v1.127.0

This release delivers Desktop PAC-aware egress with SSRF protections, several runtime and toolset fixes, and documentation updates for served-agent safety controls.

What's New

• Adds Desktop PAC-aware egress for configured HTTP clients while preserving standalone proxy behavior and SSRF protections, covering agent/source fetches, sessions, tools, MCP HTTP transports, and MCP OAuth flows

Bug Fixes

• Fixes slow toolset startup from blocking conversation turns; keeps turns responsive when a toolset start is already in progress or exceeds the start budget
• Fixes on_user_input notifications firing incorrectly for sub-sessions, background agents, non-interactive runs, and canceled max-iteration waits — now only fires when an interactive root session is genuinely waiting for the next prompt
• Fixes Desktop PAC transport detection, routing, and state retention across multiple egress and transport handling regressions
• Fixes server to distinguish unavailable agent sources

Technical Changes

• Extends Windows streaming TUI test timeouts to 30 seconds for simulated-stream scenarios
• Updates CLI reference documentation for serve a2a safety flags (--auth-token, --cors-origin, --insecure-no-auth, --safety)
• Adds documentation describing Desktop PAC egress controls and clarifying coverage for MCP OAuth and direct egress
• Makes Desktop transport tests hermetic

---

What's Changed

• docs: update CHANGELOG.md for v1.126.0 by @docker-read-write[bot] in #4002
• docs: complete CLI reference for serve a2a safety flags by @aheritier in #4003
• test(e2e): extend Windows streaming TUI timeouts by @Sayt-0 in #4005
• fix: add Desktop PAC-aware egress with SSRF protections by @aheritier in #3999
• fix(runtime): avoid false on_user_input notifications by @Sayt-0 in #4010
• fix(tools): prevent slow startup from blocking turns by @Sayt-0 in #4009
• fix(runtime): scope harness prompt-selection to fresh vs resume session by @aheritier in #4012

Full Changelog: v1.126.0...v1.127.0