performance: Make sure all alarms are being set with allowUnconfirmed…

.changeset/quiet-starfishes-start.md

@@ -0,0 +1,9 @@
+---
+"@cloudflare/containers": minor
+---
+
+Defer start-path storage and alarm setup until after the container start call.
+
+`onStart()` no longer runs under `blockConcurrencyWhile()`. Previously, `start()` and `startAndWaitForPorts()` queued incoming requests until `onStart()` completed. Now, awaits inside user-supplied `onStart()` handlers can yield the input gate, so other requests may be served before `onStart()` completes.
+
+Runtime outbound configuration set with methods like `setOutboundByHost()`, `setOutboundHandler()`, `setAllowedHosts()`, and `setDeniedHosts()` is no longer persisted to Durable Object storage or restored after Durable Object hydration/container restart. New container starts use the class's static outbound configuration defaults until runtime configuration is set again.

.github/workflows/bonk.yml

@@ -36,6 +36,8 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CF_AI_GATEWAY_TOKEN }}
         with:
           model: 'cloudflare-ai-gateway/anthropic/claude-opus-4-7'
+          # Creds are broken without pinning opencode.
+          opencode_version: "1.17.7"
           mentions: '/bonk,@ask-bonk'
           permissions: write
           # token_permissions defaults to WRITE (i.e. Bonk can push commits).

.github/workflows/new-pr-review.yml

@@ -51,6 +51,8 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CF_AI_GATEWAY_TOKEN }}
         with:
           model: 'cloudflare-ai-gateway/anthropic/claude-opus-4-7'
+          # Creds are broken without pinning opencode.
+          opencode_version: "1.17.7"
           forks: 'false'
           permissions: write
           # The auto-reviewer must never push to PR branches. The prompt

docs/egress.md

@@ -188,7 +188,13 @@ MyContainer.outboundHandlers = {
 ## Runtime methods
 
 These methods modify the outbound configuration of a running container
-instance. Changes are persisted across Durable Object restarts.
+instance. Per-instance runtime egress configuration is not persisted by the
+`Container` class. Once configured, it remains active for the current running
+container and will not be lost until that container exits.
+
+If you need runtime egress configuration to survive a container exit, persist
+your desired configuration in your own storage and reapply it with the
+`onStart()` hook or in the constructor.
 
 | Method                                         | Description                                                  |
 | ---------------------------------------------- | ------------------------------------------------------------ |