Architecture
Control the multiplexer, not the agent's stdin
tmux and herdr actions run on a separate SSH exec channel. Typing
tmux next-window into a pane your coding agent holds corrupts that agent's input.
SSHHIP structurally cannot do that.