id: design: backup, recovery & exit for serverless storage (from #5681)

Summary

Follow-on design ticket from #5681 — its decomposition sketch names this as a separate design, and the parent's acceptance requires these tickets to be filed and linked. Filed in the 2026-11-04 gap pass (WS-F) so the design work exists and can be prioritised on its own merits; implementation timing is a separate decision, possibly months out.

What this design must settle

Point-in-time recovery, open-format export, and leaving Cloudflare/Turso — the exit is designed, not discovered.

Context from the parent

The parent design decides D1 vs Turso vs both for the serverless (Workers) edition and fixes the storage contract each backend must satisfy. The parent issue carries the surrounding decisions this ticket must not re-decide; where this ticket's answer would change a parent decision, record that explicitly rather than silently forking it.

Decision record expected

Close this design with a recorded decision (on this issue or in a doc/ record linked from it): the chosen shape, the alternatives rejected and why, and the invariants implementation must hold. If the design splits further, file the splits and link them here rather than growing this issue.

Relations

Parent: #5681. Programme: epic #2056. Filed by WS-F (2026-11-04 ID design gap & expansion pass).

CODE-1552

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-j
Session / ID: task 10271
Found via: queue claim
Task: task 10271 (triage for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869) is assigned to the opencode execution lane — handing off to the opencode claimant, which launches the bound session. This lane did not work it itself.
Expectation: claimant launches the bound opencode session for task 10271; if unbound by lease/park expiry, task 10271 returns to the queue.
Links: issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869

Task 10271 (lane code-s) claimed and assigned to the opencode execution lane. Handed off to the opencode claimant — the bound session drives this task to its terminal state. Parked by this lane per the handoff protocol.

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-y
Session / ID: task 10271
Found via: queue claim
Task: Triage of issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 handed off to the opencode execution lane (assigned_lane=opencode, session not yet bound). Labels already carried the parked set from the previous handoff; verified fresh this claim.
Expectation: The laptop claimant launches the bound opencode session for task 10271, which drives it to its terminal state.
Links: issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869

🤖 Agent note · state: handed off

Agent: queue worker (repo-worker-code), lane code-i
Session / ID: task 10271
Found via: queue claim
Task: triage of issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 (id: design: backup, recovery & exit for serverless storage (from design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681)) is assigned to the opencode execution lane — handed off to the opencode claimant, which launches a bound session to drive task 10271 to its terminal state.
Expectation: claimant launches the bound opencode session during the park window; if unbound at lease expiry, task 10271 returns to the queue.
Links: issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869

🤖 Agent note · state: handed off

Agent: queue worker (repo-worker-code), lane code-o
Session / ID: task 10271
Found via: queue claim
Task: triage of issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 is assigned to the opencode execution lane — handed off to the opencode claimant, which launches a bound session to drive task 10271 to its terminal state.
Expectation: claimant launches the bound opencode session during the park window; if unbound at lease expiry, task 10271 returns to the queue.
Links: issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869

🤖 Agent note · parked

Agent: repo queue worker, lane code-b (repo-worker-code)
Session / ID: cron repo-queue-worker-shift-b run 2026-11-08 08:43 CST; task 13273
Found via: claimed task 13273 this shift (direct lane); resumed from the previous claim's verified gate checkpoint per runbook §10.4
Task: task 13273 for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 (design record: backup, recovery & exit for serverless storage). Fresh re-verification this shift: parent issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 is still OPEN with no decision recorded (latest comments are claimant handoffs only, newest 2026-11-08T14:34Z), and siblings id: design: serverless storage contract (from #5681) #5863 (storage contract) and id: design: backend choice & migration (from #5681) #5867 (backend choice & migration) are both still OPEN. The id: design: backup, recovery & exit for serverless storage (from #5681) #5869 record must compose with id: design: serverless storage contract (from #5681) #5863's contract and the backend choice owned by design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681/id: design: backend choice & migration (from #5681) #5867, so writing it now would silently fork those decisions. Parking again with the same resume condition.
Expectation: resume task 13273 when design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 is decided and id: design: serverless storage contract (from #5681) #5863/id: design: backend choice & migration (from #5681) #5867 are closed; then author doc/2026-11-XX_design_id5869.md per the packet acceptance.
Links: task 13273 · issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 · issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 · issue id: design: serverless storage contract (from #5681) #5863 · issue id: design: backend choice & migration (from #5681) #5867

🤖 Agent note · parked

Agent: queue worker (repo-worker-code), lane code-o
Session / ID: task 13273
Found via: queue claim
Task: Task 13273 for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 (design record: backup, recovery & exit for serverless storage). Re-verified fresh 2026-11-08T15:14Z: parent issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 is still OPEN and undecided, and sibling design issues id: design: serverless storage contract (from #5681) #5863 (storage contract) and id: design: backend choice & migration (from #5681) #5867 (backend choice & migration) are still OPEN. The record for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 composes with id: design: serverless storage contract (from #5681) #5863's contract and id: design: backend choice & migration (from #5681) #5867's backend decision, so authoring it now would fork decisions those records own.
Expectation: Parked; resume when issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 is decided and issues id: design: serverless storage contract (from #5681) #5863 / id: design: backend choice & migration (from #5681) #5867 close.

🤖 Agent note · parked

Agent: queue worker (repo-worker-code), lane code-b
Session / ID: task 13273
Found via: queue claim
Task: Revalidated issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 design gate for task 13273: parent issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 still open/undecided, siblings issue id: design: serverless storage contract (from #5681) #5863 and issue id: design: backend choice & migration (from #5681) #5867 still open (fresh REST check 2026-11-08T15:44Z). No hard-stop labels on issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869.
Expectation: Park task 13273 until gate opens; resume when issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 is decided and issue id: design: serverless storage contract (from #5681) #5863 / issue id: design: backend choice & migration (from #5681) #5867 close, then author doc/2026-11-XX_design_id5869.md
Links: issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869, issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681, issue id: design: serverless storage contract (from #5681) #5863, issue id: design: backend choice & migration (from #5681) #5867

🤖 Agent note · parked

Agent: queue worker (repo-worker-code), lane code-x
Session / ID: task 13273
Found via: queue claim (direct execution lane, resume of verified stage)
Task: Design record for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 (backup, recovery & exit for serverless storage). Gate re-checked fresh this claim: parent issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 is still OPEN and undecided (no decision comment; its triage task 12251 is still cycling through the opencode claimant), and siblings issue id: design: serverless storage contract (from #5681) #5863 and issue id: design: backend choice & migration (from #5681) #5867 are still OPEN. The decision record for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 cannot be authored until the parent backend decision and the storage contract exist.
Expectation: resume when issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 is decided and issues id: design: serverless storage contract (from #5681) #5863 / id: design: backend choice & migration (from #5681) #5867 are closed, then author the record per the packet acceptance.
Links: issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869, issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681, issue id: design: serverless storage contract (from #5681) #5863, issue id: design: backend choice & migration (from #5681) #5867

🤖 Agent note · parked

Agent: repo queue worker, lane code-k (repo-worker-code)
Session / ID: cron repo-queue-worker-shift-k run 2026-11-08 09:53 CST; task 13273
Found via: queue claim (direct execution lane; resumed from previous claims' verified gate checkpoint per runbook §10.4)
Task: task 13273 for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 (small_fix: design decision record on backup, recovery & exit for serverless storage). Gate re-verified fresh this shift (2026-11-08T16:29Z): issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 OPEN, no hard-stop labels; parent issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 still OPEN and undecided, and siblings issue id: design: serverless storage contract (from #5681) #5863 (storage contract) and issue id: design: backend choice & migration (from #5681) #5867 (backend choice & migration) still OPEN. Authoring the id: design: backup, recovery & exit for serverless storage (from #5681) #5869 PITR/export/exit record now would fork decisions those records own.
Expectation: park task 13273 until the gate opens. Resume when issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 records its storage decision and issues id: design: serverless storage contract (from #5681) #5863 / id: design: backend choice & migration (from #5681) #5867 settle, then author the decision record (convention: doc/2026-11-XX_design_id5869.md, cf. sibling id: design: post-to-board flow & post semantics (from #5680) #5856's record).
Links: task 13273 · issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 · issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681 · issue id: design: serverless storage contract (from #5681) #5863 · issue id: design: backend choice & migration (from #5681) #5867

🤖 Agent note · picked up

Agent: queue worker (repo-worker-code), lane code-e
Session / ID: task 13273
Found via: queue claim
Task: Working task 13273 directly (execution lane: direct): writing the decision record for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 — backup, recovery & exit for serverless storage — as doc/2026-11-08_design_id5869.md, following the sibling convention of PR doc: post-to-board flow & post semantics decision record (#5856) #7605 for issue id: design: post-to-board flow & post semantics (from #5680) #5856. Issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 re-verified OPEN, no held / user/owned / do-not-merge / do-not-auto-edit labels.
Expectation: effort s/m; done = record landed via PR, linked from issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869, issue closed by the landed document.
Links: issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869, parent issue design(id): serverless edition storage — D1 vs Turso vs both for id on Cloudflare Workers #5681

Merge pull request #7774 from developing-today/queue/13273-5869-backu…

🤖 Agent note · done

Agent: queue worker (repo-worker-code), lane code-e
Session / ID: task 13273
Found via: queue claim
Task: Decision record for issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 landed: doc/2026-11-08_design_id5869.md via PR doc: backup, recovery & exit decision record for serverless storage (#5869) #7774, merged at 5ce32a4; doc verified present on main and issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869 closed by the merge. The record settles PITR (journal replay, retention, contract hooks), the open-format export bundle and completeness guarantee, the provider-exit runbook with teardown as point of no return, restore/drill cadence, rejected alternatives, the boundary against task id: design: backend choice & migration (from #5681) #5867's issue id: design: backend choice & migration (from #5681) #5867 work, and invariants E1–E7. No Codex findings existed on PR doc: backup, recovery & exit decision record for serverless storage (#5869) #7774 at merge time (no reviews/comments).
Expectation: done — implementation issues, when filed, cite the record's invariants/sections.
Links: PR doc: backup, recovery & exit decision record for serverless storage (#5869) #7774, issue id: design: backup, recovery & exit for serverless storage (from #5681) #5869

Navigation Menu

Repository navigation

id: design: backup, recovery & exit for serverless storage (from #5681) #5869

Summary

What this design must settle

Context from the parent

Decision record expected

Relations

182 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

id: design: backup, recovery & exit for serverless storage (from #5681) #5869

Description

Summary

What this design must settle

Context from the parent

Decision record expected

Relations

Activity

developing-today commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

developing-today commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

dezren39 commented on Nov 5, 2026

182 remaining items

dezren39 commented on Nov 8, 2026

dezren39 commented on Nov 8, 2026

developing-today commented on Nov 8, 2026

dezren39 commented on Nov 8, 2026

dezren39 commented on Nov 8, 2026

developing-today commented on Nov 8, 2026

developing-today commented on Nov 8, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions