diff --git a/src/agents/cli-session.test.ts b/src/agents/cli-session.test.ts
index 4827d0c8046..5718b0d26d3 100644
--- a/src/agents/cli-session.test.ts
+++ b/src/agents/cli-session.test.ts
@@ -47,9 +47,12 @@ describe("cli-session helpers", () => {
       claudeCliSessionId: "legacy-session",
     };
 
-    expect(resolveCliSessionReuse({ binding: getCliSessionBinding(entry, "claude-cli") })).toEqual({
-      sessionId: "legacy-session",
-    });
+    expect(
+      resolveCliSessionReuse({
+        binding: getCliSessionBinding(entry, "claude-cli"),
+        authEpochVersion: 2,
+      }),
+    ).toEqual({ sessionId: "legacy-session" });
   });
 
   it("invalidates legacy bindings when auth, prompt, or MCP state changes", () => {
@@ -64,18 +67,21 @@ describe("cli-session helpers", () => {
     expect(
       resolveCliSessionReuse({
         binding,
+        authEpochVersion: 2,
         authProfileId: "anthropic:work",
       }),
     ).toEqual({ invalidatedReason: "auth-profile" });
     expect(
       resolveCliSessionReuse({
         binding,
+        authEpochVersion: 2,
         extraSystemPromptHash: "prompt-hash",
       }),
     ).toEqual({ invalidatedReason: "system-prompt" });
     expect(
       resolveCliSessionReuse({
         binding,
+        authEpochVersion: 2,
         mcpConfigHash: "mcp-hash",
       }),
     ).toEqual({ invalidatedReason: "mcp" });
diff --git a/src/agents/cli-session.ts b/src/agents/cli-session.ts
index d7724d30fef..0504a1c5571 100644
--- a/src/agents/cli-session.ts
+++ b/src/agents/cli-session.ts
@@ -126,7 +126,7 @@ export function resolveCliSessionReuse(params: {
   binding?: CliSessionBinding;
   authProfileId?: string;
   authEpoch?: string;
-  authEpochVersion?: number;
+  authEpochVersion: number;
   extraSystemPromptHash?: string;
   mcpConfigHash?: string;
   mcpResumeHash?: string;