7 Commits

Include renames

Author	SHA1	Message	Date
Melvin Strobl	82c64a10b6	Make documentation standalone and generalize examples	2026-10-25 14:43:20 +01:00
stroblme	1424e1e8a8	Drop --token from the hand-started worker examples ... The worker reads FLUKSIO_WORKER_TOKEN itself; on the command line the token shows in ps. The --token row in the options table says so.	2026-10-07 09:35:00 +02:00
stroblme	ed8aee2387	Authenticate sockets by header or one-time ticket instead of ?token=	2026-10-07 08:58:22 +02:00
stroblme	953a983919	Bind a worker's name and labels into its token; list and revoke tokens by jti	2026-10-07 08:42:14 +02:00
stroblme	db045770e8	Harden the remote worker: TLS off loopback, full digests, filtered env ... fluksio-worker now refuses ws:// and http:// engine and artifact URLs unless they are loopback or --insecure is given; the engine still accepts both. An artifact reference must be sha256: plus 64 hex digits before it is joined into a path, and node code gets the host environment through the engine's credential denylist instead of all of it.	2026-10-06 12:18:30 +02:00
stroblme	856693110f	Say the licence on the two pages PyPI will show ... Every other README carries the AGPL line; these two did not, and they are the ones that become pypi.org/project/fluksio and /fluksio-worker — the most public surface the project has, and the place a copyleft licence is least useful to have to go looking for. §13 is named outright for the same reason.	2026-08-24 12:51:53 +02:00
stroblme	e3171f87e2	Split the worker into a distribution of its own ... A cluster or GPU host installs `pip install fluksio-worker` and gets the agent and the runner, not psycopg, numpy and the MCP SDK. The engine depends on it as a workspace member, so the file it launches node code with is the same file a remote worker runs — which is what keeps a node unable to tell the difference. Copying the two files by hand still works.	2026-08-21 21:54:10 +02:00