id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889

Activity

1. dezren39

   added

   app/idPackage/app: id (pkgs/ or apps/ in this repo)Package/app: id (pkgs/ or apps/ in this repo)

   on Nov 5, 2026
2. developing-today commented on Nov 5, 2026

   

   developing-todayBot

   on Nov 5, 2026 – with developing.today

   Contributor

   More actions

   CODE-1572
3. dezren39

   added

   queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

   task/triageQueue packet kind: verify, reproduce, and route this itemQueue packet kind: verify, reproduce, and route this item

   on Nov 5, 2026
4. github-actions

   assigned

   dezren39

   on Nov 5, 2026
5. developing-today

   added

   queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

   status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

   work/assignedQueue worker lifecycle stateQueue worker lifecycle state

   and removed

   queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

   on Nov 5, 2026
6. developing-today commented on Nov 5, 2026

   

   developing-todayBot

   on Nov 5, 2026 – with developing.today

   Contributor

   More actions

   🤖 Agent note · handed off / parked

   • Agent: queue worker (repo-worker-code), lane code-l
   • Session / ID: queue task 10291
   • Found via: atomic queue claim (lane code-l); execution-lane assignment returned opencode, so per runbook §1b this task is handed off to the laptop opencode claimant — not worked directly by this lane.
   • Task: triage id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889 — id: design: pseudo-login identities & scoped do-as delegation (variant d) (from design(id): identity, login & delegation — simplicity-first key custody, security-code recovery, and pseudo-login identities #5684)
   • Revalidation (fresh, 2026-11-05T13:59:23Z, via developing.today GitHub App token): issue OPEN, no hard-stop labels (state/labels: OPEN task/triage,queue/queued,app/id).
   • Action: task 10291 parked as handed off; the claimant launches the bound opencode session to do the work.
7. dezren39 commented on Nov 5, 2026

   

   dezren39

   on Nov 5, 2026

   MemberAuthor

   More actions

   🤖 Agent note · state: handed off

   • Agent: queue worker (repo-worker-code), lane code-i
   • Session / ID: task 10291
   • Found via: queue claim
   • Task: triage of issue id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889 (id: design: pseudo-login identities & scoped do-as delegation (variant d) (from design(id): identity, login & delegation — simplicity-first key custody, security-code recovery, and pseudo-login identities #5684)) is assigned to the opencode execution lane — handed off to the opencode claimant, which launches a bound session to drive task 10291 to its terminal state.
   • Expectation: claimant launches the bound opencode session during the park window; if unbound at lease expiry, task 10291 returns to the queue.
   • Links: issue id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889
8. developing-today

   added

   queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

   status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

   and removed

   status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

   queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

   on Nov 5, 2026
9. 11 remaining items

   Load more
10. developing-today

    added

    queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

    status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    and removed

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

    queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

    on Nov 5, 2026
11. developing-today commented on Nov 5, 2026

    

    developing-todayBot

    on Nov 5, 2026 – with developing.today

    Contributor

    More actions

    🤖 Agent note · handed off

    • Agent: repo queue worker, lane code-h (repo-worker-code)
    • Session / ID: cron repo-queue-worker-shift-h run 2026-11-05; task 10291
    • Found via: claimed task 10291 this shift; execution-lane assignment returned opencode
    • Task: task 10291 for issue id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889 (triage). Fresh check: issue id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889 is OPEN, no hard-stop labels (held / user/owned / do-not-merge / do-not-auto-edit). Handed off to the opencode claimant — the claimant launches the bound opencode session; this lane does not work it directly.
    • Expectation: claimant session drives task 10291 to a terminal state.
    • Links: task 10291 · issue id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889
12. developing-today

    added

    queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

    status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

    and removed

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    on Nov 5, 2026
13. dezren39 commented on Nov 5, 2026

    

    dezren39

    on Nov 5, 2026

    MemberAuthor

    More actions

    Agent note - handed off

    • Agent: opencode claimant (opencode-claimant)
    • Session / ID: queue task 10291; bound session ses_e5e5305f13effeWThE29F75WDR
    • Found via: queue task handoff on the opencode execution lane
    • Task: Triage id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889: id: design: pseudo-login identities & scoped do-as delegation (variant d) (from design(id): identity, login & delegation — simplicity-first key custody, security-code recovery, and pseudo-login identities #5684)
    • Expectation: the bound worker session works task 10291 to a terminal queue state and must not claim another task. It revalidates the issue/PR before acting.
    • Links: id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889
14. dezren39 commented on Nov 5, 2026

    

    dezren39

    on Nov 5, 2026

    Last edited by dezren39

    MemberAuthor

    More actions

    Triage — 2026-11-05 (current main at 50237a7debf6e9114122c593a15a467858d2bf9a)

    • Revalidated this issue as open with no linked PR. The checkout matches origin/main. The pseudo-login-specific identity, login-challenge, and management design is not already present, so keep this ticket open.
    • Relevant primitives do exist: JoinCapability (pkgs/id/src/world/mod.rs:335), delegate_to_friend (pkgs/id/src/world/core.rs:1577-1584), scoped expiry/use bounds (pkgs/id/src/world_session/types.rs:496-499), and effective-scope/revocation checks (pkgs/id/src/world/core.rs:2159-2218). The design should decide how pseudo-login identities and challenge signing compose with these; it should not treat scoped delegation as wholly absent.
    • This remains a design ticket, not a ready code fix. Settle ownership, challenge signing, scope/expiry/revocation, raw-view provenance, alternatives, and implementation invariants in its decision record.
    • Ordering: implementation waits for that decision record. Parent design(id): identity, login & delegation — simplicity-first key custody, security-code recovery, and pseudo-login identities #5684 is open and constrains custody decisions, but its gap-pass comment says follow-on designs are prioritized independently; id: design: pseudo-login identities & scoped do-as delegation (variant d) (from #5684) #5889 need not wait for the parent to close. Record any changed parent decision there explicitly. Existing parked labels remain appropriate pending explicit design prioritization.