Tools
Docker cagent 1.138.0 fixes the order of tool hooks: input transform first, then the guard
docker/cagent v1.138.0 (2026-09-10) adds tool hook phases with a mandatory order, `tool_input_transform` then `tool_guard`, plus hook deduplication and config validation, so a guard always sees the final input. It adds generated-image output written into the workspace, with traversal and symlink-escaping paths rewritten to a sanitized basename, and portable session blobs so media survives a resume. It also forwards an OpenAI `service_tier` option for Fast mode.
Source
↳ Follow the thread