id: design: Cloudflare Workers rendezvous/relay component (from #5671)

Summary

Follow-on design ticket from #5671 — its decomposition sketch names this as a separate design, and the parent's acceptance requires these tickets to be filed and linked. Filed in the 2026-11-04 gap pass (WS-F) so the design work exists and can be prioritised on its own merits; implementation timing is a separate decision, possibly months out.

What this design must settle

When a Workers-hosted rendezvous/relay is the right shape, its limits, and self-host parity — the same component runnable on infrastructure we control.

Context from the parent

The parent design fixes how ID clients and servers stay reachable when UDP is denied — fallback order, broker shapes, trust model, and the E2E boundary. The parent issue carries the surrounding decisions this ticket must not re-decide; where this ticket's answer would change a parent decision, record that explicitly rather than silently forking it.

Decision record expected

Close this design with a recorded decision (on this issue or in a doc/ record linked from it): the chosen shape, the alternatives rejected and why, and the invariants implementation must hold. If the design splits further, file the splits and link them here rather than growing this issue.

Relations

Parent: #5671. Programme: epic #2056. Filed by WS-F (2026-11-04 ID design gap & expansion pass).

CODE-1477

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-j
Session / ID: task 10197
Found via: queue claim
Task: task 10197 (triage for issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794) is assigned to the opencode execution lane — handing off to the opencode claimant, which launches the bound session. This lane did not work it itself.
Expectation: claimant launches the bound opencode session for task 10197; if unbound by lease/park expiry, task 10197 returns to the queue.
Links: issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-o
Session / ID: task 10197
Found via: queue claim
Task: Triage issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794 (id: design: Cloudflare Workers rendezvous/relay component, from issue id: design: ID transport fallback for UDP-denied networks v1 #5671) — assigned to the opencode execution lane again on re-claim (previously handed off at 2026-11-05T12:42Z, claimant had not launched before the park cycled); handed off to the laptop claimant, not worked by this lane. Issue verified OPEN this shift, no hard-stop labels.
Expectation: claimant launches the bound opencode session for task 10197.
Links: issue id: design: ID transport fallback for UDP-denied networks v1 #5671 (parent)

🤖 Agent note · handed off / parked

Agent: queue worker (repo-worker-code), lane code-l
Session / ID: queue task 10197
Found via: atomic queue claim (lane code-l); execution-lane assignment returned opencode, so per runbook §1b this task is handed off to the laptop opencode claimant — not worked directly by this lane.
Task: triage id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794 — id: design: Cloudflare Workers rendezvous/relay component (from id: design: ID transport fallback for UDP-denied networks v1 #5671)
Revalidation (fresh, 2026-11-05T14:05:38Z, via developing.today GitHub App token): issue OPEN, no hard-stop labels (state/labels: OPEN task/triage,status/parked,queue/parked,app/id,work/assigned).
Action: task 10197 parked as handed off; the claimant launches the bound opencode session to do the work.

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-j
Session / ID: task 10197
Found via: queue claim
Task: Triage of issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794 is assigned to the opencode execution lane; handing off to the opencode claimant, which launches a bound session for task 10197.
Expectation: claimant session triages issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794 per its packet (fix path scoped, or closed with evidence if already handled/superseded).
Links: task 10197 · issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794

agent-note:v1
event: done
task: 10197 (repo-health-code-pilot; worker repo-worker-code; OpenChamber scheduled lane aea12c82-c5af-4e5a-9b66-f8e360f87177)
at: 2026-11-05T15:02:32Z
result: triaged as a still-live design item. Follow-up decision-record task 10586 is queued; #5794 remains OPEN. Active claim labels removed. No source changes; no code tests applicable.

🤖 Agent note · picked up

Agent: queue worker (repo-worker-code), lane code-g
Session / ID: task 10586
Found via: queue claim (follow-up enqueued by triage task 10197)
Task: decision-record-only design for issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794 — execution lane direct, worked by this lane. Issue revalidated OPEN, no hard-stop labels; parent id: design: ID transport fallback for UDP-denied networks v1 #5671 OPEN.
Action so far: decision record written on branch queue/10586-5794-workers-rendezvous-relay (commit 384a656), PR to follow. Platform limits verified 2026-11-05 against Cloudflare's primary docs.

doc: fix Codex findings on #5794 record - iroh relay vs QUIC endpoint…

Merge pull request #6260 from developing-today/queue/10586-5794-worke…

🤖 Agent note · done

Agent: queue worker (repo-worker-code), lane code-g
Session / ID: task 10586
Result: decision record for issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794 written and merged — PR doc: decision record for Cloudflare Workers rendezvous/relay component (#5794) #6260, merge commit e62f040, file doc/2026-11-05T15-10-00Z_design_cloudflare_workers_rendezvous_relay.md on main. Issue id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794 closed by the PR.
Record: two narrow roles (signed HTTPS rendezvous; bounded WebSocket pairing relay, one DO per pair), self-host parity contract, abuse/auth/metadata invariants, explicit distinction from P7.2 pkarr lookup, no change to parent id: design: ID transport fallback for UDP-denied networks v1 #5671. Platform limits verified 2026-11-05 against Cloudflare primary docs.
Codex gate: 3 findings across 3 review rounds, all fixed in the PR and replied to on their threads (iroh relay vs QUIC endpoint; DO WebSocket limit corrected to 32 MiB; WebSocket-capable egress distinguished from HTTPS reachability). Final Codex round completed with no new findings.
Tests: none — decision-record-only per task 10586 scope; verification was citation + parent-consistency, per the record's oracle section.

Navigation Menu

Repository navigation

id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794

Summary

What this design must settle

Context from the parent

Decision record expected

Relations

7 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

id: design: Cloudflare Workers rendezvous/relay component (from #5671) #5794

Description

Summary

What this design must settle

Context from the parent

Decision record expected

Relations

Activity

developing-today commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

developing-today commented on Nov 5, 2026

developing-today commented on Nov 5, 2026

7 remaining items

dezren39 commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions