What problem does it solve? Coding agents that need to build images and run containers cannot safely receive direct access to docker.sock, since that grants unrestricted host filesystem and network access. Docker Helper mediates all Docker operations through a policy-enforcing daemon that restricts build contexts and mount sources to the session's issued filesystem snapshot. ## Core Features & Use Cases - Mediated Docker Operations: Pull images, build from Dockerfiles, and run containers through the docker-helper CLI or the HTTP API over the Docker Helper Unix socket, authenticated by a session token. - Session and Credential Management: Create sessions scoped to a workspace plus issued filesystem roots using Launcher or Principal credentials, and introspect your own authority with docker-helper self or GET /self. - Policy-Aware Mounting: Enforces path containment on canonical mount sources, distinguishing invalid_mount rejections from read_only_root policy refusals. - Use Case: An agent in a sandboxed environment needs to build an image and run a test container. It uses the provisioned DOCKER_HELPER_SESSION_TOKEN to call docker-helper build and docker-helper run, mounting only the session workspace, without ever touching docker.sock. ## Quick Start Use the docker-helper skill to pull the alpine image and run a container that mounts the current workspace at /workspace.
