Distillation

Date: Sep 16, 2026

• 🔴 (18:21) User stated ripgrep catch-all find results must never include git metadata.
• 🔴 (18:21) User stated session execution must never start a second owner while the existing lease is live.
• 🔴 (18:21) User stated session execution must never overwrite an expired lease.
• 🔴 (18:21) User stated session execution must never re-enter its own uncertain live lease.
• 🔴 (18:21) User stated a heartbeat must never revive an expired execution claim.
• 🟡 (18:20) Generated SDK event definitions in /tmp/opencode/session-recovery-v10-review/packages/sdk/js/src/v2/gen/types.gen.ts include session.next.prompt.admitted with optional requestExecution?: boolean; session.next.prompt.execution_requested with timestamp, sessionID, and messageID; and session.next.step.recovered with timestamp, sessionID, executionID, optional assistantMessageID, and phase "ready" | "unknown" | "continue".
• 🟡 (18:20) /tmp/opencode/session-recovery-v10-review/packages/sdk/openapi.json contains generated definitions for requestExecution, session.next.prompt.execution_requested, and session.next.step.recovered, including .1 variants of the latter two event types.
• 🟡 (18:21) /tmp/opencode/session-recovery-v10-review/packages/core/src/event.ts defines PublishOptions.commit?: (seq: number) => Effect.Effect<void> as a local operational projection committed atomically with a new durable event and not replayed or serialized; supplying a commit hook for a non-durable event fails with InvalidDurableEventError message "Local commit hooks require a durable event".
• 🟡 (18:21) Durable event processing in /tmp/opencode/session-recovery-v10-review/packages/core/src/event.ts invokes the durable projector and then commit(seq) within commitDurableEvent; publication occurs only after a committed event is returned. Replay divergence reports Replay diverged at aggregate ${aggregateID} sequence ${input.seq}.
• 🟡 (18:21) /tmp/opencode/session-recovery-v10-review/packages/core/test/ripgrep.test.ts has tests for: 1. keeping ignored files out of catch-all find results, 2. never including git metadata, 3. not splitting surrogate pairs in oversized line previews.
• 🟡 (18:21) /tmp/opencode/session-recovery-v10-review/packages/core/test/session-run-coordinator.test.ts covers: joining concurrent resumes for one key; joining a wake-started execution without forcing a successor; starting execution when woken while idle; snapshotting only active executions; cleaning active executions after failure, defect, or scope closure; coalescing wakes during active execution; running again when woken during the follow-up; doing nothing when interrupted while idle; interrupting active execution and clearing its pending wake; running a wake or resume registered during interruption cleanup; finalizing interruption when cleanup dies; and starting one follow-up when a wake races with failure.
• 🟡 (18:21) Session execution tests cover clearing a claim after a successful drain or explicit interruption; refusing a second owner during a live lease; refusing to overwrite an expired lease; refusing to re-enter the same owner’s uncertain live lease; refusing to revive an expired claim on heartbeat; and failing cancellation when cleanup loses execution ownership. The heartbeat test explicitly expires the row with db.update(SessionExecutionTable).set({ expires_at: 0 }).run() and advances TestClock by "40 seconds".
• 🟡 (18:22) /tmp/opencode/session-recovery-v10-review/packages/core/test/session-projector.test.ts tests that recovery continuation is recorded without forging an assistant identity and that a quarantined recovery continuation is never promoted as an ordinary steer; invalid cases use recovery_error: "Invalid recovery continuation input".
• 🟡 (18:22) /tmp/opencode/session-recovery-v10-review/packages/core/test/session-prompt.test.ts includes the test "delegates execution continuation through SessionExecution".
• 🟡 (18:22) /tmp/opencode/session-recovery-v10-review/packages/core/test/config/config.test.ts uses compaction configuration { auto: true, tail_turns: 3, preserve_recent_tokens: 2000, reserved: 10000 }.