docker

Drive local containers with the docker CLI. Reads (ps, images, logs, inspect) are safe to run directly; writes (run, build, stop, rm, rmi, prune, compose down) mutate state and surface the runtime approval gate — confirm intent with the user first.

Setup health check (run first, every session)

Verify with one solo step:

[{ "tool": "os.shell.run", "args": { "cmd": "docker", "args": ["version", "--format", "{{.Server.Version}}"] } }]

Outcome map:

• exit 0 + version → daemon reachable, proceed.
• command not found: docker → enter Setup playbook → "docker missing".
• Cannot connect to the Docker daemon → enter Setup playbook → "daemon not running".