docker/cagent v1.139.0 adds an active-sessions listing endpoint and three lint cops that enforce its own conventions

GitHub·medium signalXBlueskyLinkedInCopy link

Released 2026-09-14, v1.139.0 adds GET /api/sessions?active=true to list currently attached sessions without reading full session history from disk, plus toolset graph traversal and an explicit RuntimeHandler identity so composite or decorator-wrapped toolsets wire capabilities correctly. Three new lint cops land at once: HookBuiltinsDocumented (which surfaced four undocumented hook builtins — http_post, limit_large_tool_results, safer_shell, snapshot), EnvironmentVariablePrefix (migrating CAGENT_PPROF_ADDR to DOCKER_AGENT_PPROF_ADDR), and TUIKeyBindings. It also fixes a race in LoadWithConfig by always cloning RuntimeConfig so resolved models, providers and encrypted config stay isolated per load.