docker-agent

This release fixes permission scoping bugs in sub-sessions, adds deferred tool loading, and includes several improvements to session reliability and the settings window.

What's New

• Adds cache-safe deferred tool loading, tracking deferred tool load points in the shared runtime and translating them into native OpenAI tool-search and Anthropic tool-reference messages
• Adds embedder seams for code-built teams in embeddedchat, allowing callers to assemble agents in code without requiring a YAML AgentSource or pulling the full toolset and provider registries at link time
• Adds more settings in the settings window

Improvements

• Refactors the TUI confirmation dialog to accept a narrow ConfirmationSessionState interface, allowing embedders to supply session state without depending on a concrete *service.SessionState

Bug Fixes

• Fixes permission scoping between parent and child sessions, preventing sub-sessions from back-propagating ToolsApproved and Permissions to the parent (scope escalation bug)
• Fixes tool-approval chain precedence in the permission override and dispatch pipeline
• Fixes teamloader to propagate the session working directory to toolsets, resolving a silent drop of WithWorkingDir for tools such as shell and filesystem
• Fixes teamloader to restore runConfig.WorkingDir after Load
• Fixes a race condition by locking access to session title, token, and cost fields through Session.mu
• Fixes the runForwarding invariant

Technical Changes

• Fixes formatting for gofumpt and gci
• Updates stale YOLO tests and restores branch cloning
• Adds eval test coverage for container interruption on cancellation
• Fixes TestForceAskOverridesYoloMode hanging on CI

What's Changed

• docs: update CHANGELOG.md for v1.107.0 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/3652
• docs: update CHANGELOG.md for v1.108.0 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/3653
• test(eval): cover container interruption on cancellation by @Sayt-0 in https://github.com/docker/docker-agent/pull/3649
• refactor(tui): let embedders supply the confirmation dialog's session state by @dgageot in https://github.com/docker/docker-agent/pull/3654
• feat(embeddedchat): add embedder seams for code-built teams by @dgageot in https://github.com/docker/docker-agent/pull/3655
• fix: correct Decide precedence and remove sub-session scope escalation by @Piyush0049 in https://github.com/docker/docker-agent/pull/3542
• Add more settings in the settings window by @rumpl in https://github.com/docker/docker-agent/pull/3656
• fix(teamloader): propagate session working dir to toolsets by @trungutt in https://github.com/docker/docker-agent/pull/3657
• Add cache-safe deferred tool loading by @rumpl in https://github.com/docker/docker-agent/pull/3658
• fix(session): lock title and usage scalar access by @Sayt-0 in https://github.com/docker/docker-agent/pull/3659

Full Changelog: https://github.com/docker/docker-agent/compare/v1.108.0...v1.109.0