Skip to content

Adds a stand-alone file worker process - #487

Open
rdaum wants to merge 3 commits into
mainfrom
rd/fileworker
Open

Adds a stand-alone file worker process#487
rdaum wants to merge 3 commits into
mainfrom
rd/fileworker

Conversation

@rdaum

@rdaum rdaum commented Jul 24, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

rdaum added 3 commits July 24, 2026 15:55
Add a standalone ZMQ worker for filesystem operations requested from
MOO code.

Confine every path to a configured directory capability with cap-std,
rejecting absolute paths, traversal outside the root, and symlink
escapes while avoiding path-validation races. Support whole-file and
ranged reads, writes, appends, deletion, metadata, line counts,
directory creation, empty-directory removal, and listings with
per-request timeouts.

Provide CURVE enrollment, health checks, command-line and environment
configuration, usage documentation, sandbox tests, workspace
integration, and container packaging.

This worker runs as a separate process and is not available embedded
in the single-process server like curl-worker
Add the standalone file worker to the clustered web-basic Compose
deployment behind an opt-in profile. Mount a dedicated sandbox,
prepare its directories with the deployment user, and document how to
enable and manage the worker.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant