Distillation

Date: Sep 17, 2026

• 🔴 (09:24) User directed that local execution ownership be replaced with durable multi-node ownership when clustered.
• 🟡 (09:24) The session orchestration file imports SessionExecutionTable and SessionRecoveryTable from ../sql and documents durable continuation recovery as a separate future slice requiring an explicit retry policy.
• 🟡 (09:24) The session orchestration design keeps provider-turn execution as orchestration over smaller collaborators rather than rebuilding the legacy implementation; each recorded local call starts eagerly, and all settlements are awaited before continuation.
• 🟡 (09:24) Session execution ownership checks include both SessionExecutionTable.owner_id and claim.ownerID; provider requests carry the affinity header "x-session-affinity": session.id.
• 🟡 (09:24) Provider/tool orchestration uses concurrency: "unbounded", captures a starting snapshot through snapshots.capture(), executes the provider stream through restore(providerStream).pipe(Effect.exit), publishes an overflowFailure when present, and calls publisher.failUnsettledTools("Provider did not return a tool result", true) when the provider leaves tools unsettled.
• 🟡 (09:24) Turn execution supports overflow compaction through runAfterOverflowCompaction(...) and runTurnAttempt(...); execution is skipped when !recovering && !input.force && !hasSteer && !hasQueue, while continuation processing loops with while (needsContinuation).
• 🟡 (09:24) The session input lifecycle module imports SessionSchema from ./schema, exposes admit via Effect.fn("SessionInput.admit"), and retrieves stored inputs from SessionInputTable with find(db, id).
• 🟡 (09:24) admit rejects an input already used as a recovery input by terminating with Effect.die(new LifecycleConflict({ id: input.id })); the same isRecoveryInput(db, input.id) conflict guard also appears in another input lifecycle path.
• 🟡 (09:24) Input admission persists fields including requestExecution and timeCreated, and returns { admitted: stored, shouldWake }; wake evaluation treats row.wakePending as immediately true.
• 🟡 (09:24) Recovery/input projection validation joins SessionRecoveryTable with SessionInputTable, checks recovery identity fields such as session_id and continuation_message_id, and can report "Invalid recovery projection identity".
• 🟡 (09:24) Input identity comparison requires matching sessionID and exact creation time using DateTime.toEpochMillis(input.timeCreated) === DateTime.toEpochMillis(expected.timeCreated).
• 🟡 (09:24) The input module projects SessionEvent.Prompted, supports session-scoped queries using SessionInputTable.session_id, and associates recovery continuations through SessionRecoveryTable.continuation_message_id = SessionInputTable.id.