docker/docker-agent v1.135.0

on GitHub

This release delivers a broad set of stability and security hardening fixes across session management, pricing, and background job handling, plus a new /copy command in the lean TUI.

What's New

• Adds a /copy command to the lean TUI that copies the last assistant response to the clipboard via OSC 52 and the native clipboard API, with feedback on success or when no response exists
• Adds per-runtime harness factory configuration via WithHarnessFactory
• Adds per-instance command evaluator configuration for the runtime

Bug Fixes

• Fixes delayed title events leaking across session streams
• Fixes blocked session event sends not being cancelled
• Fixes remote MCP connections to protect against SSRF
• Fixes live session permission updates to be properly synchronized
• Fixes ACP session turns to be serialized correctly
• Fixes app turns being incorrectly shared across sessions instead of bound to their own session
• Fixes OCI cache references to be scoped by registry
• Fixes message updates to be scoped to their own session
• Fixes session model switches to be serialized
• Fixes background agent admission to be atomic
• Fixes background jobs to terminate reliably
• Fixes scheduled recalls to retry on failure
• Fixes task description file reads to be confined
• Fixes task store updates to be transactional
• Fixes unreadable task stores being overwritten instead of preserved
• Fixes stale Unix sockets to be safely reclaimed
• Fixes remote agent configuration size to be limited
• Fixes long-context model pricing tiers not being accounted for (e.g. GPT-5.4 above 272k tokens, Gemini 2.5 Pro above 200k tokens were previously billed at the base flat rate)
• Fixes fallback model requests being billed against the primary model's rates instead of the model that actually handled the call
• Fixes catalog refresh to be limited to long-context pricing tiers
• Fixes config cost not being applied after fallback model resolution
• Fixes WASM provider registration to be explicit, removing implicit inclusion of all browser-compatible SDKs

Technical Changes

• Extracts a JavaScript-free HTTP tool client into a new pkg/tools/builtin/api/client leaf package, removing goja, regexp2/v2, go-sourcemap, and google/pprof from the dependency closure of non-JS embedders
• Inlines the single-use context tier constant

What's Changed

• fix: harden concurrent and external resource handling by @dgageot in #4185
• docs: update CHANGELOG.md for v1.134.0 by @docker-read-write[bot] in #4187
• feat: add copy command to lean TUI by @rumpl in #4188
• fix: account for long-context tiers and fallback model pricing by @dgageot in #4189
• docs: auto-update for merged PRs (2026-09-08) by @aheritier in #4194
• fix: make WASM provider registration explicit by @dgageot in #4192
• refactor(api): extract JavaScript-free HTTP client leaf and per-runtime factory options by @dgageot in #4193

Full Changelog: v1.134.0...v1.135.0