codex-overleaf-link 1.3.6 → 1.3.8

package/extension/src/shared/i18n.js

@@ -123,6 +123,28 @@
       undoCheckpointMissingReason: 'This run wrote while Reviewing/Track Changes was enabled, but the extension could not reliably identify the tracked changes generated by Overleaf. To avoid creating new redlines with text patches, automatic undo is disabled.',
       undoCheckpointMissingNext: 'Reject this run manually in Overleaf review tools, or rerun and try again.',
       undoCheckpointPlain: 'Undo point created: this run has {count} reversible write(s)',
+      runAcceptTracked: 'Accept changes',
+      runAcceptTrackedTitle: 'Accept this run\'s Overleaf tracked changes',
+      runAcceptTrackedConfirm: 'Confirm accept',
+      runAcceptTrackedCancel: 'Cancel',
+      runAcceptTrackedConfirming: 'Accepting…',
+      runAcceptTrackedDone: 'Accepted',
+      runAcceptTrackedDoneTitle: 'This run\'s tracked changes have been accepted',
+      runAcceptTrackedNeedsReview: 'Accept changes',
+      runAcceptTrackedNeedsReviewTitle: 'Accept this run\'s Overleaf tracked changes',
+      runUndoNeedsReview: 'Undo changes',
+      runUndoNeedsReviewTitle: 'Undo this run\'s changes',
+      runAcceptTrackedStarted: 'Starting to accept this run\'s Overleaf tracked changes',
+      runAcceptTrackedResult: 'Accept result: accepted {applied} tracked change(s), skipped {skipped}',
+      runAcceptTrackedFailed: 'Accept changes could not be completed',
+      runAcceptTrackedFailedReason: 'Overleaf editor content has drifted from this run\'s writeback, so Codex did not change the document. The run stays pending — retry Accept changes.',
+      runAcceptTrackedStepEditorUndo: 'Accept step 1/6 — Overleaf editor-undo of this run\'s tracked writeback',
+      runAcceptTrackedStepModeBefore: 'Accept step 2/6 — Reviewing/Track Changes state read BEFORE the Editing toggle',
+      runAcceptTrackedStepForceEditing: 'Accept step 3/6 — forcing Editing mode (Track Changes OFF) for the untracked replay',
+      runAcceptTrackedStepReplayStart: 'Accept step 4/6 — per-operation re-check of Editing mode before writing {path}',
+      runAcceptTrackedStepReplayDone: 'Accept step 5/6 — untracked replay write completed for {path}',
+      runAcceptTrackedStepRestoreReviewing: 'Accept step 6/6 — restoring the prior Reviewing/Track Changes mode',
+      detailAccepted: 'Accepted',
       deleteFilePromptTitle: 'Allow Codex to delete files?',
       deleteFilePromptMessage: '{files}\n\nOther changes can still sync if deletion is not confirmed.',
       deleteFileConfirm: 'Allow delete',
@@ -280,7 +302,72 @@
       processed: 'Done {elapsed}',
       restoredRunStoppedTitle: 'Stopped tracking this run after a page refresh',
       restoredRunStoppedDetail: 'The plugin reloaded while this run was still marked in progress. It has been marked interrupted to avoid showing a stale status — run the task again to continue.',
-      restoredRunStoppedStatus: 'Stopped tracking after a page refresh'
+      restoredRunStoppedStatus: 'Stopped tracking after a page refresh',
+      // FailureReason structured-block section headings (design spec §10–§11).
+      failureReason_section_heading: 'Reason',
+      failureReason_section_stage: 'Stage',
+      failureReason_section_code: 'Code',
+      failureReason_section_next: 'Next',
+      // FailureReason bilingual high-priority strings (design spec §15.4).
+      // Each entry follows the §9 catalog copy. {file} / {activeFile} interpolate from the failure record.
+      failureReason_project_snapshot_unavailable_user: 'Codex could not read the Overleaf project snapshot.',
+      failureReason_project_snapshot_unavailable_next: 'Refresh Overleaf, then rerun the task.',
+      failureReason_selected_context_unresolved_user: 'Codex could not resolve the requested selection or context.',
+      failureReason_selected_context_unresolved_next: 'Select the target again or specify the file/section explicitly.',
+      failureReason_target_file_not_found_user: 'Codex could not find {file} in this Overleaf project.',
+      failureReason_target_file_not_found_next: 'Check the file name/path in Overleaf and retry.',
+      failureReason_target_file_open_failed_user: 'Codex could not open {file} in Overleaf.',
+      failureReason_target_file_open_failed_next: 'Expand the folder or manually open {file}, then retry.',
+      failureReason_target_file_not_active_user: 'Codex could not write {file} because Overleaf was still focused on {activeFile}.',
+      failureReason_target_file_not_active_next: 'Open {file} in Overleaf, then retry this run.',
+      failureReason_target_editor_not_ready_user: '{file} is active but the editor was not ready before timeout.',
+      failureReason_target_editor_not_ready_next: 'Wait for Overleaf to finish loading, then retry.',
+      failureReason_stale_source_changed_user: '{file} changed while Codex was working, so Codex did not overwrite it.',
+      failureReason_stale_source_changed_next: 'Review the current file, then rerun the task.',
+      failureReason_patch_anchor_not_found_user: 'The edit anchor for {file} no longer matches current Overleaf content.',
+      failureReason_patch_anchor_not_found_next: 'Rerun the task against the current document.',
+      failureReason_write_observed_mismatch_user: 'Codex attempted to write {file}, but the content read back from Overleaf did not match the approved change.',
+      failureReason_write_observed_mismatch_next: 'Open Technical Details and compare expected vs observed; use Undo written parts if the document looks wrong.',
+      failureReason_reviewing_state_unknown_user: 'Codex could not determine whether Reviewing/Track Changes is enabled.',
+      failureReason_reviewing_state_unknown_next: 'Check Overleaf mode manually before retrying.',
+      failureReason_editing_not_confirmed_user: 'Editing mode could not be proven stable before writing {file}.',
+      failureReason_editing_not_confirmed_next: 'Do not write; check the mode selector and retry.',
+      failureReason_tracked_changes_remain_user: 'Accept/reject finished for {file}, but Overleaf still reports remaining tracked changes.',
+      failureReason_tracked_changes_remain_next: 'Open Overleaf Reviewing and inspect the remaining changes before continuing.',
+      failureReason_undo_not_verified_user: 'Undo ran for {file}, but Codex could not prove the file returned to its pre-run content.',
+      failureReason_undo_not_verified_next: 'Inspect {file} manually before continuing.',
+      failureReason_accept_not_verified_user: 'Accept appeared to run for {file}, but Codex could not prove the final content or Track Changes state.',
+      failureReason_accept_not_verified_next: 'Inspect Overleaf Reviewing before continuing.',
+      failureReason_native_bridge_unavailable_user: 'Extension cannot connect to the Codex native host.',
+      failureReason_native_bridge_unavailable_next: 'Run install-native or reload the extension.',
+      failureReason_codex_no_usable_result_user: 'Local Codex returned no usable final report or operations.',
+      failureReason_codex_no_usable_result_next: 'Open Technical Details and resolve the local Codex error.',
+      failureReason_codex_project_locked_user: 'Another Codex task is already running for this Overleaf project.',
+      failureReason_codex_project_locked_next: 'Wait for the active task to finish, or cancel it before retrying.',
+      failureReason_storage_quota_exceeded_user: 'Browser storage quota was exceeded.',
+      failureReason_storage_quota_exceeded_next: 'Clear old run history or reduce attachments.',
+      failureReason_aborted_project_changed_user: 'Codex stopped a write because Overleaf switched to a different project mid-run.',
+      failureReason_aborted_project_changed_next: 'Reopen the original project and rerun the task if you still want this change.',
+      failureReason_editor_project_id_unavailable_user: 'Codex could not confirm which Overleaf project the editor is showing, so it did not write.',
+      failureReason_editor_project_id_unavailable_next: 'Refresh the Overleaf tab and retry; if it persists, reload the extension.',
+      // Welcome-panel + write-guard v1.3.8 add-on (Task 5): Recent-projects
+      // variant copy. Spec §5.3–§5.5, §5.8, §5.10 are the source of truth.
+      recentProjects_welcome: 'Codex Overleaf Link',
+      recentProjects_welcome_subtitle: 'Open a project from the Overleaf list on the left to start.',
+      recentProjects_empty: "You haven't run any Codex sessions yet. Open a project from the Overleaf list on the left to start.",
+      recentProjects_degraded: 'Sign in to Overleaf to see your recent Codex projects.',
+      recentProjects_row_projectLinkUnavailable: 'Project link unavailable.',
+      recentProjects_settings_entry: 'Settings & Diagnostics',
+      recentProjects_badge_pending: 'pending',
+      recentProjects_badge_accepted: 'accepted',
+      recentProjects_badge_rejected: 'rejected',
+      recentProjects_badge_needs_review: 'pending',
+      recentProjects_badge_running: 'running',
+      recentProjects_badge_completed: 'completed',
+      recentProjects_badge_failed: 'failed',
+      recentProjects_badge_background_completed: 'completed in background',
+      recentProjects_badge_needs_review_after_navigation: 'pending',
+      recentProjects_badge_abandoned_after_navigation: 'abandoned'
     },
     zh: {
       resizePanel: '拖动调整 Codex 面板宽度，双击恢复默认宽度',
@@ -394,6 +481,28 @@
       undoCheckpointMissingReason: '本轮是在 Reviewing/Track Changes 下写入的，但插件没有可靠识别 Overleaf 生成的留痕记录。为了避免用文本补丁制造新的红线，自动撤销已禁用。',
       undoCheckpointMissingNext: '请在 Overleaf 审阅面板手动拒绝这轮建议，或重新运行后再尝试。',
       undoCheckpointPlain: '已创建撤销点：可撤销本轮 {count} 项写入',
+      runAcceptTracked: '接受改动',
+      runAcceptTrackedTitle: '接受本轮 Overleaf 留痕改动',
+      runAcceptTrackedConfirm: '确认接受',
+      runAcceptTrackedCancel: '取消',
+      runAcceptTrackedConfirming: '接受中…',
+      runAcceptTrackedDone: '已接受',
+      runAcceptTrackedDoneTitle: '本轮留痕改动已被接受',
+      runAcceptTrackedNeedsReview: '接受改动 — 需待核对',
+      runAcceptTrackedNeedsReviewTitle: '本轮留痕未必已完全接受；请在 Overleaf 中核对后重试。',
+      runUndoNeedsReview: '撤销 — 需待核对',
+      runUndoNeedsReviewTitle: '本轮撤销未必已完全完成；请在 Overleaf 中核对后重试。',
+      runAcceptTrackedStarted: '开始接受本轮 Overleaf 留痕改动',
+      runAcceptTrackedResult: '接受结果：已接受 {applied} 条留痕，跳过 {skipped} 条',
+      runAcceptTrackedFailed: '没有完成接受改动',
+      runAcceptTrackedFailedReason: 'Overleaf 编辑器内容已经和本轮写入不一致，Codex 没有改动文档。本轮仍为待处理状态——请重新点击接受改动。',
+      runAcceptTrackedStepEditorUndo: '接受步骤 1/6 — 通过 Overleaf 编辑器撤销，回退本轮留痕写入',
+      runAcceptTrackedStepModeBefore: '接受步骤 2/6 — 强制切换 Editing 之前读取的 Reviewing/Track Changes 状态',
+      runAcceptTrackedStepForceEditing: '接受步骤 3/6 — 强制切换到 Editing 模式（Track Changes OFF）以便重放为永久文本',
+      runAcceptTrackedStepReplayStart: '接受步骤 4/6 — 写入 {path} 前再次校验 Editing 模式',
+      runAcceptTrackedStepReplayDone: '接受步骤 5/6 — 已完成 {path} 的无留痕重放写入',
+      runAcceptTrackedStepRestoreReviewing: '接受步骤 6/6 — 恢复之前的 Reviewing/Track Changes 模式',
+      detailAccepted: '已接受',
       deleteFilePromptTitle: '允许 Codex 删除文件？',
       deleteFilePromptMessage: '{files}\n\n未确认删除时，其它改动仍可继续同步。',
       deleteFileConfirm: '允许删除',
@@ -551,7 +660,71 @@
       processed: '已处理 {elapsed}',
       restoredRunStoppedTitle: '页面刷新后已停止跟踪这轮任务',
       restoredRunStoppedDetail: '插件重新加载时发现这轮任务还标记为处理中。为了避免继续显示过期状态，已把它标记为中断；可以重新运行任务。',
-      restoredRunStoppedStatus: '页面刷新后已停止跟踪'
+      restoredRunStoppedStatus: '页面刷新后已停止跟踪',
+      // FailureReason 结构块标题（设计规格 §10–§11）。
+      failureReason_section_heading: '原因',
+      failureReason_section_stage: '阶段',
+      failureReason_section_code: '代码',
+      failureReason_section_next: '下一步',
+      // FailureReason 高优先级双语文案（设计规格 §15.4）。文案对应 §9 目录的英文 fallback。
+      failureReason_project_snapshot_unavailable_user: 'Codex 没能读到 Overleaf 项目快照。',
+      failureReason_project_snapshot_unavailable_next: '请刷新 Overleaf，然后重试本轮任务。',
+      failureReason_selected_context_unresolved_user: 'Codex 没能解析所选的内容或上下文。',
+      failureReason_selected_context_unresolved_next: '请重新选择目标，或者显式指定文件 / 区段。',
+      failureReason_target_file_not_found_user: 'Codex 在当前 Overleaf 项目中没有找到 {file}。',
+      failureReason_target_file_not_found_next: '请在 Overleaf 中核对文件名和路径后重试。',
+      failureReason_target_file_open_failed_user: 'Codex 没能在 Overleaf 中打开 {file}。',
+      failureReason_target_file_open_failed_next: '请展开所在文件夹，或手动打开 {file}，然后重试。',
+      failureReason_target_file_not_active_user: 'Codex 无法写入 {file}，因为 Overleaf 仍停留在 {activeFile}。',
+      failureReason_target_file_not_active_next: '请在 Overleaf 中打开 {file}，然后重试本轮任务。',
+      failureReason_target_editor_not_ready_user: '{file} 已成为当前文件，但编辑器在超时前没有就绪。',
+      failureReason_target_editor_not_ready_next: '请等 Overleaf 加载完成后再重试。',
+      failureReason_stale_source_changed_user: '{file} 在任务执行期间被修改过，Codex 没有覆盖它。',
+      failureReason_stale_source_changed_next: '请先查看当前文件内容，再重新运行本轮任务。',
+      failureReason_patch_anchor_not_found_user: '{file} 的修改锚点已经无法和当前 Overleaf 内容对齐。',
+      failureReason_patch_anchor_not_found_next: '请基于当前文档重新运行任务。',
+      failureReason_write_observed_mismatch_user: 'Codex 尝试写入 {file}，但写入后从 Overleaf 读回的内容与批准的改动不一致。',
+      failureReason_write_observed_mismatch_next: '请打开“技术细节”比对预期与实际内容；如发现异常可使用“撤销已写入部分”。',
+      failureReason_reviewing_state_unknown_user: 'Codex 没能确认 Overleaf Reviewing/Track Changes 是否开启。',
+      failureReason_reviewing_state_unknown_next: '请在 Overleaf 手动检查留痕状态后再重试。',
+      failureReason_editing_not_confirmed_user: '写入 {file} 之前没能确认 Editing 模式已稳定。',
+      failureReason_editing_not_confirmed_next: '请暂停写入，检查模式选择器后再重试。',
+      failureReason_tracked_changes_remain_user: '{file} 的接受/拒绝操作完成了，但 Overleaf 仍报告存在未处理的留痕改动。',
+      failureReason_tracked_changes_remain_next: '请在 Overleaf 审阅面板查看剩余的留痕改动，再决定是否继续。',
+      failureReason_undo_not_verified_user: '{file} 的撤销已执行，但 Codex 没能确认文件恢复到本轮写入前的内容。',
+      failureReason_undo_not_verified_next: '请先在 Overleaf 手动确认 {file} 的内容，再继续操作。',
+      failureReason_accept_not_verified_user: '{file} 的接受改动似乎已执行，但 Codex 没能确认最终内容或留痕状态。',
+      failureReason_accept_not_verified_next: '请先在 Overleaf 审阅面板核对后再继续。',
+      failureReason_native_bridge_unavailable_user: '扩展无法连接到 Codex Native Host。',
+      failureReason_native_bridge_unavailable_next: '请运行 install-native，或者重新加载扩展。',
+      failureReason_codex_no_usable_result_user: '本地 Codex 没有返回可用的最终报告或操作。',
+      failureReason_codex_no_usable_result_next: '请打开“技术细节”排查本地 Codex 错误。',
+      failureReason_codex_project_locked_user: '同一个 Overleaf 项目里已经有一轮 Codex 任务正在运行。',
+      failureReason_codex_project_locked_next: '请等待当前任务完成，或先取消当前任务后再重试。',
+      failureReason_storage_quota_exceeded_user: '浏览器本地存储配额已超出。',
+      failureReason_storage_quota_exceeded_next: '请清理旧的运行历史，或减少附件大小。',
+      failureReason_aborted_project_changed_user: 'Codex 已停止一次写入，因为 Overleaf 在写入过程中切换到了另一个项目。',
+      failureReason_aborted_project_changed_next: '如仍需此次改动，请回到原项目后重新运行任务。',
+      failureReason_editor_project_id_unavailable_user: 'Codex 无法确认当前 Overleaf 编辑器对应的项目，因此没有写入。',
+      failureReason_editor_project_id_unavailable_next: '请刷新 Overleaf 页面后重试；如果仍然失败，请重新加载扩展。',
+      // Welcome-panel + write-guard v1.3.8 add-on (Task 5): Recent-projects
+      // variant copy. 见 spec §5.3–§5.5、§5.8、§5.10。
+      recentProjects_welcome: 'Codex Overleaf Link',
+      recentProjects_welcome_subtitle: '从左侧 Overleaf 项目列表中打开任意项目即可开始。',
+      recentProjects_empty: '你还没有运行过 Codex 会话。从左侧 Overleaf 项目列表中打开任意项目即可开始。',
+      recentProjects_degraded: '请登录 Overleaf 后查看你最近的 Codex 项目。',
+      recentProjects_row_projectLinkUnavailable: '项目链接不可用。',
+      recentProjects_settings_entry: '设置与诊断',
+      recentProjects_badge_pending: '待处理',
+      recentProjects_badge_accepted: '已接受',
+      recentProjects_badge_rejected: '已撤回',
+      recentProjects_badge_needs_review: '待处理',
+      recentProjects_badge_running: '运行中',
+      recentProjects_badge_completed: '已完成',
+      recentProjects_badge_failed: '失败',
+      recentProjects_badge_background_completed: '后台已完成',
+      recentProjects_badge_needs_review_after_navigation: '待处理',
+      recentProjects_badge_abandoned_after_navigation: '已中止'
     }
   };
 

package/extension/src/shared/pathRedaction.js

@@ -0,0 +1,143 @@
+(function initPathRedaction(root, factory) {
+  if (typeof module === 'object' && module.exports) {
+    module.exports = factory();
+  } else {
+    root.CodexOverleafPathRedaction = factory();
+  }
+})(typeof globalThis !== 'undefined' ? globalThis : window, function pathRedactionFactory() {
+  'use strict';
+
+  // -------------------------------------------------------------------------
+  // Welcome-panel + write-guard v1.3.8 add-on (Fix C / spec §5.6.2).
+  //
+  // Canonical local-path sanitizer shared between `computeSafeTaskSummary`
+  // (sessionState) and the storage-side audit redaction helpers
+  // (`sanitizeBareLocalPaths` in storageDb). One regex set, one placeholder
+  // shape, one place to broaden coverage when a new path shape shows up.
+  //
+  // Spec §5.6.2 explicitly directs implementers NOT to hand-roll narrow
+  // path regexes inside individual sanitizers — the audit redaction layer
+  // already exists for this. This module is the extraction the spec calls
+  // for so both layers stay in sync.
+  //
+  // Coverage required by the task brief:
+  //   - /Users/...                       (Unix macOS home)
+  //   - /home/...                        (Unix Linux home)
+  //   - /private/var/..., /private/...   (macOS firmlinks)
+  //   - /tmp/...                         (Unix temp)
+  //   - /var/folders/...                 (macOS per-user tmp)
+  //   - /Volumes/...                     (macOS mounted volumes)
+  //   - /etc/..., /opt/..., /usr/...     (system / opt / usr)
+  //   - file:///Users/...                (file URLs)
+  //   - C:\Users\bob\foo                 (Windows backslash)
+  //   - C:/Users/bob/foo                 (Windows forward-slash)
+  //   - \\server\share\foo               (Windows UNC)
+  //   - .codex-overleaf/projects/...     (this extension's local workspace)
+  //
+  // Pattern construction notes:
+  //   - The Unix branch uses a non-capturing alternation over the top-level
+  //     directory names so a future addition (e.g. /srv/...) is one entry,
+  //     not a new regex.
+  //   - The UNC branch matches `\\` (or `//`) followed by host + share +
+  //     path. We deliberately accept the forward-slash form too because
+  //     some tools normalize backslashes to forward slashes when logging.
+  //   - The file:// branch matches `file://` followed by either two or
+  //     three slashes (RFC + common mis-encoded variants).
+  // -------------------------------------------------------------------------
+
+  // Top-level Unix directories that mark an absolute local path. We include
+  // the most common ones plus a few opt/usr/etc trees so a stray reference
+  // does not leak. Adding a new entry is a one-line change here.
+  const UNIX_TOPLEVELS = [
+    'Users',
+    'home',
+    'root',
+    'private',
+    'var',
+    'tmp',
+    'Volumes',
+    'etc',
+    'opt',
+    'usr',
+    'srv',
+    'mnt',
+    'media'
+  ];
+
+  // Match a path token to its end-of-word boundary. We stop at whitespace,
+  // closing paren/bracket (markdown link form), backtick, double-quote, or
+  // single-quote so we don't over-consume into surrounding text.
+  // Note: trailing punctuation like '.,;!?' is allowed inside the path body
+  // because filenames legitimately contain dots; downstream callers strip
+  // a trailing sentence punctuation character separately when needed.
+  const PATH_BODY = '[^\\s)\\]`"\']+';
+
+  // Build the master pattern. Each branch is a complete absolute-path shape.
+  // Order matters for clarity but not correctness — alternation is greedy
+  // by default in `|`-separated branches; we still anchor each branch to
+  // its distinguishing prefix so they don't overlap.
+  const ABSOLUTE_PATH_PATTERN = new RegExp(
+    [
+      // file:// URLs with two or three slashes after the scheme.
+      'file:\\/{2,3}' + PATH_BODY,
+      // Windows UNC: \\server\share\path  or //server/share/path
+      '(?:\\\\\\\\|\\/\\/)[A-Za-z0-9._-]+(?:[\\\\\\/][A-Za-z0-9._$-]+)+',
+      // Windows drive letter: C:\path  or  C:/path
+      '[A-Za-z]:[\\\\\\/]' + PATH_BODY,
+      // Unix absolute path under a known top-level directory.
+      '\\/(?:' + UNIX_TOPLEVELS.join('|') + ')\\/' + PATH_BODY,
+      // Local Codex workspace marker — appears with or without a leading
+      // slash; e.g.  /home/x/.codex-overleaf/projects/p1 or  ./.codex-
+      // overleaf/projects/p1. The Unix branch above already handles the
+      // common /home form; this branch catches the relative form.
+      '(?:^|[\\s\\\\/])\\.codex-overleaf[\\\\\\/]projects[\\\\\\/]' + PATH_BODY
+    ].join('|'),
+    'gi'
+  );
+
+  // Quick predicate — used by callers that only want to do the (more
+  // expensive) substitution pass when there's actually something to strip.
+  const MIGHT_CONTAIN_LOCAL_PATH_PATTERN = new RegExp(
+    [
+      'file:\\/{2,3}',
+      '(?:\\\\\\\\|\\/\\/)[A-Za-z0-9._-]+[\\\\\\/]',
+      '[A-Za-z]:[\\\\\\/]',
+      '\\/(?:' + UNIX_TOPLEVELS.join('|') + ')\\/',
+      '\\.codex-overleaf[\\\\\\/]projects[\\\\\\/]'
+    ].join('|'),
+    'i'
+  );
+
+  // Replace every absolute-local-path token in `value` with `placeholder`.
+  // Default placeholder is `<local-path>` to match the prior summary-side
+  // sanitizer. The storage-side audit redactor uses a richer `[local path]`
+  // (and `[local path:LINE]` when a `:line` suffix was present); that path
+  // continues to use its own formatter — this helper is the floor, not
+  // the only formatter.
+  function redactLocalPaths(value, placeholder) {
+    if (typeof value !== 'string' || !value) {
+      return '';
+    }
+    const token = typeof placeholder === 'string' ? placeholder : '<local-path>';
+    // Reset state (these are /g regexes) before reusing.
+    ABSOLUTE_PATH_PATTERN.lastIndex = 0;
+    return value.replace(ABSOLUTE_PATH_PATTERN, token);
+  }
+
+  function mightContainLocalPath(value) {
+    if (typeof value !== 'string' || !value) {
+      return false;
+    }
+    return MIGHT_CONTAIN_LOCAL_PATH_PATTERN.test(value);
+  }
+
+  return {
+    redactLocalPaths,
+    mightContainLocalPath,
+    // Exposed so the storage-side audit redactor (which formats per-token
+    // placeholders with line-suffix preservation) can iterate the same set
+    // without duplicating the regex source.
+    ABSOLUTE_PATH_PATTERN,
+    UNIX_TOPLEVELS
+  };
+});

package/extension/src/shared/sessionState.js

@@ -38,6 +38,18 @@
   const VALID_LOCALES = new Set(['en', 'zh']);
   const VALID_EVENT_STATUSES = new Set(['info', 'running', 'completed', 'failed', 'warning', 'blocked', 'skipped', 'pending']);
   const VALID_TITLE_SOURCES = new Set(['auto', 'manual']);
+  // `needs_review` is the §7 settlement state surfaced when Accept/Undo cannot
+  // prove a clean post-action state. It is non-terminal for UI purposes: both
+  // Accept and Undo remain visible AND actionable so the user can inspect
+  // Overleaf and reconcile. Step 3 (terminal payload cleanup) intentionally
+  // does NOT empty refs for `needs_review` — the user is supposed to retry.
+  const VALID_TRACKED_CHANGE_STATUS = new Set([
+    'pending',
+    'accepted',
+    'rejected',
+    'needs_review'
+  ]);
+  const TERMINAL_TRACKED_CHANGE_STATUS = new Set(['accepted', 'rejected']);
   const LEGACY_DEFAULT_SESSION_TITLE = 'New task';
   const SESSION_AUTO_TITLE_CHARS = 24;
   const MAX_RUN_EVENTS = 300;
@@ -87,6 +99,7 @@
     /\b(?:api[_-]?key|token|password|passwd|secret)\b\s*[:=]\s*["']?[^"'\s,;]+["']?/gi
   ];
   const LineReferences = loadLineReferences();
+  const PathRedaction = loadPathRedaction();
 
   function normalizePanelState(input = {}, options = {}) {
     const state = {
@@ -515,7 +528,7 @@
       });
     }
 
-    return {
+    const normalized = {
       id: run.id,
       task: sanitizeAssistantVisibleText(run.task) || 'untitled task',
       mode: typeof run.mode === 'string' ? run.mode : '',
@@ -524,6 +537,7 @@
       speedTier: typeof run.speedTier === 'string' ? run.speedTier : '',
       status: shouldStopRestoredRun ? 'failed' : normalizeRunStatus(run.status),
       statusText: shouldStopRestoredRun ? i18n.t(locale, 'restoredRunStoppedStatus') : sanitizeAssistantVisibleText(run.statusText),
+      runProjectId: normalizeProjectPrefKey(run.runProjectId),
       startedAt: typeof run.startedAt === 'string' ? run.startedAt : '',
       finishedAt: shouldStopRestoredRun ? new Date().toISOString() : typeof run.finishedAt === 'string' ? run.finishedAt : '',
       events: events.slice(-MAX_RUN_EVENTS),
@@ -535,10 +549,83 @@
       undoExpectedFiles: normalizeRunFiles(run.undoExpectedFiles),
       undoStatus: sanitizeAssistantVisibleText(run.undoStatus)
     };
+
+    applyTrackedChangeStatus(normalized, run.trackedChangeStatus);
+
+    return normalized;
   }
 
+  // Resolves `trackedChangeStatus` on an already-normalized run via three ordered
+  // steps: (1) value recovery, (2) migration of pre-feature runs, (3) terminal
+  // payload cleanup. Mutates `run` in place. Idempotent: re-running it on its own
+  // output yields the same result.
+  function applyTrackedChangeStatus(run, rawStatus) {
+    const hasRefs = run.undoTrackedChanges.length > 0;
+    const hasRawStatus = rawStatus !== undefined && rawStatus !== null && rawStatus !== '';
+
+    // Step 1 — value recovery. Keep a stable value; recover any other present
+    // value (corruption, an old persisted `partial_accept` / `partial_reject` /
+    // `resolved_elsewhere`, a stray in-flight value) to `pending` (with refs)
+    // or drop it. An absent value falls through.
+    let status;
+    if (VALID_TRACKED_CHANGE_STATUS.has(rawStatus)) {
+      status = rawStatus;
+    } else if (hasRawStatus) {
+      status = hasRefs ? 'pending' : undefined;
+    } else {
+      status = undefined;
+    }
+
+    // Step 1 — reload reconciliation. A non-terminal status (`pending`) with no
+    // refs is the post-reload state of an un-acted tracked-change run: the heavy refs are
+    // never persisted, so without them there is nothing to act on. Drop it so
+    // the run returns to the legacy-undo world. A terminal status with no refs
+    // is kept — step 3 already empties terminal payloads and the label stays
+    // meaningful.
+    if (!hasRefs && status !== undefined && !TERMINAL_TRACKED_CHANGE_STATUS.has(status)) {
+      status = undefined;
+    }
+
+    // Step 2 — migration of pre-feature runs (no status after step 1).
+    if (status === undefined && hasRefs) {
+      status = run.undoStatus === 'applied' ? 'rejected' : 'pending';
+    }
+
+    // Step 3 — terminal payload cleanup; keeps `trackedChangeStatus`.
+    if (TERMINAL_TRACKED_CHANGE_STATUS.has(status)) {
+      run.undoTrackedChanges = [];
+      run.undoExpectedFiles = [];
+    }
+
+    if (status !== undefined) {
+      run.trackedChangeStatus = status;
+    }
+  }
+
+  // Welcome-panel + write-guard v1.3.8 add-on (Task 2): the run lifecycle now
+  // settles on three additional values when the user navigates away mid-run
+  // and the original run completes (or aborts) in the background. They land on
+  // the ORIGINAL project's session record, not the active one. The catalog is
+  // a `Set` so the recovery branch can defensively coerce any unknown legacy
+  // value to `pending` without throwing.
+  const VALID_RUN_STATUS = new Set([
+    'pending',
+    'running',
+    'completed',
+    'failed',
+    'background_completed',
+    'needs_review_after_navigation',
+    'abandoned_after_navigation'
+  ]);
+
   function normalizeRunStatus(status) {
-    return ['running', 'completed', 'failed'].includes(status) ? status : 'completed';
+    if (VALID_RUN_STATUS.has(status)) return status;
+    // Legacy persisted runs without an explicit status fall back to `completed`
+    // (the historical default for the recovery branch); unknown values land on
+    // `pending` so the UI surfaces them as fresh / actionable rather than
+    // pretending they finished.
+    if (status === undefined || status === null || status === '') return 'completed';
+    return 'pending';
   }
 
   function normalizeEventStatus(status) {
@@ -803,7 +890,7 @@
   function compactSessionForStorage(session, fallbackState, limits) {
     const runs = compactRunsForStorage(session.runs, limits);
     const titleSource = VALID_TITLE_SOURCES.has(session.titleSource) ? session.titleSource : 'auto';
-    return {
+    const compact = {
       id: session.id,
       title: compactSessionTitleForStorage(session, titleSource, limits),
       titleSource,
@@ -819,6 +906,24 @@
       requireReviewing: session.requireReviewing !== false,
       focusFiles: normalizeFocusFiles(session.focusFiles)
     };
+    // Welcome-panel + write-guard v1.3.8 add-on (Task 3): preserve the four
+    // Recent-projects fields through compaction so they round-trip when state
+    // is reloaded from chrome.storage.local. The active record builder in
+    // `buildSessionRecord` is the canonical writer; this branch preserves an
+    // existing value so it survives.
+    if (typeof session.lastActivityAt === 'string' && session.lastActivityAt) {
+      compact.lastActivityAt = session.lastActivityAt;
+    }
+    if (typeof session.accountScopeId === 'string' && session.accountScopeId) {
+      compact.accountScopeId = session.accountScopeId;
+    }
+    if (typeof session.accountScopeUnavailable === 'boolean') {
+      compact.accountScopeUnavailable = session.accountScopeUnavailable;
+    }
+    if (typeof session.safeTaskSummary === 'string' && session.safeTaskSummary) {
+      compact.safeTaskSummary = session.safeTaskSummary;
+    }
+    return compact;
   }
 
   function compactSessionTitleForStorage(session, titleSource, limits) {
@@ -861,7 +966,7 @@
 
   function compactRunForStorage(run, limits, keepUndoPayload) {
     const undoPayload = compactUndoPayload(run, limits, keepUndoPayload);
-    return {
+    const compact = {
       id: run.id,
       task: summarizeTextForStorage(run.task || 'untitled task', 'run task'),
       mode: typeof run.mode === 'string' ? run.mode : '',
@@ -870,6 +975,7 @@
       speedTier: typeof run.speedTier === 'string' ? run.speedTier : '',
       status: normalizeRunStatus(run.status),
       statusText: summarizeTextForStorage(run.statusText, 'status text'),
+      runProjectId: normalizeProjectPrefKey(run.runProjectId),
       startedAt: typeof run.startedAt === 'string' ? run.startedAt : '',
       finishedAt: typeof run.finishedAt === 'string' ? run.finishedAt : '',
       events: compactRunEvents(run.events, limits),
@@ -881,6 +987,10 @@
       undoExpectedFiles: undoPayload.undoExpectedFiles,
       undoStatus: summarizeTextForStorage(run.undoStatus, 'undo status')
     };
+    if (VALID_TRACKED_CHANGE_STATUS.has(run.trackedChangeStatus)) {
+      compact.trackedChangeStatus = run.trackedChangeStatus;
+    }
+    return compact;
   }
 
   function compactRunEvents(events, limits) {
@@ -1019,6 +1129,51 @@
     return Math.round(Math.min(760, Math.max(340, width)));
   }
 
+  // Welcome-panel + write-guard v1.3.8 add-on (Task 3): the Recent-projects
+  // dashboard variant renders one sanitized line per project. `computeSafeTaskSummary`
+  // is the privacy floor for that line. It is written on every `saveState` and
+  // stored on the session record (`session.safeTaskSummary`), so the dashboard
+  // never has to touch the raw `task` text on render.
+  //
+  // The `@` regex is intentionally broad — see spec §5.6.2:
+  //   > Replace `@<token>` references with `@…` (regex `/@[\w./-]+/g` → `'@…'`).
+  //   > This intentionally over-redacts: it will also strip plain email
+  //   > addresses, social handles, and any `@foo` mention in the task body.
+  //   > That is the conservative-privacy choice and is by design — future
+  //   > implementers must not narrow the pattern to "only known attachment
+  //   > tokens" because doing so would re-expose paths, citation keys,
+  //   > reviewer names, etc. that users frequently combine with `@` in task
+  //   > text.
+  function computeSafeTaskSummary(task) {
+    if (typeof task !== 'string' || !task) return '';
+    let s = task;
+    // Strip absolute local paths via the canonical shared helper
+    // (spec §5.6.2 / Fix C). The helper covers Unix (/Users, /home,
+    // /private/var, /tmp, /var/folders, /Volumes, /etc, /opt, /usr, ...),
+    // Windows drive letters with both `\\` and `/`, UNC `\\server\share`,
+    // and `file:///` URLs. Adding a new path shape is a one-line change
+    // in `pathRedaction.js` and benefits both this summary and the
+    // storage-side audit redaction in lockstep.
+    if (PathRedaction && PathRedaction.redactLocalPaths instanceof Function) {
+      s = PathRedaction.redactLocalPaths(s, '<local-path>');
+    } else {
+      // Defensive fallback for hosts where the shared helper failed to
+      // load. The narrower legacy patterns ship a baseline (better than
+      // nothing) and the test suite asserts the broad coverage path
+      // succeeds, so this branch should never run in production.
+      s = s.replace(/(?:\/Users\/[^\s]+|\/home\/[^\s]+|\/private\/var\/[^\s]+|\/tmp\/[^\s]+|\/Volumes\/[^\s]+)/g, '<local-path>');
+      s = s.replace(/[A-Za-z]:[\\/][^\s]+/g, '<local-path>');
+    }
+    // INTENTIONALLY OVER-REDACT @<token>: spec §5.6.2 — do not narrow to
+    // attachment tokens, that would re-expose user info / paths / handles.
+    s = s.replace(/@[\w./-]+/g, '@…');
+    // Collapse whitespace runs to single space; trim.
+    s = s.replace(/\s+/g, ' ').trim();
+    // Hard cap 80 visible chars.
+    if (s.length > 80) s = s.slice(0, 79) + '…';
+    return s;
+  }
+
   function normalizeTextField(value, maxChars) {
     const text = sanitizeAssistantVisibleText(value);
     if (!Number.isFinite(maxChars) || maxChars <= 0 || text.length <= maxChars) {
@@ -1100,6 +1255,20 @@
     return null;
   }
 
+  function loadPathRedaction() {
+    if (typeof globalThis !== 'undefined' && globalThis.CodexOverleafPathRedaction) {
+      return globalThis.CodexOverleafPathRedaction;
+    }
+    if (typeof require === 'function') {
+      try {
+        return require('./pathRedaction');
+      } catch (_error) {
+        return null;
+      }
+    }
+    return null;
+  }
+
   function fallbackSanitizeLocalReferences(value) {
     return String(value || '')
       .replace(/\[([^\]]*)\]\(([^)]*)\)/g, (_raw, label, target) => {
@@ -1202,6 +1371,7 @@
     updateActiveSession,
     normalizeRuns,
     prepareStateForStorage,
-    estimateJsonBytes
+    estimateJsonBytes,
+    computeSafeTaskSummary
   };
 });