@scotthuang/agent-knock-knock 0.11.6 → 0.12.0

package/dist/src/terminal-agent-bridge.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { formatTerminalConversationId, parseTerminalConversationId, terminalControlCapabilitiesForAdapter } from "./terminal-agent-adapter.js";
-import { enrichActiveProcessesWithTerminalControl, TerminalControlInputNotSentError, terminalRefFromPane } from "./terminal-control-provider.js";
+import { enrichActiveProcessesWithTerminalControl, TerminalControlInputNotSentError } from "./terminal-control-provider.js";
+import { hasCanonicalTerminalEndpoint, sameTerminalControlIncarnation, terminalEndpointFromControlRef, terminalEndpointIdentityKey } from "./terminal-control-ref.js";
 // Verified Codex profiles through 0.147.0 keep Enter in paste/newline mode for
 // 120ms after burst input. Cross that boundary rather than landing on it, and
 // also require observable composer stability instead of treating this delay
@@ -81,10 +82,14 @@ export class TerminalAgentBridge {
     registry;
     terminalProvider;
     verifyIdentity;
+    nowMs;
+    sleep;
     constructor(options) {
         this.registry = options.registry;
         this.terminalProvider = options.terminalProvider;
         this.verifyIdentity = options.verifyIdentity;
+        this.nowMs = options.nowMs ?? (() => performance.now());
+        this.sleep = options.sleep ?? terminalSettleDelay;
     }
     adapterFor(agent) {
         return this.registry.require(agent);
@@ -124,34 +129,58 @@ export class TerminalAgentBridge {
             throw new Error(`process ${process.pid} is not terminal-controlled`);
         }
         this.registry.require(process.agent);
+        const terminal = this.terminalProvider.endpoint(process.terminalControl);
         return formatTerminalConversationId({
             agent: process.agent,
-            target: process.terminalControl.target,
-            pid: process.pid
+            target: terminal.route.label,
+            pid: process.pid,
+            kind: terminal.identity.providerKind
         });
     }
+    /**
+     * Resolve a persisted control reference by stable endpoint identity. This is
+     * the managed-Session path: its route-shaped v2 terminal id is only a
+     * compatibility alias and may be stale after an explicit provider refresh.
+     */
+    async resolveStoredTerminal(agent, pid, terminalControl, runtime = { pid }) {
+        const adapter = this.registry.require(agent);
+        const freshControl = await this.verifyTerminalIdentity(agent, terminalControl, { ...runtime, pid });
+        return {
+            conversationId: this.terminalConversationId({
+                agent,
+                pid,
+                terminalControl: freshControl
+            }),
+            agent,
+            pid,
+            legacy: false,
+            adapter,
+            terminalControl: freshControl
+        };
+    }
     async resolveConversationId(conversationId) {
         const parsed = parseTerminalConversationId(conversationId);
         if (!parsed) {
             return undefined;
         }
         const adapter = this.registry.require(parsed.agent);
-        const panes = await this.terminalProvider.listPanes();
-        const candidates = panes.filter((candidate) => candidate.kind === parsed.kind && candidate.target === parsed.target);
+        const terminals = await this.terminalProvider.listTerminals();
+        const candidates = terminals.filter((candidate) => candidate.identity.providerKind === parsed.kind &&
+            candidate.route.label === parsed.target);
         const verified = this.verifyIdentity
-            ? (await Promise.all(candidates.map(async (pane) => {
-                const terminalControl = terminalRefFromPane(pane, terminalControlCapabilitiesForAdapter(adapter));
+            ? (await Promise.all(candidates.map(async (terminal) => {
+                const terminalControl = this.terminalProvider.toControlRef(terminal, terminalControlCapabilitiesForAdapter(adapter));
                 try {
                     const verifiedTerminalControl = await this.verifyTerminalIdentity(adapter.agent, terminalControl, { pid: parsed.pid });
-                    return { pane, terminalControl: verifiedTerminalControl };
+                    return { terminal, terminalControl: verifiedTerminalControl };
                 }
                 catch {
                     return undefined;
                 }
             }))).filter((candidate) => candidate !== undefined)
-            : candidates.slice(0, 1).map((pane) => ({
-                pane,
-                terminalControl: terminalRefFromPane(pane, terminalControlCapabilitiesForAdapter(adapter))
+            : candidates.slice(0, 1).map((terminal) => ({
+                terminal,
+                terminalControl: this.terminalProvider.toControlRef(terminal, terminalControlCapabilitiesForAdapter(adapter))
             }));
         if (verified.length === 0) {
             throw new Error(`terminal-controlled session ${parsed.conversationId} is no longer available`);
@@ -203,14 +232,34 @@ export class TerminalAgentBridge {
     }
     async send(agent, terminalControl, text, options = {}) {
         const adapter = this.registry.require(agent);
-        if (!terminalControl.capabilities.includes("send_keys")) {
-            throw new TerminalInputNotStartedError(`${adapter.displayName} terminal input is not supported`);
+        const multiline = /[\r\n]/u.test(text.trimEnd());
+        try {
+            assertTerminalMutationCapabilities({
+                provider: this.terminalProvider,
+                terminal: this.terminalProvider.endpoint(terminalControl),
+                semantic: [
+                    "send_keys",
+                    ...(adapter.agent === "codex" && multiline
+                        ? ["screen_status"]
+                        : [])
+                ],
+                transport: [
+                    "stable_resource_resolution",
+                    "text_delivery",
+                    "key_delivery",
+                    ...(adapter.agent === "codex" && multiline
+                        ? ["screen_capture"]
+                        : [])
+                ]
+            });
+        }
+        catch (error) {
+            throw new TerminalInputNotStartedError(error instanceof Error ? error.message : String(error), { cause: error });
         }
         const normalized = text.trimEnd();
         if (!normalized) {
             throw new TerminalInputNotStartedError("terminal message is empty");
         }
-        const multiline = /[\r\n]/u.test(normalized);
         let verifiedForText;
         try {
             verifiedForText = await this.verifyTerminalIdentity(adapter.agent, terminalControl, options.runtime);
@@ -219,9 +268,10 @@ export class TerminalAgentBridge {
             throw new TerminalInputNotStartedError(error instanceof Error ? error.message : String(error), { cause: error });
         }
         try {
-            await this.terminalProvider.sendText(verifiedForText.target, normalized, {
-                socketPath: verifiedForText.socketPath
-            });
+            if (!verifiedForText.capabilities.includes("send_keys")) {
+                throw new TerminalControlInputNotSentError(`${adapter.displayName} terminal input capability changed before injection`);
+            }
+            await this.terminalProvider.sendText(this.terminalProvider.endpoint(verifiedForText), normalized);
         }
         catch (error) {
             if (error instanceof TerminalControlInputNotSentError) {
@@ -238,8 +288,9 @@ export class TerminalAgentBridge {
             multiline
         });
         // Text and Enter are separate tmux operations. Revalidate between them and
-        // never submit after identity or composer drift. The legacy single-line
-        // path retains its best-effort pre-submit cleanup behavior.
+        // never submit after identity or composer drift. A failed revalidation
+        // leaves the injected draft untouched because cleanup is also terminal
+        // input and cannot safely use a stale route.
         let verifiedForEnter;
         if (adapter.agent === "codex" && multiline) {
             verifiedForEnter = await this.settleCodexMultilineComposer(adapter, terminalControl, normalized, options.runtime);
@@ -249,20 +300,10 @@ export class TerminalAgentBridge {
                 verifiedForEnter = await this.verifyTerminalIdentity(adapter.agent, terminalControl, options.runtime);
             }
             catch (error) {
-                try {
-                    await this.terminalProvider.sendKeys(verifiedForText.target, ["C-u"], {
-                        socketPath: verifiedForText.socketPath
-                    });
-                }
-                catch {
-                    // Best effort only: preserving the identity failure is more important than cleanup.
-                }
                 throw error;
             }
         }
-        await this.terminalProvider.sendKeys(verifiedForEnter.target, ["C-m"], {
-            socketPath: verifiedForEnter.socketPath
-        });
+        await this.terminalProvider.sendKeys(this.terminalProvider.endpoint(verifiedForEnter), ["C-m"]);
         await options.onTransportStage?.({
             stage: "enter_dispatched",
             agent: adapter.agent,
@@ -287,6 +328,17 @@ export class TerminalAgentBridge {
         const adapter = this.registry.require(agent);
         try {
             assertClosedStatusInspectionPlan(adapter, terminalControl, plan);
+            assertTerminalMutationCapabilities({
+                provider: this.terminalProvider,
+                terminal: this.terminalProvider.endpoint(terminalControl),
+                semantic: ["send_keys", "screen_status"],
+                transport: [
+                    "stable_resource_resolution",
+                    "screen_capture",
+                    "text_delivery",
+                    "key_delivery"
+                ]
+            });
         }
         catch (error) {
             throw nativeInspectionSubmissionError("not_started", error);
@@ -299,7 +351,10 @@ export class TerminalAgentBridge {
             throw nativeInspectionSubmissionError("not_started", error);
         }
         try {
-            await this.terminalProvider.sendText(verifiedForText.target, plan.command, { socketPath: verifiedForText.socketPath });
+            if (!verifiedForText.capabilities.includes("send_keys")) {
+                throw new TerminalControlInputNotSentError(`${adapter.displayName} native inspection input capability changed`);
+            }
+            await this.terminalProvider.sendText(this.terminalProvider.endpoint(verifiedForText), plan.command);
         }
         catch (error) {
             if (error instanceof TerminalControlInputNotSentError) {
@@ -327,7 +382,7 @@ export class TerminalAgentBridge {
         try {
             // Exactly one Enter attempt. Any error is submission-uncertain and must
             // never trigger a fallback executable or a blind second Enter.
-            await this.terminalProvider.sendKeys(settled.terminalControl.target, ["C-m"], { socketPath: settled.terminalControl.socketPath });
+            await this.terminalProvider.sendKeys(this.terminalProvider.endpoint(settled.terminalControl), ["C-m"]);
         }
         catch (error) {
             throw nativeInspectionSubmissionError("enter_uncertain", error);
@@ -430,7 +485,7 @@ export class TerminalAgentBridge {
             });
             verified = await observeExactPanel(verified);
             try {
-                await this.terminalProvider.sendKeys(verified.target, plan.expectedResult.dismissal.keys, { socketPath: verified.socketPath });
+                await this.terminalProvider.sendKeys(this.terminalProvider.endpoint(verified), plan.expectedResult.dismissal.keys);
             }
             catch (error) {
                 throw new NativeInspectionDismissalError("native status modal dismissal outcome is uncertain; do not retry automatically", { cause: error });
@@ -451,20 +506,20 @@ export class TerminalAgentBridge {
         }
     }
     async settleNativeInspectionComposer(adapter, terminalControl, plan, runtime) {
-        const startedAt = performance.now();
+        const startedAt = this.nowMs();
         const settleTimeoutMs = plan.composer.maximumSettleMs;
         let stableDigest;
         let stableKind;
         let stableSince;
         let stableCaptures = 0;
-        while (performance.now() - startedAt <= settleTimeoutMs) {
+        while (this.nowMs() - startedAt <= settleTimeoutMs) {
             const captured = await this.captureInspection(adapter, terminalControl, {
                 runtime,
                 scrollbackLines: CODEX_MULTILINE_SETTLE_SCROLLBACK_LINES
             });
             assertNativeInspectionComposerSafe(captured.inspection);
             const materialized = exactNativeInspectionComposerCapture(adapter.agent, captured.screen, plan);
-            const now = performance.now();
+            const now = this.nowMs();
             if (materialized) {
                 if (materialized.digest === stableDigest &&
                     materialized.kind === stableKind) {
@@ -494,12 +549,12 @@ export class TerminalAgentBridge {
                 stableSince = undefined;
                 stableCaptures = 0;
             }
-            const elapsed = performance.now() - startedAt;
+            const elapsed = this.nowMs() - startedAt;
             const remaining = settleTimeoutMs - elapsed;
             if (remaining <= 0) {
                 break;
             }
-            await terminalSettleDelay(Math.min(CODEX_MULTILINE_SETTLE_POLL_MS, remaining));
+            await this.sleep(Math.min(CODEX_MULTILINE_SETTLE_POLL_MS, remaining));
         }
         throw new Error(`${adapter.displayName} /status composer did not become exact, idle, and stable before the bounded submit deadline`);
     }
@@ -537,11 +592,11 @@ export class TerminalAgentBridge {
         };
     }
     async settleCodexMultilineComposer(adapter, terminalControl, expectedText, runtime) {
-        const startedAt = performance.now();
+        const startedAt = this.nowMs();
         let stableDigest;
         let stableSince;
         let stableCaptures = 0;
-        while (performance.now() - startedAt <= CODEX_MULTILINE_SETTLE_TIMEOUT_MS) {
+        while (this.nowMs() - startedAt <= CODEX_MULTILINE_SETTLE_TIMEOUT_MS) {
             const captured = await this.captureInspection(adapter, terminalControl, {
                 runtime,
                 scrollbackLines: CODEX_MULTILINE_SETTLE_SCROLLBACK_LINES
@@ -561,12 +616,12 @@ export class TerminalAgentBridge {
                 }
                 else {
                     stableDigest = composer.digest;
-                    stableSince = performance.now();
+                    stableSince = this.nowMs();
                     stableCaptures = 1;
                 }
                 if (stableCaptures >= CODEX_MULTILINE_STABLE_CAPTURES &&
                     stableSince !== undefined &&
-                    performance.now() - stableSince >= CODEX_PASTE_ENTER_SETTLE_MS) {
+                    this.nowMs() - stableSince >= CODEX_PASTE_ENTER_SETTLE_MS) {
                     const finalCapture = await this.captureInspection(adapter, captured.terminalControl, {
                         runtime,
                         scrollbackLines: CODEX_MULTILINE_SETTLE_SCROLLBACK_LINES
@@ -594,8 +649,8 @@ export class TerminalAgentBridge {
                 stableCaptures = 0;
             }
             const remainingSuppressionMs = CODEX_PASTE_ENTER_SETTLE_MS -
-                (stableSince === undefined ? 0 : performance.now() - stableSince);
-            await terminalSettleDelay(Math.max(1, Math.min(CODEX_MULTILINE_SETTLE_POLL_MS, remainingSuppressionMs > 0
+                (stableSince === undefined ? 0 : this.nowMs() - stableSince);
+            await this.sleep(Math.max(1, Math.min(CODEX_MULTILINE_SETTLE_POLL_MS, remainingSuppressionMs > 0
                 ? remainingSuppressionMs
                 : CODEX_MULTILINE_SETTLE_POLL_MS)));
         }
@@ -628,7 +683,7 @@ export class TerminalAgentBridge {
         if (!first.draft) {
             return false;
         }
-        await terminalSettleDelay(CODEX_MULTILINE_SETTLE_POLL_MS);
+        await this.sleep(CODEX_MULTILINE_SETTLE_POLL_MS);
         const second = await captureExactDraft(first.captured.terminalControl);
         if (!sameTerminalControlIdentity(first.captured.terminalControl, second.captured.terminalControl)) {
             throw new Error("terminal control identity changed while proving the exact draft remained");
@@ -642,13 +697,14 @@ export class TerminalAgentBridge {
      */
     async clearInputLine(agent, terminalControl, options = {}) {
         const adapter = this.registry.require(agent);
-        if (!terminalControl.capabilities.includes("send_keys")) {
-            throw new Error(`${adapter.displayName} terminal input is not supported`);
-        }
-        const verified = await this.verifyTerminalIdentity(adapter.agent, terminalControl, options.runtime);
-        await this.terminalProvider.sendKeys(verified.target, ["C-u"], {
-            socketPath: verified.socketPath
+        assertTerminalMutationCapabilities({
+            provider: this.terminalProvider,
+            terminal: this.terminalProvider.endpoint(terminalControl),
+            semantic: ["send_keys"],
+            transport: ["stable_resource_resolution", "key_delivery"]
         });
+        const verified = await this.verifyTerminalIdentity(adapter.agent, terminalControl, options.runtime);
+        await this.terminalProvider.sendKeys(this.terminalProvider.endpoint(verified), ["C-u"]);
     }
     async cancel(agent, terminalControl, options = {}) {
         const adapter = this.registry.require(agent);
@@ -673,10 +729,14 @@ export class TerminalAgentBridge {
                 reason: `${adapter.displayName} terminal cancellation is not supported`
             };
         }
-        const verifiedForCancel = await this.verifyTerminalIdentity(adapter.agent, terminalControl, options.runtime);
-        await this.terminalProvider.sendKeys(verifiedForCancel.target, adapter.cancelKeys, {
-            socketPath: verifiedForCancel.socketPath
+        assertTerminalMutationCapabilities({
+            provider: this.terminalProvider,
+            terminal: this.terminalProvider.endpoint(terminalControl),
+            semantic: ["terminal_cancel", "send_keys"],
+            transport: ["stable_resource_resolution", "key_delivery"]
         });
+        const verifiedForCancel = await this.verifyTerminalIdentity(adapter.agent, terminalControl, options.runtime);
+        await this.terminalProvider.sendKeys(this.terminalProvider.endpoint(verifiedForCancel), adapter.cancelKeys);
         return {
             cancelRequested: true,
             key: adapter.cancelKeys.length === 1 ? adapter.cancelKeys[0] : undefined,
@@ -693,6 +753,16 @@ export class TerminalAgentBridge {
                 reason: `${adapter.displayName} terminal approval is not supported`
             };
         }
+        assertTerminalMutationCapabilities({
+            provider: this.terminalProvider,
+            terminal: this.terminalProvider.endpoint(terminalControl),
+            semantic: ["screen_status", "terminal_approval", "send_keys"],
+            transport: [
+                "stable_resource_resolution",
+                "screen_capture",
+                "key_delivery"
+            ]
+        });
         const captured = await this.captureInspection(adapter, terminalControl, options);
         const { inspection } = captured;
         const activeTerminalControl = captured.terminalControl;
@@ -735,10 +805,24 @@ export class TerminalAgentBridge {
                 screenExcerpt: inspection.screenExcerpt
             };
         }
-        const fingerprint = terminalApprovalFingerprint(adapter.agent, activeTerminalControl, inspection, {
+        const canonicalFingerprint = terminalApprovalFingerprint(adapter.agent, activeTerminalControl, inspection, {
             screen: captured.screen,
             runtime: options.runtime
         });
+        const legacyFingerprint = hasCanonicalTerminalEndpoint(terminalControl)
+            ? undefined
+            : terminalApprovalFingerprint(adapter.agent, terminalControl, inspection, {
+                screen: captured.screen,
+                runtime: options.runtime
+            });
+        const useLegacyFingerprint = Boolean(options.expectedFingerprint &&
+            options.expectedFingerprint === legacyFingerprint);
+        const fingerprintControl = useLegacyFingerprint
+            ? terminalControl
+            : activeTerminalControl;
+        const fingerprint = useLegacyFingerprint
+            ? legacyFingerprint
+            : canonicalFingerprint;
         if (adapter.agent === "claude" &&
             decisionMode === "keys" &&
             !options.expectedFingerprint) {
@@ -825,7 +909,7 @@ export class TerminalAgentBridge {
             };
         }
         const recapturedDecisionMode = recapturedInspection.approval.action.mode ?? "keys";
-        const recapturedFingerprint = terminalApprovalFingerprint(adapter.agent, recaptured.terminalControl, recapturedInspection, {
+        const recapturedFingerprint = terminalApprovalFingerprint(adapter.agent, fingerprintControl, recapturedInspection, {
             screen: recaptured.screen,
             runtime: options.runtime
         });
@@ -908,7 +992,7 @@ export class TerminalAgentBridge {
                 };
             }
             const afterReservationMode = afterReservationInspection.approval.action.mode ?? "keys";
-            const afterReservationFingerprint = terminalApprovalFingerprint(adapter.agent, afterReservation.terminalControl, afterReservationInspection, {
+            const afterReservationFingerprint = terminalApprovalFingerprint(adapter.agent, fingerprintControl, afterReservationInspection, {
                 screen: afterReservation.screen,
                 runtime: options.runtime
             });
@@ -950,7 +1034,7 @@ export class TerminalAgentBridge {
         if (!sameTerminalControlIdentity(dispatchTerminalControl, verifiedImmediatelyBeforeSend)) {
             throw new Error("terminal control identity changed after the final approval capture");
         }
-        await this.terminalProvider.sendKeys(verifiedImmediatelyBeforeSend.target, dispatchApproval.action.keys, { socketPath: verifiedImmediatelyBeforeSend.socketPath });
+        await this.terminalProvider.sendKeys(this.terminalProvider.endpoint(verifiedImmediatelyBeforeSend), dispatchApproval.action.keys);
         return {
             approved: true,
             blocked: false,
@@ -1023,10 +1107,7 @@ export class TerminalAgentBridge {
     }
     async captureInspection(adapter, terminalControl, options = {}) {
         const verifiedTerminalControl = await this.verifyTerminalIdentity(adapter.agent, terminalControl, options.runtime);
-        const screen = await this.terminalProvider.capture(verifiedTerminalControl.target, {
-            scrollbackLines: options.scrollbackLines ?? 120,
-            socketPath: verifiedTerminalControl.socketPath
-        });
+        const screen = await this.terminalProvider.capture(this.terminalProvider.endpoint(verifiedTerminalControl), { scrollbackLines: options.scrollbackLines ?? 120 });
         return {
             terminalControl: verifiedTerminalControl,
             screen,
@@ -1041,20 +1122,45 @@ export class TerminalAgentBridge {
         };
     }
     async verifyTerminalIdentity(agent, terminalControl, runtime) {
-        if (!this.verifyIdentity) {
-            return terminalControl;
+        let verifiedControl = terminalControl;
+        if (this.verifyIdentity) {
+            if (!Number.isInteger(runtime?.pid) || Number(runtime?.pid) <= 0) {
+                throw new Error(`refusing terminal access for ${agent}:${terminalControl.target} without an exact agent pid; reattach this legacy tmux session before controlling it`);
+            }
+            const result = await this.verifyIdentity({
+                agent,
+                pid: Number(runtime?.pid),
+                terminalControl,
+                runtime
+            });
+            verifiedControl = result?.terminalControl ?? terminalControl;
+            if (!sameTerminalControlIncarnation(terminalControl, verifiedControl)) {
+                throw new Error("terminal control identity changed during identity verification");
+            }
         }
-        if (!Number.isInteger(runtime?.pid) || Number(runtime?.pid) <= 0) {
-            throw new Error(`refusing terminal access for ${agent}:${terminalControl.target} without an exact agent pid; reattach this legacy tmux session before controlling it`);
+        const verifiedEndpoint = this.terminalProvider.endpoint(verifiedControl);
+        const resolvedEndpoint = await this.terminalProvider.resolve(verifiedEndpoint);
+        if (hasCanonicalTerminalEndpoint(verifiedControl) &&
+            !sameTerminalControlIncarnation(verifiedEndpoint, resolvedEndpoint)) {
+            throw new Error("terminal stable resource or process anchor changed during fresh resolution");
         }
-        const result = await this.verifyIdentity({
-            agent,
-            pid: Number(runtime?.pid),
-            terminalControl,
-            runtime
-        });
-        return result?.terminalControl ?? terminalControl;
+        return this.terminalProvider.toControlRef(resolvedEndpoint, verifiedControl.capabilities);
+    }
+}
+function assertTerminalMutationCapabilities({ provider, terminal, semantic, transport }) {
+    const missingSemantic = semantic.filter((capability) => !provider.supportedCapabilities.includes(capability) ||
+        !terminal.capabilities.includes(capability));
+    const missingTransport = transport.filter((capability) => !provider.providerCapabilities.includes(capability));
+    if (missingSemantic.length === 0 && missingTransport.length === 0) {
+        return;
     }
+    const missing = [
+        ...missingSemantic.map((value) => `terminal:${value}`),
+        ...missingTransport.map((value) => `provider:${value}`)
+    ];
+    throw new TerminalControlInputNotSentError(`terminal action capability preflight failed for ` +
+        `${terminal.identity.providerKind}:${terminal.route.label}: ` +
+        missing.join(", "));
 }
 function nativeInspectionSubmissionError(stage, error) {
     if (error instanceof NativeInspectionSubmissionError) {
@@ -1433,13 +1539,7 @@ async function terminalSettleDelay(milliseconds) {
     await new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
 function sameTerminalControlIdentity(left, right) {
-    return left.kind === right.kind &&
-        left.target === right.target &&
-        left.socketPath === right.socketPath &&
-        left.session === right.session &&
-        left.window === right.window &&
-        left.pane === right.pane &&
-        left.panePid === right.panePid;
+    return sameTerminalControlIncarnation(left, right);
 }
 export function terminalApprovalFingerprint(agent, terminalControl, inspection, options = {}) {
     if (!inspection.approval.approvable) {
@@ -1449,18 +1549,31 @@ export function terminalApprovalFingerprint(agent, terminalControl, inspection,
     const rawScreenDigest = decisionMode === "keys" && options.screen !== undefined
         ? createHash("sha256").update(options.screen).digest("hex")
         : undefined;
-    return createHash("sha256")
-        .update(JSON.stringify({
-        agent,
-        provider: "tmux",
-        terminal: {
+    const terminal = terminalEndpointFromControlRef(terminalControl);
+    // A pending v0.11.x approval may outlive an upgrade. Preserve its exact
+    // fingerprint until the persisted control record has canonical endpoint
+    // evidence; new records bind the fingerprint to stable endpoint identity.
+    const terminalFingerprint = hasCanonicalTerminalEndpoint(terminalControl)
+        ? {
+            identity: terminalEndpointIdentityKey(terminal),
+            process_anchor_pid: terminal.processAnchorPid
+        }
+        : terminalControl.kind === "tmux" ? {
             target: terminalControl.target,
             socket_path: terminalControl.socketPath,
             session: terminalControl.session,
             window: terminalControl.window,
             pane: terminalControl.pane,
             pane_pid: terminalControl.panePid
-        },
+        } : undefined;
+    if (!terminalFingerprint) {
+        return undefined;
+    }
+    return createHash("sha256")
+        .update(JSON.stringify({
+        agent,
+        provider: terminal.identity.providerKind,
+        terminal: terminalFingerprint,
         runtime: {
             pid: options.runtime?.pid,
             session_id: options.runtime?.sessionId,