@gajae-code/coding-agent 0.11.0 → 0.11.2

package/scripts/generate-sdk-operation-inventory.ts

@@ -32,6 +32,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"slash_command:notify":
 		"interactive diagnostics command; session on/off delegate to the notifications extension, not an SDK ingress seam",
 	"slash_command:pet": "visual/local-only command, not a user-facing SDK control seam",
+	"slash_command:transcript": "visual/local-only transcript viewer, not a user-facing SDK control seam",
+	"slash_command:sessions": "visual/local-only sessions dashboard, not a user-facing SDK control seam",
 	"agent_session:constructor": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:nextToolChoice": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:setForcedToolChoice": "internal accessor/plumbing, not a user-facing control seam",
@@ -50,6 +52,9 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:estimateMidRunContextTokensForTests": "test-only estimator seam, not a user-facing SDK control seam",
 	"agent_session:activeMidRunBarrierCountForTests": "read-only test seam, not a user-facing SDK control seam",
 	"agent_session:activeMidRunMaintenanceCountForTests": "read-only test seam, not a user-facing SDK control seam",
+	"agent_session:getPendingNextTurnMessagesForTests": "read-only test seam, not a user-facing SDK control seam",
+	"agent_session:setCancelAndSubmitAbortOutcomeProviderForTests":
+		"test-only cancellation seam, not a user-facing SDK control seam",
 	"agent_session:getAgentId": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:emitNotice": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:subscribe": "internal accessor/plumbing, not a user-facing control seam",
@@ -57,6 +62,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:closeWriterStrict": "internal ACP lifecycle teardown plumbing, not a user-facing control seam",
 	"agent_session:disposeChildSubprocesses": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:waitForIdle": "internal accessor/plumbing, not a user-facing control seam",
+	"agent_session:awaitPendingContextTransformations":
+		"internal context-transformation lifecycle barrier, not a user-facing SDK control seam",
 	"agent_session:drainAsyncJobDeliveriesForAcp": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getAsyncDeliveryStateForAcp":
 		"internal ACP lifecycle quiescence plumbing, not a user-facing control seam",
@@ -66,10 +73,7 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:hasForegroundBashBackgroundRequestHandler":
 		"internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:requestForegroundBashBackground": "internal accessor/plumbing, not a user-facing control seam",
-	"agent_session:isMCPDiscoveryEnabled": "internal accessor/plumbing, not a user-facing control seam",
-	"agent_session:getDiscoverableMCPSearchIndex": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getSelectedMCPToolNames": "internal accessor/plumbing, not a user-facing control seam",
-	"agent_session:activateDiscoveredMCPTools": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:isToolDiscoveryEnabled": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getDiscoverableToolSearchIndex": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getSelectedDiscoveredToolNames": "internal accessor/plumbing, not a user-facing control seam",
@@ -85,6 +89,7 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:setPlanModeState": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getGoalModeState": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:setGoalModeState": "internal accessor/plumbing, not a user-facing control seam",
+	"agent_session:setSdkPlanModeHandler": "internal host lifecycle plumbing for mode.plan.set",
 	"agent_session:getWorkflowGateEmitter": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getAskAnswerSource": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:setWorkflowGateEmitter": "internal accessor/plumbing, not a user-facing control seam",
@@ -105,6 +110,7 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:purgeQueuedCustomMessages": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:clearQueue": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:popLastQueuedMessage": "internal accessor/plumbing, not a user-facing control seam",
+	"agent_session:cancelAndSubmit": "interactive queue transaction plumbing, not an independent SDK control seam",
 	"agent_session:applyCompactionPostAppendForTests": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:continuePersistedHistory": "internal startup lifecycle plumbing, not a user-facing control seam",
 	"agent_session:setActiveModelProfile": "internal accessor/plumbing, not a user-facing control seam",
@@ -126,6 +132,7 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:fetchUsageReportsForControl":
 		"internal Telegram control wrapper over the reviewed usage.get seam, not an independent public SDK operation",
 	"agent_session:cycleRoleModels": "internal accessor/plumbing, not a user-facing control seam",
+	"agent_session:getRoleModelCycleCandidateCount": "internal role-model display accessor, not a user-facing SDK seam",
 	"agent_session:isFastModeEnabled": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:isFastForProvider": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:isFastForSubagentProvider": "internal accessor/plumbing, not a user-facing control seam",
@@ -221,7 +228,6 @@ const SEAM_TO_SDK: Readonly<Record<string, string>> = {
 	"agent_session:setTodoPhases": "todo.replace",
 	"agent_session:getQueuedMessageEntries": "queue.messages.list",
 	"agent_session:getAllToolNames": "tools.list",
-	"agent_session:getDiscoverableMCPTools": "tools.list",
 	"agent_session:getDiscoverableTools": "tools.list",
 	"agent_session:sendUserMessage": "turn.steer",
 	"agent_session:reload": "runtime.reload",
@@ -270,17 +276,30 @@ export interface SourceSeam {
 	sourceFile: string;
 	sourceKind: SourceKind;
 }
-interface InventoryRecord {
+interface IncludedInventoryRecord {
 	sourceId: string;
 	sourceFile: string;
 	sourceKind: SourceKind;
-	decision: "include" | "exclude";
-	rationale?: string;
-	sdkId?: string;
+	decision: "include";
+	sdkId: string;
 	adapterMappings: Operation["adapterDispositions"];
 	testIds: string[];
 }
 
+interface ExcludedInventoryRecord {
+	sourceId: string;
+	sourceFile: string;
+	sourceKind: SourceKind;
+	decision: "exclude";
+	rationale: string;
+	exclusionMetadata: {
+		adapterMappings: "not_applicable";
+		testIds: "not_applicable";
+	};
+}
+
+type InventoryRecord = IncludedInventoryRecord | ExcludedInventoryRecord;
+
 function repoPath(file: string): string {
 	return path.relative(repoRoot, file).split(path.sep).join("/");
 }
@@ -291,7 +310,10 @@ function collectCaseSeams(source: string, prefix: string): string[] {
 }
 
 export function scanSlashCommands(sourceText: string): string[] {
-	const builtinRegistry = sourceText.slice(sourceText.indexOf("const BUILTIN_SLASH_COMMAND_REGISTRY"));
+	const anchor = "const BUILTIN_SLASH_COMMAND_REGISTRY";
+	const anchorIndex = sourceText.indexOf(anchor);
+	if (anchorIndex === -1) throw new Error(`SDK operation inventory scanner: required anchor ${anchor} was not found.`);
+	const builtinRegistry = sourceText.slice(anchorIndex);
 	return [...builtinRegistry.matchAll(/^\t\tname:\s*["']([^"']+)["']/gm)].map(match => `slash_command:${match[1]}`);
 }
 
@@ -664,14 +686,17 @@ export function scanAgentSessionMethods(sourceText: string): string[] {
 		for (let bodyIndex = index + 2; bodyIndex < tokens.length; bodyIndex++) {
 			if (tokens[bodyIndex]!.text === "<") angleDepth++;
 			else if (tokens[bodyIndex]!.text === ">" && angleDepth > 0) angleDepth--;
+			else if (tokens[bodyIndex]!.text === ";" && angleDepth === 0) break;
 			else if (tokens[bodyIndex]!.text === "{" && angleDepth === 0) {
 				bodyStart = bodyIndex;
 				break;
 			}
 		}
-		if (bodyStart === undefined) return [];
+		if (bodyStart === undefined)
+			throw new Error("SDK operation inventory scanner: AgentSession class is missing its opening body delimiter.");
 		const bodyEnd = matchingToken(tokens, bodyStart, "{", "}");
-		if (bodyEnd === undefined) return [];
+		if (bodyEnd === undefined)
+			throw new Error("SDK operation inventory scanner: AgentSession class body is unbalanced.");
 
 		const methods: string[] = [];
 		for (let memberStart = bodyStart + 1; memberStart < bodyEnd; ) {
@@ -685,7 +710,7 @@ export function scanAgentSessionMethods(sourceText: string): string[] {
 		}
 		return methods;
 	}
-	return [];
+	throw new Error("SDK operation inventory scanner: required AgentSession class declaration was not found.");
 }
 
 export function scanAcpMethods(sourceText: string): string[] {
@@ -776,14 +801,24 @@ function generatedRecords(seams: Awaited<ReturnType<typeof scanSeams>>): Invento
 		const sdkId = SEAM_TO_SDK[seam.sourceId];
 		const rationale = lockedExclusion(seam.sourceId);
 		if (!sdkId && !rationale) continue;
-		const operation = sdkId ? OPERATIONS.find(candidate => candidate.sdkId === sdkId) : undefined;
-		if (sdkId && !operation) throw new Error(`SEAM_TO_SDK maps ${seam.sourceId} to unknown SDK ID: ${sdkId}`);
+		if (!sdkId) {
+			if (!rationale) continue;
+			records.push({
+				...seam,
+				decision: "exclude",
+				rationale,
+				exclusionMetadata: { adapterMappings: "not_applicable", testIds: "not_applicable" },
+			});
+			continue;
+		}
+		const operation = OPERATIONS.find(candidate => candidate.sdkId === sdkId);
+		if (!operation) throw new Error(`SEAM_TO_SDK maps ${seam.sourceId} to unknown SDK ID: ${sdkId}`);
 		records.push({
 			...seam,
-			decision: (sdkId ? "include" : "exclude") as "include" | "exclude",
-			...(sdkId ? { sdkId } : { rationale }),
-			adapterMappings: operation?.adapterDispositions ?? OPERATIONS[0]!.adapterDispositions,
-			testIds: operation?.testIds ?? ["packages/coding-agent/test/sdk-operation-inventory.test.ts"],
+			decision: "include",
+			sdkId,
+			adapterMappings: operation.adapterDispositions,
+			testIds: operation.testIds,
 		});
 	}
 	return records;
@@ -804,8 +839,17 @@ function validateRegistry(records: InventoryRecord[]): string[] {
 		if (operation.testIds.length === 0) errors.push(`${operation.id} is missing test IDs.`);
 	}
 	for (const record of records) {
-		if (record.decision === "exclude" && !record.rationale)
-			errors.push(`${record.sourceId} exclusion lacks a locked rationale.`);
+		if (record.decision === "exclude") {
+			if (!record.rationale) errors.push(`${record.sourceId} exclusion lacks a locked rationale.`);
+			if (
+				record.exclusionMetadata.adapterMappings !== "not_applicable" ||
+				record.exclusionMetadata.testIds !== "not_applicable"
+			)
+				errors.push(
+					`${record.sourceId} exclusion metadata must mark adapter mappings and test IDs as not applicable.`,
+				);
+			continue;
+		}
 		if (ADAPTERS.some(adapter => !record.adapterMappings[adapter]))
 			errors.push(`${record.sourceId} is missing adapter mappings.`);
 		if (record.testIds.length === 0) errors.push(`${record.sourceId} is missing test IDs.`);

package/scripts/verify-gjc-sdk-canonicalization.ts

@@ -981,6 +981,7 @@ function isSource(file: string): boolean {
 }
 
 const teamRuntimeTmuxPath = "packages/coding-agent/src/gjc-runtime/team-runtime.ts";
+const teamWorkersTmuxPath = "packages/coding-agent/src/gjc-runtime/team-workers.ts";
 
 const coordinatorMcpRoot = "packages/coding-agent/src/coordinator-mcp/server.ts";
 function isPublishedGjcSessionShellHelper(file: string): boolean {
@@ -1427,6 +1428,16 @@ function exactTeamRuntimeSendKeysRanges(contents: string): ShellRange[] {
 			/Bun\.spawnSync\(\s*\[\s*config\.tmux_command\s*,\s*["']send-keys["']\s*,\s*["']-l["']\s*,\s*["']-t["']\s*,\s*paneId\s*,\s*workerCommand\s*\]\s*,\s*\{[\s\S]{0,200}?stdout\s*:\s*["']ignore["'][\s\S]{0,200}?stderr\s*:\s*["']ignore["'][\s\S]{0,100}?\}\s*\)\s*;/g,
 		),
 	];
+	const continuationPromptMatches = [
+		...contents.matchAll(
+			/(?:const\s+GJC_TEAM_CONTINUATION_PROMPT\s*=\s*["']Continue only your current claimed GJC team task\. Re-read current GJC team state; do not replay prior output; report status\.["']\s*;|import\s*\{[\s\S]{0,1000}?\bGJC_TEAM_CONTINUATION_PROMPT\b[\s\S]{0,1000}?\}\s*from\s*["']\.\/team-workers["']\s*;)/g,
+		),
+	];
+	const continuationMatches = [
+		...contents.matchAll(
+			/const\s+args\s*=\s*Object\.freeze\(\s*\[\s*["']send-keys["']\s*,\s*["']-l["']\s*,\s*["']-t["']\s*,\s*worker\.pane_id\s*,\s*GJC_TEAM_CONTINUATION_PROMPT\s*,\s*["'];["']\s*,\s*["']send-keys["']\s*,\s*["']-t["']\s*,\s*worker\.pane_id\s*,\s*["']Enter["']\s*,?\s*\]\s*\)\s*;\s*const\s+dispatch\s*=\s*gjcTeamRuntimeTestSeams\?\.continuationTmuxDispatch\s*\?\s*gjcTeamRuntimeTestSeams\.continuationTmuxDispatch\(config\.tmux_command\s*,\s*args\)\s*:\s*Bun\.spawnSync\(\[config\.tmux_command\s*,\s*\.\.\.args\]\s*,\s*\{\s*stdout\s*:\s*["']ignore["']\s*,\s*stderr\s*:\s*["']ignore["']\s*,\s*timeout\s*:\s*GJC_TEAM_CONTINUATION_DISPATCH_TIMEOUT_MS\s*,?\s*\}\s*\)\s*;/g,
+		),
+	];
 	const enterMatches = [
 		...contents.matchAll(
 			/const\s+sendKeys\s*=\s*Bun\.spawnSync\(\s*\[\s*config\.tmux_command\s*,\s*["']send-keys["']\s*,\s*["']-t["']\s*,\s*paneId\s*,\s*["']Enter["']\s*\]\s*,\s*\{[\s\S]{0,200}?stdout\s*:\s*["']ignore["'][\s\S]{0,200}?stderr\s*:\s*["']ignore["'][\s\S]{0,100}?\}\s*\)\s*;/g,
@@ -1449,6 +1460,8 @@ function exactTeamRuntimeSendKeysRanges(contents: string): ShellRange[] {
 		guardMatches.length !== 1 ||
 		payloadMatches.length !== 1 ||
 		enterMatches.length !== 1 ||
+		continuationPromptMatches.length !== 1 ||
+		continuationMatches.length !== 1 ||
 		fallbackPredicateMatches.length !== 1 ||
 		useFallbackMatches.length !== 1 ||
 		splitWorkerCommandMatches.length !== 1
@@ -1468,18 +1481,43 @@ function exactTeamRuntimeSendKeysRanges(contents: string): ShellRange[] {
 	const guard = guardMatches[0];
 	const openingBrace = (guard.index ?? 0) + guard[0].lastIndexOf("{");
 	const range = braceBlockRange(contents, openingBrace);
-	if (!range) return [];
+	const continuationFunction =
+		/async\s+function\s+continueStalledGjcTeamWorkers\s*\([^)]*\)\s*:\s*Promise<void>\s*\{/.exec(contents);
+	const monitorFence = /await\s+withGjcTeamTaskMutation\([\s\S]{0,500}?async\s+capability\s*=>\s*\{/.exec(contents);
+	if (!range || !continuationFunction || !monitorFence) return [];
+	const continuationOpeningBrace = (continuationFunction.index ?? 0) + continuationFunction[0].lastIndexOf("{");
+	const continuationRange = braceBlockRange(contents, continuationOpeningBrace);
+	const monitorOpeningBrace = (monitorFence.index ?? 0) + monitorFence[0].lastIndexOf("{");
+	const monitorRange = braceBlockRange(contents, monitorOpeningBrace);
+	if (!continuationRange || !monitorRange) return [];
+	const monitorBody = contents.slice(monitorRange.start, monitorRange.end);
+	const continuationCall = /await\s+continueStalledGjcTeamWorkers\s*\(/.exec(monitorBody);
+	const reconciliationCall = /await\s+reconcileGjcTeamStaleClaimsUnlocked\s*\(/.exec(monitorBody);
+	const continuationStart = continuationMatches[0].index ?? 0;
+	const finalValidationStart = contents.lastIndexOf("const revalidationReason =", continuationStart);
+	const skippedBranch = finalValidationStart === -1 ? "" : contents.slice(finalValidationStart, continuationStart);
 	if (
 		payloadStart < range.start ||
 		payloadStart >= range.end ||
 		enterStart < range.start ||
 		enterStart >= range.end ||
-		contents.indexOf("void sendKeys.exitCode;", enterStart) >= range.end
+		contents.indexOf("void sendKeys.exitCode;", enterStart) >= range.end ||
+		continuationStart < continuationRange.start ||
+		continuationStart >= continuationRange.end ||
+		finalValidationStart < continuationRange.start ||
+		!continuationCall ||
+		!reconciliationCall ||
+		(continuationCall.index ?? 0) >= (reconciliationCall.index ?? 0) ||
+		!/if\s*\(\s*revalidationReason\s*\)[\s\S]*?return\s*;/.test(skippedBranch)
 	)
 		return [];
 	return [
 		{ start: payloadStart, end: payloadStart + payloadMatches[0][0].length },
 		{ start: enterStart, end: enterStart + enterMatches[0][0].length },
+		{
+			start: continuationMatches[0].index ?? 0,
+			end: (continuationMatches[0].index ?? 0) + continuationMatches[0][0].length,
+		},
 	];
 }
 
@@ -1504,6 +1542,7 @@ function isTypeOnlyTmuxPrimitiveOccurrence(contents: string, occurrence: TmuxPri
 }
 
 function tmuxMachineBusViolations(file: string, contents: string): string[] {
+	if (isGeneratedDocumentationIndex(file)) return [];
 	const allowedTeamFallbackRanges = file === teamRuntimeTmuxPath ? exactTeamRuntimeSendKeysRanges(contents) : [];
 	const violations: string[] = [];
 	for (const occurrence of tmuxPrimitiveOccurrences(contents)) {
@@ -1890,6 +1929,15 @@ async function scan(): Promise<string[]> {
 			} else {
 				violations.push(...tmuxMachineBusViolations(file, contents));
 			}
+			if (
+				file === teamWorkersTmuxPath &&
+				!/^export const GJC_TEAM_CONTINUATION_PROMPT =\n\t"Continue only your current claimed GJC team task\. Re-read current GJC team state; do not replay prior output; report status\.";$/m.test(
+					contents,
+				)
+			)
+				violations.push(
+					`${file}: stalled-worker continuation prompt must remain the exact source-controlled literal`,
+				);
 		}
 		if (file === coordinatorMcpRoot) {
 			for (const pattern of coordinatorDirectAuthorityPatterns) {
@@ -3067,6 +3115,9 @@ fi
 		"tmux send-keys content injection is outside sanctioned process lifecycle",
 	);
 	const canonicalTeamRuntimeSendKeysFixture = `
+async function continueStalledGjcTeamWorkers(): Promise<void> {
+	const revalidationReason = null;
+	if (revalidationReason) return;
 function shouldDispatchWorkerWithSendKeys(tmuxCommand: string, platform: NodeJS.Platform = process.platform): boolean {
 	return platform === "win32" || path.basename(tmuxCommand).toLowerCase() === "psmux";
 }
@@ -3083,11 +3134,100 @@ if (useSendKeysFallback) {
 	});
 	void sendKeys.exitCode;
 }
+const GJC_TEAM_CONTINUATION_PROMPT = "Continue only your current claimed GJC team task. Re-read current GJC team state; do not replay prior output; report status.";
+const GJC_TEAM_CONTINUATION_DISPATCH_TIMEOUT_MS = 5_000;
+const args = Object.freeze([
+	"send-keys",
+	"-l",
+	"-t",
+	worker.pane_id,
+	GJC_TEAM_CONTINUATION_PROMPT,
+	";",
+	"send-keys",
+	"-t",
+	worker.pane_id,
+	"Enter",
+]);
+
+const dispatch = gjcTeamRuntimeTestSeams?.continuationTmuxDispatch
+	? gjcTeamRuntimeTestSeams.continuationTmuxDispatch(config.tmux_command, args)
+	: Bun.spawnSync([config.tmux_command, ...args], {
+		stdout: "ignore",
+		stderr: "ignore",
+		timeout: GJC_TEAM_CONTINUATION_DISPATCH_TIMEOUT_MS,
+	});
+}
+async function monitorGjcTeam(): Promise<void> {
+	await withGjcTeamTaskMutation(taskStore(dir), async capability => {
+		await continueStalledGjcTeamWorkers();
+		await reconcileGjcTeamStaleClaimsUnlocked(workerOrchestrationRuntime, teamName, dir, config, env, capability);
+	});
+}
 `;
 	await runSelfTestFixture(
 		{ "packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture },
 		0,
 	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				"async function continueStalledGjcTeamWorkers(): Promise<void>",
+				"async function relocatedContinuation(): Promise<void>",
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				"if (revalidationReason) return;",
+				"if (revalidationReason) {}",
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				"await continueStalledGjcTeamWorkers();",
+				"",
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				"await continueStalledGjcTeamWorkers();\n\t\tawait reconcileGjcTeamStaleClaimsUnlocked(workerOrchestrationRuntime, teamName, dir, config, env, capability);",
+				"await reconcileGjcTeamStaleClaimsUnlocked(workerOrchestrationRuntime, teamName, dir, config, env, capability);\n\t\tawait continueStalledGjcTeamWorkers();",
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				"const dispatch =",
+				'args.push("forged");\nconst dispatch =',
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				"report status.",
+				"report injected status.",
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
 	await runSelfTestFixture(
 		{
 			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
@@ -3115,6 +3255,46 @@ if (useSendKeysFallback) {
 		1,
 		"tmux send-keys content injection is outside sanctioned process lifecycle",
 	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replaceAll(
+				"worker.pane_id",
+				'"%99"',
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				'GJC_TEAM_CONTINUATION_PROMPT,\n\t";",',
+				"`$" + "{GJC_TEAM_CONTINUATION_PROMPT}" + '`,\n\t";",',
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				'"send-keys",\n\t"-l",\n\t"-t",\n\tworker.pane_id,\n\tGJC_TEAM_CONTINUATION_PROMPT,\n\t";",\n\t"send-keys",\n\t"-t",\n\tworker.pane_id,\n\t"Enter",',
+				'"send-keys", "-t", worker.pane_id, "Enter", ";", "send-keys", "-l", "-t", worker.pane_id, GJC_TEAM_CONTINUATION_PROMPT,',
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
+	await runSelfTestFixture(
+		{
+			"packages/coding-agent/src/gjc-runtime/team-runtime.ts": canonicalTeamRuntimeSendKeysFixture.replace(
+				"Bun.spawnSync([config.tmux_command, ...args]",
+				'Bun.spawnSync([config.tmux_command, "run-shell", ...args]',
+			),
+		},
+		1,
+		"tmux send-keys content injection is outside sanctioned process lifecycle",
+	);
 	await runSelfTestFixture(
 		{
 			"packages/coding-agent/src/coordinator-mcp/server.ts":