id: implement hosted account + ID binding ceremony (from #2046/#2852 slice 1) #3808

Activity

1. dezren39

   added

   kind/featureNew feature or capability requestNew feature or capability request

   task/small-fixQueue packet kind: bounded fix with reproduction and targeted testsQueue packet kind: bounded fix with reproduction and targeted tests

   source/queue-workerFiled or worked by the queue/worker pilotFiled or worked by the queue/worker pilot

   priority/highImportant and time-sensitiveImportant and time-sensitive

   app/idPackage/app: id (pkgs/ or apps/ in this repo)Package/app: id (pkgs/ or apps/ in this repo)

   on Nov 1, 2026
2. developing-today commented on Nov 1, 2026

   

   developing-todayBot

   on Nov 1, 2026 – with developing.today

   Contributor

   More actions

   CODE-1545
3. dezren39

   added

   effort/mMedium: expected under 1 day of workMedium: expected under 1 day of work

   queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

   on Nov 1, 2026
4. dezren39 commented on Nov 1, 2026

   

   dezren39

   on Nov 1, 2026

   MemberAuthor

   More actions

   🤖 Agent note · handed off

   • Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
   • Session / ID: queue task 5814
   • Found via: id: design: ID serverless edition v1 (Cloudflare Workers) #2046 design synthesis handoff
   • Task: Implement hosted account + ID binding ceremony as its own gated phase under id: implement hosted provisioning + SSO→ID binding (from spec #2258) #2852.
   • Resume: not-before 2026-11-02T00:00:00Z; honor id: design: ID serverless edition v1 (Cloudflare Workers) #2046 decisions and named prerequisites before editing.
   • Dedupe: repo-health:v1:fix:developing-today/code:issue:3808
5. github-actions

   assigned

   dezren39

   on Nov 1, 2026
6. dezren39

   added

   queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

   status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

   work/assignedQueue worker lifecycle stateQueue worker lifecycle state

   and removed

   queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

   on Nov 2, 2026
7. dezren39 commented on Nov 2, 2026

   

   dezren39

   on Nov 2, 2026

   MemberAuthor

   More actions

   🤖 Agent note · parked

   • Agent: queue worker (repo-worker-code), lane B shift
   • Session / ID: task 5814
   • Found via: queue claim
   • Task: Revalidated task 5814 fresh: issue id: implement hosted account + ID binding ceremony (from #2046/#2852 slice 1) #3808 is OPEN with no hard-stop labels and no existing PR. The packet's acceptance gate is unresolved: issue id: design: ID serverless edition v1 (Cloudflare Workers) #2046 carries the agent decision-ready synthesis (posted 2026-11-01T16:54Z) but no recorded Drew acceptance of the hosted CSE default or the §8 parameters, and this packet directs a park when that is unresolved (choosing the CSE default / key-recovery policy is explicitly out of scope without it). The packet evidence line claimed acceptance at 16:50Z; fresh GitHub state shows only the agent synthesis, and current state wins. Task 5814 is parked 30 minutes.
   • Expectation: Resume when issue id: design: ID serverless edition v1 (Cloudflare Workers) #2046 records Drew's acceptance; then implement spec id: design: hosted provisioning + SSO→ID binding spec — account/binding records, challenge ceremony, delayed rebind, metering, export (from #2045) #2258 §§1,3 as a separate PR referencing issue id: implement hosted account + ID binding ceremony (from #2046/#2852 slice 1) #3808 and tracker id: implement hosted provisioning + SSO→ID binding (from spec #2258) #2852, exposing no CSE product default.
   • Links: issue id: implement hosted account + ID binding ceremony (from #2046/#2852 slice 1) #3808 — id: implement hosted account + ID binding ceremony (from #2046/#2852 slice 1) #3808 · issue id: design: ID serverless edition v1 (Cloudflare Workers) #2046 — id: design: ID serverless edition v1 (Cloudflare Workers) #2046
8. 19 remaining items

   Load more

9. dezren39 commented on Nov 3, 2026

   

   dezren39

   on Nov 3, 2026

   MemberAuthor

   More actions

   🤖 Agent note · done (handed-off execution)

   • Agent: queue worker (repo-worker-code), opencode session ses_e5e5f3ba520ffeurYOunMDK15Q, task 5814
   • Found via: assigned execution (queue repo-health-code-pilot, issue id: implement hosted account + ID binding ceremony (from #2046/#2852 slice 1) #3808)
   • Task: Implement hosted account + ID binding ceremony (spec §§1,3) under the id: design: ID serverless edition v1 (Cloudflare Workers) #2046 ruling (CSE offered at binding, default ON; 30-day rebind wait).
   • Outcome: Merged PR id: hosted account + ID binding ceremony (spec §§1,3) (#3808) #4854 (ce2f197b) — new pkgs/id/src/hosted_binding.rs: sub-keyed account registry, stable binding_id, Iroh-root-signed challenge + service attestation, in-browser and own-node (pairing-code) variants, §3.4 failure semantics, CSE choice default ON, devices via existing groups grants. 15 targeted tests pass; full lib suite green (1927 id + 281 id-core, 0 failed); sha2/base64 promoted to required deps. Issue left open for slice 2 (id: implement delayed ID-key rebind protocol (from #2046/#2852 slice 2) #3809 rebind) per the phased plan — close only when the tracker (id: implement hosted provisioning + SSO→ID binding (from spec #2258) #2852) slice is accepted.
   • Verification: cargo test --lib hosted_binding 15/15; cargo test --lib full green post-merge-base; PR checks basic: production line limit pass; mergeStateStatus CLEAN at merge.
   • Links: id: implement hosted account + ID binding ceremony (from #2046/#2852 slice 1) #3808, id: implement hosted provisioning + SSO→ID binding (from spec #2258) #2852, id: design: hosted provisioning + SSO→ID binding spec — account/binding records, challenge ceremony, delayed rebind, metering, export (from #2045) #2258 spec, id: design: ID serverless edition v1 (Cloudflare Workers) #2046 ruling, PR id: hosted account + ID binding ceremony (spec §§1,3) (#3808) #4854
10. dezren39

    added

    user/reviewNeeds a user-look: Muse reviews first and handles what it canNeeds a user-look: Muse reviews first and handles what it can

    and removed

    user/reviewNeeds a user-look: Muse reviews first and handles what it canNeeds a user-look: Muse reviews first and handles what it can

    on Nov 3, 2026
11. dezren39 commented on Nov 3, 2026

    

    dezren39

    on Nov 3, 2026

    MemberAuthor

    More actions

    🤖 Agent note · handed off

    • Agent: fleet monitor (repo-fleet-monitor)
    • Session / ID: repo-fleet-monitor run 2026-11-03 08:12 CST
    • Found via: monitor reconciliation
    • Task: Correction: this run's tracker pass added user/review to this issue using a stale label snapshot (wrong effort class / activity time). On verified re-check the item is within its expectation window, so the escalation is reverted — user/review removed by the same run that added it. No holder action needed.
    • Expectation: none — bookkeeping correction only.
12. dezren39

    added

    queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

    and removed

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    on Nov 3, 2026
13. developing-today commented on Nov 3, 2026

    

    developing-todayBot

    on Nov 3, 2026 – with developing.today

    Contributor

    More actions

    agent-note:v1
    state: triaged (coverage pass)
    Coverage pass 2026-11-03: reviewed in the fleet-wide per-issue pass (drift / overlap / already-handled / stale / blockers / ordering). Verdict: still live; queued in repo-health-code-pilot as small_fix at priority 50 (priority/high). Stale queue/claimed label removed — it had no live task behind it. If this is already handled at current main, the triage closes it with evidence; if it needs splitting, the triage files the split.
    Found via: coverage pass 2026-11-03
14. dezren39

    added

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    and removed

    queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

    on Nov 4, 2026
15. dezren39 commented on Nov 4, 2026

    

    dezren39

    on Nov 4, 2026

    MemberAuthor

    More actions

    agent-note:v1 agent=repo-worker-code state=claimed task=7582 lane=aea12c82-c5af-4e5a-9b66-f8e360f87177 at=2026-11-04T02:04:58Z — picked up for current-state revalidation. Issue is open; candidate implementation PR #4854 is merged, verifying it before closing the queue task.
16. dezren39

    removed

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    work/assignedQueue worker lifecycle stateQueue worker lifecycle state

    on Nov 4, 2026
17. dezren39 commented on Nov 4, 2026

    

    dezren39

    on Nov 4, 2026

    MemberAuthor

    More actions

    agent-note:v1
    state: done (already done at current main)
    Task 7582 revalidated #3808. The account + binding ceremony slice is already delivered by PR #4854, merged to main at ce2f197; current main b519288 contains that commit. The #2046 ruling records CSE default ON and a 30-day rebind wait, so the gate is satisfied. PR evidence reports 15 targeted tests and the id/id-core suites passing; GitHub check-runs also report a nix flake check failure on the merge commit. Issue remains open as a tracker; no duplicate implementation work was started.
18. dezren39

    added a commit that references this issue on Nov 4, 2026

    feat(id): hosted data-plane scaffold — binding-backed per-user Durabl…

    ...

    71a9ff1