stroblmeandClaude Opus 5.5 cf5329e3a8 Harden the remote worker: TLS off loopback, full digests, filtered env ...

fluksio-worker now refuses ws:// and http:// engine and artifact URLs unless
they are loopback or --insecure is given; the engine still accepts both.
An artifact reference must be sha256: plus 64 hex digits before it is joined
into a path, and node code gets the host environment through the engine's
credential denylist instead of all of it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013GAeg4Jo6xjZzjwy9QDWMQ

2026-10-06 12:18:30 +02:00

..

__init__.py

Split the worker into a distribution of its own

2026-08-21 21:54:10 +02:00

__main__.py

Split the worker into a distribution of its own

2026-08-21 21:54:10 +02:00

agent.py

Harden the remote worker: TLS off loopback, full digests, filtered env

2026-10-06 12:18:30 +02:00

py.typed

Split the worker into a distribution of its own

2026-08-21 21:54:10 +02:00

worker_main.py

Harden the remote worker: TLS off loopback, full digests, filtered env

2026-10-06 12:18:30 +02:00