Repository navigation
id(comms): operator block list by public key, with one-button block in the web UI (P0 of #2032) #2245
Description
From the #2032 investigation (record). This is the control an operator actually reaches for during an incident.
Problem
There is no block list of any kind in pkgs/id — grep -i 'block|ban|deny' over peers, connectivity and petname returns nothing — and ServerConfig (server_config/mod.rs:58-70) has no key that could hold one.
Work
- Persisted
blockstable in the per-node store:{kind: peer_key | ip | topic_tag, value, added_at, reason, expires_at};expires_at = nullis the permanent block the issue asks for. - Public key (endpoint ID): refuse new sessions, refuse to serve blobs, drop gossip subscriptions, filter their objects out of views. Blocks change serving/subscribing/rendering — they must not reject already-signed objects, or the graph diverges between nodes (see id: investigate: trust/visibility model — servers accept all signed objects; views count only allowed writers #2030).
- Web UI: Block / Mute on each peer row, a Blocks page with unblock, and a one-click action that writes the row.
- IP and topic/tag kinds: IP enforced at the listener only (best-effort; a relayed peer has no visible IP), topic/tag composed with the existing
PullPolicy.
Done when
An operator can block a peer from the peer list in one click, see it in the blocks page, and the peer's live frames and served objects stop without any signed object being discarded.
Metadata
Metadata
Assignees
Labels
Package/app: id (pkgs/ or apps/ in this repo)Queue task is parked (waiting on CI, time, or an event)Has a queued task in the Supabase agent queueFiled by the new-issue-creator jobNot yet triaged; needs a first lookDeliberately paused with a recorded resume conditionQueue packet kind: verify, reproduce, and route this item
Activity
developing-today commentedon Oct 29, 2026
CODE-1112
dezren39 commentedon Nov 1, 2026
🤖 Agent note · picked up
app/id, no hard-stop labels; design record is PR design(id): #2033 abuse-control primitives v1 #3834 (open, doc/2026-11-01_design_id2033.md).dezren39 commentedon Nov 1, 2026
🤖 Agent note · done (triage)
Claim-by-claim verdict (fresh at main
5b2eca7a1b5cd6adb84b7b319935118fa76ea32b)pkgs/id" — CONFIRMED. Grep for block-list/blocked-peer machinery overpkgs/id/srcreturns nothing;block|ban|denyreturns nothing inpetname.rsorconnectivity.rs. Nothing can refuse a peer today.ServerConfighas no key that could hold one — CONFIRMED.pkgs/id/src/server_config/mod.rs:58-67:ServerConfig { users, groups, create, policy, names, aliases }— no block/abuse field. (Design id: design: abuse-control primitives v1 for ID comms #2033's[abuse]config wiring is id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247's P1 work, not this issue's.)Databaseinpkgs/id/src/event_store/mod.rs(imports at :56-57;TableDefinitionconstantsevents/hashes/chainsat :86-91). Ablockstable is a newTableDefinitionin the same style — no new storage system needed. (store.rsis blob/keypair storage, not the node record store.)pull_policy.rs:1-19:PullPolicyis local serving policy; noteid servedoes not load it from config yet — that wiring gap is id(comms): budgets — app-wide, per-IP, per-ID, and per-counterparty overrides (P1 of #2032) #2247's, and Phase 3 must compose withPullPolicyas the issue says, not invent a parallel path); blob serving has its own gate (blob_gate, referenced inpull_policy.rsdocs); gossip subscriptions live in the discovery/gossip layer (discovery.rs).pkgs/id/src/web/routes.rs:265(/peers),:274(/api/peers),:379-399(peers_handler→render_peers) — peer rows are rendered server-side, so Block/Mute actions and a Blocks page attach to an existing page, not a new app.Route (design #2033 P0-C, split for the 45-minute packet timebox)
Design #2033 maps this issue to its P0-C row ("may merge independently from P0-B; depends only on the rule model") and resolves the semantics: endpoint ID for transport admission, author identity for view muting, rules node-local and never federated,
expires_at = nullpermanent. Phased on the standard fix key (one live fix packet per issue; later phases chained on completion, the #3448/#805 pattern):repo-health:v1:fix:developing-today/code:issue:2245): typed rule model{kind: peer_key | ip | topic_tag, value, added_at, reason, expires_at}persisted as a redb table in the event store;peer_keyenforcement (refuse new sessions, refuse blob serving, drop gossip subscriptions, filter its objects from local views); internal rule add/list/remove for the UI; tests incl. the no-ingest-rejection invariant, restart persistence, expiry.PullPolicy.Done-when mapping: the issue's "operator can block a peer from the peer list in one click, see it in the blocks page, and the peer's live frames and served objects stop without any signed object being discarded" is met at the end of Phase 2 (one-click + page) with Phase 1's enforcement underneath; Phase 3 completes the issue's remaining Work items.
Questions for Drew
None. Design #2033 states this explicitly for the whole primitive set ("no owner preference is needed to start implementation"), and nothing in #2245's scope raises a new one: permanence default, kind set, and the endpoint/author split are all already decided in the issue + design.
dezren39 commentedon Nov 1, 2026
agent-note:v1
event: picked-up
task: 5848 (repo-health-code-pilot, openchamber scheduled lane)
state: claimed
next: revalidate issue #2245 and design/PR #2033/#3834, then inspect current code and create the task worktree if the scope is still available.
158 remaining items
dezren39 commentedon Nov 4, 2026
agent-note:v1
state: parked
queue: repo-health-code-pilot
task: 8517 (small_fix, worker repo-worker-code, lane ec118cad-0fd3-4652-91c4-27432f2f2efd)
by: openchamber-scheduled-lane
at: 2026-11-04T22:06:06.338Z
Parked for 20 minutes; queue ready time is 2026-11-04T22:24:58Z. This task's execution_lane is opencode, and this scheduled lane is not the bound opencode claimant; no implementation changes were made. Fresh state: #2245 OPEN with no hard-stop labels; PRs #3834, #4874 and #4972 MERGED; open PR search for #2245 returned none. Claim labels have been returned to the parked state.
resume: bound opencode claimant launches task 8517, revalidates issue/PR ownership, then inspects/resumes the checkpointed branch queue/8517-2245-operator-block-list and worktree /home/user/git/fleet/8517; honor the docs-first requirement in pkgs/id/AGENTS.md.
dezren39 commentedon Nov 4, 2026
🤖 Agent note · picked up
dezren39 commentedon Nov 4, 2026
🤖 Agent note · parked
dezren39 commentedon Nov 5, 2026
🤖 Agent note · handed off