Distillation

Date: Sep 16, 2026

• 🔴 (16:11) User requires recovery never to recover a pre-promotion claim when input commits at the recovery boundary.
• 🔴 (16:11) User requires recovery never to promote a recovery superseded before scanner validation.
• 🔴 (16:11) User requires recovery never to promote a quarantined recovery continuation as an ordinary steer.
• 🔴 (16:11) User requires the Context Epoch never to advance after ownership changes.
• 🔴 (16:11) User requires prompt retry never to wake execution when the prompt has already been promoted.
• 🟡 (16:11) Recovery tests also include "rejects a recovered assistant from another Session" and use SessionRecovery.recover(), SessionExecution.Service, SessionExecutionClaim.update(db, stale), SessionInput.admit(db, events, ...), SessionInputTable, SessionTable, and SessionContextEpochTable; visible fixtures include /project, /project/subdir, agent "build", phase "ready", and execution ID "successor-execution".
• 🟡 (16:11) Search found exactly 21 matching tests in /tmp/opencode/session-recovery-v7-check/packages/core/test/session-prompt.test.ts, in order: 1. line 140 "exposes the execution registry"; 2. line 147 "delegates execution continuation through SessionExecution"; 3. line 254 "resumes through a recorded message without appending another prompt"; 4. line 275 "records distinct messages when the ID is omitted"; 5. line 290 "returns the original recorded message when the ID is retried"; 6. line 310 "wakes execution when an exact prompt retry recovers a committed message"; 7. line 330 "never wakes execution when retrying an already promoted prompt"; 8. line 374 "durably records execution intent before advisory wake"; 9. line 408 "replays historical prompt admission without execution intent as admit-only"; 10. line 440 "turns an admit-only exact retry into durable execution intent"; 11. line 489 "rejects reuse of one ID with a different prompt"; 12. line 514 "never arms durable wake for a conflicting execution retry"; 13. line 556 "rejects reuse of one ID with a different delivery mode"; 14. line 642 "reprojects pending inbox input without scheduling execution"; 15. line 668 "returns an exact retry of a legacy projected prompt"; 16. line 689 "returns an exact retry of a legacy projected queued prompt"; 17. line 710 "rejects reuse of one globally unique message ID across sessions"; 18. line 740 "rejects a prompt ID already used by visible Session history"; 19. line 761 "starts execution by default after recording the prompt"; 20. line 775 "starts execution when resume is explicitly true"; 21. line 793 "only records the prompt when resume is false".
• 🟡 (16:11) In /tmp/opencode/session-recovery-v7-check/packages/core/test/session-prompt.test.ts, prompt retry coverage uses Prompt.make(...), resume: false, and resume: true; examples include "Fix the failing tests", "Promote this prompt", "Historical admit-only prompt", and "Resume this exact prompt". Durable intent checks include wake_pending: false, promoted_seq: null, an admitted-message lookup, and exactly 1 event of EventV2.versionedType(SessionEvent.PromptExecutionRequested.type, 1).
• 🟡 (16:11) Prompt concurrency coverage invokes Effect.all([session.prompt(input), session.prompt(input)], { concurrency: "unbounded" }) to test simultaneous retries/admissions of the same input.