builtins

const AddDate = "add_date"

AddDate is the registered name of the add_date builtin.

const AddDirectoryListing = "add_directory_listing"

AddDirectoryListing is the registered name of the add_directory_listing builtin.

const AddEnvironmentInfo = "add_environment_info"

AddEnvironmentInfo is the registered name of the add_environment_info builtin.

const AddGitDiff = "add_git_diff"

AddGitDiff is the registered name of the add_git_diff builtin.

const AddGitStatus = "add_git_status"

AddGitStatus is the registered name of the add_git_status builtin.

const AddPromptFiles = "add_prompt_files"

AddPromptFiles is the registered name of the add_prompt_files builtin.

const AddRecentCommits = "add_recent_commits"

AddRecentCommits is the registered name of the add_recent_commits builtin.

const AddUserInfo = "add_user_info"

AddUserInfo is the registered name of the add_user_info builtin.

const HTTPPost = "http_post"

HTTPPost is the registered name of the http_post builtin.

const MaxIterations = "max_iterations"

MaxIterations is the registered name of the max_iterations builtin.

const RedactSecrets = "redact_secrets"

RedactSecrets is the registered name of the builtin that scrubs secret material at every leak vector docker-agent has into a third party. The same builtin is registered once and dispatches on hooks.Input.HookEventName so a single name covers all three legs:

• hooks.EventPreToolUse — scrub tool ARGUMENTS before the call leaves the runtime (returns UpdatedInput).
• hooks.EventBeforeLLMCall — scrub outgoing CHAT CONTENT before each model call (returns UpdatedMessages).
• hooks.EventToolResponseTransform — scrub tool OUTPUT before it reaches event consumers, the persisted session, the post_tool_use hook, or the next LLM call (returns UpdatedToolResponse).

The agent-level redact_secrets flag is shorthand for wiring the builtin into all three events at once via ApplyAgentDefaults; the same hook entries can be authored directly in YAML to opt in to individual legs (or all of them) without touching agent flags.

Configured under any other event the builtin returns nil and logs a warning: keeping it lenient avoids surprising failures from typos while still nudging users toward the right event.

const Snapshot = "snapshot"

Snapshot is the registered name of the snapshot builtin.

const Unload = "unload"

Unload is the registered name of the on_agent_switch builtin that asks the previous agent's local inference engines (today: Docker Model Runner) to release the resources they hold.

Wire it into a config with:

hooks:
  on_agent_switch:
    - type: builtin
      command: unload

The hook is pure: it depends only on the hooks.Input.FromAgentModels snapshot the runtime ships on every on_agent_switch dispatch, plus net/http. It carries no runtime-side coupling and silently skips any model whose endpoint isn't reachable as plain HTTP (e.g. cloud providers that don't expose hooks.ModelEndpoint.BaseURL).

Provider dispatch and URL resolution are owned by pkg/model/provider/dmr (see dmr.ProviderType and dmr.UnloadURL), so this builtin stays a dumb dispatcher and DMR keeps full control of its conventions.