id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032)

From the #2032 investigation (record). Blocked by #2244 (counters must exist before a budget can be evaluated).

Problem

The issue's requirement is "configurable budgets — max MB per window across the whole app, per IP, or per ID, and message/MB caps for a SPECIFIC counterparty, not just any counterparty". The last part is the one no existing limiter can express: world chat bounds lines per participant in a world, nothing can give one peer a smaller allowance than everyone else.

Work

Rolling-window byte budgets: app-wide inbound 32 MiB/s / 20 GiB/h, outbound 64 MiB/s / 40 GiB/h; per peer 100 MiB/h burst 8 MiB/min; per IP 250 MiB/h (direct connections only).
Per-counterparty override rows {peer, bytes_per_window, messages_per_window}, consulted before the default bucket — an operator can cap one peer at 1 MiB/day without touching the global budget.
Configuration in id-server-config.toml (server_config/parse.rs), defaults in code so an unchanged config behaves as today.
Budget exhaustion is a budget_exhausted refusal with retry_after_ms (from id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244), not a disconnect.

Done when

An operator can set a per-peer cap in config, observe the budget counters, and a peer exceeding it is refused with a retry value while the rest of the app is unaffected.

Parent: #2056 · Investigation: #2032 · Synthesis: #2033

CODE-1113

agent-note:v1
event: handed_off
task: 5936 (repo-health-code-pilot, openchamber scheduled lane)
state: queued; not_before=2026-11-01T22:30:00Z
next: revalidate #2244/#3882/PR #3960; park if P0-A integration is still open or blocked.
dedupe: repo-health:v1:fix:developing-today/code:issue:2247

agent-note:v1 — picked up — OpenChamber scheduled lane

Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
Session / ID: ses_e5e66cd4547ffeQOz5YvBjamz6; queue task 5936
Found via: atomic queue claim
Next: revalidate the id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 integration prerequisite (id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 / PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960) before any implementation; do not touch Drew-authored PR design(id): #2033 abuse-control primitives v1 #3834.
Resume gate from packet: id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 must be complete; otherwise park for 30 minutes. No files touched.
Links: id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 · id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 · id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 · PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960

agent-note:v1 — parked — OpenChamber scheduled lane

Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
Session / ID: ses_e5e66cd4547ffeQOz5YvBjamz6; queue task 5936
State: Parked for 30 minutes (eligible after 2026-11-01T23:03Z).
Fresh evidence: id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 and id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 remain OPEN; canonical PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960 is still OPEN at 3993ac941e, Drew-authored. CodeRabbit passed, but the prerequisite integration is not merged.
Action: no worktree, code changes, or duplicate PR; did not touch PR design(id): #2033 abuse-control primitives v1 #3834.
Resume when: id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244/id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 integration is complete; revalidate id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 and current main before implementing budgets.
Links: id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 · id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 · id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 · PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-i
Session / ID: task 9172
Found via: queue claim
Task: task 9172 (id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247, wire abuse budgets into WorldProtocol) assigned to the opencode execution lane; handing off to the laptop claimant. Re-verified fresh: issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 OPEN (stale parked labels swapped to claimed); Drew-owned PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 still OPEN at head f969cfa, overlapping the exact serve.rs WorldProtocol construction site — no competing PR. Attempts 15/16 — CAP RISK (at cap, park instead of handing off).
Expectation: claimant launches the bound opencode session; resume after PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 merges/closes or Drew releases the seam.
Links: PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096

🤖 Agent note · picked up

Agent: queue worker (repo-worker-code), lane 335a5d1f-bfc1-4831-99ea-850c8939a727
Session / ID: task 9172
Found via: queue claim
Task: Wire id serve's loaded abuse budgets into WorldProtocol (id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247).
Expectation: Revalidate id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 and Drew-owned PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096; do not create a competing PR on the WorldProtocol construction seam. Resume when fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 merges/closes or Drew releases the seam.
Links: id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247, fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096

🤖 Agent note · parked

Agent: queue worker (repo-worker-code), lane 335a5d1f-bfc1-4831-99ea-850c8939a727
Session / ID: task 9172
Found via: queue claim
Task: Wire id serve's loaded abuse budgets into WorldProtocol (id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247).
Reason: Freshly verified PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 remains OPEN, Drew-authored (dezren39), at head f969cfa. Its current diff changes the exact pkgs/id/src/commands/serve.rs WorldProtocol construction seam this task needs. No competing PR created.
Resume: After PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 merges/closes or Drew releases the seam; then revalidate issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 and the PR before resuming.
Links: id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247, fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096

🤖 Agent note · picked up

Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
Session / ID: task 9172; lane 9aca43b4-5439-4939-9f71-323f5d32521b
Found via: queue claim
Task: Revalidate the overlapping canonical PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 and its current diff against the serve.rs WorldProtocol construction seam before any work.
Expectation: xs — if the Drew-authored PR still owns the seam, preserve it and park without creating a competing PR.
Links: task 9172; issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247; PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096

🤖 Agent note · parked

Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
Session / ID: task 9172; lane 9aca43b4-5439-4939-9f71-323f5d32521b
Found via: queue claim
Task: Parked because Drew-authored PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 remains open and its diff edits the same serve.rs WorldProtocol construction seam required by this task. I preserved the canonical PR and did not create a competing PR.
Expectation: m — resume after PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 merges/closes or Drew explicitly releases the seam; revalidate the diff first.
Links: task 9172; issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247; PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096; branch queue/8033-4918-abuse-counters

Navigation Menu

Repository navigation

id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247

Problem

Work

Done when

235 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247

Description

Problem

Work

Done when

Activity

developing-today commented on Oct 29, 2026

dezren39 commented on Nov 1, 2026

dezren39 commented on Nov 1, 2026

dezren39 commented on Nov 1, 2026

235 remaining items

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

dezren39 commented on Nov 4, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions