3 "$SCRIPT_DIR/self_update_manager.py" trigger-update "$@"
+version https://git-lfs.github.com/spec/v1
+oid sha256:4d011f44c92f138c0fdc4042fd04bd396f19796a11731b1ed3d5357722ee19fd
+size 146

docker/run/fs/ins/copy_A0.sh

@@ -1,12 +1,3 @@
-#!/bin/bash
-set -e
-
-# Paths
-SOURCE_DIR="/git/agent-zero"
-TARGET_DIR="/a0"
-
-# Copy repository files if run_ui.py is missing in /a0 (if the volume is mounted)
-if [ ! -f "$TARGET_DIR/run_ui.py" ]; then
-    echo "Copying files from $SOURCE_DIR to $TARGET_DIR..."
-    cp -rn --no-preserve=ownership,mode "$SOURCE_DIR/." "$TARGET_DIR"
-fi
+version https://git-lfs.github.com/spec/v1
+oid sha256:bb5bc666dfb5c75d664be6c2e87a547016b36c68d821c583be59dd3168009041
+size 331

docker/run/fs/ins/install_A0.sh

@@ -1,44 +1,3 @@
-#!/bin/bash
-set -e
-
-# Exit immediately if a command exits with a non-zero status.
-# set -e
-
-# branch from parameter
-if [ -z "$1" ]; then
-    echo "Error: Branch parameter is empty. Please provide a valid branch name."
-    exit 1
-fi
-BRANCH="$1"
-
-if [ "$BRANCH" = "local" ]; then
-    # For local branch, use the files
-    echo "Using local dev files in /git/agent-zero"
-    # List all files recursively in the target directory
-    # echo "All files in /git/agent-zero (recursive):"
-    # find "/git/agent-zero" -type f | sort
-else
-    # For other branches, clone from GitHub
-    echo "Cloning repository from branch $BRANCH..."
-    git clone -b "$BRANCH" "https://github.com/agent0ai/agent-zero" "/git/agent-zero" || {
-        echo "CRITICAL ERROR: Failed to clone repository. Branch: $BRANCH"
-        exit 1
-    }
-fi
-
-. "/ins/setup_venv.sh" "$@"
-
-# moved to base image
-# # Ensure the virtual environment and pip setup
-# pip install --upgrade pip ipython requests
-# # Install some packages in specific variants
-# pip install torch --index-url https://download.pytorch.org/whl/cpu
-
-# Install remaining A0 python packages
-uv pip install -r /git/agent-zero/requirements.txt
-
-# install playwright
-bash /ins/install_playwright.sh "$@"
-
-# Preload A0
-python /git/agent-zero/preload.py --dockerized=true
+version https://git-lfs.github.com/spec/v1
+oid sha256:02ac5d3e1c0f33de9956752ae32225e90eccc087e7307c6e0d40056604448622
+size 1294

docker/run/fs/ins/install_A02.sh

@@ -1,17 +1,3 @@
-#!/bin/bash
-set -e
-
-# cachebuster script, this helps speed up docker builds
-
-# remove repo (if not local branch)
-if [ "$1" != "local" ]; then
-    rm -rf /git/agent-zero
-fi
-
-# run the original install script again
-bash /ins/install_A0.sh "$@"
-
-# remove python packages cache
-. "/ins/setup_venv.sh" "$@"
-pip cache purge
-uv cache prune
+version https://git-lfs.github.com/spec/v1
+oid sha256:fd65145eed86f46ad4c83ef95ff1710bb213fc8b2f3c010210d8c1a1364e2576
+size 332

docker/run/fs/ins/install_additional.sh

@@ -1,94 +1,3 @@
-#!/bin/bash
-set -e
-
-# install playwright - moved to install A0
-# bash /ins/install_playwright.sh "$@"
-
-# searxng - moved to base image
-# bash /ins/install_searxng.sh "$@"
-
-if ! command -v apt-get >/dev/null 2>&1; then
-  echo "apt-get unavailable; skipping LibreOffice install"
-  exit 0
-fi
-
-KALI_SUITE="kali-last-snapshot"
-LIBREOFFICE_VERSION="4:26.2.4.2-1"
-XPRA_VERSION="6.5.2-r0-1"
-arch="$(dpkg --print-architecture)"
-
-XPRA_HTML5_VERSION="19-r1-1"
-if [ "$arch" = "arm64" ]; then
-  XPRA_HTML5_VERSION="21-r1-1"
-fi
-
-LIBREOFFICE_PACKAGES=(
-  "libreoffice-core=$LIBREOFFICE_VERSION"
-  "libreoffice-writer=$LIBREOFFICE_VERSION"
-  "libreoffice-calc=$LIBREOFFICE_VERSION"
-  "libreoffice-impress=$LIBREOFFICE_VERSION"
-  "libreoffice-gtk3=$LIBREOFFICE_VERSION"
-  "python3-uno=$LIBREOFFICE_VERSION"
-)
-XPRA_PACKAGES=(
-  "xpra-common=$XPRA_VERSION"
-  "xpra-server=$XPRA_VERSION"
-  "xpra-client=$XPRA_VERSION"
-  "xpra-client-gtk3=$XPRA_VERSION"
-  "xpra-x11=$XPRA_VERSION"
-  "xpra-html5=$XPRA_HTML5_VERSION"
-)
-
-apt-get update
-ATK_VERSION="$(dpkg-query -W -f='${Version}' libatk1.0-0t64)"
-ATK_GIR_PACKAGE="/tmp/gir1.2-atk-1.0_${ATK_VERSION}_${arch}.deb"
-(cd /tmp && apt-get download "gir1.2-atk-1.0=$ATK_VERSION")
-
-for source in /etc/apt/sources.list /etc/apt/sources.list.d/kali.sources; do
-  [ ! -f "$source" ] || sed -i "s/kali-rolling/$KALI_SUITE/g" "$source"
-done
-
-apt-get update
-DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates wget
-wget -O /usr/share/keyrings/xpra.asc https://xpra.org/xpra.asc
-cat >/etc/apt/sources.list.d/xpra.sources <<EOF
-Types: deb
-URIs: https://xpra.org
-Suites: trixie
-Components: main
-Signed-By: /usr/share/keyrings/xpra.asc
-Architectures: $arch
-EOF
-apt-get update
-DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-  "$ATK_GIR_PACKAGE" \
-  gir1.2-gtk-3.0 \
-  "${LIBREOFFICE_PACKAGES[@]}" \
-  "${XPRA_PACKAGES[@]}" \
-  xfce4-session \
-  xfwm4 \
-  xfce4-panel \
-  xfdesktop4 \
-  xfce4-settings \
-  thunar \
-  gvfs \
-  libglib2.0-bin \
-  xfce4-terminal \
-  x11-xserver-utils \
-  x11-utils \
-  x11-apps \
-  xdotool \
-  xclip \
-  xauth \
-  xvfb \
-  dbus-x11 \
-  fonts-dejavu \
-  fonts-liberation \
-  fonts-crosextra-caladea \
-  fonts-crosextra-carlito \
-  fonts-noto-core \
-  fonts-noto-cjk \
-  fonts-noto-color-emoji
-
-rm -f "$ATK_GIR_PACKAGE"
-rm -rf /var/lib/apt/lists/*
+version https://git-lfs.github.com/spec/v1
+oid sha256:a9d95cfdeef8d7b0fd8f21cce0662d06b047b914dbc294fb7e90d43ce7cc193f
+size 2351

docker/run/fs/ins/install_playwright.sh

@@ -1,13 +1,3 @@
-#!/bin/bash
-set -e
-
-# activate venv
-. "/ins/setup_venv.sh" "$@"
-
-# set PW installation path to temporary Browser runtime storage
-export PLAYWRIGHT_BROWSERS_PATH=/a0/tmp/playwright
-mkdir -p "$PLAYWRIGHT_BROWSERS_PATH"
-
-# preinstall Chromium for fresh images; the Browser hook also reconciles self-updated installs
-apt-get install -y fonts-unifont libnss3 libnspr4 libatk1.0-0 libatspi2.0-0 libxcomposite1 libxdamage1 libatk-bridge2.0-0 libcups2
-patchright install chromium --no-shell
+version https://git-lfs.github.com/spec/v1
+oid sha256:b9658612a888db9185d04b10ec494610ee8815f6f2af2150bd8af7626d4ebf6d
+size 483

docker/run/fs/ins/post_install.sh

@@ -1,6 +1,3 @@
-#!/bin/bash
-set -e
-
-# Cleanup package list
-rm -rf /var/lib/apt/lists/*
-apt-get clean
+version https://git-lfs.github.com/spec/v1
+oid sha256:0376af94660898f1c53428fe141a801baf201c5384503b91f0f86f776ebb4245
+size 84

docker/run/fs/ins/pre_install.sh

@@ -1,13 +1,3 @@
-#!/bin/bash
-set -e
-
-# update apt
-apt-get update
-
-# fix permissions for cron files if any
-if [ -f /etc/cron.d/* ]; then
-    chmod 0644 /etc/cron.d/*
-fi
-
-# Prepare SSH daemon
-bash /ins/setup_ssh.sh "$@"
+version https://git-lfs.github.com/spec/v1
+oid sha256:6763aa5590db64648382903da34388531630c711c7cd58c84735746b6c97cce9
+size 201

docker/run/fs/ins/setup_ssh.sh

@@ -1,7 +1,3 @@
-#!/bin/bash
-set -e
-
-# Set up SSH
-mkdir -p /var/run/sshd && \
-    # echo 'root:toor' | chpasswd && \
-    sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config
+version https://git-lfs.github.com/spec/v1
+oid sha256:838d4044464ff4dbcbf09a1d05e16189a5678963283591bee446a37a37c984f9
+size 191

docker/run/fs/ins/setup_venv.sh

@@ -1,12 +1,3 @@
-#!/bin/bash
-set -e
-
-# this has to be ready from base image
-# if [ ! -d /opt/venv ]; then
-#     # Create and activate Python virtual environment
-#     python3.12 -m venv /opt/venv
-#     source /opt/venv/bin/activate
-# else
-    # source /opt/venv/bin/activate
-# fi
-source /opt/venv-a0/bin/activate
+version https://git-lfs.github.com/spec/v1
+oid sha256:ad753d8637f7cd7b0186bc012434f2ce4834c62942b032d1b93a0facd2b7eed2
+size 295

docker/run/fs/per/root/.bashrc

@@ -1,9 +1,3 @@
-# .bashrc
-
-# Source global definitions
-if [ -f /etc/bashrc ]; then
-    . /etc/bashrc
-fi
-
-# Activate the virtual environment
-source /opt/venv/bin/activate
+version https://git-lfs.github.com/spec/v1
+oid sha256:d29ad830f8c27e14002e059df2bd7a57138cf59e109e492b9727a3226f86573a
+size 154

docker/run/fs/per/root/.profile

@@ -1,9 +1,3 @@
-# .bashrc
-
-# Source global definitions
-if [ -f /etc/bashrc ]; then
-    . /etc/bashrc
-fi
-
-# Activate the virtual environment
-source /opt/venv/bin/activate
+version https://git-lfs.github.com/spec/v1
+oid sha256:d29ad830f8c27e14002e059df2bd7a57138cf59e109e492b9727a3226f86573a
+size 154

docs/AGENTS.md

@@ -1,35 +1,3 @@
-# Documentation DOX
-
-## Purpose
-
-- Own human-facing documentation, screenshots, setup guides, developer guides, and documentation assets.
-- Keep docs accurate to current source behavior and practical user workflows.
-
-## Ownership
-
-- `README.md`, `quickstart.md`, `guides/`, and `setup/` cover user-facing setup and workflows.
-- `developer/` covers compact developer references and source handoffs.
-- `plans/` covers implementation plans, migration notes, and staged technical roadmaps.
-- `res/` contains documentation images and other documentation assets.
-
-## Local Contracts
-
-- Prefer local docs for practical workflows and direct users to DeepWiki for source-linked internals when appropriate.
-- Do not document secrets, private deployment details, unreleased credentials, or user-specific runtime state.
-- Screenshots and assets must be relevant to the documented UI state and should be updated when UI changes make them misleading.
-- Keep links relative inside the docs tree unless they intentionally point to external community or reference resources.
-
-## Work Guidance
-
-- Update docs in the same change when user-visible behavior, setup steps, settings names, plugin workflows, or UI labels change.
-- Keep user guides task-oriented and avoid duplicating architecture contracts already owned by source-adjacent DOX files.
-- When editing screenshots or binary assets, avoid unrelated metadata churn.
-
-## Verification
-
-- Check changed internal links manually or with an available link checker.
-- For setup or Docker docs, verify commands against current scripts and Docker files.
-
-## Child DOX Index
-
-No child DOX files.
+version https://git-lfs.github.com/spec/v1
+oid sha256:e058179b520b1f87231b052f58d4e250898631afc13d41c78adf72de691b9126
+size 1625

docs/README.md

@@ -1,159 +1,3 @@
-![Agent Zero Logo](res/header.png)
-# Agent Zero Documentation
-
-Welcome to the Agent Zero documentation hub. Start with the practical guides
-below: install it, open the Web UI, connect your host machine when needed, and
-learn the main workflows by sight.
-
-For architecture and source-linked internals, use
-[DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero). The local
-docs focus on practical setup, screenshots, and user workflows.
-
-## Quick Start
-
-- **[Quickstart Guide](quickstart.md):** Get up and running in 5 minutes with Agent Zero.
-- **[Agent Zero Launcher](guides/launcher.md):** Use the desktop app to set up Docker, install Agent Zero, open Instances, or connect a remote Instance.
-- **[First-Run Onboarding](guides/onboarding.md):** Choose Cloud, AI account, or Local access, then select main and utility models.
-- **[Installation Guide](setup/installation.md):** A0 Launcher downloads, A0 Install, direct Docker, updates, and advanced Docker setup (includes [How to Update](setup/installation.md#how-to-update-agent-zero)).
-- **[A0 CLI Connector](guides/a0-cli-connector.md):** Install the host connector for a running Agent Zero instance, use the command palette, and switch Browser modes.
-- **[Self Update](guides/self-update.md):** How the in-app updater works (technical reference).
-- **[VPS Deployment](setup/vps-deployment.md):** Deploy Agent Zero on a remote server.
-- **[Development Setup](setup/dev-setup.md):** Set up a local development environment.
-
-## User Guides
-
-- **[Usage Guide](guides/usage.md):** Practical tour of Agent Zero's main workflows.
-- **[Agent Zero Launcher](guides/launcher.md):** Fresh-machine Launcher walkthrough, Docker setup gate, Installs, Instances, and docs screenshot capture with Playwright/Electron.
-- **[First-Run Onboarding](guides/onboarding.md):** Set up OpenRouter, our proxy API or another provider with the guided wizard.
-- **[Browser Guide](guides/browser.md):** Use the built-in Browser, live Canvas surface, annotations, screenshots, host browser mode, and extensions.
-- **[Desktop Guide](guides/desktop.md):** Use the built-in Linux desktop, GUI apps, and LibreOffice Writer/Calc/Impress Cowork.
-- **[A0 CLI Connector](guides/a0-cli-connector.md):** Terminal-first host connector for Agent Zero, with screenshots of the host picker, connected shell, command palette, and Browser modes.
-- **[Create a Small Plugin](guides/create-plugin.md):** Build and review a tiny Web UI plugin that adds an unread dot to the chat list.
-- **[Skills Guide](guides/skills.md):** Open the Skills selector, add active skills, and remove prompt protocol entries you no longer need.
-- **[Agent Profiles](guides/agent-profiles.md):** Create and manage profiles in Easy or Advanced mode, set project availability, and control Tool, MCP, and Skill access.
-- **[Model Presets](guides/model-presets.md):** Create simple named shortcuts for model setups.
-- **[Memory Guide](guides/memory.md):** Search, edit, delete, and curate memories so useful context does not become stale noise.
-- **[Projects Tutorial](guides/projects.md):** Learn to create isolated workspaces with dedicated context and memory.
-- **[API Integration](guides/api-integration.md):** Add external APIs without writing code.
-- **[MCP Setup](guides/mcp-setup.md):** Configure Model Context Protocol servers.
-- **[A2A Setup](guides/a2a-setup.md):** Enable agent-to-agent communication.
-- **[Troubleshooting](guides/troubleshooting.md):** Solutions to common issues and FAQs.
-
-## Technical Reference
-
-- **[DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero):** Architecture, Web UI internals, plugin lifecycle, backend APIs, deployment details, and source-linked explanations.
-- **[Architecture](developer/architecture.md):** Short local handoff to DeepWiki plus practical starting points.
-- **[Plugins](developer/plugins.md):** Compact plugin starting points and sharing checklist.
-- **[Extensions](developer/extensions.md):** Short guide for when an extension is the right tool.
-- **[Connectivity](developer/connectivity.md):** Choose between A0 CLI, MCP, A2A, and external APIs.
-- **[WebSockets](developer/websockets.md):** Short local handoff to DeepWiki and source files.
-- **[MCP Configuration](developer/mcp-configuration.md):** Compact reference for MCP JSON.
-- **[Notifications](developer/notifications.md):** Notification system architecture and setup.
-- **[Contributing Skills](developer/contributing-skills.md):** Create and share agent skills.
-- **[Contributing Guide](guides/contribution.md):** Contribute to the Agent Zero project.
-
-## Community & Support
-
-- **Join the Community:** Connect with other users on [Discord](https://discord.gg/B8KZKNsPpj) to discuss ideas, ask questions, and collaborate.
-- **Share Your Work:** Show off your Agent Zero creations and workflows in the [Show and Tell](https://github.com/agent0ai/agent-zero/discussions/categories/show-and-tell) area.
-- **Report Issues:** Use the [GitHub issue tracker](https://github.com/agent0ai/agent-zero/issues) to report bugs or suggest features.
-- **Follow Updates:** Subscribe to the [YouTube channel](https://www.youtube.com/@AgentZeroFW) for tutorials and release videos.
-
----
-
-## Table of Contents
-
-- [Quick Start](#quick-start)
-  - [Quickstart Guide](quickstart.md)
-  - [Agent Zero Launcher](guides/launcher.md)
-  - [First-Run Onboarding](guides/onboarding.md)
-  - [Installation Guide](setup/installation.md)
-    - [How to Update Agent Zero](setup/installation.md#how-to-update-agent-zero)
-    - [Manual Installation (Advanced)](setup/installation.md#manual-installation-advanced)
-    - [Step 1: Install Docker Desktop](setup/installation.md#step-1-install-docker-desktop)
-      - [Windows Installation](setup/installation.md#windows-installation)
-      - [macOS Installation](setup/installation.md#macos-installation)
-      - [Linux Installation](setup/installation.md#linux-installation)
-    - [Step 2: Run Agent Zero](setup/installation.md#step-2-run-agent-zero)
-      - [Pull Docker Image](setup/installation.md#21-pull-the-agent-zero-docker-image)
-      - [Map Folders for Persistence](setup/installation.md#22-optional-map-folders-for-persistence)
-      - [Run the Container](setup/installation.md#23-run-the-container)
-      - [Access the Web UI](setup/installation.md#24-access-the-web-ui)
-    - [Step 3: Configure Agent Zero](setup/installation.md#step-3-configure-agent-zero)
-      - [Settings Configuration](setup/installation.md#settings-configuration)
-      - [Agent Configuration](setup/installation.md#agent-configuration)
-      - [Chat Model Settings](setup/installation.md#chat-model-settings)
-      - [API Keys](setup/installation.md#api-keys)
-      - [Authentication](setup/installation.md#authentication)
-    - [Choosing Your LLMs](setup/installation.md#choosing-your-llms)
-    - [Installing Ollama (Local Models)](setup/installation.md#installing-and-using-ollama-local-models)
-    - [Using on Mobile Devices](setup/installation.md#using-agent-zero-on-your-mobile-device)
-  - [Self Update (technical)](guides/self-update.md)
-  - [VPS Deployment](setup/vps-deployment.md)
-  - [Development Setup](setup/dev-setup.md)
-  - [A0 CLI Connector](guides/a0-cli-connector.md)
-
-- [User Guides](#user-guides)
-  - [Usage Guide](guides/usage.md)
-    - [Basic Operations](guides/usage.md#basic-operations)
-    - [Plugins And Plugin Hub](guides/usage.md#plugins-and-plugin-hub)
-    - [Skills, Agent Profiles, And Model Presets](guides/usage.md#skills-agent-profiles-and-model-presets)
-      - [Skills](guides/usage.md#skills)
-      - [Agent Profiles](guides/usage.md#agent-profiles)
-      - [Model Presets](guides/usage.md#model-presets)
-    - [File Attachments](guides/usage.md#file-attachments)
-    - [Tool Usage](guides/usage.md#tool-usage)
-      - [Browser Tool And Surface](guides/usage.md#browser-tool-and-surface)
-      - [Desktop Surface](guides/usage.md#desktop-surface)
-      - [Agent-To-Agent Communication](guides/usage.md#agent-to-agent-communication)
-      - [Multi-Agent Cooperation](guides/usage.md#multi-agent-cooperation)
-    - [Projects](guides/usage.md#projects)
-    - [Tasks And Scheduling](guides/usage.md#tasks-and-scheduling)
-    - [Secrets And Variables](guides/usage.md#secrets-and-variables)
-    - [Remote Access Via Tunneling](guides/usage.md#remote-access-via-tunneling)
-    - [Voice Interface](guides/usage.md#voice-interface)
-    - [Mathematical Expressions](guides/usage.md#mathematical-expressions)
-    - [File Browser](guides/usage.md#file-browser)
-    - [Memory Management](guides/usage.md#memory-management)
-    - [Backup And Restore](guides/usage.md#backup-and-restore)
-  - [Agent Zero Launcher](guides/launcher.md)
-  - [Browser Guide](guides/browser.md)
-  - [Desktop Guide](guides/desktop.md)
-  - [A0 CLI Connector](guides/a0-cli-connector.md)
-  - [Create a Small Plugin](guides/create-plugin.md)
-  - [Skills Guide](guides/skills.md)
-  - [Agent Profiles](guides/agent-profiles.md)
-  - [Model Presets](guides/model-presets.md)
-  - [Memory Guide](guides/memory.md)
-  - [Projects Tutorial](guides/projects.md)
-  - [API Integration](guides/api-integration.md)
-  - [MCP Setup](guides/mcp-setup.md)
-  - [A2A Setup](guides/a2a-setup.md)
-  - [Troubleshooting](guides/troubleshooting.md)
-
-- [Technical Reference](#technical-reference)
-  - [DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero)
-  - [Architecture](developer/architecture.md)
-  - [Plugins](developer/plugins.md)
-  - [Extensions](developer/extensions.md)
-  - [Connectivity](developer/connectivity.md)
-  - [WebSockets](developer/websockets.md)
-  - [MCP Configuration](developer/mcp-configuration.md)
-  - [Notifications](developer/notifications.md)
-  - [Contributing Skills](developer/contributing-skills.md)
-  - [Contributing Guide](guides/contribution.md)
-
----
-
-## Documentation Ownership
-
-| Content type | Home |
-| --- | --- |
-| Setup, screenshots, and everyday workflows | These docs |
-| Architecture and source-linked internals | [DeepWiki](https://deepwiki.com/agent0ai/agent-zero) |
-| Exact behavior | The current source code |
-| Community help and examples | Discord, Skool, GitHub discussions |
-
-### Your journey with Agent Zero starts now!
-
-Ready to dive in? Start with the [Quickstart Guide](quickstart.md) for the fastest path to your first chat, or follow the [Installation Guide](setup/installation.md) for a detailed setup walkthrough.
+version https://git-lfs.github.com/spec/v1
+oid sha256:5acb9756eca09fa8de40d237bfead984b1071ee24a9838bfb0c8fd3ca24f6f8b
+size 10383

docs/developer/architecture.md

@@ -1,32 +1,3 @@
-# Architecture
-
-Agent Zero architecture is now documented in
-[DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero).
-
-Use DeepWiki when you want source-linked explanations of:
-
-- the agent loop and message flow;
-- Web UI internals;
-- plugin discovery and lifecycle;
-- projects, memory, tools, and scheduler internals;
-- backend APIs and WebSocket behavior;
-- deployment and runtime structure.
-
-This local page intentionally stays short so the repository does not maintain a
-second, stale architecture manual.
-
-## Practical Starting Points
-
-| Goal | Start here |
-| --- | --- |
-| Install or update Agent Zero | [Installation Guide](../setup/installation.md) |
-| Learn the Web UI | [Usage Guide](../guides/usage.md) |
-| Create a focused workspace | [Projects Guide](../guides/projects.md) |
-| Use the Browser | [Browser Guide](../guides/browser.md) |
-| Connect host files and shell | [A0 CLI Connector](../guides/a0-cli-connector.md) |
-| Build plugins | [Plugins](plugins.md) |
-| Build extensions | [Extensions](extensions.md) |
-| Configure MCP | [MCP Configuration](mcp-configuration.md) |
-
-If you are changing core behavior, read the relevant DeepWiki page first, then
-inspect the source in this repository before editing.
+version https://git-lfs.github.com/spec/v1
+oid sha256:fe7e91408016bf1d7d6e1c172a5beadb9681e62e7522231fbfebbb04fc9c40c5
+size 1235

docs/developer/connectivity.md

@@ -1,55 +1,3 @@
-# Connectivity
-
-This page helps you choose the right connection path.
-
-For source-linked architecture and endpoint internals, use
-[DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero). The local
-docs should not duplicate the full connectivity architecture.
-
-## Choose The Right Path
-
-| Need | Start here |
-| --- | --- |
-| Let Agent Zero work on your host files, shell, or browser | [A0 CLI Connector](../guides/a0-cli-connector.md) |
-| Add a third-party tool through MCP | [MCP Setup](../guides/mcp-setup.md) |
-| Let another agent talk to Agent Zero | [A2A Setup](../guides/a2a-setup.md) |
-| Add an external API for one workflow | [API Integration](../guides/api-integration.md) |
-| Study API, MCP, or A2A internals | [DeepWiki](https://deepwiki.com/agent0ai/agent-zero) |
-
-## External API Basics
-
-You can find your API token in Agent Zero under **Settings > External Services**.
-
-Common external endpoints include:
-
-| Endpoint | Use it for |
-| --- | --- |
-| `POST /api_message` | Send a message to Agent Zero. |
-| `GET/POST /api_log_get` | Read chat logs. |
-| `POST /api_terminate_chat` | Stop a running chat. |
-| `POST /api_reset_chat` | Reset a chat. |
-| `POST /api_files_get` | Retrieve files. |
-
-External API calls use the `X-API-KEY` header.
-
-> [!TIP]
-> For exact request and response details, check the current source or the
-> matching DeepWiki page. That keeps the API reference tied to the code that is
-> actually running.
-
-## MCP And A2A
-
-Use MCP when you want Agent Zero to call tools from another app or service.
-
-Use A2A when you want another agent to talk to Agent Zero as a collaborator.
-
-Both use the same Agent Zero instance and can be project-aware when configured
-that way.
-
-## Related
-
-- [A0 CLI Connector](../guides/a0-cli-connector.md)
-- [MCP Setup](../guides/mcp-setup.md)
-- [A2A Setup](../guides/a2a-setup.md)
-- [API Integration](../guides/api-integration.md)
-- [DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero)
+version https://git-lfs.github.com/spec/v1
+oid sha256:c0b8be750e59d57424cf3077ea07d71020f7c1e727eb72d58e203f51d5def254
+size 1968

docs/developer/contributing-skills.md

@@ -1,395 +1,3 @@
-# Contributing Skills to Agent Zero
-
-Welcome to the Agent Zero Skills ecosystem! This guide will help you create, test, and share skills with the community.
-
----
-
-## What is a Skill?
-
-A **Skill** is a contextual expertise module that provides the AI agent with specialized knowledge and procedures for specific tasks. Unlike tools (which are always loaded), skills are **surfaced via description/tag matching** when relevant, making them token-efficient and context-aware.
-
-### Skills vs Tools vs Knowledge
-
-| Aspect | Skills | Tools | Knowledge |
-|--------|--------|-------|-----------|
-| **Loading** | Description/tag matching | Always in prompt | Semantic recall |
-| **Purpose** | Procedures & expertise | Actions & functions | Facts & data |
-| **Format** | SKILL.md (YAML + Markdown) | Python/code | Text/documents |
-| **When to use** | "How to do X" | "Do X now" | "What is X" |
-
-### Cross-Platform Compatibility
-
-The SKILL.md standard is compatible with:
-- **Agent Zero** (this project)
-- **Claude Code** (Anthropic)
-- **Cursor** (AI IDE)
-- **OpenAI Codex CLI**
-- **GitHub Copilot**
-- **Goose** (Block)
-
-Skills you create here can be used in any of these platforms!
-
----
-
-## Quick Start
-
-### Using the CLI (Recommended)
-
-```bash
-# Create a new skill interactively
-python -m helpers.skills_cli create my-skill-name
-
-# List all available skills
-python -m helpers.skills_cli list
-
-# Validate a skill
-python -m helpers.skills_cli validate my-skill-name
-
-# Search skills
-python -m helpers.skills_cli search "keyword"
-```
-
-### Manual Creation
-
-1. Create a folder in `usr/skills/` with your skill name
-2. Add a `SKILL.md` file with YAML frontmatter
-3. Optionally add supporting scripts (`.py`, `.sh`, `.js`)
-
----
-
-## SKILL.md Standard
-
-Every skill must have a `SKILL.md` file with this structure:
-
-```markdown
----
-name: "skill-name"
-description: "A clear, concise description of what this skill does and when to use it"
-version: "1.0.0"
-author: "Your Name <email@example.com>"
-license: "MIT"
-tags: ["category", "purpose", "technology"]
-triggers:
-  - "keyword that activates this skill"
-  - "another trigger phrase"
-allowed_tools:
-  - tool_name
-  - another_tool
-metadata:
-  complexity: "beginner|intermediate|advanced"
-  category: "development|devops|data|productivity|creative"
-  estimated_time: "5 minutes"
----
-
-# Skill Name
-
-## Overview
-
-Brief description of what this skill accomplishes.
-
-## When to Use
-
-- Situation 1 where this skill applies
-- Situation 2 where this skill applies
-
-## Instructions
-
-### Step 1: First Step
-
-Detailed instructions...
-
-### Step 2: Second Step
-
-More instructions...
-
-## Examples
-
-### Example 1: Basic Usage
-
-\`\`\`python
-# Code example
-\`\`\`
-
-### Example 2: Advanced Usage
-
-\`\`\`python
-# Advanced code example
-\`\`\`
-
-## Common Pitfalls
-
-- Pitfall 1 and how to avoid it
-- Pitfall 2 and how to avoid it
-
-## Related Skills
-
-- `related-skill-1`
-- `related-skill-2`
-```
-
-### Required Fields
-
-| Field | Description |
-|-------|-------------|
-| `name` | Unique identifier (lowercase, hyphens allowed) |
-| `description` | What the skill does (used for semantic matching) |
-
-### Optional Fields
-
-| Field | Description |
-|-------|-------------|
-| `version` | Semantic version (e.g., "1.0.0") |
-| `author` | Your name and email |
-| `license` | License (MIT, Apache-2.0, etc.) |
-| `tags` | Categories for discovery |
-| `triggers` | Phrases that activate this skill |
-| `allowed_tools` | Tools this skill can use |
-| `metadata` | Additional structured data |
-
----
-
-## Creating Your First Skill
-
-### Step 1: Identify the Need
-
-Ask yourself:
-- What expertise would help the agent?
-- When should this skill be activated?
-- What steps should the agent follow?
-
-### Step 2: Create the Structure
-
-```bash
-# Using CLI
-python -m helpers.skills_cli create my-awesome-skill
-
-# Or manually
-mkdir -p usr/skills/my-awesome-skill
-touch usr/skills/my-awesome-skill/SKILL.md
-```
-
-### Step 3: Write the SKILL.md
-
-```markdown
----
-name: "my-awesome-skill"
-description: "Helps with [specific task] when [specific situation]"
-version: "1.0.0"
-author: "Your Name"
-tags: ["category"]
----
-
-# My Awesome Skill
-
-## When to Use
-
-Use this skill when you need to [specific task].
-
-## Instructions
-
-1. First, do this...
-2. Then, do that...
-3. Finally, verify by...
-
-## Examples
-
-### Example: Basic Case
-
-[Show a complete example]
-```
-
-### Step 4: Add Supporting Files (Optional)
-
-If your skill needs scripts:
-
-```
-my-awesome-skill/
-├── SKILL.md           # Required
-├── helper.py          # Optional Python script
-├── setup.sh           # Optional shell script
-└── templates/         # Optional templates folder
-    └── config.json
-```
-
-Reference them in your SKILL.md:
-
-```markdown
-## Scripts
-
-This skill includes helper scripts:
-- `helper.py` - Does X
-- `setup.sh` - Sets up Y
-```
-
-### Step 5: Test Your Skill
-
-```bash
-# Validate the skill
-python -m helpers.skills_cli validate my-awesome-skill
-
-# Test in Agent Zero
-# Start the agent and ask it to perform the task your skill handles
-```
-
----
-
-## Best Practices
-
-### Writing Effective Descriptions
-
-The `description` field is crucial for semantic matching. Make it:
-
-**Good:**
-```yaml
-description: "Guides systematic debugging of Python applications using print statements, debugger, and logging to identify root causes"
-```
-
-**Bad:**
-```yaml
-description: "Helps with debugging"
-```
-
-### Structuring Instructions
-
-1. **Be Specific** - Avoid vague instructions
-2. **Use Steps** - Number your steps clearly
-3. **Include Examples** - Show, don't just tell
-4. **Anticipate Errors** - Include troubleshooting
-
-### Semantic Triggers
-
-Design your description and content so the skill is recalled when relevant:
-
-```yaml
-# Include synonyms and related terms
-description: "Helps create REST APIs, web services, HTTP endpoints, and backend routes using FastAPI, Flask, or Express"
-```
-
-### Keep Skills Focused
-
-One skill = one expertise area. If your skill is getting too long, split it:
-
-- `api-design` - API structure and patterns
-- `api-security` - API authentication and authorization
-- `api-testing` - API testing strategies
-
----
-
-## Testing Skills
-
-### Local Testing
-
-1. **Validate Structure:**
-   ```bash
-   python -m helpers.skills_cli validate my-skill
-   ```
-
-2. **Test Semantic Recall:**
-   Start Agent Zero and ask questions that should trigger your skill.
-
-3. **Verify Instructions:**
-   Follow your own instructions manually to ensure they work.
-
----
-
-## Sharing Skills
-
-### Contributing to Agent Zero
-
-1. **Fork the Repository:**
-   ```bash
-   git clone https://github.com/agent0ai/agent-zero.git
-   cd agent-zero
-   ```
-
-2. **Create Your Skill:**
-   ```bash
-   python -m helpers.skills_cli create my-skill
-   # Edit usr/skills/my-skill/SKILL.md
-   ```
-
-3. **Move to Default (for contribution):**
-   ```bash
-   mv usr/skills/my-skill skills/my-skill
-   ```
-
-4. **Create a Pull Request:**
-   - Branch: `feat/skill-my-skill-name`
-   - Title: `feat(skills): add my-skill-name skill`
-   - Description: Explain what the skill does and why it's useful
-
-### Publishing Skills
-
-Share your skills on [skillsmp.com](https://skillsmp.com) or [skills.sh](https://skills.sh):
-
-1. Create a GitHub repository for your skill
-2. Ensure it follows the SKILL.md standard
-3. Submit via their contribution process
-
-### Creating a Skills Collection
-
-For multiple related skills, create a repository:
-
-```
-my-skills-collection/
-├── README.md
-├── skills/
-│   ├── skill-1/
-│   │   └── SKILL.md
-│   ├── skill-2/
-│   │   └── SKILL.md
-│   └── skill-3/
-│       └── SKILL.md
-└── LICENSE
-```
-
----
-
-## Community Guidelines
-
-### Quality Standards
-
-- **Tested** - Skills must be tested before submission
-- **Documented** - Clear instructions and examples
-- **Focused** - One expertise per skill
-- **Original** - Don't duplicate existing skills
-
-### Naming Conventions
-
-- Use lowercase with hyphens: `my-skill-name`
-- Be descriptive: `python-debugging` not `debug`
-- Avoid generic names: `fastapi-crud` not `api`
-
-### License
-
-- Include a license (MIT recommended for maximum compatibility)
-- Respect licenses of any code you include
-- Don't include proprietary or copyrighted content
-
----
-
-## FAQ
-
-### Q: Where should I put my skills?
-
-**A:** During development, use `usr/skills/`. For contribution, move to `skills/`.
-
-### Q: How are skills discovered?
-
-**A:** Skills are matched against their name, description, and tags for the current query. They are not indexed into vector memory.
-
-### Q: Can I use skills from other platforms?
-
-**A:** Yes! The SKILL.md standard is cross-platform. Skills from Claude Code, Cursor, or other compatible platforms can be copied directly to `usr/skills/`.
-
-### Q: How do I update a skill?
-
-**A:** Edit the SKILL.md file and increment the version number. Changes take effect on agent restart.
-
-### Q: Can skills call other skills?
-
-**A:** Skills don't directly call each other, but the agent may combine multiple skills when appropriate for a task.
-
----
-
-Happy skill building! 🚀
+version https://git-lfs.github.com/spec/v1
+oid sha256:50705bc9123c5c9962e9a0582b466c5bdfa342770f832503fe58cb77b51f4fa8
+size 9033

docs/developer/extensions.md

@@ -1,46 +1,3 @@
-# Extensions
-
-Extensions are an advanced way to change how Agent Zero behaves.
-
-If you are new, start with plugins instead. Plugins are easier to create, test,
-disable, and remove.
-
-Architecture details, extension points, and source-linked explanations now live
-in [DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero). This
-local page stays short on purpose.
-
-## Start Here
-
-| Goal | Start here |
-| --- | --- |
-| Add a small user-facing feature | [Create a Small Plugin](../guides/create-plugin.md) |
-| Change agent behavior for a project | [Projects](../guides/projects.md) |
-| Create a specialized agent style | [Agent Profiles](../guides/agent-profiles.md) |
-| Study extension internals | [DeepWiki](https://deepwiki.com/agent0ai/agent-zero) |
-
-## When Extensions Make Sense
-
-Use an extension only when a normal plugin, project instruction, skill, or agent
-profile is not enough.
-
-Good extension candidates:
-
-- adding behavior at a specific lifecycle point;
-- shaping prompts in a reusable way;
-- integrating tightly with core tools;
-- preparing framework-owned state before a task starts.
-
-Avoid extensions for simple UI changes, one-off scripts, or work that should be
-easy to remove. A plugin is usually the cleaner home for that.
-
-## Maintenance Rule
-
-Keep extension changes small and easy to explain. If a reader needs the full
-architecture to understand why the extension exists, link to the relevant
-DeepWiki page instead of copying the architecture into this repository.
-
-## Related
-
-- [Create a Small Plugin](../guides/create-plugin.md)
-- [Agent Profiles](../guides/agent-profiles.md)
-- [DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero)
+version https://git-lfs.github.com/spec/v1
+oid sha256:bb77856495cd10198eca601ba2ea1cfd4043470d966522462d9589fc9a908aff
+size 1682

docs/developer/mcp-configuration.md

@@ -1,80 +1,3 @@
-# Advanced MCP Configuration
-
-Most users should start with [MCP Setup](../guides/mcp-setup.md).
-
-This page is for people who need to paste or review MCP JSON by hand. MCP
-architecture and source-linked internals live in
-[DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero).
-
-## Basic Shape
-
-Command-based MCP tool:
-
-```json
-{
-  "mcpServers": {
-    "sqlite": {
-      "command": "uvx",
-      "args": ["mcp-server-sqlite", "--db-path", "/root/db.sqlite"]
-    }
-  }
-}
-```
-
-URL-based MCP tool:
-
-```json
-{
-  "mcpServers": {
-    "external-api": {
-      "url": "https://api.example.com/mcp",
-      "headers": {
-        "Authorization": "Bearer YOUR_API_KEY"
-      }
-    }
-  }
-}
-```
-
-## Common Fields
-
-| Field | Meaning |
-| --- | --- |
-| `command` | Starts a local MCP tool from a command. |
-| `args` | Arguments passed to that command. |
-| `url` | Connects to an MCP tool that is already running. |
-| `headers` | Optional HTTP headers, often used for authentication. |
-| `env` | Optional environment variables for command-based tools. |
-| `disabled` | Temporarily turns one MCP entry off. |
-
-Use `command` for local tools and `url` for tools that are already running
-somewhere else.
-
-## Docker Addresses
-
-If Agent Zero runs in Docker, remember that "localhost" means the container, not
-always your host machine.
-
-| Where the MCP tool runs | Address to use from Agent Zero |
-| --- | --- |
-| Host machine on macOS or Windows | `host.docker.internal` |
-| Another container | The container name on the same Docker network |
-| Remote machine | Its reachable HTTPS URL |
-| Inside Agent Zero's container | A command-based config |
-
-On Linux, `host.docker.internal` may need extra Docker setup. Running the MCP
-tool in the same Docker network is often simpler.
-
-## Safety
-
-- Use MCP tools you trust.
-- Keep real API keys out of public screenshots and repositories.
-- Prefer project secrets or environment variables for credentials.
-- Remove MCP tools you no longer use.
-
-## Related
-
-- [MCP Setup](../guides/mcp-setup.md)
-- [Browser Guide](../guides/browser.md)
-- [A0 CLI Connector](../guides/a0-cli-connector.md)
-- [DeepWiki for Agent Zero](https://deepwiki.com/agent0ai/agent-zero)
+version https://git-lfs.github.com/spec/v1
+oid sha256:d6f96af40a0fc64e275bdc8878d9a2b75d98d819c8301d79c8f1624528b4ec22
+size 2182

docs/developer/notifications.md

@@ -1,133 +1,3 @@
-# Agent Zero Notifications
-
-Quick guide for using the notification system in Agent Zero.
-
-> [!TIP]
-> Notifications pair well with scheduled tasks. See [Tasks & Scheduling](../guides/usage.md#tasks-and-scheduling) for automation patterns.
-
-## Backend Usage
-
-Use `AgentNotification` helper methods anywhere in your Python code:
-
-```python
-from helpers.notification import AgentNotification
-
-# Basic notifications
-AgentNotification.info("Operation completed")
-AgentNotification.success("File saved successfully", "File Manager")
-AgentNotification.warning("High CPU usage detected", "System Monitor")
-AgentNotification.error("Connection failed", "Network Error")
-AgentNotification.progress("Processing files...", "Task Progress")
-
-# With details and custom display time
-AgentNotification.info(
-    message="System backup completed",
-    title="Backup Manager",
-    detail="<p>Backup size: <strong>2.4 GB</strong></p>",
-    display_time=8  # seconds
-)
-
-# Grouped notifications (replaces previous in same group)
-AgentNotification.progress("Download: 25%", "File Download", group="download-status")
-AgentNotification.progress("Download: 75%", "File Download", group="download-status")  # Replaces previous
-AgentNotification.progress("Download: Complete!", "File Download", group="download-status")  # Replaces previous
-```
-
-## Frontend Usage
-
-Use the notification store in Alpine.js components:
-
-```javascript
-// Basic notifications
-$store.notificationStore.info("User logged in")
-$store.notificationStore.success("Settings saved", "Configuration")
-$store.notificationStore.warning("Session expiring soon")
-$store.notificationStore.error("Failed to load data")
-
-// With grouping
-$store.notificationStore.info("Connecting...", "Status", "", 3, "connection")
-$store.notificationStore.success("Connected!", "Status", "", 3, "connection")  // Replaces previous
-
-// Frontend notifications with backend persistence (new feature!)
-$store.notificationStore.frontendError("Database timeout", "Connection Error")
-$store.notificationStore.frontendWarning("High memory usage", "Performance")
-$store.notificationStore.frontendInfo("Cache cleared", "System")
-```
-
-## Frontend Notifications with Backend Sync
-
-**New Feature**: Frontend notifications now automatically sync to the backend when connected, providing persistent history and cross-session availability.
-
-### How it Works:
-- **Backend Connected**: Notifications are sent to backend and appear via polling (persistent)
-- **Backend Disconnected**: Notifications show as frontend-only toasts (temporary)
-- **Automatic Fallback**: Seamless degradation when backend is unavailable
-
-### Global Functions:
-```javascript
-// These functions automatically try backend first, then fallback to frontend-only
-toastFrontendError("Server unreachable", "Connection Error")
-toastFrontendWarning("Slow connection detected")
-toastFrontendInfo("Reconnected successfully")
-```
-
-## HTML Usage
-
-```html
-<button @click="$store.notificationStore.success('Task completed!')">
-    Complete Task
-</button>
-
-<button @click="$store.notificationStore.warning('Progress: 50%', 'Upload', '', 5, 'upload-progress')">
-    Update Progress
-</button>
-
-<!-- Frontend notifications with backend sync -->
-<button @click="$store.notificationStore.frontendError('Connection failed', 'Network')">
-    Report Connection Error
-</button>
-```
-
-## Notification Groups
-
-Groups ensure only the latest notification from each group is shown in the toast stack:
-
-```python
-# Progress updates - each new notification replaces the previous one
-AgentNotification.info("Starting backup...", group="backup-status")
-AgentNotification.progress("Backup: 30%", group="backup-status")  # Replaces previous
-AgentNotification.progress("Backup: 80%", group="backup-status")  # Replaces previous
-AgentNotification.success("Backup complete!", group="backup-status")  # Replaces previous
-
-# Connection status - only show current state
-AgentNotification.warning("Disconnected", group="network")
-AgentNotification.info("Reconnecting...", group="network")  # Replaces previous
-AgentNotification.success("Connected", group="network")  # Replaces previous
-```
-
-## Parameters
-
-All notification methods support these parameters:
-
-- `message` (required): Main notification text
-- `title` (optional): Notification title
-- `detail` (optional): HTML content for expandable details
-- `display_time` (optional): Toast display duration in seconds (default: 3)
-- `group` (optional): Group identifier for replacement behavior
-
-## Types
-
-- **info** (ℹ️): General information
-- **success** (✅): Successful operations
-- **warning** (⚠️): Important alerts
-- **error** (❌): Error conditions
-- **progress** (⏳): Ongoing operations
-
-## Behavior
-
-- **Toast Display**: Notifications appear as toasts in the bottom-right corner
-- **Persistent History**: All notifications (including synced frontend ones) are stored in notification history
-- **Modal Access**: Full history accessible via the bell icon
-- **Auto-dismiss**: Toasts automatically disappear after `display_time`
-- **Group Replacement**: Notifications with the same group replace previous ones immediately
-- **Backend Sync**: Frontend notifications automatically sync to backend when connected
+version https://git-lfs.github.com/spec/v1
+oid sha256:f9cececccc005a4c071574c5706cb157e744f60cbba1e0cceaa442936caf78fc
+size 5212