Distillation

Date: Sep 17, 2026

• 🟡 (10:01) User supplied packages/core/src/session/recovery.ts for the ongoing read-only review; visible imports include SessionProjector from ./projector and SessionRecoveryTable.
• 🟡 (10:01) packages/core/src/session/recovery.ts defines hasPendingExecutionIntent via Effect.fn("SessionRecovery.hasPendingExecutionIntent").
• 🟡 (10:01) Recovery logic decodes persisted execution phases with Schema.decodeUnknownOption(Phase)(claim.phase).
• 🟡 (10:01) Recovery compares the latest projected message against claim.assistant_message_id and claim.assistant_seq, including a guard that rejects a latest message whose seq exceeds claim.assistant_seq.
• 🟡 (10:01) Malformed-message quarantine logic checks the execution lease using gt(SessionExecutionTable.expires_at, quarantinedAt).
• 🟡 (10:01) Recovery handles decoded assistant messages, clears exact recovery claims with SessionExecutionClaim.clear(db, recoveryClaim), and otherwise renews/updates them with SessionExecutionClaim.update(db, recoveryClaim).
• 🟡 (10:01) Tool-recovery publication identifies calls with callID: tool.id.
• 🟡 (10:01) Recovery selection combines three ordered groups as const pending = [...retriedRecovery, ...freshRecovery, ...recoveryBackfill].
• 🟡 (10:01) Recovery rows are matched using SessionRecoveryTable.execution_id and ordinary continuation inputs are joined through SessionRecoveryTable.continuation_message_id = SessionInputTable.id.
• 🟡 (10:01) Recovery processing logs failures as Effect.logError("Failed to redrive Session recovery", cause) and annotates logs with { sessionID: row.sessionID }.
• 🟡 (10:01) Ordinary recovery work is batch-bounded using .limit(BATCH_SIZE - retriedOrdinary.length).
• 🟡 (10:01) The recovery worker repeats on Schedule.spaced("10 seconds").