## Summary
- Start new sessions with `zai/glm-5.2` without enabling Gateway Fast mode.
- Preserve explicit Fast mode preferences and the `/fast` command.
Skip pulse timing state and clock reads when no cooperative callback exists. Assert that live-input readiness checks do not allocate zero-timeout timers.
Clarify wait, cursor, and close guidance in the advertised terminal schema.
Return complete canonical corrections for unknown and cross-action fields.
Keep repeated validation batches bounded when valid calls share the batch.
Terminate terminal-owned jobs in other process groups during force close.
Skip automatic review for read-only terminal actions in auto mode.
Clarify printable Ctrl key designators in the terminal schema.
Discover terminal descendants for explicit signal requests and signal identity-valid jobs outside the shell group before the existing group delivery. Keep the shell-group result as the success authority.
Preserve large captured-command approvals across durable subagent state.
Contain detached command descendants through completion and cancellation.
Prevent stopped background history from being restarted without an explicit request.
Preserve complete subagent command projections in both approval surfaces.
Bound terminal commands to the durable delivery limit.
Terminate identity-verified descendants that escape the captured process group.
Wait for the bottom-row marker after takeover chrome appears before asserting the full hosted grid.
This keeps slower macOS redraws from racing the assertion.
Keep cancellation and timeout signaling attached to the captured process group after its leader exits.
Continue draining until the group exits or the force-kill deadline expires, while preserving immediate cleanup after natural completion.
Keep the foreground session supervisor alive when its process group receives TERM so the target can unwind before the force-kill deadline.
Cover the behavior in the Zig process runner and the existing TUI cancellation flow.
Keep command and sandbox grants bound to the selected shell profile across configured rules and subagent approvals.
Reap remaining foreground process groups after command completion while retaining user-shell startup diagnostics.
Hide the redundant exec discriminator from captured-command detail while keeping profile and cwd visible.
Update the remaining file-path fixtures to exercise the strict terminal action contract.
Expose captured foreground commands through terminal.exec with legacy omitted-profile behavior and explicit clean or user startup.
Keep durable terminal sessions on terminal.start, remove public run_command ingress and new legacy background creation, and retain compatibility reads for existing records.
Limit Browser/WASI workspaces to the root-fixed terminal.exec contract while preserving permission, transcript, ACP, subagent, and direct-command behavior.
Derive each active turn floor from its newest visible tool group while keeping legacy and unidentified rows conservative.
Add producer-order, fixed-point, and terminal scrollback coverage for multi-group turns.