OnlyOffice Documentation
OnlyOfficeAgent is the Ploinky-managed decorator that fronts the workspace Document Server and owns Office session creation, signed editor config generation, loopback document/callback routes, the public editor proxy, and workspace-vs-DPU persistence routing. The agent declares its image (pinned via ${ONLYOFFICE_VERSION}), derived JWT secret, protected control route, public editor port, unpublished storage listener, readiness probe, Document Server private-address loopback fetch setting, and persistent storage in manifest.json.
The editor proxy strips browser credentials and caller-supplied identity headers, serves only the stock editor assets required by the browser runtime, and advertises the public origin to the Document Server through X-Forwarded-Host/X-Forwarded-Proto on both asset and WebSocket forwards so converted-document cache URLs keep the public editor host and port.
Writable editor sessions enable OnlyOffice force-save, and the agent's Document Server wrapper enables auto-assembly before supervisor starts. Editor autosave is Document Server state; workspace or DPU persistence happens only after trusted save callbacks reach the loopback storage listener.
Explorer enables OnlyOfficeAgent in global mode so normal workspace documents are visible to the agent's path-confined direct-disk store. Confidential documents remain delegated to dpuAgent and are not served from the workspace mount.
Explorer remains the IDE shell and document picker. The DS specifications are the source of truth for runtime ownership, secret derivation, route separation, delegated DPU persistence, and Explorer integration.