Expected behavior
Create/resume or a separately proven binding operation establishes selected identity. Classify current, child, foreign and connection events before changing session-scoped state or condition authority.
Source finding and impact
handleSseMessage calls setSessionID for recognized session.created/session.updated IDs before dispatcher filtering. It also remembers/emits permission requests at wrapper level before dispatch. A foreign update can change the identity used by the filter.
Evidence and environment
Inspected source at 4f2ef5de7c80ad7a6199dc09869ea3b728752f0e on 2026-09-12 in the local macOS workspace. This finding has not yet been reproduced through a running application or the package integration suite.
Regression and acceptance
Through the public wrapper, bind A, inject supported child/foreign B envelopes then A/B messages and permissions. Identity, command defaults and condition state must remain A. Verify unbound create correlation without first-event adoption.
The resolving PR must protect the observable contract and document any remaining uncertainty. This planning pass makes no runtime changes.
Refs Juliusolsson05/agent-code#918; planning finding F04.
Expected behavior
Create/resume or a separately proven binding operation establishes selected identity. Classify current, child, foreign and connection events before changing session-scoped state or condition authority.
Source finding and impact
handleSseMessage calls setSessionID for recognized session.created/session.updated IDs before dispatcher filtering. It also remembers/emits permission requests at wrapper level before dispatch. A foreign update can change the identity used by the filter.
Evidence and environment
Inspected source at
4f2ef5de7c80ad7a6199dc09869ea3b728752f0eon 2026-09-12 in the local macOS workspace. This finding has not yet been reproduced through a running application or the package integration suite.Regression and acceptance
Through the public wrapper, bind A, inject supported child/foreign B envelopes then A/B messages and permissions. Identity, command defaults and condition state must remain A. Verify unbound create correlation without first-event adoption.
The resolving PR must protect the observable contract and document any remaining uncertainty. This planning pass makes no runtime changes.
Refs Juliusolsson05/agent-code#918; planning finding F04.