codex-overleaf-link 1.7.7 → 1.8.1

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.7.7-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-1.8.1-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the native host **and** sets up the extension: the script r
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.7.7 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.7.7/install.sh)"
+CODEX_OVERLEAF_REF=v1.8.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.8.1/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.7.7/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.7.7'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.8.1/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v1.8.1'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,10 +56,10 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs and updates the **native host only** — it does not include the Chrome extension. Use it if you prefer a pinned npm package to a source checkout.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.7.7 -- install-native
+npm exec --yes codex-overleaf-link@1.8.1 -- install-native
 ```
 
-Then add the extension yourself: download `codex-overleaf-link-extension-v1.7.7.zip` from the [v1.7.7 GitHub Release](https://github.com/Ghqqqq/codex-overleaf-link/releases/tag/v1.7.7), unzip it to a stable folder, and in `chrome://extensions` enable **Developer mode**, click **Load unpacked**, and select that folder.
+Then add the extension yourself: download `codex-overleaf-link-extension-v1.8.1.zip` from the [v1.8.1 GitHub Release](https://github.com/Ghqqqq/codex-overleaf-link/releases/tag/v1.8.1), unzip it to a stable folder, and in `chrome://extensions` enable **Developer mode**, click **Load unpacked**, and select that folder.
 
 ### Open Overleaf
 
@@ -86,9 +86,9 @@ npm installs, updates, uninstalls, and diagnoses the native host only. npm does
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@1.7.7 -- install-native` |
-| Diagnose | `npm exec --yes codex-overleaf-link@1.7.7 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@1.7.7 -- uninstall-native` |
+| Install / update | `npm exec --yes codex-overleaf-link@1.8.1 -- install-native` |
+| Diagnose | `npm exec --yes codex-overleaf-link@1.8.1 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@1.8.1 -- uninstall-native` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -98,13 +98,13 @@ To update, re-run any of the [native host installers](#install) — they install
 
 ## GitHub Release Artifacts
 
-The v1.7.7 GitHub Release contains:
+The v1.8.1 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.7.7.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.7.7.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.7.7.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.7.7` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.7.7` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v1.8.1.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v1.8.1.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-1.8.1.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.8.1` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.8.1` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -115,7 +115,7 @@ The v1.7.7 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.7.7 -- uninstall-native
+npm exec --yes codex-overleaf-link@1.8.1 -- uninstall-native
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -150,13 +150,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.7.7 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.7.7/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v1.8.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.8.1/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.7.7 -- uninstall-native --browser chromium
+npm exec --yes codex-overleaf-link@1.8.1 -- uninstall-native --browser chromium
 ```
 
 ## Features
@@ -291,7 +291,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.7.7 -- install-native
+npm exec --yes codex-overleaf-link@1.8.1 -- install-native
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -340,8 +340,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.7.7 -- install-native` | `npm exec --yes codex-overleaf-link@1.7.7 -- install-native` | `npm exec --yes codex-overleaf-link@1.7.7 -- install-native` | `npm exec --yes codex-overleaf-link@1.7.7 -- install-native --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.7.7 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.7.7 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.7.7 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.7.7 -- uninstall-native --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@1.8.1 -- install-native` | `npm exec --yes codex-overleaf-link@1.8.1 -- install-native` | `npm exec --yes codex-overleaf-link@1.8.1 -- install-native` | `npm exec --yes codex-overleaf-link@1.8.1 -- install-native --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@1.8.1 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.8.1 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.8.1 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.8.1 -- uninstall-native --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |

package/extension/src/shared/compatibility.js

@@ -12,7 +12,7 @@
   const MIN_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_EXTENSION_VERSION = '1.0.0';
-  const BUILD_TARGET_VERSION = '1.7.7';
+  const BUILD_TARGET_VERSION = '1.8.1';
   const DEFAULT_CHROME_EXTENSION_ID = 'illdpneeeopfffmiepaejglgmhpmdhdc';
   const REQUIRED_CAPABILITIES = Object.freeze([
     'bridgePing',

package/extension/src/shared/i18n.js

@@ -290,6 +290,10 @@
       runTurnNavLabel: 'Jump to a turn\u2026',
       historyTitle: 'Change history',
       historyHelp: 'What Codex wrote to this project, per run. Filter by file name or task text.',
+      runSearchPlaceholder: 'Search this session\u2019s runs\u2026',
+      undoFileSelectTitle: 'Undo which files?',
+      undoFileSelectConfirm: 'Undo selected',
+      undoFileSelectAll: 'Select all',
       privacyTitle: 'Privacy',
       governanceBroadReadonlyWarning: '"{pattern}" matches every file — Codex will not be able to write anything. Saved; narrow it if unintended.',
       governanceWritableAllowlistNote: 'Writable allowlist active — files outside these patterns cannot be written.',
@@ -465,6 +469,13 @@
       recentProjects_badge_completed: 'completed',
       recentProjects_badge_failed: 'failed',
       recentProjects_badge_interrupted: 'interrupted',
+      recentProjects_unnamed: 'Project \u00b7 {prefix}',
+      recentProjects_zombieRunningNote: 'Marked as running, but it may be a leftover from an interrupted run.',
+      recentProjects_zombieDeleteConfirm: 'This session is marked as running. If no other tab is actually running it, you can delete it anyway.',
+      recentProjects_retryScope: 'Retry',
+      recentProjects_degraded_hint: 'Could not identify the Overleaf account on this page, so the project list is hidden to avoid mixing accounts. This usually resolves on a reload.',
+      recentProjects_sessionsCount: '{count} session(s)',
+      recentProjects_welcome_stats: '{projects} project(s) \u00b7 {sessions} session(s) with Codex history',
       recentProjects_badge_background_completed: 'completed in background',
       recentProjects_badge_needs_review_after_navigation: 'pending',
       recentProjects_badge_abandoned_after_navigation: 'abandoned'
@@ -748,6 +759,10 @@
       runTurnNavLabel: '跳到某一轮…',
       historyTitle: '变更历史',
       historyHelp: 'Codex 每一轮写入本项目的记录。可按文件名或任务内容过滤。',
+      runSearchPlaceholder: '搜索本会话的轮次…',
+      undoFileSelectTitle: '撤销哪些文件？',
+      undoFileSelectConfirm: '撤销所选',
+      undoFileSelectAll: '全选',
       privacyTitle: '隐私',
       governanceBroadReadonlyWarning: '「{pattern}」匹配所有文件——Codex 将无法写入任何内容。已保存；若非有意请收窄范围。',
       governanceWritableAllowlistNote: '已设置可写白名单——白名单之外的文件都不可写。',
@@ -922,6 +937,13 @@
       recentProjects_badge_completed: '已完成',
       recentProjects_badge_failed: '失败',
       recentProjects_badge_interrupted: '已中断',
+      recentProjects_unnamed: '项目 · {prefix}',
+      recentProjects_zombieRunningNote: '标记为运行中，但可能是被中断后的残留。',
+      recentProjects_zombieDeleteConfirm: '该会话标记为运行中。如果确认没有其他标签页在运行它，可以直接删除。',
+      recentProjects_retryScope: '重试',
+      recentProjects_degraded_hint: '无法识别本页的 Overleaf 账号，为避免账号间串数据已隐藏项目列表。通常刷新即可恢复。',
+      recentProjects_sessionsCount: '{count} 个会话',
+      recentProjects_welcome_stats: '{projects} 个项目 · {sessions} 个会话有 Codex 历史',
       recentProjects_badge_background_completed: '后台已完成',
       recentProjects_badge_needs_review_after_navigation: '待处理',
       recentProjects_badge_abandoned_after_navigation: '已中止'

package/extension/src/shared/sessionState.js

@@ -130,6 +130,7 @@
     state.task = typeof state.task === 'string' ? state.task : '';
     state.model = typeof state.model === 'string' && state.model ? state.model : DEFAULT_PANEL_STATE.model;
     state.customInstructionsByProject = normalizeCustomInstructionsByProject(state.customInstructionsByProject);
+    state.composerAttachments = normalizeComposerAttachmentsForPersistence(state.composerAttachments);
     const localizedOptions = { ...options, locale: state.locale };
     state.runs = normalizeRuns(state.runs, localizedOptions);
     state.sessions = normalizeSessions(state, input, localizedOptions);
@@ -722,6 +723,31 @@
       .slice(-MAX_RUN_EVENTS);
   }
 
+  // v1.8.0 C4: composer attachments that survive a page refresh. Hard caps
+  // keep chrome.storage and every debounced saveState cheap: 3 attachments,
+  // 1MB of base64 each.
+  function normalizeComposerAttachmentsForPersistence(attachments) {
+    const MAX_COUNT = 3;
+    const MAX_CONTENT_CHARS = 1024 * 1024;
+    return (Array.isArray(attachments) ? attachments : [])
+      .filter(item => item && typeof item === 'object'
+        && normalizeAttachmentName(item.name)
+        && typeof item.contentBase64 === 'string'
+        && item.contentBase64.length > 0
+        && item.contentBase64.length <= MAX_CONTENT_CHARS)
+      .slice(0, MAX_COUNT)
+      .map(item => ({
+        id: normalizeTextField(item.id, 80),
+        name: normalizeAttachmentName(item.name),
+        mimeType: normalizeTextField(item.mimeType, 120),
+        size: Number(item.size) || 0,
+        kind: item.kind === 'image' ? 'image' : 'file',
+        previewDataUrl: typeof item.previewDataUrl === 'string' ? item.previewDataUrl : '',
+        contentBase64: item.contentBase64,
+        dedupeKey: normalizeTextField(item.dedupeKey, 200)
+      }));
+  }
+
   function normalizeRunAttachments(attachments, limits = STORAGE_DEFAULT_LIMITS) {
     const normalized = [];
     for (const attachment of Array.isArray(attachments) ? attachments : []) {
@@ -909,6 +935,7 @@
       // stripped here — so the gate silently died after any reload until the
       // Skills page was reopened.
       codexOverleafSkills: compactCodexOverleafSkillsForStorage(source.codexOverleafSkills),
+      composerAttachments: normalizeComposerAttachmentsForPersistence(source.composerAttachments),
       mode: VALID_MODES.has(active?.mode) ? active.mode : normalizeMode(source.mode),
       model: normalizeTextField(active?.model || source.model || DEFAULT_PANEL_STATE.model, 80),
       reasoningEffort: VALID_REASONING.has(active?.reasoningEffort)

package/extension/src/shared/storageDb.js

@@ -899,7 +899,10 @@
       'failed',
       'background_completed',
       'needs_review_after_navigation',
-      'abandoned_after_navigation'
+      'abandoned_after_navigation',
+      // v1.8.1: reload-orphaned runs settle to 'interrupted' (v1.7.6); the
+      // storage round-trip must not rewrite them to a false 'completed'.
+      'interrupted'
     ].indexOf(status) !== -1 ? status : 'completed';
   }
 
@@ -1146,6 +1149,7 @@
       return [];
     }
     var byProject = {}; // projectId → session
+    var sessionCounts = {}; // projectId → number of sessions
     var all = Array.isArray(sessions) ? sessions : [];
     for (var i = 0; i < all.length; i++) {
       var s = all[i];
@@ -1157,6 +1161,10 @@
       if (!prev || prev.lastActivityAt < s.lastActivityAt) {
         byProject[s.projectId] = s;
       }
+      // v1.8.1: the per-project session count was computed here and thrown
+      // away — keep it so dashboard rows can show how much work lives in a
+      // project without a second scan.
+      sessionCounts[s.projectId] = (sessionCounts[s.projectId] || 0) + 1;
     }
     var survivors = [];
     var keys = Object.keys(byProject);
@@ -1173,7 +1181,8 @@
         projectId: session.projectId,
         lastActivityAt: session.lastActivityAt,
         safeTaskSummary: typeof session.safeTaskSummary === 'string' ? session.safeTaskSummary : '',
-        primaryStatusBadge: derivePrimaryStatusBadge(session)
+        primaryStatusBadge: derivePrimaryStatusBadge(session),
+        sessionCount: sessionCounts[session.projectId] || 1
       });
     }
     return rows;

package/native-host/src/mirrorWorkspace.js

@@ -771,6 +771,61 @@ async function applyFileOverlays({ projectId, overlays, rootDir }) {
   });
 }
 
+// v1.8.0: after a VERIFIED writeback, the workspace already holds the exact
+// content that landed in Overleaf (the writeback reads from this workspace).
+// Instead of re-downloading the whole project only to rewrite what we just
+// uploaded, re-hash the written workspace files in place and refresh the
+// baseline freshness metadata. Any doubt -> ok:false, and the caller falls
+// back to a full syncOverleafToMirror.
+async function confirmWritebackFiles({ projectId, paths, rootDir }) {
+  const mirror = getProjectMirror(projectId, { rootDir });
+  const baseline = readBaseline(mirror.baselinePath);
+  if (!baseline.lastFullSyncAt) {
+    return { ok: false, reason: 'no_baseline' };
+  }
+  if (baseline.dirty === true) {
+    return { ok: false, reason: 'dirty_mirror' };
+  }
+  const filesByPath = new Map((baseline.files || []).map(file => [file.path, file]));
+  const confirmed = [];
+  for (const rawPath of Array.isArray(paths) ? paths : []) {
+    const normalizedPath = normalizeRelativePath(rawPath);
+    const baselineFile = filesByPath.get(normalizedPath);
+    if (!baselineFile) {
+      return { ok: false, reason: 'missing_baseline_file', path: normalizedPath };
+    }
+    if (baselineFile.kind !== 'text') {
+      return { ok: false, reason: 'not_text', path: normalizedPath };
+    }
+    let target;
+    try {
+      target = resolveWorkspacePath(mirror.workspacePath, normalizedPath);
+    } catch (error) {
+      return { ok: false, reason: 'unsafe_path', path: normalizedPath };
+    }
+    let content;
+    try {
+      content = fs.readFileSync(target, 'utf8');
+    } catch (error) {
+      return { ok: false, reason: 'workspace_read_failed', path: normalizedPath };
+    }
+    const hash = hashText(content);
+    filesByPath.set(normalizedPath, { ...baselineFile, hash, content });
+    confirmed.push({ path: normalizedPath, hash });
+  }
+  if (!confirmed.length) {
+    return { ok: false, reason: 'no_paths' };
+  }
+  const now = new Date().toISOString();
+  writeBaseline(mirror.baselinePath, {
+    ...baseline,
+    lastFullSyncAt: now,
+    lastSyncSource: 'writeback-confirm',
+    files: Array.from(filesByPath.values())
+  });
+  return { ok: true, confirmed, lastFullSyncAt: now };
+}
+
 async function patchMirrorFiles({ projectId, files, rootDir, source = 'ot' }) {
   const mirror = getProjectMirror(projectId, { rootDir });
   const baseline = readBaseline(mirror.baselinePath);
@@ -1013,6 +1068,7 @@ module.exports = {
   SAFE_INLINE_BINARY_CHANGE_BYTES,
   SAFE_NATIVE_RESPONSE_PAYLOAD_BYTES,
   applyFileOverlays,
+  confirmWritebackFiles,
   collectMirrorChangesDetailed,
   collectMirrorChanges,
   getDefaultMirrorRoot,

package/native-host/src/nativeQuotas.js

@@ -26,6 +26,8 @@ function validateNativeRequestQuotas(request = {}) {
       ]);
     case 'mirror.sync':
       return validateProjectSnapshotQuota(params.project);
+    case 'mirror.confirmWriteback':
+      return validateOperationListQuota(params.paths, 'paths');
     case 'mirror.patchFiles':
       return firstQuotaViolation([
         validateOperationListQuota(params.files, 'files'),

package/native-host/src/taskRunnerRuntime.js

@@ -65,6 +65,10 @@ async function handleRequest(request, env = process.env, emit = () => {}) {
     return handleMirrorPatchFiles(request, env);
   }
 
+  if (request.method === 'mirror.confirmWriteback') {
+    return handleMirrorConfirmWriteback(request, env);
+  }
+
   if (request.method === 'mirror.status') {
     return handleMirrorStatus(request, env);
   }
@@ -551,6 +555,32 @@ async function handleMirrorPatchFiles(request, env) {
   }
 }
 
+async function handleMirrorConfirmWriteback(request, env) {
+  const { confirmWritebackFiles } = require('./mirrorWorkspace');
+  const params = request.params || {};
+  const projectId = params.projectId || 'unknown';
+  const projectKey = resolveProjectKey(params);
+  const rootDir = env.CODEX_OVERLEAF_MIRROR_ROOT;
+
+  const lockToken = acquireProjectLock(projectKey);
+  if (!lockToken) {
+    return errorResponse(request.id, 'project_locked', `Project ${projectKey} is currently in use by codex.run`);
+  }
+
+  try {
+    const result = await confirmWritebackFiles({
+      projectId,
+      paths: params.paths,
+      rootDir
+    });
+    return okResponse(request.id, result);
+  } catch (error) {
+    return errorResponse(request.id, 'mirror_confirm_writeback_failed', error.message);
+  } finally {
+    releaseProjectLock(projectKey, lockToken);
+  }
+}
+
 function handleMirrorStatus(request, env) {
   const { getMirrorStatus } = require('./mirrorWorkspace');
   const params = request.params || {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-overleaf-link",
-  "version": "1.7.7",
+  "version": "1.8.1",
   "description": "Cross-platform Chrome bridge that connects Codex to the active Overleaf project.",
   "license": "MIT",
   "type": "commonjs",