Feat v0.8.1 workspace module (#68)
All checks were successful
CI/CD / detect-changes (push) Successful in 4s
CI/CD / test-frontend (push) Has been skipped
CI/CD / test-runners (push) Has been skipped
CI/CD / e2e-smoke (push) Has been skipped
CI/CD / test-go-pg (push) Successful in 2m49s
CI/CD / test-sqlite (push) Successful in 2m54s
CI/CD / build-and-deploy (push) Successful in 36s

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>
This commit was merged in pull request #68.
This commit is contained in:
2026-04-03 00:38:40 +00:00
committed by xcaliber
parent 694779fac6
commit 435f972ded
9 changed files with 681 additions and 6 deletions

View File

@@ -1,6 +1,6 @@
# Armature — Roadmap
## Current: v0.8.0Files Module
## Current: v0.8.1Workspace Module
Self-hosted extensible platform kernel. Auth, identity, packages, Starlark
sandbox, storage, realtime, and ops are kernel primitives. Everything else
@@ -397,14 +397,18 @@ key namespacing (`ext/{packageID}/`). Permissions: `files.read`,
New: `sandbox/files_module.go`. Modified: runner wiring, permission
constants. `ObjectStore` interface gained `List()` method. 16 new tests.
**v0.8.1 — `workspace` Module**
**v0.8.1 — `workspace` Module**
Managed disk directories for tools that need a real filesystem (git,
compilers, media tools). `workspace.create(name)` → scoped path.
Permission: `workspace.manage`. Quota enforcement via `WORKSPACE_QUOTA_MB`.
compilers, media tools). Extension-scoped path namespacing
(`{WORKSPACE_ROOT}/{packageID}/{name}/`). Five builtins: `create`,
`path`, `list`, `delete`, `usage`. Permission: `workspace.manage`.
Quota enforcement via `WORKSPACE_QUOTA_MB`. Path traversal and symlink
escape protection.
New: `sandbox/workspace_module.go`. Modified: runner wiring, permission
constants.
constants, config (`WORKSPACE_ROOT`, `WORKSPACE_QUOTA_MB`), main.go
startup. 16 new tests.
**v0.8.2 — Capability Negotiation**