Dashboard › opencode › Session 1WhcGbpUVESy
1WhcGbpUVESyGRstyPerform a complete independent read-only security/pentest review of frozen interrupted-session recovery candidate v5. Do not edit files, run builds/tests, start services, or mutate VCS. The required repo-setup skill is unavailable; explicitly note that and read applicable immutable AGENTS.md/CONTRIBUTING.md/package scripts directly. Review ONLY immutable base ab9408c81cc9916177641ae8e9f08624fc27b5b9 plus patch /tmp/opencode/session-recovery-final-v5.patch. First verify patch SHA-256 49183f9e082f71a26d07ce8bf7dd2b391214908f3d07637a3c02163fe20826c7, SEA /home/byk/Code/opencode/packages/opencode/dist/server/opencode-server SHA-256 f08e78a61ef53f72a9810cc09facbe2d181c63f6a14231a95d66d16de44a80ed, and clean patch application to exact base. Inspect all 33 changed files from immutable base+patch, never mutable worktree. Threat-model duplicate provider/tool side effects, stale/live owner takeover, cancellation and finalizer races, forged/cross-Session recovery identity, malformed/poison rows, public retry/replay abuse, admit-only leakage, queue/steer escape, wake starvation/DoS, cleanup defects, migration/API drift, and multi-node startup behavior. Explicitly verify: explicit cancellation keeps its exact lease alive through interruption cleanup past 30s and fails closed if renewal ownership is lost; stream failure after StepFinished cannot commit Step.Ended/continue or append Ended after Failed; hosted tools settle before successful continuation; assistant-less supersession is quarantined before wake/promotion; wake_attempt CAS and indexes give bounded fair redrive across failures/restarts and cannot be reset/abused; recovery-owned IDs stay internal; cleanup failure cannot wedge coordinator; schema snapshot lineage matches base. Confirm no SessionPrompt and no Core-to-Server dependency. Accepted residuals are only final instruction-level dispatch race and bounded clock skew. ...
The required repo-setup skill is unavailable, so I will read the frozen base’s AGENTS.md, CONTRIBUTING.md, and package scripts directly. I will first verify both hashes, the exact base object, patch scope, and clean application without using the mutable worktree; the review will remain read-only and run no builds, tests, or services.
[
{
"content": "Verify frozen base, patch/SEA hashes, 33-file scope, and clean application",
"status": "in_progress",
"priority": "high"
},
{
"content": "Read immutable repository guidance and package scripts",
"status": "pending",
"priority": "high"
},
{
"content": "Inspect all changed files and trace security invariants through immutable base+patch",
"status": "pending",
"priority": "high"
},
{
"content": "Audit migration, schema/API lineage, dependencies, and multi-node startup behavior",
"status": "pending",
"priority": "high"
},
{
"content": "Produce severity-ordered security verdict with exact frozen evidence",
"status": "pending",
"priority": "high"
}
]
base-pipeline-numbered.txt base-test-numbered.txt session-recovery-final-v4 session-recovery-final-v4-diag session-recovery-final-v4.index session-recovery-final-v4.patch session-recovery-final-v5 session-recovery-final-v5.index session-recovery-final-v5.patch session-recovery-review-c2c8afb0
49183f9e082f71a26d07ce8bf7dd2b391214908f3d07637a3c02163fe20826c7 /tmp/opencode/session-recovery-final-v5.patch
f08e78a61ef53f72a9810cc09facbe2d181c63f6a14231a95d66d16de44a80ed /home/byk/Code/opencode/packages/opencode/dist/server/opencode-server
commit ab9408c81cc9916177641ae8e9f08624fc27b5b9 d3323b963b9ef2de41a7ff9884299c74b93886ba
526 47 packages/core/schema.json 1 0 packages/core/src/database/migration.gen.ts 55 0 packages/core/src/database/migration/20260914170650_session-recovery.ts 45 0 packages/core/src/database/schema.gen.ts 5 4 packages/core/src/session.ts 31 16 packages/core/src/session/compaction.ts 54 34 packages/core/src/session/context-epoch.ts 66 0 packages/core/src/session/execution/claim.ts 124 19 packages/core/src/session/execution/local.ts 342 31 packages/core/src/session/input.ts 69 0 packages/core/src/session/message-updater.ts 77 1 packages/core/src/session/projector.ts 6 0 packages/core/src/session/recovery-id.ts 315 0 packages/core/src/session/recovery.ts 30 5 packages/core/src/session/run-coordinator.ts 4 0 packages/core/src/session/runner/index.ts 208 91 packages/core/src/session/runner/llm.ts 74 28 packages/core/src/session/runner/publish-llm-event.ts 70 1 packages/core/src/session/sql.ts 63 1 packages/core/test/database-migration.test.ts 243 0 packages/core/test/session-execution-local....
Both supplied hashes match exactly. The base resolves to commit ab9408c81cc9916177641ae8e9f08624fc27b5b9 with tree d3323b963b9ef2de41a7ff9884299c74b93886ba; an isolated index seeded from that tree accepts the patch cleanly, and the patch contains exactly 33 changed files. I will now materialize that index only under /tmp/opencode for line-addressable inspection, never reading candidate source from the mutable repository worktree.
d7c7ac9d3aa5606d2b8adf965fd584cd37494110
/tmp/opencode/session-recovery-review-v5-49183f9e/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/ui/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/src/session/llm/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/schema/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/app/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/app/e2e/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/app/e2e/performance/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/effect-drizzle-sqlite/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/llm/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/src/server/routes/instance/httpapi/AGENTS.md /tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/test/AGENTS.md /tmp/opencode/session...
/tmp/opencode/session-recovery-review-v5-49183f9e/CONTRIBUTING.md
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/AGENTS.md</path> <type>file</type> <content> 1: - To regenerate the legacy JavaScript SDK, run `./packages/sdk/js/script/build.ts`. 2: - After changing the public Protocol or Server `HttpApi`, run `bun run generate` from `packages/client`. Do not edit `src/generated` or `src/generated-effect` directly. 3: - Keep runtime dependencies directed from Schema to Core and Protocol, then from Core and Protocol to Server. Client runtime code may depend on Schema and Protocol but never Core or Server; `sdk-next` composes Client, Core, and Server. 4: - The default branch in this repo is `dev`. 5: - Local `main` ref may not exist; use `dev` or `origin/dev` for diffs. 6: 7: ## Branch Names 8: 9: Use a short branch name of at most three words, separated by hyphens. Do not use slashes or type prefixes such as `feat/` or `fix/`. 10: 11: Examples: `session-recovery`, `fix-scroll-state`, `regenerate-sdk`. ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/CONTRIBUTING.md</path> <type>file</type> <content> 1: # Contributing to OpenCode 2: 3: We want to make it easy for you to contribute to OpenCode. Here are the most common type of changes that get merged: 4: 5: - Bug fixes 6: - Additional LSPs / Formatters 7: - Improvements to LLM performance 8: - Support for new providers 9: - Fixes for environment-specific quirks 10: - Missing standard behavior 11: - Documentation improvements 12: 13: However, any UI or core product feature must go through a design review with the core team before implementation. 14: 15: If you are unsure if a PR would be accepted, feel free to ask a maintainer or look for issues with any of the following labels: 16: 17: - [`help wanted`](https://github.com/anomalyco/opencode/issues?q=is%3Aissue%20state%3Aopen%20label%3Ahelp-wanted) 18: - [`good first ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/schema/AGENTS.md</path> <type>file</type> <content> 1: # Schema Package Guide 2: 3: `@opencode-ai/schema` owns browser-safe wire and storage contracts shared by protocol, server, core, and generated SDKs. Keep runtime behavior, service layers, side effects, and host-local implementation details in the domain package that owns them. 4: 5: ## Package Boundary 6: 7: - Preserve the dependency direction: `@opencode-ai/schema <- @opencode-ai/protocol <- @opencode-ai/server`. 8: - Schema values should be serializable contract definitions, not service implementations or runtime registries. 9: - A domain may keep a minimal public wire contract here when SDK generation needs it, but do not move the broader runtime model into Schema just because an event is public. `plugin.added` is the current example: Schema may own the minimum browser-safe event payload, while plugin runtime behavior stays outside Schema. ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/AGENTS.md</path>
<type>file</type>
<content>
1: # opencode database guide
2:
3: ## Database
4:
5: - **Schema**: Drizzle schema lives in `packages/core/src/**/*.sql.ts`.
6: - **Migrations**: database migrations live in `packages/core` and are applied by core.
7:
8: ## Development server
9:
10: - Running `bun dev` from `packages/opencode` starts the live interactive TUI. Do not run it as a blocking foreground command when you need to inspect the result.
11: - Start it in `tmux` instead: `tmux new-session -d -s opencode-dev 'bun dev'`.
12: - Capture the current TUI output with: `tmux capture-pane -pt opencode-dev`.
13: - Stop the session explicitly when done: `tmux kill-session -t opencode-dev`.
14:
15: # Module shape
16:
17: Do not use `export namespace Foo { ... }` for module organization. It is not
18: standard ESM, it prevents tree-shaking, and it breaks Node's native TypeScript
19: runner. ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/src/server/routes/instance/httpapi/AGENTS.md</path>
<type>file</type>
<content>
1: # HttpApi Route Patterns
2:
3: Use `HttpApiBuilder.group(...)` for normal HTTP endpoints, including streaming HTTP responses such as server-sent events. Handlers should yield stable services once while building the handler layer, then close over those services in endpoint implementations.
4:
5: ```ts
6: export const sessionHandlers = HttpApiBuilder.group(InstanceHttpApi, "session", (handlers) =>
7: Effect.gen(function* () {
8: const session = yield* Session.Service
9:
10: return handlers.handle("list", () => session.list())
11: }),
12: )
13: ```
14:
15: For SSE endpoints, stay in `HttpApiBuilder.group(...)` and return `HttpServerResponse.stream(...)` from the handler. Annotate the endpoint success schema with `HttpApiSchema.asText({ contentType: "text/event-stream" })` so OpenAPI documents the stream content type. ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/package.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://json.schemastore.org/package.json",
3: "name": "opencode",
4: "description": "AI-powered development tool",
5: "private": true,
6: "type": "module",
7: "packageManager": "bun@1.3.14",
8: "scripts": {
9: "dev": "bun run --cwd packages/opencode src/index.ts",
10: "dev:desktop": "bun --cwd packages/desktop dev",
11: "dev:web": "bun --cwd packages/app dev",
12: "dev:console": "ulimit -n 10240 2>/dev/null; bun run --cwd packages/console/app dev",
13: "dev:stats": "bun sst shell --stage=production -- bun run --cwd packages/stats/app dev",
14: "dev:storybook": "bun --cwd packages/storybook storybook",
15: "lint": "oxlint",
16: "typecheck": "bun turbo typecheck",
17: "upgrade-opentui": "bun run script/upgrade-opentui.ts",
18: "postinstall": "bun run --cwd packages/core fix-node-pty",
19: "prepare": ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/package.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://json.schemastore.org/package.json",
3: "version": "1.18.30",
4: "name": "@opencode-ai/core",
5: "type": "module",
6: "license": "MIT",
7: "private": true,
8: "scripts": {
9: "db": "bun drizzle-kit",
10: "migration": "bun run script/migration.ts",
11: "fix-node-pty": "bun run script/fix-node-pty.ts",
12: "test": "bun test --only-failures",
13: "typecheck": "tsgo --noEmit"
14: },
15: "bin": {
16: "opencode": "./bin/opencode"
17: },
18: "exports": {
19: "./effect/layer-node": "./src/effect/layer-node.ts",
20: "./effect/app-node": "./src/effect/app-node.ts",
21: "./session/runner": "./src/session/runner/index.ts",
22: "./system-context": "./src/system-context/index.ts",
23: "./*": "./src/*.ts"
24: },
25: "imports": {
26: "#sqlite": {
27: "bun": ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/schema/package.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://json.schemastore.org/package.json",
3: "name": "@opencode-ai/schema",
4: "private": true,
5: "type": "module",
6: "license": "MIT",
7: "exports": {
8: ".": "./src/index.ts",
9: "./*": "./src/*.ts"
10: },
11: "scripts": {
12: "typecheck": "tsgo --noEmit"
13: },
14: "dependencies": {
15: "effect": "catalog:"
16: },
17: "devDependencies": {
18: "@tsconfig/bun": "catalog:",
19: "@types/bun": "catalog:",
20: "@typescript/native-preview": "catalog:"
21: }
22: }
(End of file - total 22 lines)
</content>
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/server/package.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://json.schemastore.org/package.json",
3: "name": "@opencode-ai/server",
4: "version": "1.18.30",
5: "private": true,
6: "type": "module",
7: "license": "MIT",
8: "exports": {
9: "./*": "./src/*.ts"
10: },
11: "scripts": {
12: "typecheck": "tsgo --noEmit"
13: },
14: "dependencies": {
15: "@opencode-ai/core": "workspace:*",
16: "@opencode-ai/protocol": "workspace:*",
17: "drizzle-orm": "catalog:",
18: "effect": "catalog:"
19: },
20: "devDependencies": {
21: "@tsconfig/bun": "catalog:",
22: "@types/bun": "catalog:",
23: "@typescript/native-preview": "catalog:"
24: }
25: }
(End of file - total 25 lines)
</content>
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/package.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://json.schemastore.org/package.json",
3: "version": "1.18.30",
4: "name": "opencode",
5: "type": "module",
6: "license": "MIT",
7: "private": true,
8: "scripts": {
9: "typecheck": "tsgo --noEmit",
10: "test": "bun test --timeout 30000 --only-failures",
11: "test:httpapi": "bun run script/httpapi-exercise.ts --mode coverage --fail-on-missing --fail-on-skip && bun run script/httpapi-exercise.ts --mode auth --fail-on-missing --fail-on-skip && bun run script/httpapi-exercise.ts --mode effect --fail-on-missing --fail-on-skip",
12: "bench:test": "bun run script/bench-test-suite.ts",
13: "profile:test": "bun run script/profile-test-files.ts",
14: "build": "bun run script/build.ts",
15: "build:server": "node script/build-server.mjs",
16: "dev": "bun run ./src/index.ts",
17: "dev:temporary": "bun ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/sdk/js/package.json</path>
<type>file</type>
<content>
1: {
2: "$schema": "https://json.schemastore.org/package.json",
3: "name": "@opencode-ai/sdk",
4: "version": "1.18.30",
5: "type": "module",
6: "license": "MIT",
7: "scripts": {
8: "test": "bun test",
9: "typecheck": "tsgo --noEmit",
10: "build": "bun ./script/build.ts"
11: },
12: "exports": {
13: ".": "./src/index.ts",
14: "./client": "./src/client.ts",
15: "./server": "./src/server.ts",
16: "./v2": "./src/v2/index.ts",
17: "./v2/client": "./src/v2/client.ts",
18: "./v2/gen/client": "./src/v2/gen/client/index.ts",
19: "./v2/server": "./src/v2/server.ts",
20: "./v2/types": "./src/v2/gen/types.gen.ts"
21: },
22: "files": [
23: "dist"
24: ],
25: "devDependencies": {
26: "@hey-api/openapi-ts": "0.90.10",
27: "@tsconfig/node22": "catalog:",
28: "@types/cross-spawn": "catalog:",
29: ...
[
{
"content": "Verify frozen base, patch/SEA hashes, 33-file scope, and clean application",
"status": "completed",
"priority": "high"
},
{
"content": "Read immutable repository guidance and package scripts",
"status": "completed",
"priority": "high"
},
{
"content": "Inspect all changed files and trace security invariants through immutable base+patch",
"status": "in_progress",
"priority": "high"
},
{
"content": "Audit migration, schema/API lineage, dependencies, and multi-node startup behavior",
"status": "pending",
"priority": "high"
},
{
"content": "Produce severity-ordered security verdict with exact frozen evidence",
"status": "pending",
"priority": "high"
}
]
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/execution/claim.ts</path>
<type>file</type>
<content>
1: export * as SessionExecutionClaim from "./claim"
2:
3: import { and, eq, gt } from "drizzle-orm"
4: import { Clock, Effect } from "effect"
5: import type { Database } from "../../database/database"
6: import type { SessionSchema } from "../schema"
7: import { SESSION_EXECUTION_LEASE_MS, SessionExecutionTable } from "../sql"
8:
9: type DatabaseService = Database.Interface["db"]
10:
11: export type Claim = {
12: readonly sessionID: SessionSchema.ID
13: readonly executionID: string
14: readonly ownerID: string
15: }
16:
17: export type Values = Partial<Pick<typeof SessionExecutionTable.$inferInsert, "assistant_message_id" | "phase">>
18:
19: export class Lost extends Error {
20: constructor(readonly claim: Claim) {
21: super(`Session execution claim lost: ${claim.executionID}`)
22: }
23: }
24:
25: const where = (claim: Claim, now: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/execution/local.ts</path>
<type>file</type>
<content>
1: import { and, asc, eq, isNull } from "drizzle-orm"
2: import { Cause, Clock, Duration, Effect, Exit, Layer, Schedule } from "effect"
3: import { Database } from "../../database/database"
4: import { LocationServiceMap } from "../../location-service-map"
5: import { makeGlobalNode } from "../../effect/app-node"
6: import { SessionRunCoordinator } from "../run-coordinator"
7: import { SessionRunner } from "../runner"
8: import { SessionMessage } from "../message"
9: import { SessionSchema } from "../schema"
10: import { SessionStore } from "../store"
11: import { SessionExecution } from "../execution"
12: import { SessionExecutionClaim } from "./claim"
13: import { SESSION_EXECUTION_LEASE_MS, SessionExecutionTable, SessionRecoveryTable } from "../sql"
14:
15: /** Current-process routing for implicit-local Locations. ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/input.ts</path>
<type>file</type>
<content>
1: export * as SessionInput from "./input"
2:
3: import { and, asc, desc, eq, isNull, lte } from "drizzle-orm"
4: import { DateTime, Effect, Option, Schema } from "effect"
5: import { Admitted, Delivery } from "@opencode-ai/schema/session-input"
6: import type { Database } from "../database/database"
7: import { EventV2 } from "../event"
8: import { SessionEvent } from "./event"
9: import { SessionMessage } from "./message"
10: import { Prompt } from "./prompt"
11: import { continuation, message } from "./recovery-id"
12: import { SessionSchema } from "./schema"
13: import { SessionInputTable, SessionMessageTable, SessionRecoveryTable } from "./sql"
14:
15: type DatabaseService = Database.Interface["db"]
16:
17: export { Admitted, Delivery }
18:
19: const decodePrompt = Schema.decodeUnknownSync(Prompt)
20: const encodePrompt = Schema.encodeSync(Prompt)
21: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/recovery.ts</path>
<type>file</type>
<content>
1: export * as SessionRecovery from "./recovery"
2:
3: import { and, asc, desc, eq, gt, isNull, lte, or, sql } from "drizzle-orm"
4: import { Clock, DateTime, Effect, Layer, Option, Schedule, Schema } from "effect"
5: import { Database } from "../database/database"
6: import { makeGlobalNode } from "../effect/app-node"
7: import { EventV2 } from "../event"
8: import { SessionEvent } from "./event"
9: import { SessionExecution } from "./execution"
10: import { SessionProjector } from "./projector"
11: import { SessionExecutionClaim } from "./execution/claim"
12: import { SessionInput } from "./input"
13: import { SessionSchema } from "./schema"
14: import {
15: SESSION_EXECUTION_LEASE_MS,
16: SessionExecutionTable,
17: SessionInputTable,
18: SessionRecoveryTable,
19: SessionMessageTable,
20: } from "./sql"
21:
22: export const BATCH_SIZE = 100
23: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/sql.ts</path>
<type>file</type>
<content>
1: import { sql } from "drizzle-orm"
2: import { check, sqliteTable, text, integer, index, primaryKey, real, uniqueIndex } from "drizzle-orm/sqlite-core"
3: import * as DatabasePath from "../database/path"
4: import { ProjectTable } from "../project/sql"
5: import type { SessionMessage } from "./message"
6: import type { Prompt } from "./prompt"
7: import type { SessionInput } from "./input"
8: import type { Snapshot } from "../snapshot"
9: import { PermissionV1 } from "../v1/permission"
10: import { ProjectV2 } from "../project"
11: import type { SessionSchema } from "./schema"
12: import type { MessageID, PartID, SessionV1 } from "../v1/session"
13: import { WorkspaceV2 } from "../workspace"
14: import { Timestamps } from "../database/schema.sql"
15: import type { SystemContext } from "../system-context/index"
16: import { AgentV2 } from "../agent"
17: import ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/projector.ts</path>
<type>file</type>
<content>
1: export * as SessionProjector from "./projector"
2:
3: import { and, desc, eq, gt, or, sql } from "drizzle-orm"
4: import { DateTime, Effect, Layer, Schema } from "effect"
5: import { Database } from "../database/database"
6: import { EventV2 } from "../event"
7: import { makeGlobalNode } from "../effect/app-node"
8: import { SessionEvent } from "./event"
9: import { SessionV1 } from "../v1/session"
10: import { WorkspaceTable } from "../control-plane/workspace.sql"
11: import { SessionMessage } from "./message"
12: import { SessionMessageUpdater } from "./message-updater"
13: import { SessionInput } from "./input"
14: import { Prompt } from "./prompt"
15: import { continuation } from "./recovery-id"
16: import { WorkspaceV2 } from "../workspace"
17: import {
18: MessageTable,
19: PartTable,
20: SessionInputTable,
21: SessionMessageTable,
22: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/message-updater.ts</path>
<type>file</type>
<content>
1: import { castDraft, produce, type WritableDraft } from "immer"
2: import { Effect } from "effect"
3: import { SessionEvent } from "./event"
4: import { SessionMessage } from "./message"
5: import { message } from "./recovery-id"
6:
7: export type MemoryState = {
8: messages: SessionMessage.Message[]
9: }
10:
11: export interface Adapter {
12: readonly getCurrentAssistant: () => Effect.Effect<SessionMessage.Assistant | undefined>
13: readonly getAssistant: (messageID: SessionMessage.ID) => Effect.Effect<SessionMessage.Assistant | undefined>
14: readonly getCurrentShell: (callID: string) => Effect.Effect<SessionMessage.Shell | undefined>
15: readonly updateAssistant: (assistant: SessionMessage.Assistant) => Effect.Effect<void>
16: readonly updateShell: (shell: SessionMessage.Shell) => Effect.Effect<void>
17: readonly appendMessage: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/runner/llm.ts</path>
<type>file</type>
<content>
1: import {
2: LLM,
3: LLMClient,
4: LLMError,
5: LLMEvent,
6: Message,
7: SystemPart,
8: isContextOverflowFailure,
9: type ProviderErrorEvent,
10: } from "@opencode-ai/llm"
11: import { Cause, DateTime, Effect, FiberSet, Layer, Option, Semaphore, Stream } from "effect"
12: import { and, eq } from "drizzle-orm"
13: import { AgentV2 } from "../../agent"
14: import { Config } from "../../config"
15: import { Database } from "../../database/database"
16: import { EventV2 } from "../../event"
17: import { Location } from "../../location"
18: import { ModelV2 } from "../../model"
19: import { PermissionV2 } from "../../permission"
20: import { ProviderV2 } from "../../provider"
21: import { QuestionV2 } from "../../question"
22: import { SystemContext } from "../../system-context/index"
23: import { SystemContextRegistry } from ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/runner/publish-llm-event.ts</path>
<type>file</type>
<content>
1: import { ToolOutput, type LLMEvent, type ProviderMetadata, type ToolResultValue, type Usage } from "@opencode-ai/llm"
2: import { DateTime, Effect } from "effect"
3: import { EventV2 } from "../../event"
4: import { ModelV2 } from "../../model"
5: import { SessionEvent } from "../event"
6: import { SessionMessage } from "../message"
7: import { SessionSchema } from "../schema"
8:
9: type Input = {
10: readonly sessionID: SessionSchema.ID
11: readonly agent: string
12: readonly model: ModelV2.Ref
13: readonly snapshot?: string
14: readonly startCommit: (assistantMessageID: SessionMessage.ID) => Effect.Effect<void>
15: readonly terminalCommit: (assistantMessageID: SessionMessage.ID) => Effect.Effect<void>
16: readonly interruptedCommit: (assistantMessageID: SessionMessage.ID) => Effect.Effect<void>
17: readonly eventCommit: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/run-coordinator.ts</path>
<type>file</type>
<content>
1: export * as SessionRunCoordinator from "./run-coordinator"
2:
3: import { Deferred, Effect, Exit, Fiber, FiberSet, Scope } from "effect"
4:
5: /** Serializes execution for each key while allowing different keys to run concurrently. */
6: export interface Coordinator<Key, E> {
7: /** Snapshots keys with an execution owned by this coordinator. */
8: readonly active: Effect.Effect<ReadonlySet<Key>>
9: /** Starts execution while idle or joins the active execution. */
10: readonly run: (key: Key) => Effect.Effect<void, E>
11: /** Registers one coalesced follow-up after newly recorded work. */
12: readonly wake: (key: Key) => Effect.Effect<void>
13: /** Stops active execution, runs cleanup, then starts work that arrived while stopping. */
14: readonly interrupt: (key: Key, cleanup?: Effect.Effect<void>) => Effect.Effect<void>
15: }
16: ...
Found 100 matches (more matches available)
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/event.test.ts:
Line 327: const release = yield* Deferred.make<void>()
Line 331: Stream.runForEach(() => Deferred.succeed(consuming, undefined).pipe(Effect.andThen(Deferred.await(release)))),
Line 341: yield* Deferred.succeed(release, undefined)
Line 354: it.effect("preserves observer interruption", () =>
Line 358: yield* events.listen(() => Effect.interrupt)
Line 360: const exit = yield* events.publish(SyncMessage, { id: "interrupted", text: "hello" }).pipe(Effect.exit)
Line 364: .where(eq(EventTable.aggregate_id, "interrupted"))
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/config/agent.test.ts:
Line 227: Effect.acquireRelease(
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/config/command.test.ts:
Line 23: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-execution-local.test.ts</path>
<type>file</type>
<content>
1: import { describe, expect } from "bun:test"
2: import { Deferred, Effect, Exit, Fiber, Scope } from "effect"
3: import { TestClock } from "effect/testing"
4: import { eq } from "drizzle-orm"
5: import { Database } from "@opencode-ai/core/database/database"
6: import { Project } from "@opencode-ai/core/project"
7: import { ProjectTable } from "@opencode-ai/core/project/sql"
8: import { AbsolutePath } from "@opencode-ai/core/schema"
9: import { SessionExecutionLocal } from "@opencode-ai/core/session/execution/local"
10: import { SessionSchema } from "@opencode-ai/core/session/schema"
11: import { SessionExecutionTable, SessionTable } from "@opencode-ai/core/session/sql"
12: import { testEffect } from "./lib/effect"
13:
14: const sessionID = SessionSchema.ID.make("ses_execution_local")
15: const it = ...
Found 26 matches
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-run-coordinator.test.ts:
Line 31: it.effect("joins a wake-started execution without forcing a successor", () =>
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-runner.test.ts:
Line 731: it.effect("never dispatches a provider after ownership changes", () =>
Line 746: .set({ id: "provider-successor", owner_id: "successor", expires_at: 60_000 })
Line 757: it.effect("never publishes streamed output after ownership changes", () =>
Line 772: .set({ id: "publication-successor", owner_id: "successor", expires_at: 60_000 })
Line 784: it.effect("never starts a local tool after ownership changes", () =>
Line 802: .set({ id: "tool-successor", owner_id: "successor", expires_at: 60_000 })
Line 824: it.effect("never fails interrupted tools after ownership changes", () =>
Line 864: .set({ id: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/context-epoch.ts</path>
<type>file</type>
<content>
1: export * as SessionContextEpoch from "./context-epoch"
2:
3: import { eq } from "drizzle-orm"
4: import { DateTime, Effect, Schema } from "effect"
5: import type { Database } from "../database/database"
6: import { EventV2 } from "../event"
7: import { SystemContext } from "../system-context/index"
8: import { ContextSnapshotDecodeError } from "./error"
9: import { SessionEvent } from "./event"
10: import { SessionHistory } from "./history"
11: import { SessionInput } from "./input"
12: import { SessionMessage } from "./message"
13: import { SessionSchema } from "./schema"
14: import { SessionContextEpochTable } from "./sql"
15: import { SessionExecutionClaim } from "./execution/claim"
16:
17: type DatabaseService = Database.Interface["db"]
18:
19: interface Prepared {
20: readonly baseline: string
21: readonly baselineSeq: number
22: }
23: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/compaction.ts</path>
<type>file</type>
<content>
1: export * as SessionCompaction from "./compaction"
2:
3: import { LLM, LLMError, LLMEvent, Message, type LLMRequest, type Model } from "@opencode-ai/llm"
4: import { DateTime, Effect, Stream } from "effect"
5: import type { Config } from "../config"
6: import type { EventV2 } from "../event"
7: import { SessionEvent } from "./event"
8: import { SessionMessage } from "./message"
9: import { SessionSchema } from "./schema"
10: import { Token } from "../util/token"
11:
12: const DEFAULT_BUFFER = 20_000
13: const DEFAULT_KEEP_TOKENS = 8_000
14: const TOOL_OUTPUT_MAX_CHARS = 2_000
15: const SUMMARY_OUTPUT_TOKENS = 4_096
16: const SUMMARY_TEMPLATE = `Output exactly the Markdown structure shown inside <template> and keep the section order unchanged. Do not include the <template> tags in your response. ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session.ts</path>
<type>file</type>
<content>
1: export * as SessionV2 from "./session"
2: export * from "./session/schema"
3:
4: import { DateTime, Effect, Layer, Schema, Context, Stream } from "effect"
5: import { ListAnchor } from "@opencode-ai/schema/session"
6: import { and, asc, desc, eq, gt, like, lt, or, type SQL } from "drizzle-orm"
7: import { ProjectV2 } from "./project"
8: import { WorkspaceV2 } from "./workspace"
9: import { ModelV2 } from "./model"
10: import { Location } from "./location"
11: import { SessionMessage } from "./session/message"
12: import { Prompt } from "./session/prompt"
13: import { PromptInput } from "@opencode-ai/schema/prompt-input"
14: import { EventV2 } from "./event"
15: import { Database } from "./database/database"
16: import { SessionProjector } from "./session/projector"
17: import { SessionMessageTable, SessionTable } from "./session/sql"
18: import { SessionSchema } ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/recovery-id.ts</path>
<type>file</type>
<content>
1: import { SessionMessage } from "./message"
2:
3: export const message = (executionID: string, assistantMessageID?: SessionMessage.ID) =>
4: assistantMessageID ?? SessionMessage.ID.make(`msg_recovery_${executionID}`)
5:
6: export const continuation = (executionID: string) => SessionMessage.ID.make(`msg_recovery_continue_${executionID}`)
(End of file - total 6 lines)
</content>
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/schema/src/session-event.ts</path>
<type>file</type>
<content>
1: export * as SessionEvent from "./session-event"
2:
3: import { Schema } from "effect"
4: import { optional } from "./schema"
5: import { Event } from "./event"
6: import { ProviderMetadata, ToolContent } from "./llm"
7: import { Delivery } from "./session-delivery"
8: import { Model } from "./model"
9: import { DateTimeUtcFromMillis, NonNegativeInt, RelativePath } from "./schema"
10: import { FileAttachment, Prompt } from "./prompt"
11: import { SessionID } from "./session-id"
12: import { Location } from "./location"
13: import { SessionMessage } from "./session-message"
14: import { Revert } from "./revert"
15:
16: export { FileAttachment }
17:
18: export const Source = Schema.Struct({
19: start: NonNegativeInt,
20: end: NonNegativeInt,
21: text: Schema.String,
22: }).annotate({
23: identifier: "session.next.event.source",
24: })
25: export ...
Found 100 matches (more matches available)
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-create.test.ts:
Line 199: yield* session.prompt({ sessionID: created.id, prompt: Prompt.make({ text: "Hello" }), resume: false })
Line 220: resume: false,
Line 263: delivery: "steer",
Line 273: delivery: "steer",
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-projector.test.ts:
Line 22: import { continuation } from "@opencode-ai/core/session/recovery-id"
Line 67: it.effect("atomically reconciles one abandoned execution into one continuation", () =>
Line 72: const continuationID = continuation("execution")
Line 135: yield* db.select().from(SessionInputTable).where(eq(SessionInputTable.id, continuationID)).get(),
Line 139: delivery: "queue",
Line 175: .where(eq(SessionInputTable.id, continuationID))
Line 177: if (!replayedContinuation) ...
8215 /tmp/opencode/session-recovery-final-v5.patch
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/runner/index.ts</path>
<type>file</type>
<content>
1: export * as SessionRunner from "./index"
2:
3: import type { LLMError } from "@opencode-ai/llm"
4: import { Context, Effect } from "effect"
5: import { SessionSchema } from "../schema"
6: import type { SessionMessage } from "../message"
7: import type { ContextSnapshotDecodeError, MessageDecodeError } from "../error"
8: import { SessionRunnerModel } from "./model"
9: import type { SystemContext } from "../../system-context/index"
10: import type { ToolOutputStore } from "../../tool-output-store"
11:
12: export type RunError =
13: | LLMError
14: | SessionRunnerModel.Error
15: | MessageDecodeError
16: | ContextSnapshotDecodeError
17: | SystemContext.InitializationBlocked
18: | ToolOutputStore.Error
19:
20: /** Runs one local continuation from already-recorded Session history. ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/src/server/routes/instance/httpapi/server.ts</path>
<type>file</type>
<content>
1: import { Config as EffectConfig, Context, Effect, Layer } from "effect"
2: import { HttpApiBuilder, OpenApi } from "effect/unstable/httpapi"
3: import { HttpClient, HttpMiddleware, HttpRouter, HttpServer, HttpServerResponse } from "effect/unstable/http"
4: import * as Socket from "effect/unstable/socket/Socket"
5: import { FSUtil } from "@opencode-ai/core/fs-util"
6: import * as Observability from "@opencode-ai/core/observability"
7: import { Account } from "@/account/account"
8: import { Agent } from "@/agent/agent"
9: import { Auth } from "@/auth"
10: import { BackgroundJob } from "@/background/job"
11: import { Command } from "@/command"
12: import { Config } from "@/config/config"
13: import { Workspace } from "@/control-plane/workspace"
14: import { Env } from "@/env"
15: import { EventV2Bridge } from "@/event-v2-bridge"
16: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/opencode/src/server/routes/instance/httpapi/server.ts</path>
<type>file</type>
<content>
251: MCP.node,
252: McpAuth.node,
253: Command.node,
254: Truncate.node,
255: ToolRegistry.node,
256: Format.node,
257: Project.node,
258: Vcs.node,
259: Workspace.node,
260: Worktree.node,
261: Installation.node,
262: ShareNext.node,
263: SessionShare.node,
264: InstanceStore.node,
265: httpClient,
266: EventV2.node,
267: ProjectV2.node,
268: ProjectCopy.node,
269: PtyTicket.node,
270: ])
271:
272: export function createRoutes(
273: corsOptions?: CorsOptions,
274: ): Layer.Layer<never, EffectConfig.ConfigError, RouteRequirements> {
275: const locationServiceMapV2 = buildLocationServiceMap()
276:
277: return Layer.mergeAll(
278: rootApiRoutes,
279: eventApiRoutes,
280: ptyConnectApiRoutes,
281: instanceRoutes,
282: serverRoutes,
283: docRoute,
284: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/server/src/routes.ts</path>
<type>file</type>
<content>
1: import { Database } from "@opencode-ai/core/database/database"
2: import { LayerNode } from "@opencode-ai/core/effect/layer-node"
3: import { httpClient } from "@opencode-ai/core/effect/app-node-platform"
4: import { AppNodeBuilder } from "@opencode-ai/core/effect/app-node-builder"
5: import { EventV2 } from "@opencode-ai/core/event"
6: import { Credential } from "@opencode-ai/core/credential"
7: import { PermissionSaved } from "@opencode-ai/core/permission/saved"
8: import { PtyTicket } from "@opencode-ai/core/pty/ticket"
9: import { SessionV2 } from "@opencode-ai/core/session"
10: import { SessionExecution } from "@opencode-ai/core/session/execution"
11: import { LocationServiceMap } from "@opencode-ai/core/location-service-map"
12: import { SessionExecutionLocal } from "@opencode-ai/core/session/execution/local"
13: import { SessionRecovery } from ...
The execution path now shows the intended fences: ordinary acquisition only inserts; only recovery can replace an expired owner; every state/event mutation renews the exact unexpired (session, execution, owner) claim; public prompt retries reject recovery inputs; and queue/steer selectors exclude every row joined to recovery state. The remaining high-risk boundaries are cancellation finalization, recovery validation-to-promotion atomicity, redrive fairness, and generated schema lineage, which I am checking against the changed tests and database artifacts.
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/database/migration/20260914170650_session-recovery.ts</path>
<type>file</type>
<content>
1: import { Effect } from "effect"
2: import type { DatabaseMigration } from "../migration"
3:
4: export default {
5: id: "20260914170650_session-recovery",
6: up(tx) {
7: return Effect.gen(function* () {
8: yield* tx.run(`ALTER TABLE \`session_input\` ADD \`wake_pending\` integer DEFAULT false NOT NULL;`)
9: yield* tx.run(`ALTER TABLE \`session_input\` ADD \`wake_attempts\` integer DEFAULT 0 NOT NULL;`)
10: yield* tx.run(`
11: CREATE TABLE \`session_execution\` (
12: \`id\` text NOT NULL,
13: \`session_id\` text NOT NULL,
14: \`owner_id\` text NOT NULL,
15: \`assistant_message_id\` text,
16: \`phase\` text NOT NULL,
17: \`time_created\` integer NOT NULL,
18: \`expires_at\` integer NOT NULL,
19: ...
Found 100 matches (more matches available) /tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/schema.json: Line 2: "version": "7", Line 4: "id": "539b8b9f-47d0-4d6d-b29f-4282139c71eb", Line 66: "name": "session_execution", Line 78: "name": "session_recovery", Line 99: "name": "id", Line 159: "name": "project_id", Line 199: "name": "id", Line 209: "name": "active_account_id", Line 219: "name": "active_org_id", Line 229: "name": "id", Line 389: "name": "id", Line 399: "name": "integration_id", Line 429: "name": "connector_id", Line 439: "name": "method_id", Line 479: "name": "aggregate_id", Line 499: "name": "owner_id", Line 509: "name": "id", Line 519: "name": "aggregate_id", Line 559: "name": "id", Line 569: "name": "project_id", Line 619: "name": "project_id", Line 669: "name": "id", ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/schema.json</path>
<type>file</type>
<content>
1: {
2: "version": "7",
3: "dialect": "sqlite",
4: "id": "539b8b9f-47d0-4d6d-b29f-4282139c71eb",
5: "prevIds": [
6: "f14a9b18-8207-487e-a3d3-227e629ba9ad"
7: ],
8: "ddl": [
9: {
10: "name": "workspace",
11: "entityType": "tables"
12: },
13: {
14: "name": "data_migration",
15: "entityType": "tables"
16: },
17: {
18: "name": "account_state",
19: "entityType": "tables"
20: },
21: {
22: "name": "account",
23: "entityType": "tables"
24: },
25: {
26: "name": "control_account",
27: "entityType": "tables"
28: },
29: {
30: "name": "credential",
31: "entityType": "tables"
32: },
33: {
34: "name": "event_sequence",
35: "entityType": "tables"
36: },
37: {
38: "name": "event",
39: "entityType": "tables"
40: ...
{
"version": "7",
"id": "f14a9b18-8207-487e-a3d3-227e629ba9ad",
"prevIds": [
"169a0f0f-d58f-479f-b024-fa1c7b9a09db"
]
}
{
"version": "7",
"id": "539b8b9f-47d0-4d6d-b29f-4282139c71eb",
"prevIds": [
"f14a9b18-8207-487e-a3d3-227e629ba9ad"
]
}
Found 16 matches
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/database/schema.gen.ts:
Line 158: CREATE TABLE \`session_execution\` (
Line 167: CONSTRAINT \`session_execution_pk\` PRIMARY KEY(\`id\`),
Line 168: CONSTRAINT \`fk_session_execution_session_id_session_id_fk\` FOREIGN KEY (\`session_id\`) REFERENCES \`session\`(\`id\`) ON DELETE CASCADE,
Line 169: CONSTRAINT "session_execution_phase_check" CHECK("phase" IN ('ready', 'safe', 'unknown', 'continue'))
Line 181: \`wake_attempts\` integer DEFAULT 0 NOT NULL,
Line 199: CREATE TABLE \`session_recovery\` (
Line 206: \`wake_attempts\` integer DEFAULT 0 NOT NULL,
Line 209: CONSTRAINT \`session_recovery_pk\` PRIMARY KEY(\`execution_id\`),
Line 210: CONSTRAINT \`fk_session_recovery_session_id_session_id_fk\` FOREIGN KEY (\`session_id\`) REFERENCES \`session\`(\`id\`) ON DELETE CASCADE,
Line 211: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/database/schema.gen.ts</path> <type>file</type> <content> 145: CONSTRAINT \`fk_part_message_id_message_id_fk\` FOREIGN KEY (\`message_id\`) REFERENCES \`message\`(\`id\`) ON DELETE CASCADE 146: ); 147: `) 148: yield* tx.run(` 149: CREATE TABLE \`session_context_epoch\` ( 150: \`session_id\` text PRIMARY KEY, 151: \`baseline\` text NOT NULL, 152: \`snapshot\` text NOT NULL, 153: \`baseline_seq\` integer NOT NULL, 154: CONSTRAINT \`fk_session_context_epoch_session_id_session_id_fk\` FOREIGN KEY (\`session_id\`) REFERENCES \`session\`(\`id\`) ON DELETE CASCADE 155: ); 156: `) 157: yield* tx.run(` 158: CREATE TABLE \`session_execution\` ( 159: \`id\` text NOT NULL, 160: \`session_id\` text NOT NULL, 161: \`owner_id\` text NOT NULL, 162: \`assistant_message_id\` ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/database/migration.gen.ts</path>
<type>file</type>
<content>
1: import type { DatabaseMigration } from "./migration"
2:
3: export const migrations = (
4: await Promise.all([
5: import("./migration/20260127222353_familiar_lady_ursula"),
6: import("./migration/20260211171708_add_project_commands"),
7: import("./migration/20260213144116_wakeful_the_professor"),
8: import("./migration/20260225215848_workspace"),
9: import("./migration/20260227213759_add_session_workspace_id"),
10: import("./migration/20260228203230_blue_harpoon"),
11: import("./migration/20260303231226_add_workspace_fields"),
12: import("./migration/20260309230000_move_org_to_state"),
13: import("./migration/20260312043431_session_message_cursor"),
14: import("./migration/20260323234822_events"),
15: import("./migration/20260410174513_workspace-name"),
16: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-projector.test.ts</path>
<type>file</type>
<content>
1: import { describe, expect } from "bun:test"
2: import { DateTime, Deferred, Effect, Exit, Fiber, Schema } from "effect"
3: import { TestClock } from "effect/testing"
4: import { asc, eq, sql } from "drizzle-orm"
5: import { Database } from "@opencode-ai/core/database/database"
6: import { LayerNode } from "@opencode-ai/core/effect/layer-node"
7: import { AppNodeBuilder } from "@opencode-ai/core/effect/app-node-builder"
8: import { EventV2 } from "@opencode-ai/core/event"
9: import { EventTable } from "@opencode-ai/core/event/sql"
10: import { ModelV2 } from "@opencode-ai/core/model"
11: import { Project } from "@opencode-ai/core/project"
12: import { ProjectTable } from "@opencode-ai/core/project/sql"
13: import { ProviderV2 } from "@opencode-ai/core/provider"
14: import { AbsolutePath } from "@opencode-ai/core/schema"
15: import { SessionV2 } from ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-projector.test.ts</path>
<type>file</type>
<content>
687: it.effect("redrives durable ordinary input execution intent after a lost advisory wake", () =>
688: Effect.gen(function* () {
689: const { db } = yield* Database.Service
690: const events = yield* EventV2.Service
691: yield* db
692: .insert(ProjectTable)
693: .values({ id: Project.ID.global, worktree: AbsolutePath.make("/project"), sandboxes: [] })
694: .run()
695: yield* db
696: .insert(SessionTable)
697: .values({
698: id: sessionID,
699: project_id: Project.ID.global,
700: slug: "test",
701: directory: "/project",
702: title: "test",
703: version: "test",
704: })
705: .run()
706: yield* SessionInput.admit(db, events, {
707: id: SessionMessage.ID.make("msg_lost_ordinary_wake"),
708: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-projector.test.ts</path>
<type>file</type>
<content>
1249:
1250: it.effect("quarantines a malformed claim without blocking a valid claim", () =>
1251: Effect.gen(function* () {
1252: const { db } = yield* Database.Service
1253: const validSession = SessionV2.ID.make("ses_recovery_valid")
1254: yield* db
1255: .insert(ProjectTable)
1256: .values({ id: Project.ID.global, worktree: AbsolutePath.make("/project"), sandboxes: [] })
1257: .run()
1258: yield* db
1259: .insert(SessionTable)
1260: .values(
1261: [sessionID, validSession].map((id) => ({
1262: id,
1263: project_id: Project.ID.global,
1264: slug: id,
1265: directory: "/project",
1266: title: "test",
1267: version: "test",
1268: })),
1269: )
1270: .run()
1271: yield* ...
Found 90 matches
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-runner.test.ts:
Line 598: it.effect("redrives only the synthetic recovery continuation", () =>
Line 667: it.effect("clears durable execution intent when ordinary input is promoted", () =>
Line 694: it.effect("redrives an ordinary prompt after its advisory wake is lost", () =>
Line 731: it.effect("never dispatches a provider after ownership changes", () =>
Line 757: it.effect("never publishes streamed output after ownership changes", () =>
Line 784: it.effect("never starts a local tool after ownership changes", () =>
Line 824: it.effect("never fails interrupted tools after ownership changes", () =>
Line 881: it.effect("advertises and executes a globally attached application tool", () =>
Line 937: it.effect("starts a real runner turn after default prompt recording", () =>
Line 956: it.effect("streams one request with registry definitions from ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-runner.test.ts</path>
<type>file</type>
<content>
570: expect(
571: yield* db
572: .select({ id: SessionExecutionTable.id })
573: .from(SessionExecutionTable)
574: .where(eq(SessionExecutionTable.session_id, sessionID))
575: .get(),
576: ).toBeUndefined()
577: expect(
578: (yield* db.select({ type: EventTable.type }).from(EventTable).all()).some((event) =>
579: event.type.startsWith(SessionEvent.Step.Interrupted.type),
580: ),
581: ).toBe(true)
582: expect(yield* session.context(sessionID)).toMatchObject([
583: { type: "user", text: prompt },
584: {
585: type: "assistant",
586: finish: "error",
587: error: { type: "unknown", message: "Provider Step outcome unknown after interruption" },
588: content: [
589: kind === "tool input"
590: ? ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-runner.test.ts</path>
<type>file</type>
<content>
1880: state: {
1881: status: "completed",
1882: input: { query: "hello" },
1883: structured: {},
1884: content: [
1885: { type: "text", text: "Hello" },
1886: { type: "file", mime: "image/png", uri: "data:image/png;base64,aGVsbG8=", name: "hello.png" },
1887: ],
1888: },
1889: },
1890: ],
1891: },
1892: ])
1893: }),
1894: )
1895:
1896: it.effect("continues with reloaded history after durably settling one local tool call", () =>
1897: Effect.gen(function* () {
1898: yield* setup
1899: const session = yield* SessionV2.Service
1900: yield* session.prompt({ sessionID, prompt: Prompt.make({ text: "Echo this" }), resume: false })
1901:
1902: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-prompt.test.ts</path>
<type>file</type>
<content>
130: SessionExecution.Service.of({
131: active: Effect.succeed(new Set()),
132: resume: () => Effect.void,
133: interrupt: () => Effect.void,
134: wake: (id) => Effect.sync(() => wakeCalls.push(id)).pipe(Effect.asVoid),
135: }),
136: ),
137: )
138:
139: describe("SessionV2.prompt", () => {
140: it.effect("exposes the execution registry", () =>
141: Effect.gen(function* () {
142: activeSessions.add(sessionID)
143: expect(Array.from(yield* (yield* SessionV2.Service).active)).toEqual([sessionID])
144: }).pipe(Effect.ensuring(Effect.sync(() => activeSessions.clear()))),
145: )
146:
147: it.effect("delegates execution continuation through SessionExecution", () =>
148: Effect.gen(function* () {
149: yield* setup
150: const session = yield* SessionV2.Service
151: ...
Found 5 matches
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-prompt.test.ts:
Line 19: import { SessionRecovery } from "@opencode-ai/core/session/recovery"
Line 147: it.effect("delegates execution continuation through SessionExecution", () =>
Line 469: expect(yield* eventCount(EventV2.versionedType(SessionEvent.PromptExecutionRequested.type, 1))).toBe(1)
Line 542: expect(yield* eventCount(EventV2.versionedType(SessionEvent.PromptExecutionRequested.type, 1))).toBe(0)
Line 550: expect(yield* eventCount(EventV2.versionedType(SessionEvent.PromptExecutionRequested.type, 1))).toBe(0)
Found 3 matches
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/event.ts:
Line 240: .transaction(
Line 351: { behavior: "immediate" },
Line 516: .transaction(() =>
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/event.ts</path>
<type>file</type>
<content>
200: )
201: yield* Effect.forEach(pubsub.typed.values(), PubSub.shutdown, { discard: true })
202: }),
203: )
204:
205: function commitDurableEvent(
206: definition: Definition,
207: event: Payload,
208: input?: {
209: readonly seq: number
210: readonly aggregateID: string
211: readonly ownerID?: string
212: readonly strictOwner?: boolean
213: },
214: commit?: (seq: number) => Effect.Effect<void>,
215: ) {
216: return Effect.gen(function* () {
217: const durable = definition?.durable
218: if (durable) {
219: const aggregateID = (event.data as Record<string, unknown>)[durable.aggregate]
220: if (typeof aggregateID !== "string") {
221: yield* Effect.die(
222: new ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/database-migration.test.ts</path>
<type>file</type>
<content>
140: yield* db.get(sql`SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'session_context_epoch'`),
141: ).toEqual({ name: "session_context_epoch" })
142: expect(
143: yield* db.get(
144: sql`SELECT name FROM pragma_table_info('session_context_epoch') WHERE name IN ('agent', 'replacement_seq', 'revision')`,
145: ),
146: ).toBeUndefined()
147: expect(yield* db.get(sql`SELECT count(*) as count FROM migration`)).toEqual({ count: migrations.length })
148: expect(
149: yield* db.all(
150: sql`SELECT name FROM sqlite_master WHERE type = 'index' AND name IN ('event_aggregate_seq_idx', 'event_aggregate_type_seq_idx', 'session_input_session_pending_seq_idx', 'session_input_session_pending_delivery_seq_idx', ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-run-coordinator.test.ts</path>
<type>file</type>
<content>
1: import { describe, expect } from "bun:test"
2: import { Cause, Deferred, Effect, Exit, Fiber, Layer } from "effect"
3: import { SessionRunCoordinator } from "@opencode-ai/core/session/run-coordinator"
4: import { testEffect } from "./lib/effect"
5:
6: const it = testEffect(Layer.empty)
7:
8: describe("SessionRunCoordinator", () => {
9: it.effect("joins concurrent resumes for one key", () =>
10: Effect.scoped(
11: Effect.gen(function* () {
12: const gate = yield* Deferred.make<void>()
13: let runs = 0
14: const coordinator = yield* SessionRunCoordinator.make({
15: drain: () => Effect.sync(() => runs++).pipe(Effect.andThen(Deferred.await(gate))),
16: })
17:
18: const first = yield* coordinator.run("session").pipe(Effect.forkChild)
19: yield* Effect.yieldNow
20: ...
Found 1 matches /tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/src/session/runner/llm.ts: Line 51: * `SessionPrompt` monolith. Implement the unchecked items in small reviewed slices:
Found 27 matches
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/sdk/js/src/v2/gen/types.gen.ts:
Line 33: | EventSessionNextStepRecovered
Line 874: requestExecution?: boolean
Line 879: type: "session.next.prompt.execution_requested"
Line 983: type: "session.next.step.recovered"
Line 987: executionID: string
Line 989: phase: "ready" | "unknown" | "continue"
Line 1659: | SyncEventSessionNextStepRecovered
Line 2794: | SessionNextStepRecovered
Line 2924: | SessionNextStepRecovered
Line 3430: requestExecution?: boolean
Line 3439: type: "session.next.prompt.execution_requested.1"
Line 3602: export type SyncEventSessionNextStepRecovered = {
Line 3606: type: "session.next.step.recovered.1"
Line 3613: executionID: string
Line 3615: phase: "ready" | "unknown" | "continue"
Line 4362: requestExecution?: boolean
Line 4371: type: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/sdk/js/src/v2/gen/types.gen.ts</path>
<type>file</type>
<content>
850: location: LocationRef
851: subdirectory?: string
852: }
853: }
854: | {
855: id: string
856: type: "session.next.prompted"
857: properties: {
858: timestamp: number
859: sessionID: string
860: messageID: string
861: prompt: Prompt
862: delivery: "steer" | "queue"
863: }
864: }
865: | {
866: id: string
867: type: "session.next.prompt.admitted"
868: properties: {
869: timestamp: number
870: sessionID: string
871: messageID: string
872: prompt: Prompt
873: delivery: "steer" | "queue"
874: requestExecution?: boolean
875: }
876: }
877: | {
878: id: string
879: type: "session.next.prompt.execution_requested"
880: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-runner-recorded.test.ts</path>
<type>file</type>
<content>
1: import { HttpRecorder } from "@opencode-ai/http-recorder"
2: import { HttpRecorderInternal } from "@opencode-ai/http-recorder/internal"
3: import * as OpenAIChat from "@opencode-ai/llm/protocols/openai-chat"
4: import { Auth, LLMClient, RequestExecutor } from "@opencode-ai/llm/route"
5: import { Database } from "@opencode-ai/core/database/database"
6: import { AppNodeBuilder } from "@opencode-ai/core/effect/app-node-builder"
7: import { LayerNodePlatform } from "@opencode-ai/core/effect/app-node-platform"
8: import { LayerNode } from "@opencode-ai/core/effect/layer-node"
9: import { EventV2 } from "@opencode-ai/core/event"
10: import { EventTable } from "@opencode-ai/core/event/sql"
11: import { PermissionV2 } from "@opencode-ai/core/permission"
12: import { AgentV2 } from "@opencode-ai/core/agent"
13: import { Config } from ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-runner-tool-events.test.ts</path>
<type>file</type>
<content>
1: import { expect, test } from "bun:test"
2: import { Effect, Schema, Stream } from "effect"
3: import { LLMEvent } from "@opencode-ai/llm"
4: import { EventV2 } from "@opencode-ai/core/event"
5: import { SessionEvent } from "@opencode-ai/core/session/event"
6: import { SessionMessage } from "@opencode-ai/core/session/message"
7: import { SessionV2 } from "@opencode-ai/core/session"
8: import { ModelV2 } from "@opencode-ai/core/model"
9: import { ProviderV2 } from "@opencode-ai/core/provider"
10: import { createLLMEventPublisher } from "@opencode-ai/core/session/runner/publish-llm-event"
11:
12: const sessionID = SessionV2.ID.make("ses_tool_event_test")
13: const base64 = "iVBORw0KGgoAAAANSUhEUgAAAAEAAAAB"
14:
15: const capture = () => {
16: const published: Array<{ readonly type: string; readonly data: unknown }> = []
17: const events ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/schema/test/event-manifest.test.ts</path>
<type>file</type>
<content>
1: import { describe, expect, test } from "bun:test"
2: import { FileSystem, Integration, Permission, Project, Reference, Session, Workspace } from "../src"
3: import { EventManifest } from "../src/event-manifest"
4: import { IdeEvent } from "../src/ide-event"
5: import { SessionEvent } from "../src/session-event"
6: import { SessionTodo } from "../src/session-todo"
7: import { SessionV1 } from "../src/session-v1"
8: import { WorkspaceEvent } from "../src/workspace-event"
9:
10: describe("public event manifest", () => {
11: test("owns the complete public event surface", () => {
12: expect(EventManifest.ServerDefinitions.length).toBe(61)
13: expect(EventManifest.Definitions.length).toBe(91)
14: expect(SessionV1.Event.Definitions).toEqual([
15: SessionV1.Event.Created,
16: SessionV1.Event.Updated,
17: ...
Found 12 matches
/tmp/opencode/session-recovery-review-v5-49183f9e/packages/sdk/openapi.json:
Line 17899: "requestExecution": {
Line 17919: "enum": ["session.next.prompt.execution_requested"]
Line 18289: "enum": ["session.next.step.recovered"]
Line 25709: "requestExecution": {
Line 25740: "enum": ["session.next.prompt.execution_requested.1"]
Line 26299: "enum": ["session.next.step.recovered.1"]
Line 28599: "requestExecution": {
Line 28622: "enum": ["session.next.prompt.execution_requested"]
Line 29190: "enum": ["session.next.step.recovered"]
Line 34811: "requestExecution": {
Line 34831: "enum": ["session.next.prompt.execution_requested"]
Line 35201: "enum": ["session.next.step.recovered"]
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/sdk/openapi.json</path>
<type>file</type>
<content>
18270: "$ref": "#/components/schemas/SessionErrorUnknown"
18271: }
18272: },
18273: "required": ["timestamp", "sessionID", "assistantMessageID", "error"],
18274: "additionalProperties": false
18275: }
18276: },
18277: "required": ["id", "type", "properties"],
18278: "additionalProperties": false
18279: },
18280: {
18281: "type": "object",
18282: "properties": {
18283: "id": {
18284: "type": "string",
18285: "pattern": "^evt_"
18286: },
18287: "type": {
18288: "type": "string",
18289: "enum": ...
[
{
"name": "session_execution",
"entityType": "tables"
},
{
"name": "session_recovery",
"entityType": "tables"
},
{
"type": "text",
"notNull": true,
"autoincrement": false,
"default": null,
"generated": null,
"name": "id",
"entityType": "columns",
"table": "session_execution"
},
{
"type": "text",
"notNull": true,
"autoincrement": false,
"default": null,
"generated": null,
"name": "session_id",
"entityType": "columns",
"table": "session_execution"
},
{
"type": "text",
"notNull": true,
"autoincrement": false,
"default": null,
"generated": null,
"name": "owner_id",
"entityType": "columns",
"table": "session_execution"
},
{
"type": "text",
"notNull": false,
"autoincrement": false,
"default": null,
"generated": null,
"name": "assistant_message_id",
"entityType": "columns",
"table": "session_execution"
},
{
"type": ...
diff --git a/packages/core/schema.json b/packages/core/schema.json @@ -4,2 +4,4 @@ @@ -62,0 +65,4 @@ @@ -70,0 +77,4 @@ @@ -922,0 +933,80 @@ @@ -982,0 +1073,20 @@ @@ -1062,0 +1173,90 @@ @@ -1484 +1684,3 @@ @@ -1486 +1688,3 @@ @@ -1495 +1699,3 @@ @@ -1497 +1703,3 @@ @@ -1506 +1714,3 @@ @@ -1508 +1718,3 @@ @@ -1517 +1729,3 @@ @@ -1519 +1733,3 @@ @@ -1528 +1744,3 @@ @@ -1530 +1748,3 @@ @@ -1539 +1759,3 @@ @@ -1541 +1763,3 @@ @@ -1550 +1774,3 @@ @@ -1552 +1778,3 @@ @@ -1561 +1789,3 @@ @@ -1563 +1793,3 @@ @@ -1572 +1804,18 @@ @@ -1574 +1823,3 @@ @@ -1583 +1834,3 @@ @@ -1585 +1838,3 @@ @@ -1594 +1849,48 @@ @@ -1596 +1898,3 @@ @@ -1605 +1909,3 @@ @@ -1607 +1913,3 @@ @@ -1616 +1924,3 @@ @@ -1618 +1928,3 @@ @@ -1627 +1939,4 @@ @@ -1634 +1949,4 @@ @@ -1641 +1959,22 @@ @@ -1648 +1987,3 @@ @@ -1655 +1996,3 @@ @@ -1662 +2005,3 @@ @@ -1669 +2014,3 @@ @@ -1676 +2023,3 @@ @@ -1683 +2032,3 @@ @@ -1690 +2041,3 @@ @@ -1697 +2050,3 @@ @@ -1704 +2059,3 @@ @@ -1711 +2068,3 @@ @@ -1718 +2077,3 @@ @@ -1725 ...
Important infrastructure note: recall is broken for this session. Do not call or depend on it. If you need distilled project guidance, use the read-only Lore search UI at http://127.0.0.1:3207/ui/search with project=/home/byk/Code/opencode and scope=knowledge. Continue the existing immutable review using Git objects and /tmp/opencode/session-recovery-final-v5.patch as authoritative code evidence. A Lore context warning is not a blocker and must not cause empty output. Return the substantive report required by the original prompt, or quote a concrete non-Lore blocker. End exactly MERGE or DO-NOT-MERGE.
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-projector.test.ts</path>
<type>file</type>
<content>
1810: limit: 1,
1811: order: "asc",
1812: cursor: { id: secondPage[0]!.id, direction: "previous" },
1813: })).map((message) => (message.type === "user" ? message.text : message.type)),
1814: ).toEqual(["first"])
1815: expect(
1816: (yield* sessions.context(sessionID)).map((message) => (message.type === "user" ? message.text : message.type)),
1817: ).toEqual(["first", "second"])
1818: }).pipe(Effect.provide(sessionsLayer)),
1819: )
1820:
1821: it.effect("marks an inbox row promoted with the Prompted event sequence", () =>
1822: Effect.gen(function* () {
1823: const { db } = yield* Database.Service
1824: yield* db
1825: .insert(ProjectTable)
1826: .values({ id: Project.ID.global, worktree: AbsolutePath.make("/project"), sandboxes: [] })
1827: ...
<path>/tmp/opencode/session-recovery-review-v5-49183f9e/packages/core/test/session-prompt.test.ts</path>
<type>file</type>
<content>
640: )
641:
642: it.effect("reprojects pending inbox input without scheduling execution", () =>
643: Effect.gen(function* () {
644: yield* setup
645: const { db } = yield* Database.Service
646: const session = yield* SessionV2.Service
647: wakeCalls.length = 0
648: yield* session.prompt({
649: id: messageID,
650: sessionID,
651: prompt: Prompt.make({ text: "Replay pending" }),
652: resume: false,
653: })
654: yield* replaySessionProjection()
655:
656: expect(yield* admitted(messageID)).toMatchObject({ id: messageID, prompt: { text: "Replay pending" } })
657: expect(yield* db.select().from(SessionInputTable).where(eq(SessionInputTable.id, messageID)).get()).toMatchObject(
658: {
659: wake_pending: false,
660: },
661: )
662: ...
One security weakness remains in the redrive design: the 100-row limit bounds selected Sessions, but the ordinary-input CAS updates every pending row in a selected Session at the minimum attempt count. A client can accumulate an arbitrarily large same-Session cohort, causing an unbounded write transaction every 10 seconds; the current fairness test uses one row per Session and does not exercise this amplification. I am completing the immutable diff and dependency checks before assigning severity and verdict.
33 d7c7ac9d3aa5606d2b8adf965fd584cd37494110 49183f9e082f71a26d07ce8bf7dd2b391214908f3d07637a3c02163fe20826c7 /tmp/opencode/session-recovery-final-v5.patch f08e78a61ef53f72a9810cc09facbe2d181c63f6a14231a95d66d16de44a80ed /home/byk/Code/opencode/packages/opencode/dist/server/opencode-server
[
{
"content": "Verify frozen base, patch/SEA hashes, 33-file scope, and clean application",
"status": "completed",
"priority": "high"
},
{
"content": "Read immutable repository guidance and package scripts",
"status": "completed",
"priority": "high"
},
{
"content": "Inspect all changed files and trace security invariants through immutable base+patch",
"status": "completed",
"priority": "high"
},
{
"content": "Audit migration, schema/API lineage, dependencies, and multi-node startup behavior",
"status": "completed",
"priority": "high"
},
{
"content": "Produce severity-ordered security verdict with exact frozen evidence",
"status": "completed",
"priority": "high"
}
]
MUST-FIX
Ordinary wake redrive can be reset indefinitely and amplified into unbounded database writes.
packages/core/src/session/recovery.ts:255-271 orders Sessions by their minimum wake_attempts and limits the result to 100 Sessions. New public prompts default to execution requests at packages/core/src/session.ts:360-383, and new rows start at zero through packages/core/src/session/sql.ts:153-155.
Concrete exploit:
An authenticated client continuously creates fresh execution-requested prompts in 100 Sessions. Each fresh row resets that Session’s minimum attempt to zero. Those Sessions always sort before failed victim work whose attempts exceed zero, so they can starve the victims indefinitely across scans and restarts.
The update at packages/core/src/session/recovery.ts:273-291 affects every pending row in the chosen Session with that attempt count, not one bounded row. A same-Session cohort of N prompts therefore produces an N-row write transaction every scan. Every server node runs this scan every ten seconds through packages/core/src/session/recovery.ts:302-307, multiplying the write load in multi-node deployments.
The index at packages/core/src/session/sql.ts:168-174 narrows eligible rows but cannot bound the grouped scan or number of updated rows. The regression at packages/core/test/session-projector.test.ts:559-634 uses one input per Session and a fixed workload, so it does not cover either continuous zero-attempt injection or same-Session amplification. This violates the required bounded, fair, non-resettable redrive invariant.
Cancellation silently continues cleanup after losing renewal ownership.
Explicit cancellation performs one fenced renewal and forks a repeating renewal fiber at packages/core/src/session/execution/local.ts:108-112. The coordinator then waits for interruption finalizers and cleanup at packages/core/src/session/run-coordinator.ts:99-125.
The renewal fiber is never joined or observed. ...
Date: Sep 16, 2026 * 🔴 (11:30) User stated `recall` was broken for the session and instructed the review not to call or depend on it. * 🔴 (11:30) User stated distilled project guidance could be obtained through the read-only Lore search UI at `http://127.0.0.1:3207/ui/search` with `project=/home/byk/Code/opencode` and `scope=knowledge`. * 🔴 [requested-review] (11:30) User asked to continue the…
Date: Sep 16, 2026 * 🔴 (11:28) User supplied a partially elided git diff with substantial generated-schema additions in `packages/core/schema.json`, including new blocks around lines 933–1250, repeated property expansions around lines 1684–2005, and a 30-line addition around line 2336. * 🔴 (11:28) User supplied code changes touching `initialize`, `advance`, `SessionInput.projectPrompted`, `Sess…
Date: Sep 16, 2026 * 🔴 (11:26) User supplied generated SDK event types in `packages/sdk/js/src/v2/gen/types.gen.ts`: `session.next.prompt.admitted` properties include optional `requestExecution?: boolean`; `session.next.prompt.execution_requested` requires `timestamp`, `sessionID`, and `messageID`; and `session.next.step.recovered` requires `timestamp`, `sessionID`, `executionID`, and `phase: "r…
Date: Sep 16, 2026 * 🔴 (11:23) User supplied `packages/core/src/event.ts` lines 205-367 defining `commitDurableEvent(definition, event, input?, commit?)`. Durable events derive `aggregateID` from `event.data[durable.aggregate]`; a non-string aggregate field dies with `InvalidDurableEventError` message `Expected string aggregate field ${durable.aggregate}`, and a mismatch with `input.aggregateID`…
Date: Sep 16, 2026 * 🔴 (11:22) User supplied the `packages/core/test/session-runner.test.ts` test `continues with reloaded history after durably settling one local tool call`: prompt `"Echo this"` triggers local `echo` call ID `"call-echo"` with `{ text: "hello" }`; the continuation request has roles `["user", "assistant", "tool"]`, authorization matches `{ sessionID, toolCallID: "call-echo" }`,…
Date: Sep 16, 2026 * 🔴 (11:22) User specified that recovery never recovers a pre-promotion claim when input commits at the recovery boundary. * 🔴 (11:22) User specified that recovery never promotes a recovery superseded before scanner validation. * 🔴 (11:22) User specified that an assistant-less recovery superseded before scanner validation is quarantined. * 🔴 (11:22) User specified that a qu…
Date: Sep 16, 2026 * 🔴 (11:20) User supplied `packages/server/src/routes.ts`: `applicationServices` groups `Database.node`, `EventV2.node`, `httpClient`, `ToolOutputStore.cleanupNode`, `SessionV2.node`, `SessionRecovery.node`, `PermissionSaved.node`, `PtyTicket.node`, `Credential.node`, `PtyEnvironment.node`, and `LocationServiceMap.node`; `makeRoutes(...)` builds services with `AppNodeBuilder.b…
Date: Sep 16, 2026 * 🔴 (11:19) User supplied `packages/core/src/session/recovery-id.ts`: `message(executionID, assistantMessageID?)` returns the supplied `assistantMessageID` or deterministic `SessionMessage.ID.make(\`msg_recovery_${executionID}\`)`; `continuation(executionID)` returns `SessionMessage.ID.make(\`msg_recovery_continue_${executionID}\`)`. * 🔴 (11:19) User specified that recovery m…
Date: Sep 16, 2026 * 🔴 (11:17) User specified that `SessionExecutionLocal` must never start a second owner while the lease is live. * 🔴 (11:17) User specified that `SessionExecutionLocal` must never overwrite an expired lease. * 🔴 (11:17) User specified that `SessionExecutionLocal` must never re-enter its own uncertain live lease. * 🔴 (11:17) User specified that `SessionExecutionLocal` must n…
Date: Sep 16, 2026 * 🔴 (11:16) User specified a pending architecture requirement: “Replace local ownership with durable multi-node ownership when clustered.” * 🔴 (11:16) User specified a pending runtime-safety requirement: honor interruption and reject stale work after runtime attachment replacement. * 🔴 (11:16) User supplied Session runner code whose completed behavior includes incrementally …
Date: Sep 16, 2026 * 🔴 (11:15) User supplied `packages/core/src/session/sql.ts`: `SessionMessageTable` stores messages with `id`, `session_id`, `type`, monotonically unique per-session `seq`, timestamps, and JSON `data`; indexes are unique `session_message_session_seq_idx`, `session_message_session_type_seq_idx`, `session_message_session_time_created_id_idx`, and `session_message_time_created_id…
Date: Sep 16, 2026 * 🔴 (11:14) User supplied `packages/opencode/package.json`: package `opencode` is private, ESM, MIT-licensed, version `1.18.30`; exports `"./*": "./src/*.ts"` and maps `#db` to `./src/storage/db.bun.ts` for Bun/default and `./src/storage/db.node.ts` for Node. * 🔴 (11:14) User supplied exact `packages/opencode/package.json` scripts: `"typecheck": "tsgo --noEmit"`, `"test": "bu…
Date: Sep 16, 2026 * 🔴 (11:11) User’s active review plan: 1. verify frozen base, patch/SEA hashes, 33-file scope, and clean application; 2. read immutable repository guidance and package scripts; 3. inspect all changed files and trace security invariants through immutable base+patch; 4. audit migration, schema/API lineage, dependencies, and multi-node startup behavior; 5. produce a severity-orde…