[Bug] Remote Control: stray input from web/mobile silently executed by CLI agent without local confirmation

Bug Description
[BUG] Remote Control: stray/partial input from web/mobile side is silently dispatched and auto-executed by the running CLI agent ## Environment - Claude Code v2.1.191 - macOS (darwin 25.5.0), terminal: Warp (claude-code-warp plugin) - settings.json: "remoteControlAtStartup": true (session auto-bridged to claude.ai/code) ## Summary While a CLI session was bridged to claude.ai/code via Remote Control, an input that the local user never typed appeared as a genuine user turn and the agent executed it (ran DB/metadata queries). The user only noticed because the request was unrelated to the ongoing topic. ## What happened 1. Local user was working on an SSH-tunnel task (typed in CLI). 2. A message "insCL_GET_OUTLINE ... json save" appeared and the agent acted on it, running several tool calls — with no corresponding local input. 3. User said "I never typed that." ## Evidence (from the local transcript jsonl) - Only 3 entries with type:user / promptSource:"typed" exist in the whole session; none contains the executed request. - "last-prompt" buffer never held that text either. - The session contains "bridge-session" entries with bridgeSessionId cse_XXXX, matching the claude.ai/code/session_XXXX URL → session was bridged. - The Warp plugin's UserPromptSubmit hook only emits a notification; it does not modify or inject prompts (ruled out as the source). - Conclusion by elimination: the input entered via the Remote Control (web/mobile) front-end, which is not persisted as a typed prompt locally, and was executed without any confirmation. ## Expected Input arriving from the remote/web side — especially partial/garbled/accidental submissions — should be distinguishable and/or should not be silently auto-executed by the running CLI agent without it being visible/confirmable on the local side. ## Notes / possibly related - Same family as the Remote Control input-sync issues: #68402 (web-session input bypasses client-side parsing and is sent as raw prompt) and #62734 (remote input queue desync, regression since v2.1.152). This looks like an unreported variant. - No setting currently filters partial remote input; only remoteControlAtStartup:false or disableRemoteControl:true avoids the bridge entirely.

Environment Info

• Platform: darwin
• Terminal: WarpTerminal
• Version: 2.1.191
• Feedback ID: 55a48f00-eca2-4f42-8dcc-724f73c30c7c

Errors

[]