Summary
CUA sandbox testing found commands advertised by /api/providers/gjc/commands that do not provide a working app flow.
/init
- Create a minimal git project containing only
README.md.
- Type
/init, accept the Run gate.
- The command starts an agent run instead of a bounded builtin and immediately tries to read:
/root/.pi/skills/init/SKILL.md
The file does not exist. The agent then searches /root, /opt, /usr, /home, and /Users, including a 30-second find that times out. AGENTS.md is never created and the run must be stopped manually.
/transcript
The command is advertised as “Browse the current session transcript”, but executing it only returns:
Transcript browsing is available in the interactive TUI.
That makes an app-advertised command a dead end. The app already has session transcript data and should either implement an app-native view or hide/refuse the command consistently.
/cost inconsistency
The chat command-result fallback advertises /cost and showCostModal() fabricates a /cost command, but typed /cost is classified as UNRECOGNIZED COMMAND and reaches the generic Run gate. The legacy handler posts to /api/commands/execute, for which no server route exists.
Expected
Every command shown to app users must have an app-capable execution path. Missing TUI prompt files must not trigger open-ended filesystem searches, and TUI-only commands must be filtered or given an app-native equivalent.
Environment
- Gajae Code App
v2.0.0-beta.3
- macOS arm64
- CUA through the web app against a disposable git project
Summary
CUA sandbox testing found commands advertised by
/api/providers/gjc/commandsthat do not provide a working app flow./initREADME.md./init, accept the Run gate.The file does not exist. The agent then searches
/root,/opt,/usr,/home, and/Users, including a 30-secondfindthat times out.AGENTS.mdis never created and the run must be stopped manually./transcriptThe command is advertised as “Browse the current session transcript”, but executing it only returns:
That makes an app-advertised command a dead end. The app already has session transcript data and should either implement an app-native view or hide/refuse the command consistently.
/costinconsistencyThe chat command-result fallback advertises
/costandshowCostModal()fabricates a/costcommand, but typed/costis classified asUNRECOGNIZED COMMANDand reaches the generic Run gate. The legacy handler posts to/api/commands/execute, for which no server route exists.Expected
Every command shown to app users must have an app-capable execution path. Missing TUI prompt files must not trigger open-ended filesystem searches, and TUI-only commands must be filtered or given an app-native equivalent.
Environment
v2.0.0-beta.3