You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
id: implement hosted Worker API + per-user DO provisioning and metering (from #2046/#2852 slice 3) #3811
Child implementation packet of #2852, gated by the settled synthesis in #2046. Implement the first hosted data plane from #2044/#2045 and #2258 spec §5.
Scope: one Worker HTTPS/WebSocket front door; lazy per-user Durable Object with SQLite; account-to-DO lookup by stable binding_id (not email and not a rebindable key); R2 for content-addressed blobs with references in SQLite; schema bootstrap, metering, ceilings, and read-only + export-at-cap behavior. Use the binding/account records from slice 1. Reuse the HTTP/WS application seam; do not try to run Iroh QUIC inside Workers.
Gate: honor #2283's jurisdiction-aware routing design before choosing namespace/bucket bindings; if its design is still open, preserve an explicit jurisdiction seam and park before deployment configuration. Only hibernating WebSockets; no always-on per-user process/container.
Acceptance: local Worker/DO tests prove lazy creation, user isolation, R2 indirection, metering/cap behavior, and fail-closed routing; PR references this issue and #2852.
agent-note:v1
state: reviewed (coverage loop-back)
Coverage pass 2026-11-03, loop-back review: this issue was re-reviewed (drift / overlap / already-handled / stale / blockers / ordering) so every open issue in the four repos is reviewed and in the system. Verdict: still live; in the system as task 6882 (triage, queued, priority 50) in repo-health-code-pilot. Labels audited and synced. If it is already handled at current main, its triage closes it with evidence; if oversized, the triage files the split; blockers belong on this issue.
Found via: coverage loop-back 2026-11-03
Verdict: the requested data plane is still unimplemented, but the old packet was too broad for small_fix and its blockers are stale. The prerequisites have moved: #2283 is CLOSED and design PR #3843 MERGED; #3808/#4854 and #3809/#4885 are MERGED; the #2046 ruling settled the parameters. pkgs/id/src/hosted_binding.rs now supplies the binding contract. Main has no production per-user hosted Worker/UserDO data plane. pkgs/id/worker-poc / PR #2848 is a world/Plaza isolate semantics PoC, not this per-user store.
Split / next action: filed #5199 as the first bounded local-only implementation step and queued task 8897 (repo-health-code-pilot). It covers the Worker/UserDO foundation, stable binding_id, restricted jurisdiction routing, lazy versioned SQLite bootstrap, local tests, and reconciliation of the stale google:<sub> example in the jurisdiction design doc. R2 blob/reference accounting and metering/cap behavior remain later ordered steps under this umbrella; do not launch them in parallel with the base. Production deployment/bindings remain out of scope: #2285 is still OPEN with user/escalated (Drew authorization and deployed-account/vendor evidence absent), and #3403 remains blocked. No production residency claim is made. The signed-object sync bridge remains #3818.
No code or tests were changed in this triage. #3811 stays open as the umbrella until its implementation steps land.
Activity
developing-today commentedon Nov 1, 2026
CODE-1547
dezren39 commentedon Nov 1, 2026
🤖 Agent note · handed off
dezren39 commentedon Nov 2, 2026
🤖 Agent note · picked up
28 remaining items
developing-today commentedon Nov 3, 2026
agent-note:v1
state: reviewed (coverage loop-back)
Coverage pass 2026-11-03, loop-back review: this issue was re-reviewed (drift / overlap / already-handled / stale / blockers / ordering) so every open issue in the four repos is reviewed and in the system. Verdict: still live; in the system as task 6882 (triage, queued, priority 50) in repo-health-code-pilot. Labels audited and synced. If it is already handled at current main, its triage closes it with evidence; if oversized, the triage files the split; blockers belong on this issue.
Found via: coverage loop-back 2026-11-03
dezren39 commentedon Nov 3, 2026
🤖 Agent note · handed off
opencodedezren39 commentedon Nov 3, 2026
agent-note:v1
state: picked-up
dezren39 commentedon Nov 3, 2026
agent-note:v1
state: triaged — live, split for implementation
9380bf6d7cfff6431b5484bb0bc5b917632209cb. id: implement hosted Worker API + per-user DO provisioning and metering (from #2046/#2852 slice 3) #3811 remains OPEN; fresh PR search found no matching PR. Prior implementation task 5817 is cancelled; no active fix task was found.Verdict: the requested data plane is still unimplemented, but the old packet was too broad for
small_fixand its blockers are stale. The prerequisites have moved: #2283 is CLOSED and design PR #3843 MERGED; #3808/#4854 and #3809/#4885 are MERGED; the #2046 ruling settled the parameters.pkgs/id/src/hosted_binding.rsnow supplies the binding contract. Main has no production per-user hosted Worker/UserDO data plane.pkgs/id/worker-poc/ PR #2848 is a world/Plaza isolate semantics PoC, not this per-user store.Split / next action: filed #5199 as the first bounded local-only implementation step and queued task 8897 (repo-health-code-pilot). It covers the Worker/UserDO foundation, stable
binding_id, restricted jurisdiction routing, lazy versioned SQLite bootstrap, local tests, and reconciliation of the stalegoogle:<sub>example in the jurisdiction design doc. R2 blob/reference accounting and metering/cap behavior remain later ordered steps under this umbrella; do not launch them in parallel with the base. Production deployment/bindings remain out of scope: #2285 is still OPEN withuser/escalated(Drew authorization and deployed-account/vendor evidence absent), and #3403 remains blocked. No production residency claim is made. The signed-object sync bridge remains #3818.No code or tests were changed in this triage. #3811 stays open as the umbrella until its implementation steps land.
feat(id): hosted data-plane scaffold — binding-backed per-user Durabl…