feat(security): default local workers to localhost only (#1132)

Require generated OpenCode auth and explicit remote-sharing opt-in so local workers stay loopback-only unless the user intentionally exposes them.
This commit is contained in:
Source Open
2026-03-23 17:58:53 -07:00
committed by GitHub
parent 24c47f190b
commit 18723ec767
27 changed files with 469 additions and 142 deletions

View File

@@ -92,7 +92,7 @@ This is a minimal packaging template to run the OpenWork Host contract in a sing
It runs:
- `opencode serve` (engine) bound to `127.0.0.1:4096` inside the container
- `openwork-server` bound to `0.0.0.0:8787` (the only published surface)
- `openwork-server` published on `0.0.0.0:8787` via an explicit `--remote-access` launch path (the only published surface)
### Local run (compose)