bug(session): keep foreign SSE updates from rebinding the selected conversation #10

Expected behavior

Create/resume or a separately proven binding operation establishes selected identity. Classify current, child, foreign and connection events before changing session-scoped state or condition authority.

Source finding and impact

handleSseMessage calls setSessionID for recognized session.created/session.updated IDs before dispatcher filtering. It also remembers/emits permission requests at wrapper level before dispatch. A foreign update can change the identity used by the filter.

Evidence and environment

Inspected source at 4f2ef5de7c80ad7a6199dc09869ea3b728752f0e on 2026-09-12 in the local macOS workspace. This finding has not yet been reproduced through a running application or the package integration suite.

• src/OpencodeHeadless.ts

Regression and acceptance

Through the public wrapper, bind A, inject supported child/foreign B envelopes then A/B messages and permissions. Identity, command defaults and condition state must remain A. Verify unbound create correlation without first-event adoption.

The resolving PR must protect the observable contract and document any remaining uncertainty. This planning pass makes no runtime changes.

Refs Juliusolsson05/agent-code#918; planning finding F04.