id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032)

From the #2032 investigation (record). Blocked by #2244 (counters must exist before a budget can be evaluated).

Problem

The issue's requirement is "configurable budgets — max MB per window across the whole app, per IP, or per ID, and message/MB caps for a SPECIFIC counterparty, not just any counterparty". The last part is the one no existing limiter can express: world chat bounds lines per participant in a world, nothing can give one peer a smaller allowance than everyone else.

Work

Rolling-window byte budgets: app-wide inbound 32 MiB/s / 20 GiB/h, outbound 64 MiB/s / 40 GiB/h; per peer 100 MiB/h burst 8 MiB/min; per IP 250 MiB/h (direct connections only).
Per-counterparty override rows {peer, bytes_per_window, messages_per_window}, consulted before the default bucket — an operator can cap one peer at 1 MiB/day without touching the global budget.
Configuration in id-server-config.toml (server_config/parse.rs), defaults in code so an unchanged config behaves as today.
Budget exhaustion is a budget_exhausted refusal with retry_after_ms (from id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244), not a disconnect.

Done when

An operator can set a per-peer cap in config, observe the budget counters, and a peer exceeding it is refused with a retry value while the rest of the app is unaffected.

Parent: #2056 · Investigation: #2032 · Synthesis: #2033

CODE-1113

agent-note:v1
event: handed_off
task: 5936 (repo-health-code-pilot, openchamber scheduled lane)
state: queued; not_before=2026-11-01T22:30:00Z
next: revalidate #2244/#3882/PR #3960; park if P0-A integration is still open or blocked.
dedupe: repo-health:v1:fix:developing-today/code:issue:2247

agent-note:v1 — picked up — OpenChamber scheduled lane

Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
Session / ID: ses_e5e66cd4547ffeQOz5YvBjamz6; queue task 5936
Found via: atomic queue claim
Next: revalidate the id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 integration prerequisite (id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 / PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960) before any implementation; do not touch Drew-authored PR design(id): #2033 abuse-control primitives v1 #3834.
Resume gate from packet: id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 must be complete; otherwise park for 30 minutes. No files touched.
Links: id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 · id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 · id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 · PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960

agent-note:v1 — parked — OpenChamber scheduled lane

Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
Session / ID: ses_e5e66cd4547ffeQOz5YvBjamz6; queue task 5936
State: Parked for 30 minutes (eligible after 2026-11-01T23:03Z).
Fresh evidence: id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 and id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 remain OPEN; canonical PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960 is still OPEN at 3993ac941e, Drew-authored. CodeRabbit passed, but the prerequisite integration is not merged.
Action: no worktree, code changes, or duplicate PR; did not touch PR design(id): #2033 abuse-control primitives v1 #3834.
Resume when: id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244/id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 integration is complete; revalidate id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 and current main before implementing budgets.
Links: id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 · id(comms): per-peer frame/byte accounting + structured rate-limit refusal (P0 of #2032) #2244 · id(comms): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (phase of #2244) #3882 · PR feat(id): P0-A integration — frame-seam charging, HTTP 429+Retry-After, chat limiter consumer, counter visibility (#3882) #3960

Picked up by lane code-u as task 9172 (small_fix, issue #2247). Execution-lane assignment returned opencode: handed off to the opencode claimant, which launches a bound session for task 9172. Checkpoint stage handed_off recorded. Existing progress on task 9172 references PR #5096 (open, branch queue/8033-4918-abuse-counters) — the bound session owns the next step. Task 9172 is at attempts 29/32; lease until ~2026-11-06T03:27Z.

🤖 Agent note · handed off

Agent: repo queue worker, lane code-u (repo-worker-code)
Session / ID: cron repo-queue-worker-shift-u run 2026-11-05 21:04 CST; task 9172
Found via: queue claim · task 9172
Task: task 9172 for issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 (small_fix). Fresh check: issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 is OPEN, no hard-stop labels (held / user/owned / do-not-merge / do-not-auto-edit). Prior progress references PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 (Drew-authored, OPEN — do not touch or compete). Execution-lane assignment returned opencode — handed off to the opencode claimant, which launches the bound opencode session; this lane does not work it directly.
Expectation: claimant session drives task 9172 to a terminal state. Attempts 30/32 CAP RISK — claimant should bind before lease expiry.
Links: task 9172 · issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247

🤖 Agent note · handed off

Agent: repo queue worker, lane code-d (repo-worker-code)
Session / ID: cron repo-queue-worker-shift-d run 2026-11-05 22:08 CST; task 9172
Found via: claimed task 9172 this shift; execution-lane assignment returned opencode
Task: task 9172 for issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 (small_fix, attempt 31/32). Fresh check via gh: issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 is OPEN, no hard-stop labels (held / user/owned / do-not-merge / do-not-auto-edit). Handed off to the opencode claimant — the claimant launches the bound opencode session; this lane does not work it directly.
Expectation: claimant session drives task 9172 to a terminal state.
Links: task 9172 · issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247

agent-note:v1
event: picked_up
task: 9172 (repo-health-code-pilot, repo-worker-code; openchamber-scheduled-lane 7b47536b-c162-444c-be8a-3a9538cc4cb5)
state: claimed; resuming from prior checkpoint handed_off. Queue checkpoint write timed out twice; revalidating issue #2247 and prior Drew-authored PR #5096 fresh before deciding whether to proceed or park. No branch/worktree started.

agent-note:v1
event: parked
task: 9172 (repo-health-code-pilot, repo-worker-code; openchamber-scheduled-lane 7b47536b-c162-444c-be8a-3a9538cc4cb5)
state: parked until 2026-11-06T05:17:43Z. Fresh checks confirm #2247 OPEN and Drew-authored PR #5096 OPEN; the PR changes pkgs/id/src/commands/serve.rs at the WorldProtocol construction site required by this task. Do not create a competing PR. No branch/worktree/code started. Resume after 30 minutes with fresh checks, and proceed only if #5096 merges/closes or ownership is explicitly released.

🤖 Agent note · handed off

Agent: repo queue worker, lane code-n (repo-worker-code)
Session / ID: cron repo-queue-worker-shift-n run 2026-11-06 02:07 CST; task 9172
Found via: claimed task 9172 this shift; execution-lane assignment returned opencode
Task: task 9172 for issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 (small_fix, attempts 31/32 — AT CAP RISK). Fresh check via gh: issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 is OPEN, no hard-stop labels (held / user/owned / do-not-merge / do-not-auto-edit). PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 re-verified OPEN, Drew-authored — it owns the serve.rs WorldProtocol construction seam; do not touch PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 or open a competing PR. Handed off to the opencode claimant — the claimant launches the bound opencode session; this lane does not work it directly.
Expectation: claimant session drives task 9172 to a terminal state, respecting the PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096 overlap; parked for claimant launch / conflict re-check.
Links: task 9172 · issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 · PR fix(id): surface per-peer frame/byte abuse counters with direction split (#4918) #5096

🤖 Agent note · handed off

Agent: queue worker (repo-worker-code), lane code-e
Session / ID: task 9172
Found via: queue claim
Task: Handed off task 9172 (small_fix) for issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 to the opencode claimant — execution lane assigned opencode. Fresh check: issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247 OPEN, no hard-stop labels.
Expectation: claimant launches the bound opencode session and drives task 9172 to a terminal state
Links: issue id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247

Navigation Menu

Repository navigation

id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247

Problem

Work

Done when

372 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247

Description

Problem

Work

Done when

Activity

developing-today commented on Oct 29, 2026

dezren39 commented on Nov 1, 2026

dezren39 commented on Nov 1, 2026

dezren39 commented on Nov 1, 2026

372 remaining items

developing-today commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

dezren39 commented on Nov 6, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions