[cold-review] feat(peer): ping_peer delivery provenance (#1203)

.github/workflows/test.yml

@@ -15,14 +15,18 @@ jobs:
             - run: bun install
             - run: bun typecheck
             - run: bunx playwright install --with-deps chromium
-            - run: bun run test:e2e -- terminal-wrap-fidelity.spec.ts
-            - name: Create integration test env
-              run: |
-                  {
-                      echo "HAPI_HOME=~/.hapi-dev-test"
-                      echo "HAPI_API_URL=http://localhost:3006"
-                      echo "CLI_API_TOKEN=${CLI_API_TOKEN:-dev-test-token}"
-                      echo "HAPI_DAEMON_HTTP_TIMEOUT=60000"
-                      echo "HAPI_DAEMON_HEARTBEAT_INTERVAL=30000"
-                  } > cli/.env.integration-test
+            - run: bun run test:e2e -- terminal-wrap-fidelity.spec.ts composer-copy.spec.ts
             - run: bun run test
+
+    # Serial runner-integration suite: starts real detached runner/session
+    # process trees against an isolated temp hub, so it runs in its own job
+    # (never in the parallel unit-test path). See cli/vitest.integration.config.ts.
+    integration:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: oven-sh/setup-bun@v2
+              with:
+                  bun-version: 1.3.14
+            - run: bun install
+            - run: bun run test:cli:integration

cli/README.md

@@ -44,7 +44,7 @@ hapi resume
 hapi resume <session-id>
 ```
 
-`hapi resume` lists resumable sessions for the current machine. `hapi resume <session-id>` hands off an active remote session and opens the same HAPI session in the local terminal.
+`hapi resume` lists resumable sessions for the current machine. `hapi resume <session-id>` hands off an active remote session and opens the same HAPI session in the local terminal when inject env or a peercred grant from a tracked session tree is available; otherwise resume from the web UI (same-UID provenance fails closed for unrelated shells).
 
 ### Authentication
 

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twsxtd/hapi",
-  "version": "0.27.2",
+  "version": "0.27.3",
   "description": "App for agentic coding - access coding agent anywhere",
   "author": "Kirill Dubovitskiy & weishu",
   "license": "AGPL-3.0-only",
@@ -26,11 +26,11 @@
     }
   },
   "optionalDependencies": {
-    "@twsxtd/hapi-darwin-arm64": "0.27.2",
-    "@twsxtd/hapi-darwin-x64": "0.27.2",
-    "@twsxtd/hapi-linux-arm64": "0.27.2",
-    "@twsxtd/hapi-linux-x64": "0.27.2",
-    "@twsxtd/hapi-win32-x64": "0.27.2"
+    "@twsxtd/hapi-darwin-arm64": "0.27.3",
+    "@twsxtd/hapi-darwin-x64": "0.27.3",
+    "@twsxtd/hapi-linux-arm64": "0.27.3",
+    "@twsxtd/hapi-linux-x64": "0.27.3",
+    "@twsxtd/hapi-win32-x64": "0.27.3"
   },
   "scripts": {
     "postinstall": "node -e \"try{require('fs').chmodSync(require('path').join(__dirname,'bin','hapi.cjs'),0o755)}catch(e){}\"",
@@ -44,6 +44,8 @@
     "tools:unpack": "bun run scripts/unpack-tools.ts",
     "update-homebrew-formula": "bun run scripts/update-homebrew-formula.ts",
     "test": "bun run tools:unpack && vitest run",
+    "test:integration": "bun run tools:unpack && vitest run --config vitest.integration.config.ts",
+    "test:integration:stress": "bun run tools:unpack && HAPI_RUN_STRESS_TESTS=true vitest run --config vitest.integration.config.ts",
     "test:win": "vitest run",
     "dev": "bun src/index.ts",
     "dev:local-server": "bun --env-file .env.dev-local-server src/index.ts",

cli/src/agent/backends/acp/AcpSdkBackend.initialize.test.ts

@@ -4,9 +4,11 @@ const transportState = vi.hoisted(() => ({
     calls: [] as Array<{ method: string; params?: unknown }>
 }));
 
-vi.mock('./AcpStdioTransport', () => ({
-    AcpStdioTransport: class {
-        constructor(_options: unknown) {}
+vi.mock('./AcpStdioTransport', () => {
+    class MockAcpStdioTransport {
+        static async create(_options: unknown) {
+            return new MockAcpStdioTransport();
+        }
         onNotification = vi.fn();
         onStderrError = vi.fn();
         registerRequestHandler = vi.fn();
@@ -19,7 +21,8 @@ vi.mock('./AcpStdioTransport', () => ({
         });
         close = vi.fn(async () => {});
     }
-}));
+    return { AcpStdioTransport: MockAcpStdioTransport };
+});
 
 import { AcpSdkBackend } from './AcpSdkBackend';
 

cli/src/agent/backends/acp/AcpSdkBackend.test.ts

@@ -1412,4 +1412,131 @@ describe('AcpSdkBackend', () => {
             { type: 'turn_complete', stopReason: 'end_turn' }
         ]);
     });
+
+    it('notifies agent-activity listener for sustained running + idle, not content/usage noise (#1470/#1502)', () => {
+        vi.useFakeTimers();
+        const backend = new AcpSdkBackend({ command: 'agent' });
+        const activity: boolean[] = [];
+        backend.setAgentActivityListener((thinking) => {
+            activity.push(thinking);
+        });
+
+        const backendInternal = backend as unknown as {
+            handleSessionUpdate: (params: unknown) => void;
+        };
+
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: {
+                sessionUpdate: ACP_SESSION_UPDATE_TYPES.agentMessageChunk,
+                content: { type: 'text', text: 'resumed' }
+            }
+        });
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: {
+                sessionUpdate: ACP_SESSION_UPDATE_TYPES.toolCallUpdate,
+                toolCallId: 'tc-bg',
+                status: 'in_progress'
+            }
+        });
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: { sessionUpdate: 'usage_update', used: 1_000, size: 200_000 }
+        });
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: {
+                sessionUpdate: ACP_SESSION_UPDATE_TYPES.sessionInfoUpdate,
+                title: 'noise'
+            }
+        });
+        // Chatter: running then idle before debounce → no true bump (idle may clear)
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: { sessionUpdate: 'state_update', state: 'running' }
+        });
+        vi.advanceTimersByTime(200);
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: { sessionUpdate: 'state_update', state: 'idle' }
+        });
+        expect(activity.filter((v) => v === true)).toEqual([]);
+
+        // Sustained running commits after debounce
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: { sessionUpdate: 'state_update', state: 'running' }
+        });
+        vi.advanceTimersByTime(750);
+        expect(activity.filter((v) => v === true)).toEqual([true]);
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: { sessionUpdate: 'state_update', state: 'idle' }
+        });
+        expect(activity.at(-1)).toBe(false);
+        vi.useRealTimers();
+    });
+
+    it('ignores idle clears while a HAPI prompt turn is still draining', () => {
+        const backend = new AcpSdkBackend({ command: 'agent' });
+        const activity: boolean[] = [];
+        backend.setAgentActivityListener((thinking) => {
+            activity.push(thinking);
+        });
+        const backendInternal = backend as unknown as {
+            handleSessionUpdate: (params: unknown) => void;
+            isProcessingMessage: boolean;
+        };
+        backendInternal.isProcessingMessage = true;
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: { sessionUpdate: 'state_update', state: 'idle' }
+        });
+        expect(activity).toEqual([]);
+        backendInternal.isProcessingMessage = false;
+        backendInternal.handleSessionUpdate({
+            sessionId: 'session-1',
+            update: { sessionUpdate: 'state_update', state: 'idle' }
+        });
+        expect(activity).toEqual([false]);
+    });
+
+    it('notifies agent-activity listener when a permission request arrives (#1470)', async () => {
+        const backend = new AcpSdkBackend({ command: 'agent' });
+        const activity: boolean[] = [];
+        backend.setAgentActivityListener((thinking) => {
+            activity.push(thinking);
+        });
+        backend.onPermissionRequest(() => {
+            // leave pending; we only care that activity fired first
+        });
+
+        const backendInternal = backend as unknown as {
+            handlePermissionRequest: (params: unknown, requestId: string) => Promise<unknown>;
+        };
+
+        const pending = backendInternal.handlePermissionRequest({
+            sessionId: 'session-1',
+            toolCall: {
+                toolCallId: 'tc-1',
+                title: 'Shell',
+                kind: 'execute',
+                status: 'pending'
+            },
+            options: [{ optionId: 'allow-once', name: 'Allow once', kind: 'allow_once' }]
+        }, 'req-1');
+
+        expect(activity).toEqual([true]);
+        // Cancel so the promise does not hang the suite.
+        await backend.respondToPermission('session-1', {
+            id: 'tc-1',
+            sessionId: 'session-1',
+            toolCallId: 'tc-1',
+            title: 'Shell',
+            kind: 'execute',
+            options: []
+        }, { outcome: 'cancelled' });
+        await pending;
+    });
 });