fix: scope V2 task recovery to plugin location

dist/server.js

@@ -4115,6 +4115,8 @@ async function setupV2(context) {
       if (item.status === "complete" || item.status === "unmet")
         continue;
       try {
+        if (!await ownsSession(item.sessionID))
+          continue;
         const transcript = await context.session.context({ sessionID: item.sessionID });
         if (disposed)
           return;

src/server.ts

@@ -2868,15 +2868,19 @@ async function setupV2(context: PluginV2.Plugin.Context): Promise<PluginV2.Plugi
 
   // Rebuild task-deferral state for goals that survived a plugin restart. The
   // plugin context exposes no live child-session query, so this replays each
-  // non-closed goal session's persisted transcript through the tracker. Best
-  // effort: unfetchable transcripts fall back to live-event observation only.
+  // locally owned, non-closed goal session's persisted transcript through the
+  // tracker. Every directory has its own plugin instance, so loading foreign
+  // transcripts here would make each new instance replay every open goal in
+  // the shared state file. Best effort: unresolvable or unfetchable sessions
+  // fall back to live-event observation only.
   // Continuation decisions await this recovery, so a settled lifecycle event
   // cannot slip past a pending transcript load.
   async function recoverTrackedTasks() {
     for (const item of (await getAllGoals()).goals) {
       if (disposed) return
       if (item.status === "complete" || item.status === "unmet") continue
       try {
+        if (!(await ownsSession(item.sessionID))) continue
         const transcript = await context.session.context({ sessionID: item.sessionID })
         if (disposed) return
         taskTracker.recoverFromTranscript(item.sessionID, transcript)

test/server-v2.test.ts

@@ -799,6 +799,30 @@ test("V2 rebuilds task deferral from session transcripts after a plugin restart"
   })
 })
 
+test("V2 only reads recovery transcripts for goals owned by the plugin location", async () => {
+  await createGoal("ses_local", "Recover the local task state")
+  await createGoal("ses_foreign", "Leave another project's transcript alone")
+  const location = { directory: "/work/current", workspaceID: "workspace-current" }
+  const mock = makeMockContext(
+    {},
+    [],
+    { ses_local: [], ses_foreign: [] },
+    location,
+    {
+      ses_local: { location },
+      ses_foreign: { location: { directory: "/work/other", workspaceID: "workspace-other" } },
+    },
+  )
+  const cleanup = await setupPlugin(mock as never)
+
+  await waitFor(() => mock.sessionGetCalls.includes("ses_local") && mock.sessionGetCalls.includes("ses_foreign"))
+  await waitFor(() => mock.contextCalls.includes("ses_local"))
+  expect(mock.contextCalls).toEqual(["ses_local"])
+
+  mock.stream.end()
+  await cleanup()
+})
+
 test("V2 continuation proceeds after restart when transcripts show no blocking tasks", async () => {
   await createGoal("ses_v2", "Verify continuation without recovered tasks")
   const mock = makeMockContext({}, [], { ses_v2: [] })