[cold-review] feat(peer): ping_peer delivery provenance (#1203) - #118

Draft

heavygee wants to merge 148 commits into

mainfrom

feat/a2a-p05-peer-provenance

Commits on Aug 10, 2026

feat(peer): attribute ping_peer deliveries with trusted provenance

heavygee
and
cursoragent
committed
de3d95f
feat(web): show peer delivery sender as @session mention chip

heavygee
and
cursoragent
committed
979800d
fix(peer): bind provenance to CLI path; surface source to agents

heavygee
and
cursoragent
committed
3c948eb
fix(peer): require session capability for attributed delivery; annotate Pi

heavygee
and
cursoragent
committed
f094e2b
fix(peer): stabilize user-row aui selectors; recover capability on resume

heavygee
and
cursoragent
committed
4d70bb5
fix(peer): gate capability mint on session tag; fail closed on race

heavygee
and
cursoragent
committed
8c53c0e
fix(peer): drop shared credential store; parent-broker CLI attribution

heavygee
and
cursoragent
committed
5f83c77
fix(peer): close pass2e-alt B1/M1-M4 provenance residuals

heavygee
and
cursoragent
committed
842d3b7
fix(peer): drain resume mint fd before any await (pass2f B1)

heavygee
and
cursoragent
committed
81d64b7
fix(peer): hub one-shot resume mint; no tag in child (pass2g B1)

heavygee
and
cursoragent
committed
6afccf3
fix(peer): bind resume mint to spawn nonce + PID inject (pass2h B1)

heavygee
and
cursoragent
committed
45f257d
fix(peer): run inject tests under Vitest; fix resume mint comment (pass2i B1)

heavygee
and
cursoragent
committed
d20bd6e
fix(peer): bind machine RPC to machineTag; fix peercred/RPC/inject races

heavygee
and
cursoragent
committed
f70c36c
fix(cli): tolerate sockets without timeout() in rpc-register retry

heavygee
and
cursoragent
committed
2037afb
fix(peer): close legacy machine tag bind; restore session RPC

heavygee
and
cursoragent
committed
4734537
test(hub): expect machine tag arg on lazy session create

heavygee
and
cursoragent
committed
8b446da
fix(peer): mint resume capability only on exact machineId

heavygee
and
cursoragent
committed
2d4df36
fix(peer): fail soft on inject bind; persist re-enrolled machineId

heavygee
and
cursoragent
committed
69aabe2
fix(peer): keep lazy re-enroll machineId; catch broker disconnects

heavygee
and
cursoragent
committed
737f6dc
fix(peer): require session/machine possession for identity RPC

heavygee
and
cursoragent
committed
8f44a2b
fix(peer): block peer slash control; mint terminal resume RPC proof

heavygee
and
cursoragent
committed
7987fa3
fix(peer): drop machineTag session-capability mint; gate Codex peer specials

heavygee
and
cursoragent
committed
6d108ed
fix(peer): bind machine RPC to memory-only runner lease

heavygee
and
cursoragent
committed
f151c7f
fix(peer): bind runner proof hash; strip forged peer meta; resume aliases

heavygee
and
cursoragent
committed
19c4d63
fix(peer): keep runnerProof memory-only; refuse null-hash first-claim

heavygee
and
cursoragent
committed
8299bbb
fix(peer): hand off runnerProof on restart; await broker listen

heavygee
and
cursoragent
committed
fee59f8
fix(peer): socket-handoff runnerProof; fail-closed direct resume

heavygee
and
cursoragent
committed
1909b6b
fix(peer): close bot Majors on inject, proof, and resume

heavygee
and
cursoragent
committed
21e4f49
fix(peer): type prepareLocalResumeInject mock return

heavygee
and
cursoragent
committed
f42063e
fix(peer): peercred local-resume grant; source-proof migrate

heavygee
and
cursoragent
committed
16362df
fix(peer): clear direct-resume capability between tests

heavygee
and
cursoragent
committed
cf563f5
fix(peer): refuse same-UID proof store and open local grants

heavygee
and
cursoragent
committed
eb5f890
fix(peer): re-enroll machine on cold-start proof loss

heavygee
and
cursoragent
committed
130dc8b
fix(peer): restore terminal resume; Windows broker; await readiness

heavygee
and
cursoragent
committed
4f5aa8e
fix(peer): cold-restart reenroll grant, Windows PPID, lazy broker await

heavygee
and
cursoragent
committed
618d28e
fix(peer): refresh reenroll grants; fix migrate race and Win handles

heavygee
and
cursoragent
committed
21d9e47
test(store): expect schema v25 after reenroll grants table

heavygee
and
cursoragent
committed
48acc5c
fix(peer): crash-safe reenroll grants and terminal local resume

heavygee
and
cursoragent
committed
993a8f1
fix(peer): scope local-resume mint; harden cold recovery

heavygee
and
cursoragent
committed
bd1e25c
fix(peer): serialize grant refresh; atomic migrate+consume

heavygee
and
cursoragent
committed
21932f1
fix(peer): operator exe check; pending grant write; migrate replay

heavygee
and
cursoragent
committed
1fae0aa
fix(peer): resume cmdline proof; durable pending grant; strict replay

heavygee
and
cursoragent
committed
6e5ec7e
fix(peer): tracked-only unix mint; consumed-grant replay; dir fsync

heavygee
and
cursoragent
committed
6e28965
fix(peer): kill HTTP resume mint; durable replay; unattributed fallback

heavygee
and
cursoragent
committed
faaa9c2
fix(store): renumber peer schema steps after work-graph v23

heavygee
and
cursoragent
committed
f65418e
fix(peer): drop file reenroll grants for same-UID isolation

heavygee
and
cursoragent
committed
a7d1dd3
fix(peer): refuse cold machine rotation without secure remap

heavygee
and
cursoragent
committed
a81b70b
fix(peer): offline proof rebind keeps machineId for cold start

heavygee
and
cursoragent
committed
76af8f4
fix(peer): drop tag offline rebind; restore cold machine rotate

heavygee
and
cursoragent
committed
07e775c
fix(peer): cold proof rebind keeps machineId for Cursor resume

heavygee
and
cursoragent
committed
4f65f30
fix(web): show unverified peer chips with claimed @name and ⚠

heavygee
and
cursoragent
committed
785c4fe
fix(web): only strip From: stamps on unverified peer rows

heavygee
and
cursoragent
committed
905c7e5

Commits on Aug 11, 2026

Commits on Aug 12, 2026

fix(hub): do not fake-archive in-flight CLIs without KillSession

heavygee
and
cursoragent
committed
c5d2a76
fix(hub): treat archive liveness as heartbeat, not room join

heavygee
and
cursoragent
committed
119e258
fix(test): stop runner integration suite from leaking detached process trees (#1515) (#1521)
swear01
authored
291e7bc
fix(web): fail-closed scheme-less markdown file links (#1519)

heavygee
and
cursoragent
authored
c1ceb83
fix(cursor): stop session-list spinner flicker from ACP state_update (#1503)

heavygee
and
cursoragent
authored
7c4b3ab
fix(cursor): close ACP list-models race and false exit 143 window (#1518)

heavygee
and
cursoragent
authored
c69a88a
feat(web): settings for AGENT_NOTIFY_SUMMARY chat display (default hide) (#1477)

authored
51ae260
fix(web): restore scroll chaining from reasoning panel to chat viewport (#1501)
swear01
authored
b9d1abe
Release version 0.27.3
tiann
committed
fea4221
feat(doctor): add cross-machine provenance audit subcommand

heavygee
and
cursoragent
committed
08abd05
merge(upstream): main into feat/a2a-p05-peer-provenance
heavygee
committed
0e55c5a
fix(web): add showSessionSummaryInChat to chat context test mocks

heavygee
and
cursoragent
committed
e819571
fix(cursor): exclusive agent spawn lease for list-models vs ACP (#1529)

heavygee
and
cursoragent
authored
df1a56e

Commits on Aug 13, 2026

fix(web): improve session search UI (#1545)
techotaku39
authored
febbf8f
feat(doctor): audit unverified peer messages in provenance scan

heavygee
and
cursoragent
committed
a77a025
merge(upstream): main into feat/a2a-p05-peer-provenance
heavygee
committed
d6ad992
fix(web): dedupe showSessionSummaryInChat in markdown-a test mock

heavygee
and
cursoragent
committed
ac04304
fix(#1473): address Codex review threads on provenance hardening

heavygee
and
cursoragent
committed
7701e51
fix(cli): fail closed when active resume lacks capability

heavygee
and
cursoragent
committed
885d234
fix(cli): always hand off active sessions before local resume

heavygee
and
cursoragent
committed
1d55a4b

Commits on Aug 15, 2026

Commits on Aug 16, 2026

Commits on Aug 17, 2026

fix(peer): runner-side terminal resume; offline-only cold proof rebind

heavygee
and
cursoragent
committed
c098754
fix(peer): durable runnerProof; await resume inject; local mint resume

heavygee
and
cursoragent
committed
eb63b00
fix(peer): keep runnerProof memory-only; fail-closed terminal resume

heavygee
and
cursoragent
committed
e377fd9
docs(peer): clarify memory-only runnerProof in hub comments

heavygee
and
cursoragent
committed
ba61bda