docs: update AGENTS.md for stdio-based MCP configuration

[Copilot]

PR #205 removed Docker-in-Docker support in v0.9.1. This updates the developer documentation in AGENTS.md to reflect the new stdio-based MCP server configuration.

Changes

AGENTS.md

• MCP configuration examples: Replaced "type": "local" + docker with "type": "stdio" + npx
• Updated sections: Environment handling, troubleshooting, verification logs, CI/CD guidance
• Added note: References PR feat: remove Docker-in-Docker support #205 Docker-in-Docker removal

Migration Example

Before (no longer works):

{
  "mcpServers": {
    "github": {
      "type": "local",
      "command": "docker",
      "args": ["run", "-i", "--rm", "-e", "GITHUB_PERSONAL_ACCESS_TOKEN", "ghcr.io/github/github-mcp-server:v0.19.0"]
    }
  }
}

After (stdio-based with npx):

{
  "mcpServers": {
    "github": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "github-mcp-custom@1.0.20", "stdio"]
    }
  }
}

The agent container includes Node.js 22 with npx pre-installed, enabling stdio-based MCP servers without Docker.

Original prompt

Document breaking change: Docker-in-Docker removal in v0.9.1

Task Description

Update README.md to document the breaking change introduced in PR #205 (removal of Docker-in-Docker support).

Requirements

1. Add Breaking Changes Section to README.md:

   • Document that Docker-in-Docker support was removed in v0.9.1
   • Explain what this means for users
   • List what still works vs. what no longer works

2. Provide Migration Guide:

   • Show how to migrate from Docker-based MCP servers to stdio-based alternatives
   • Explain workarounds for users who need Docker functionality
   • Include examples of before/after configurations

3. Update Capabilities Section:

   • Clarify that AWF now provides pure network egress control
   • Remove any references to Docker-in-Docker support

Example Content

Breaking Changes Section

v0.9.1 - Docker-in-Docker Support Removed

PR #205 removed Docker-in-Docker support to simplify architecture and improve security.

What this means:

• ✅ Network egress control still works - HTTP/HTTPS domain allowlist enforcement unchanged
• ✅ Most workflows unaffected - Copilot/Claude with stdio MCP servers work fine
• ❌ Docker commands no longer work - docker run, docker-compose, etc. will fail

Migration Guide for MCP Servers:

Before (Docker-based): Use docker command
After (stdio-based): Use npx with @github/mcp-server stdio

References

• PR feat: remove Docker-in-Docker support #205: feat: remove Docker-in-Docker support #205
• Impact analysis in comprehensive report

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Mossaka]

@copilot remove mentioning in README

[Copilot]

Removed the Breaking Changes section from README.md in commit 838ec87.

The README now goes directly from "What it does" to "Get started fast". The MCP configuration changes remain documented in AGENTS.md.

[github-actions]

Test Coverage Report

Metric	Coverage	Covered/Total
Lines	77.19%	1300/1684
Statements	77.27%	1333/1725
Functions	77.17%	142/184
Branches	69.76%	450/645

Coverage Thresholds

The project has the following coverage thresholds configured:

• Lines: 38%
• Statements: 38%
• Functions: 35%
• Branches: 30%

---

Coverage report generated by `npm run test:coverage`

[github-actions]

💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges...

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

Smoke Test Results

Last 2 Merged PRs:

• fix(deps): resolve docs npm audit
• ci: add docs-only path filters

Tests:

• ✅ GitHub MCP: Retrieved merged PRs
• ✅ File Writing: Created /tmp/gh-aw/agent/smoke-test-copilot-21050689783.txt
• ✅ Bash Tool: Verified file contents

Status: PASS

📰 BREAKING: Report filed by Smoke Copilot fer issue #221 🗺️