@vanillagreen/pi-claude-bridge 1.9.0 → 3.2.2

package/src/session-persistence.ts

@@ -3,22 +3,107 @@ import { createSession, deleteSession, openSession, repairToolPairing } from "cc
 import { createHash } from "crypto";
 import { realpathSync, statSync } from "fs";
 import { resolve as pathResolve } from "path";
-import { extensionApi, piUI, reportSyntheticToolResultRepair, setSharedSession, sharedSession, type SessionState } from "./bridge-state.js";
+import { extensionApi, getSharedSession, reportSyntheticToolResultRepair, safeNotify, setSharedSession, type SessionState } from "./bridge-state.js";
+import { displayPath } from "./config.js";
 import { convertPiMessages } from "./convert.js";
 import { DEBUG, DEBUG_LOG_PATH, debug, diagDump } from "./debug.js";
 import { verifyWrittenSession as _verifyWrittenSession } from "./session-verify.js";
-import { findUnpairedToolUses } from "./tool-pairing-audit.js";
+import {
+	findUnpairedToolUses,
+	insertLostToolResultPlaceholders,
+	recoverLaterToolResults,
+} from "./tool-pairing-audit.js";
+import { claudeDirForProfile, resolveClaudeAccountRouter, type AccountSessionScope } from "./account-router.js";
 
 // --- Session persistence ---
 
 const BRIDGE_SESSION_CUSTOM_TYPE = "claude-bridge-session";
 
-interface PersistedBridgeSessionState extends SessionState {
+// Persisted shape: SessionState MINUS claudeConfigDir. Config-dir paths are
+// account-identifying and travel with shared session archives, so only the
+// opaque accountProfileId is written; the dir is re-derived via the router on
+// restore (no back-compat reader for older shapes — see CHANGELOG 3.0.0).
+interface PersistedBridgeSessionState extends Omit<SessionState, "claudeConfigDir"> {
 	fingerprint: string;
 	piSessionId?: string;
 	updatedAt: string;
 }
 
+function normalizedMessageText(message: unknown): string {
+	const content = (message as { content?: unknown }).content;
+	const text = typeof content === "string"
+		? content
+		: Array.isArray(content)
+			? content
+				.map((block) => (block as { type?: string; text?: string }).type === "text" ? (block as { text?: string }).text ?? "" : "")
+				.join("\n")
+			: "";
+	return text.trim();
+}
+
+function shortHash(text: string): string {
+	return createHash("sha256").update(text).digest("hex").slice(0, 12);
+}
+
+/** Identity anchor for a pi conversation, encoded component-wise as
+ *  `u:<12hex>` (short sha256 of the FIRST user message's normalized text) or
+ *  `u:<12hex>|a:<12hex>` (plus the FIRST assistant message's normalized text
+ *  once the conversation has one with any text). The opening messages are the
+ *  stable elements of a pi history — later messages get appended, compacted,
+ *  or tree-navigated (all of which set needsRebuild), but the first user/
+ *  assistant pair survives for the session's lifetime. The two-component form
+ *  exists because a first USER message alone is a weak anchor: unrelated
+ *  conversations routinely open with identical text ("continue"), and a
+ *  same-opener foreign context shaped to align with the cursor would REUSE
+ *  across genuinely different histories. Returns undefined when the context
+ *  has no user message or its text normalizes to empty (image-only) —
+ *  identity unknown, callers must fail open to the pre-fingerprint behavior,
+ *  never treat it as a mismatch. Distinct from fingerprintMessages below,
+ *  which hashes a cursor slice for restore integrity. */
+export function conversationFingerprint(messages: Context["messages"]): string | undefined {
+	const firstUser = messages.find((message) => (message as { role?: string }).role === "user");
+	if (!firstUser) return undefined;
+	const userText = normalizedMessageText(firstUser);
+	if (!userText) return undefined;
+	const firstAssistant = messages.find((message) => (message as { role?: string }).role === "assistant");
+	const assistantText = firstAssistant ? normalizedMessageText(firstAssistant) : "";
+	return assistantText ? `u:${shortHash(userText)}|a:${shortHash(assistantText)}` : `u:${shortHash(userText)}`;
+}
+
+function parseConversationFingerprint(fp: string): { user: string; assistant?: string } | undefined {
+	const match = /^u:([0-9a-f]+)(?:\|a:([0-9a-f]+))?$/.exec(fp);
+	if (!match) return undefined;
+	return { user: match[1], ...(match[2] ? { assistant: match[2] } : {}) };
+}
+
+/** Component-wise anchor comparison. The user component must always match; the
+ *  assistant component is compared only when BOTH sides carry one — a record
+ *  stamped on turn 1 has no assistant yet, and its own conversation grown past
+ *  turn 1 is an upgrade, not a mismatch (see conversationFingerprintUpgrade).
+ *  An unparseable side means identity unknown: fail open (match), consistent
+ *  with the guard's treatment of absent fingerprints. */
+export function conversationFingerprintsMatch(recorded: string, incoming: string): boolean {
+	const rec = parseConversationFingerprint(recorded);
+	const inc = parseConversationFingerprint(incoming);
+	if (!rec || !inc) return true;
+	if (rec.user !== inc.user) return false;
+	return !(rec.assistant && inc.assistant && rec.assistant !== inc.assistant);
+}
+
+/** Whether a REUSE-matched context's anchor should replace the recorded one:
+ *  a legacy record with none adopts it outright (the planner accepting this
+ *  context as the recorded conversation's continuation is the identity proof),
+ *  and a turn-1 user-only record upgrades to the two-component form the
+ *  moment its own conversation carries a first assistant message. A recorded
+ *  two-component anchor is never rewritten. */
+function conversationFingerprintUpgrade(recorded: string | undefined, incoming: string | undefined): string | undefined {
+	if (!incoming) return undefined;
+	if (!recorded) return incoming;
+	const rec = parseConversationFingerprint(recorded);
+	const inc = parseConversationFingerprint(incoming);
+	return rec && inc && !rec.assistant && inc.assistant && rec.user === inc.user ? incoming : undefined;
+}
+
 function fingerprintMessages(messages: Context["messages"]): string {
 	const normalized = messages.map((message) => {
 		if (message.role === "assistant") {
@@ -52,9 +137,9 @@ function latestPersistedBridgeSession(sessionManager: unknown): PersistedBridgeS
 	return undefined;
 }
 
-function claudeSessionExists(sessionId: string, cwd: string): boolean {
+function claudeSessionExists(sessionId: string, cwd: string, claudeDir: string | undefined): boolean {
 	try {
-		const session = openSession({ sessionId, projectPath: cwd, claudeDir: process.env.CLAUDE_CONFIG_DIR });
+		const session = openSession({ sessionId, projectPath: cwd, claudeDir });
 		statSync(session.jsonlPath);
 		return true;
 	} catch {
@@ -111,35 +196,106 @@ export function restoreSharedSessionFromPi(ctx: { sessionManager?: unknown; cwd?
 		debug(`restoreSharedSession: fingerprint mismatch for ${persisted.sessionId.slice(0, 8)}`);
 		return;
 	}
-	if (!claudeSessionExists(persisted.sessionId, persisted.cwd)) {
+	// Only the opaque profile id is persisted; a managed session re-derives its
+	// claude dir through the live router (router absent or id unknown → the
+	// default-profile rule, which may fail the existence check and rebuild).
+	const accountProfileId = typeof persisted.accountProfileId === "string" ? persisted.accountProfileId : undefined;
+	const claudeConfigDir = accountProfileId
+		? claudeDirForProfile(resolveClaudeAccountRouter()?.resolveProfile?.(accountProfileId) ?? {})
+		: undefined;
+	if (!claudeSessionExists(persisted.sessionId, persisted.cwd, claudeConfigDir ?? process.env.CLAUDE_CONFIG_DIR)) {
 		debug(`restoreSharedSession: Claude session missing for ${persisted.sessionId.slice(0, 8)}`);
 		return;
 	}
-	setSharedSession({ sessionId: persisted.sessionId, cursor, cwd: persisted.cwd });
-	debug(`restoreSharedSession: restored ${persisted.sessionId.slice(0, 8)}, cursor=${cursor}`);
+	setSharedSession({
+		sessionId: persisted.sessionId,
+		cursor,
+		cwd: persisted.cwd,
+		// Absent on pre-3.1.1 markers: restore as identity-unknown (the foreign
+		// guard fails open) rather than rejecting the entry.
+		...(typeof persisted.conversationFingerprint === "string" ? { conversationFingerprint: persisted.conversationFingerprint } : {}),
+		...(accountProfileId ? { accountProfileId, claudeConfigDir } : {}),
+	});
+	debug(`restoreSharedSession: restored ${persisted.sessionId.slice(0, 8)}, cursor=${cursor}, account=${accountProfileId ?? "default"}`);
+}
+
+// One pending persist per SessionManager: cancelling a shutting-down session's
+// persist must not drop a concurrent session's unwritten marker. On globalThis
+// under a versioned symbol for the same reason as the lane registries in
+// bridge-state.ts and query-state.ts — the scheduling and the cancelling module
+// instance can differ. Scheduling again for the same manager REPLACES the
+// pending timer: each fire appends the record's state as of its schedule and
+// restore reads the last marker, so the superseded entry is a stale duplicate.
+const SCHEDULED_PERSISTENCE_SYMBOL = Symbol.for("vstack.pi.claude-bridge.scheduled-persistence.v1");
+
+type PersistenceTimer = ReturnType<typeof setTimeout>;
+
+function scheduledPersistenceTimers(): Map<object, PersistenceTimer> {
+	const host = globalThis as Record<symbol, unknown>;
+	let store = host[SCHEDULED_PERSISTENCE_SYMBOL] as Map<object, PersistenceTimer> | undefined;
+	if (!store) {
+		store = new Map<object, PersistenceTimer>();
+		host[SCHEDULED_PERSISTENCE_SYMBOL] = store;
+	}
+	return store;
+}
+
+export function cancelScheduledSessionPersistence(sessionManager: object): void {
+	const timers = scheduledPersistenceTimers();
+	const timer = timers.get(sessionManager);
+	if (timer === undefined) return;
+	clearTimeout(timer);
+	timers.delete(sessionManager);
+}
+
+/** Test-only: drop every pending persist so a test file starts clean. */
+export function __testCancelAllScheduledSessionPersistence(): void {
+	const timers = scheduledPersistenceTimers();
+	for (const timer of timers.values()) clearTimeout(timer);
+	timers.clear();
 }
 
 export function schedulePersistSharedSession(ctxLike?: { sessionManager?: unknown }): void {
+	const sharedSession = getSharedSession();
 	if (!extensionApi || !sharedSession || !ctxLike?.sessionManager) return;
-	const snapshot = { ...sharedSession };
+	// Extension contexts become guarded/stale as soon as shutdown or replacement
+	// starts. Capture the plain SessionManager reference now and cancel the timer
+	// on shutdown rather than dereferencing the ctx proxy from the next tick.
+	const sessionManager = ctxLike.sessionManager as object;
+	// Persist only the opaque profile id — the resolved config dir is an
+	// account-identifying path and stays in memory (see PersistedBridgeSessionState).
+	const { claudeConfigDir: _omitted, ...snapshot } = sharedSession;
+	const timers = scheduledPersistenceTimers();
+	const superseded = timers.get(sessionManager);
+	if (superseded !== undefined) clearTimeout(superseded);
 	const timer = setTimeout(() => {
+		if (timers.get(sessionManager) === timer) timers.delete(sessionManager);
 		try {
-			const built = readBuiltSessionContext(ctxLike.sessionManager);
+			const built = readBuiltSessionContext(sessionManager);
 			if (!built) return;
 			const cursor = Math.max(0, Math.min(snapshot.cursor, built.messages.length));
 			const data: PersistedBridgeSessionState = {
 				...snapshot,
 				cursor,
 				fingerprint: fingerprintMessages(built.messages.slice(0, cursor)),
-				piSessionId: typeof (ctxLike.sessionManager as any)?.getSessionId === "function" ? (ctxLike.sessionManager as any).getSessionId() : undefined,
+				piSessionId: typeof (sessionManager as any)?.getSessionId === "function" ? (sessionManager as any).getSessionId() : undefined,
 				updatedAt: new Date().toISOString(),
 			};
 			extensionApi?.appendEntry(BRIDGE_SESSION_CUSTOM_TYPE, data);
 			debug(`persistSharedSession: saved ${data.sessionId.slice(0, 8)}, cursor=${data.cursor}`);
 		} catch (error) {
-			debug("persistSharedSession failed:", error);
+			// A failed persist means the next startup restores a stale (or no)
+			// bridge marker and silently rebuilds — worth a diagnostic entry.
+			// Like all diagDump output this lands only under CLAUDE_BRIDGE_DEBUG=1
+			// (VST-15); the failure itself stays non-fatal either way.
+			diagDump("persist_shared_session_failed", {
+				sessionId: snapshot.sessionId.slice(0, 8),
+				cursor: snapshot.cursor,
+				error: error instanceof Error ? `${error.name}: ${error.message}` : String(error),
+			});
 		}
 	}, 0);
+	timers.set(sessionManager, timer);
 	timer.unref?.();
 }
 
@@ -167,8 +323,23 @@ function convertAndImportMessages(
 		debug(`convertAndImportMessages: sanitized ${sanitizedIds.size} tool IDs:`,
 			[...sanitizedIds.entries()].map(([orig, clean]) => orig === clean ? orig : `${orig}→${clean}`).join(", "));
 	}
-	// Pre-repair for debug logging; importMessages also repairs internally (idempotent).
+	// A steer can make Pi split one parallel Claude batch across several visible
+	// assistant/tool-result pairs. Recover those real later results before the
+	// generic repair layer mistakes them for lost output.
+	const recoveredToolResults = recoverLaterToolResults(anthropicMessages);
+	if (recoveredToolResults.length > 0) {
+		debug(
+			`convertAndImportMessages: recovered ${recoveredToolResults.length} later tool result(s) for original parallel batch`,
+			recoveredToolResults.map((item) => item.id).join(", "),
+		);
+	}
+	// Pre-repair: pair every REMAINING orphaned tool_use with an EXPLICIT
+	// bridge-authored error result before cc-session-io's repairToolPairing can
+	// backfill its bare "[no tool result recorded]" placeholder — which the model
+	// reads as tool output and silently reasons on. Ours is is_error and says
+	// what to do. repairToolPairing still runs after (idempotent; finds nothing left).
 	const missingToolResults = findUnpairedToolUses(anthropicMessages);
+	if (missingToolResults.length > 0) insertLostToolResultPlaceholders(anthropicMessages, missingToolResults);
 	const repaired = repairToolPairing(anthropicMessages);
 	if (missingToolResults.length > 0) {
 		reportSyntheticToolResultRepair(missingToolResults, {
@@ -187,12 +358,63 @@ function convertAndImportMessages(
 
 interface SyncResult {
 	sessionId: string | null;
+	// Index into the caller's messages array where this query's prompt begins.
+	// Everything from promptStart to the end is user input Claude has not seen;
+	// the caller slices it out itself (single owner of the messages array).
+	promptStart: number;
+	// True when the incoming context's conversation fingerprint contradicts the
+	// shared record's (Case 6): the query runs as a clean one-shot and its
+	// completion must NOT persist over the module-level record — the caller
+	// gates its persistSession/markRebuild exactly like the reentrant path.
+	foreignContext?: boolean;
+}
+
+export interface IncrementalPromptBatchPlan {
+	// Doubles as the cursor to store before the query runs: Claude owns
+	// [0, promptStart) and the prompt delivers [promptStart, end).
+	promptStart: number;
+	userMessageCount: number;
 }
 
 /**
- * Ensure the shared session has all messages up to (but not including) the last user message.
- * Returns session ID to resume from, or null if no resume needed.
+ * Recognize history that Claude already owns followed only by user messages
+ * delivered together by Pi (for example, followUpMode="all"). Claude Code has
+ * already persisted the optional leading assistant message; every user message
+ * after it must be sent as this query's prompt rather than imported via rebuild.
  */
+export function planIncrementalPromptBatch(
+	messages: Context["messages"],
+	cursor: number,
+): IncrementalPromptBatchPlan | undefined {
+	const lastIndex = messages.length - 1;
+	if (lastIndex < 0 || (messages[lastIndex] as { role?: string }).role !== "user") return undefined;
+
+	// A cursor past the end is PROOF this messages array is not the conversation
+	// the cursor describes (e.g. a reentrant subagent's short context arriving
+	// while the parent's cursor is large). Clamping it used to fabricate a REUSE
+	// plan against foreign history — reject so the caller takes the rebuild path.
+	if (cursor > lastIndex) {
+		debug(`planIncrementalPromptBatch: rejected — cursor=${cursor} beyond last index ${lastIndex}; messages are not the conversation this cursor describes`);
+		return undefined;
+	}
+	const boundedCursor = Math.max(0, cursor);
+	let promptStart = boundedCursor;
+	if ((messages[promptStart] as { role?: string } | undefined)?.role === "assistant") promptStart++;
+
+	const pendingPrompts = messages.slice(promptStart);
+	if (pendingPrompts.length === 0 || pendingPrompts.some((message) => (message as { role?: string }).role !== "user")) {
+		// Log the rejected tail so a diag log can tell apart "two assistants in
+		// tail" vs "toolResult in tail" vs "stale cursor" without a repro.
+		debug(`planIncrementalPromptBatch: rejected — cursor=${cursor} promptStart=${promptStart} tail roles=[${messages.slice(boundedCursor).map((m) => (m as { role?: string }).role).join(", ")}]`);
+		return undefined;
+	}
+
+	return {
+		promptStart,
+		userMessageCount: pendingPrompts.length,
+	};
+}
+
 // Read the session file we just wrote and sanity-check it. Warns instead of
 // throwing — CC may be more tolerant than our checks, so a false positive
 // shouldn't block the user. Pure logic is in session-verify.js; this wrapper
@@ -202,18 +424,25 @@ function verifyWrittenSession(
 	expectedSessionId: string,
 	expectedRecordCount: number,
 	cwd: string,
+	claudeDir: string | undefined,
 ): void {
 	const warnings = _verifyWrittenSession(jsonlPath, expectedSessionId, expectedRecordCount);
 	for (const msg of warnings) {
 		debug(`WARNING session verify: ${msg}`);
-		piUI?.notify(
+		// No CLAUDE_CONFIG_DIR value here: this text asks to be pasted into a
+		// public issue and config-dir paths are account-identifying (see the
+		// persisted-shape note at the top of this file). The diagDump below
+		// records it locally instead. Paths are home-relativized for the same
+		// reason — an absolute cwd carries the username; the diagDump keeps the
+		// absolute forms.
+		safeNotify(
 			`Session file issue: ${msg}\n` +
-			`cwd=${cwd} realpath=${safeRealpath(cwd)} CLAUDE_CONFIG_DIR=${process.env.CLAUDE_CONFIG_DIR ?? "(unset)"}\n` +
-			`Please copy and paste this message into a new issue at https://github.com/elidickinson/pi-claude-bridge/issues/new` +
+			`cwd=${displayPath(cwd)} realpath=${displayPath(safeRealpath(cwd))}\n` +
+			`Please copy and paste this message into a new issue at https://github.com/vanillagreencom/vstack/issues/new` +
 			(DEBUG ? ` and attach ${DEBUG_LOG_PATH}` : ` (rerun with CLAUDE_BRIDGE_DEBUG=1 to capture a debug log)`),
 			"warning",
 		);
-		diagDump("session_verify_fail", { msg, jsonlPath, cwd, realpath: safeRealpath(cwd), claudeConfigDir: process.env.CLAUDE_CONFIG_DIR ?? null });
+		diagDump("session_verify_fail", { msg, jsonlPath, cwd, realpath: safeRealpath(cwd), claudeConfigDir: claudeDir ?? null });
 	}
 }
 
@@ -224,7 +453,7 @@ function safeRealpath(p: string): string {
 // Diagnostic snapshot of where a session file was just written. Catches the
 // class of bugs where pi writes to ~/.claude/projects/<X> but CC SDK reads
 // from ~/.claude/projects/<Y> (symlinks, CLAUDE_CONFIG_DIR, hash mismatch).
-function debugSessionPaths(label: string, cwd: string, jsonlPath: string): void {
+function debugSessionPaths(label: string, cwd: string, jsonlPath: string, claudeDir: string | undefined): void {
 	const realCwd = safeRealpath(cwd);
 	let fileSize: number | null = null;
 	let fileExists = false;
@@ -237,14 +466,21 @@ function debugSessionPaths(label: string, cwd: string, jsonlPath: string): void
 	if (realCwd !== cwd) debug(`${label}: realpath(cwd)=${realCwd} (DIFFERS — symlink-resolved path is what CC SDK uses)`);
 	debug(`${label}: jsonlPath=${jsonlPath}`);
 	debug(`${label}: fileExists=${fileExists}${fileSize != null ? ` size=${fileSize}` : ""}`);
-	debug(`${label}: env.CLAUDE_CONFIG_DIR=${process.env.CLAUDE_CONFIG_DIR ?? "(unset)"} HOME=${process.env.HOME ?? "(unset)"}`);
+	debug(`${label}: selected.CLAUDE_CONFIG_DIR=${claudeDir ?? "(unset)"} HOME=${process.env.HOME ?? "(unset)"}`);
 }
 
 // Two semantic paths:
-//   REUSE — pi's history is in sync with the existing sharedSession (or drifted
-//     only by the trailing final-assistant message that pi appends after
-//     streamSimple returns, which CC's own persisted session already has).
-//     Returns the existing sessionId. Keeps CC's prompt cache warm.
+//   REUSE — pi's history is in sync with the existing sharedSession, drifted
+//     only by an optional trailing assistant message (the final-assistant pi
+//     appends after streamSimple returns, which CC's own persisted session
+//     already has) plus an unbounded trailing run of user messages delivered
+//     together by pi (steer-queue drain, followUpMode="all"). The whole user
+//     run becomes this query's prompt. The unbounded run is safe because
+//     promptStart can never land on a user message Claude already persisted:
+//     Claude owns [0, cursor), promptStart starts at the cursor and only ever
+//     advances (past the one optional assistant), so everything from
+//     promptStart on is new input. Returns the existing sessionId. Keeps CC's
+//     prompt cache warm.
 //   REBUILD — no session yet, or pi's history has diverged (non-trailing
 //     missed messages, e.g. another provider took a turn). Wipes the existing
 //     session file (if any) and writes a fresh one containing all prior
@@ -270,32 +506,105 @@ export function syncSharedSession(
 	cwd: string,
 	customToolNameToSdk?: Map<string, string>,
 	modelId?: string,
+	account?: AccountSessionScope,
 ): SyncResult {
+	const sharedSession = getSharedSession();
 	const priorMessages = messages.slice(0, -1); // everything before the new user prompt
+	const accountProfileId = account?.accountProfileId;
+	const scopeConfigDir = account?.claudeConfigDir; // resolved dir for managed, undefined for legacy
+	// What cc-session-io reads/writes. Managed requests always carry a resolved
+	// dir (accountSessionScope) so this never falls back to the process env the
+	// child no longer sees; legacy keeps the env rule unchanged.
+	const claudeDir = scopeConfigDir ?? process.env.CLAUDE_CONFIG_DIR;
+	const sameAccount = Boolean(
+		sharedSession &&
+		sharedSession.accountProfileId === accountProfileId &&
+		sharedSession.claudeConfigDir === scopeConfigDir,
+	);
+	const incomingFingerprint = conversationFingerprint(messages);
+
+	// FOREIGN-CONVERSATION guard (Case 6, vstack#1001). A subagent-shaped query
+	// arriving while the parent is IDLE is not reentrant, so it lands here as an
+	// outermost query. Without an identity check its short foreign context takes
+	// the REBUILD path — rewriting the PARENT's session file from foreign
+	// history — and its completion swaps the parent's record for the child's.
+	// A conversation-fingerprint mismatch is that identity signal: run the query
+	// as a clean one-shot (same semantics as the reentrant path) and leave the
+	// record completely alone. Two deliberate limits keep misclassification
+	// self-healing instead of sticky:
+	//   - needsRebuild is a carve-out: pi just mutated its history out from
+	//     under us (compact, tree-nav, abort recovery), so the next outermost
+	//     context is authoritative for THIS conversation even if its anchor
+	//     moved — it must reach REBUILD, not be shunted into a one-shot.
+	//   - Length monotonicity (the issue's second signal): a real conversation
+	//     only grows, so a context LONGER than what the record's cursor covers
+	//     can be the recorded conversation while a mismatching shorter one
+	//     cannot. Should a foreign fingerprint ever capture the record (legacy
+	//     no-fingerprint records still rebuild, below), the parent's longer
+	//     context falls through to REBUILD and reclaims it in one turn — a
+	//     mismatch-always-one-shot rule would instead degrade every subsequent
+	//     parent turn to a historyless one-shot with no recovery.
+	// Either fingerprint being unknown (no user message, image-only opener,
+	// pre-3.1.1 record) fails open to the pre-fingerprint behavior.
+	if (
+		sharedSession && !sharedSession.needsRebuild &&
+		sharedSession.conversationFingerprint && incomingFingerprint &&
+		!conversationFingerprintsMatch(sharedSession.conversationFingerprint, incomingFingerprint) &&
+		priorMessages.length <= sharedSession.cursor
+	) {
+		debug(
+			`Case 6 foreign-conversation: fingerprint ${incomingFingerprint.slice(0, 8)} != record ${sharedSession.conversationFingerprint.slice(0, 8)} ` +
+			`(cursor=${sharedSession.cursor}, priors=${priorMessages.length}) — clean one-shot, record untouched`,
+		);
+		debug(`syncResult: path=foreign-one-shot`);
+		return { sessionId: null, promptStart: messages.length - 1, foreignContext: true };
+	}
 
-	// REUSE path
-	if (sharedSession && !sharedSession.needsRebuild) {
-		const missed = priorMessages.slice(sharedSession.cursor);
-		const trailingAssistantOnly =
-			missed.length === 1 && (missed[0] as { role?: string }).role === "assistant";
-		if (missed.length === 0 || trailingAssistantOnly) {
-			if (trailingAssistantOnly) {
-				setSharedSession({ ...sharedSession, cursor: priorMessages.length, cwd });
-			}
-			debug(`Case 3: ${trailingAssistantOnly ? "advanced cursor past trailing assistant, " : ""}resuming session ${sharedSession.sessionId.slice(0, 8)}, cursor=${sharedSession.cursor}`);
-			debug(`syncResult: path=reuse sessionId=${sharedSession.sessionId} cursor=${sharedSession.cursor}`);
-			return { sessionId: sharedSession.sessionId };
+	// REUSE path. A Claude session can only be resumed under the credential
+	// profile that created its JSONL and prompt cache.
+	if (sharedSession && sameAccount && !sharedSession.needsRebuild) {
+		const batch = planIncrementalPromptBatch(messages, sharedSession.cursor);
+		if (batch) {
+			// Read the pre-update cursor first: setSharedSession reassigns the live
+			// binding, so comparing against sharedSession.cursor afterwards would
+			// always be equal and the "advanced past trailing assistant" debug
+			// branch could never print (vstack#993).
+			const cursorBeforeUpdate = sharedSession.cursor;
+			// A REUSE match proves identity, so the anchor may only strengthen here:
+			// a pre-3.1.1 record adopts it outright, and a turn-1 user-only anchor
+			// upgrades to the two-component form once the conversation has its
+			// first assistant message (see conversationFingerprintUpgrade).
+			const upgradedFingerprint = conversationFingerprintUpgrade(sharedSession.conversationFingerprint, incomingFingerprint);
+			setSharedSession({
+				...sharedSession,
+				cursor: batch.promptStart,
+				cwd,
+				...(upgradedFingerprint ? { conversationFingerprint: upgradedFingerprint } : {}),
+			});
+			const batching = batch.userMessageCount > 1
+				? `batched ${batch.userMessageCount} consecutive user messages, `
+				: batch.promptStart > cursorBeforeUpdate ? "advanced cursor past trailing assistant, " : "";
+			debug(`Case 3: ${batching}resuming session ${sharedSession.sessionId.slice(0, 8)}, cursor=${batch.promptStart}, account=${accountProfileId ?? "default"}`);
+			debug(`syncResult: path=reuse sessionId=${sharedSession.sessionId} cursor=${batch.promptStart} promptUsers=${batch.userMessageCount}`);
+			return {
+				sessionId: sharedSession.sessionId,
+				promptStart: batch.promptStart,
+			};
 		}
 	}
 
 	// REBUILD path
 	if (priorMessages.length === 0) {
-		debug(`Case 1: clean start, ${messages.length} total messages`);
+		debug(`Case 1: clean start, ${messages.length} total messages, account=${accountProfileId ?? "default"}`);
 		debug(`syncResult: path=clean-start`);
-		return { sessionId: null };
+		return { sessionId: null, promptStart: messages.length - 1 };
 	}
-	const previousSessionId = sharedSession?.sessionId;
-	const previousCursor = sharedSession?.cursor ?? 0;
+	const replacedSessionId = sharedSession?.sessionId;
+	// Preserve a UUID only within the same credential profile: reusing account
+	// A's session id under B could resume the wrong transcript, and deleting A's
+	// JSONL from B's rebuild would destroy A's still-valid history.
+	const previousSessionId = sameAccount ? sharedSession?.sessionId : undefined;
+	const previousCursor = sameAccount ? sharedSession?.cursor ?? 0 : 0;
 	// preserveId: rebuild in place (deleteSession + createSession with the
 	// existing UUID), so prompt-cache UUIDs stay stable for log correlation
 	// and for any tools that key off them. Skipped only when there's a
@@ -303,27 +612,38 @@ export function syncSharedSession(
 	const preserveId = previousSessionId !== undefined && !sharedSession?.forceRotate;
 	if (preserveId) {
 		// Wipe prior jsonl + companion dir (no-op if nothing to wipe).
-		deleteSession(previousSessionId!, cwd, process.env.CLAUDE_CONFIG_DIR);
+		deleteSession(previousSessionId!, cwd, claudeDir);
 	}
 	const session = createSession({
 		projectPath: cwd,
-		claudeDir: process.env.CLAUDE_CONFIG_DIR,
+		claudeDir,
 		...(preserveId ? { sessionId: previousSessionId } : {}),
 		...(modelId ? { model: modelId } : {}),
 	});
 	convertAndImportMessages(session, priorMessages, customToolNameToSdk, cwd);
 	session.save();
-	verifyWrittenSession(session.jsonlPath, session.sessionId, session.messages.length, cwd);
-	setSharedSession({ sessionId: session.sessionId, cursor: priorMessages.length, cwd });
-	if (previousSessionId === undefined) {
+	verifyWrittenSession(session.jsonlPath, session.sessionId, session.messages.length, cwd, claudeDir);
+	setSharedSession({
+		sessionId: session.sessionId,
+		cursor: priorMessages.length,
+		cwd,
+		// The rebuilt file's content IS this context, so its anchor is the
+		// record's identity — including after a compact/tree-nav that moved it.
+		...(incomingFingerprint ? { conversationFingerprint: incomingFingerprint } : {}),
+		...(accountProfileId ? { accountProfileId } : {}),
+		...(scopeConfigDir ? { claudeConfigDir: scopeConfigDir } : {}),
+	});
+	if (replacedSessionId === undefined) {
 		debug(`Case 2: first turn with ${priorMessages.length} prior messages → session ${session.sessionId.slice(0, 8)}, ${session.messages.length} records`);
+	} else if (!sameAccount) {
+		debug(`Case 5 account-rotation: ${priorMessages.length} prior messages → new session ${session.sessionId.slice(0, 8)} for account ${accountProfileId ?? "default"} (replaced ${replacedSessionId.slice(0, 8)})`);
 	} else if (preserveId) {
 		const missedCount = priorMessages.length - previousCursor;
 		debug(`Case 4: ${missedCount} missed messages, ${priorMessages.length} total → rewrote session ${session.sessionId.slice(0, 8)} (same id), ${session.messages.length} records`);
 	} else {
-		debug(`Case 4 post-abort: ${priorMessages.length} total → new session ${session.sessionId.slice(0, 8)} (was ${previousSessionId.slice(0, 8)}, rotated to avoid race with orphan writer), ${session.messages.length} records`);
+		debug(`Case 4 post-abort: ${priorMessages.length} total → new session ${session.sessionId.slice(0, 8)} (was ${previousSessionId!.slice(0, 8)}, rotated to avoid race with orphan writer), ${session.messages.length} records`);
 	}
-	debugSessionPaths(`${session.sessionId.slice(0, 8)}`, cwd, session.jsonlPath);
-	debug(`syncResult: path=rebuild sessionId=${session.sessionId} priors=${priorMessages.length} ${previousSessionId === undefined ? "first" : preserveId ? "preserved" : "rotated-post-abort"}`);
-	return { sessionId: session.sessionId };
+	debugSessionPaths(`${session.sessionId.slice(0, 8)}`, cwd, session.jsonlPath, claudeDir);
+	debug(`syncResult: path=rebuild sessionId=${session.sessionId} priors=${priorMessages.length} ${replacedSessionId === undefined ? "first" : !sameAccount ? "account-rotated" : preserveId ? "preserved" : "rotated-post-abort"}`);
+	return { sessionId: session.sessionId, promptStart: messages.length - 1 };
 }