You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
id: implement hosted Worker API + per-user DO provisioning and metering (from #2046/#2852 slice 3) #3811
Child implementation packet of #2852, gated by the settled synthesis in #2046. Implement the first hosted data plane from #2044/#2045 and #2258 spec §5.
Scope: one Worker HTTPS/WebSocket front door; lazy per-user Durable Object with SQLite; account-to-DO lookup by stable binding_id (not email and not a rebindable key); R2 for content-addressed blobs with references in SQLite; schema bootstrap, metering, ceilings, and read-only + export-at-cap behavior. Use the binding/account records from slice 1. Reuse the HTTP/WS application seam; do not try to run Iroh QUIC inside Workers.
Gate: honor #2283's jurisdiction-aware routing design before choosing namespace/bucket bindings; if its design is still open, preserve an explicit jurisdiction seam and park before deployment configuration. Only hibernating WebSockets; no always-on per-user process/container.
Acceptance: local Worker/DO tests prove lazy creation, user isolation, R2 indirection, metering/cap behavior, and fail-closed routing; PR references this issue and #2852.
Verdict: the requested data plane is still unimplemented, but the old packet was too broad for small_fix and its blockers are stale. The prerequisites have moved: #2283 is CLOSED and design PR #3843 MERGED; #3808/#4854 and #3809/#4885 are MERGED; the #2046 ruling settled the parameters. pkgs/id/src/hosted_binding.rs now supplies the binding contract. Main has no production per-user hosted Worker/UserDO data plane. pkgs/id/worker-poc / PR #2848 is a world/Plaza isolate semantics PoC, not this per-user store.
Split / next action: filed #5199 as the first bounded local-only implementation step and queued task 8897 (repo-health-code-pilot). It covers the Worker/UserDO foundation, stable binding_id, restricted jurisdiction routing, lazy versioned SQLite bootstrap, local tests, and reconciliation of the stale google:<sub> example in the jurisdiction design doc. R2 blob/reference accounting and metering/cap behavior remain later ordered steps under this umbrella; do not launch them in parallel with the base. Production deployment/bindings remain out of scope: #2285 is still OPEN with user/escalated (Drew authorization and deployed-account/vendor evidence absent), and #3403 remains blocked. No production residency claim is made. The signed-object sync bridge remains #3818.
No code or tests were changed in this triage. #3811 stays open as the umbrella until its implementation steps land.
Activity
developing-today commentedon Nov 1, 2026
CODE-1547
dezren39 commentedon Nov 1, 2026
🤖 Agent note · handed off
dezren39 commentedon Nov 2, 2026
🤖 Agent note · picked up
33 remaining items
dezren39 commentedon Nov 3, 2026
🤖 Agent note · handed off
opencodedezren39 commentedon Nov 3, 2026
agent-note:v1
state: picked-up
dezren39 commentedon Nov 3, 2026
agent-note:v1
state: triaged — live, split for implementation
9380bf6d7cfff6431b5484bb0bc5b917632209cb. id: implement hosted Worker API + per-user DO provisioning and metering (from #2046/#2852 slice 3) #3811 remains OPEN; fresh PR search found no matching PR. Prior implementation task 5817 is cancelled; no active fix task was found.Verdict: the requested data plane is still unimplemented, but the old packet was too broad for
small_fixand its blockers are stale. The prerequisites have moved: #2283 is CLOSED and design PR #3843 MERGED; #3808/#4854 and #3809/#4885 are MERGED; the #2046 ruling settled the parameters.pkgs/id/src/hosted_binding.rsnow supplies the binding contract. Main has no production per-user hosted Worker/UserDO data plane.pkgs/id/worker-poc/ PR #2848 is a world/Plaza isolate semantics PoC, not this per-user store.Split / next action: filed #5199 as the first bounded local-only implementation step and queued task 8897 (repo-health-code-pilot). It covers the Worker/UserDO foundation, stable
binding_id, restricted jurisdiction routing, lazy versioned SQLite bootstrap, local tests, and reconciliation of the stalegoogle:<sub>example in the jurisdiction design doc. R2 blob/reference accounting and metering/cap behavior remain later ordered steps under this umbrella; do not launch them in parallel with the base. Production deployment/bindings remain out of scope: #2285 is still OPEN withuser/escalated(Drew authorization and deployed-account/vendor evidence absent), and #3403 remains blocked. No production residency claim is made. The signed-object sync bridge remains #3818.No code or tests were changed in this triage. #3811 stays open as the umbrella until its implementation steps land.
feat(id): hosted data-plane scaffold — binding-backed per-user Durabl…
dezren39 commentedon Nov 8, 2026
🤖 Agent note · blocked (packet_defect)
small_fixpacket and the issue is effort/l. A staged handoff needs explicit child issues/sequence rather than an overloaded small-fix task.dezren39 commentedon Nov 8, 2026
Partial verification — staying open (2026-11-07 done-task-only audit, tracking: #7016).
Queue task(s) [6882] were marked done, and some work did land:
No merged change closes this issue's full scope, so the done status is not treated as completion. Remainder re-queued as triage task 11675.