Distillation

Date: Sep 14, 2026

• 🟡 (09:09) /home/byk/Code/opencode/specs/v2/todo.md lists remaining Session work: replace the public in-memory @opencode-ai/llm tool loop’s remaining one-turn native-adapter use with a narrow typed dispatcher; batch streamed deltas and add covering context indexes; expose replayable Session event cursors over HTTP and the generated SDK; integrate BackgroundJob with V2 tool execution for background bash jobs and background agent dispatch with durable status observation, completion delivery, and explicit cancellation/continuation semantics; and add durable/clustered interruption, retries, and stale-owner fencing only when those slices become concrete.
• 🟡 (09:09) The deferred durable-continuation-recovery TODO says not to infer from an advisory wake that ambiguous provider work is safe to retry. The first inbox-driven runner intentionally omits outer provider-attempt markers until there is a concrete consumer and complete recovery policy.
• 🟡 (09:09) The planned post-crash continuation-recovery slice must jointly model: 1. promoted input and projected-history state, 2. queued-input promotion and steering assignment, 3. provider-attempt preparation versus provider-dispatch ambiguity, 4. required post-tool continuation across process loss, 5. explicit retry and abandon decisions for unknown outcomes, 6. bounded automatic retry only where provider and tool idempotency make it safe, and 7. retry budget, backoff, visible recovery status, startup discovery, and future clustered ownership fencing.
• 🟡 (09:09) /home/byk/Code/opencode/specs/v2/todo.md says not to introduce an enclosing durable execution identity merely to group continuation-recovery facts, because a process-local Session drain has no durable transcript boundary.
• 🟡 (09:09) Plugin API ideas in /home/byk/Code/opencode/specs/v2/todo.md are: 1. give plugins Immer drafts so bad mutations can be discarded, 2. give plugins a global "opencode" instance, and 3. expose methods such as opencode.session.prompt() and opencode.tool.register({...}) on that instance. The section is labeled Plugin API design - James?.
• 🟡 (09:09) The config-rework TODO proposes another cleanup and simplification pass over configuration, with automatic conversion of old configs to the new format.
• 🟡 (09:09) The auth TODO says a basic auth system exists that can track any kind of authentication, not only providers.
• 🟡 (09:09) The model-database TODO says a basic model service exists that permits dynamic model registration.
• 🟡 (09:09) The provider TODO proposes that providers register as plugins, autoload according to their own logic/configuration, and register models into the model database.
• 🟡 (09:09) The Event - Kit section says the self-contained durable EventV2 core service is implemented and owns sync-versioned persistence, transactional sequencing, pub/sub, replay, and replay-owner claims without relying on the old bus system.
• 🟡 (09:09) Remaining EventV2 slices are: 1. expose the embedded consumer-facing Session cursor API over HTTP and the generated SDK where remote consumers require it, and 2. keep replay-owner claims separate from future clustered Session-execution ownership and stale-runtime fencing.
• 🟡 (09:09) Deferred hardening item: serialize database-migration claiming across processes. Migration application currently uses only an in-process semaphore, so two processes starting against the same SQLite database can race.
• 🟡 (09:09) Deferred hardening item: simplify process-local durable-tail wake lifecycle using Effect RcMap and one shared PubSub.sliding<void>(1) per active aggregate, while retaining SQLite cursor replay and subscribe-before-history semantics.
• 🟡 (09:09) Deferred hardening item: page large durable aggregate replay reads rather than loading every row after a stale cursor into one array.
• 🟡 (09:09) Deferred hardening item: decide whether connected tails need periodic polling as a fallback for cross-process SQLite writers; current advisory wakes are intentionally process-local.
• 🟡 (09:09) Deferred hardening items for external-input handling are to stream-cap websearch body collection before parsing, add a ripgrep execution timeout with bounded line framing, and either materialize or consistently reject unresolved URL and file attachment sources.
• 🟡 (09:09) Deferred OpenAI Responses decision: reconstructed hosted output may replay as a stored item_reference when store !== false; with store: false, the unavailable reference path is intentionally omitted. Stateless hosted-tool continuation behavior remains undecided.
• 🟡 (09:09) Additional deferred compatibility decisions are whether to preserve deprecated @opencode-ai/llm orchestration exports and whether to preserve or alias renamed filesystem SDK generated type names.
• 🟡 (09:09) /home/byk/Code/opencode/specs/v2/todo.md says deferred hardening cleanup should remain visible but should not block functionality slices unless canary work reveals a concrete failure.