codex-overleaf-link 1.9.12 → 2.0.0

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.9.12-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-2.0.0-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the managed native host **and** managed extension runtime.
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.12 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.12/install.sh)"
+CODEX_OVERLEAF_REF=v2.0.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.0.0/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.12/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.9.12'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.0.0/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v2.0.0'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,7 +56,7 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs the same managed native host and extension runtime without keeping a source checkout. Use it if you prefer a pinned npm package.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.12 -- install-managed
+npm exec --yes codex-overleaf-link@2.0.0 -- install-managed
 ```
 
 Then, in `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select the managed extension path printed by the command. The Release extension zip remains available for explicitly unmanaged/manual installations.
@@ -86,9 +86,9 @@ npm installs, updates, and uninstalls the coordinated managed extension/native p
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@1.9.12 -- install-managed` |
-| Diagnose | `npm exec --yes codex-overleaf-link@1.9.12 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-managed` |
+| Install / update | `npm exec --yes codex-overleaf-link@2.0.0 -- install-managed` |
+| Diagnose | `npm exec --yes codex-overleaf-link@2.0.0 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-managed` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -98,13 +98,13 @@ Managed installations discover signed stable updates automatically and apply the
 
 ## GitHub Release Artifacts
 
-The v1.9.12 GitHub Release contains:
+The v2.0.0 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.9.12.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.9.12.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.9.12.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.12` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.12` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v2.0.0.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v2.0.0.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-2.0.0.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v2.0.0` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v2.0.0` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -115,7 +115,7 @@ The v1.9.12 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-managed
+npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-managed
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -150,13 +150,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.12 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.12/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v2.0.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.0.0/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-managed --browser chromium
+npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-managed --browser chromium
 ```
 
 ## Features
@@ -291,7 +291,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.12 -- install-managed
+npm exec --yes codex-overleaf-link@2.0.0 -- install-managed
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -340,8 +340,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.12 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.12 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.12 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.12 -- install-managed --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-managed --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@2.0.0 -- install-managed` | `npm exec --yes codex-overleaf-link@2.0.0 -- install-managed` | `npm exec --yes codex-overleaf-link@2.0.0 -- install-managed` | `npm exec --yes codex-overleaf-link@2.0.0 -- install-managed --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-managed --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |
@@ -377,7 +377,7 @@ Contributions are welcome. Please open an issue before submitting large changes
 The recommended v1.9 installation owns one stable unpacked-extension directory and a versioned native-host directory:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.12 -- install-managed
+npm exec --yes codex-overleaf-link@2.0.0 -- install-managed
 ```
 
 Load the printed extension path once from `chrome://extensions`. Starting with the next signed stable release, Codex Overleaf Link checks GitHub Releases automatically, downloads and verifies the coordinated extension/native-host bundle, waits until every connected Overleaf tab is saved and idle, and then updates both components together. A failed health check restores the previous version automatically.
@@ -387,11 +387,11 @@ The stable updater ignores drafts and prereleases, performs no telemetry, and ca
 The legacy native-only installer remains available for source or unmanaged extension directories:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.12 -- install-native
+npm exec --yes codex-overleaf-link@2.0.0 -- install-native
 ```
 
 Legacy native-only installations can be removed with:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.12 -- uninstall-native
+npm exec --yes codex-overleaf-link@2.0.0 -- uninstall-native
 ```

package/extension/bootstrap/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Codex Overleaf Link",
-  "version": "1.9.12",
+  "version": "2.0.0",
   "description": "Connect the active Overleaf project to a local Codex bridge.",
   "icons": {
     "16": "assets/icons/icon16.png",

package/extension/runtime-manifest.json

@@ -20,6 +20,7 @@
     "src/shared/sessionState.js",
     "src/shared/storageKeys.js",
     "src/shared/staleGuard.js",
+    "src/shared/storageRunActions.js",
     "src/shared/storageDb.js",
     "src/shared/storageMigration.js",
     "src/shared/compileAdapter.js",

package/extension/src/backgroundUpdateCoordinator.js

@@ -4,6 +4,8 @@
   const UPDATE_STATE_KEY = 'codex-overleaf-managed-update-state-v1';
   const CONSENT_STATE_KEY = 'codex-overleaf-update-consent-v1';
   const CHECK_ALARM = 'codex-overleaf-consent-update-check';
+  const STARTUP_CHECK_SESSION_KEY = 'codex-overleaf-startup-update-check-v1';
+  const STARTUP_CHECK_CLAIMED_FLAG = '__codexOverleafStartupUpdateCheckClaimed';
   const CHECK_INTERVAL_MINUTES = 24 * 60;
   const SNOOZE_MS = 24 * 60 * 60 * 1000;
   const CANDIDATE_MAX_AGE_MS = 5 * 60 * 1000;
@@ -68,6 +70,24 @@
     await settleTerminalConsent();
     await armLegacyGuard();
     await publishView();
+    if (await claimStartupCheck()) {
+      void enqueuePolicyAction(() => checkOnly({ manual: false })).catch(() => {});
+    }
+  }
+
+  async function claimStartupCheck() {
+    if (root[STARTUP_CHECK_CLAIMED_FLAG] === true) return false;
+    root[STARTUP_CHECK_CLAIMED_FLAG] = true;
+    const sessionStorage = chrome.storage?.session;
+    if (!sessionStorage?.get || !sessionStorage?.set) return true;
+    try {
+      const stored = await sessionStorage.get(STARTUP_CHECK_SESSION_KEY);
+      if (stored?.[STARTUP_CHECK_SESSION_KEY] === true) return false;
+      await sessionStorage.set({ [STARTUP_CHECK_SESSION_KEY]: true });
+      return true;
+    } catch (_error) {
+      return true;
+    }
   }
 
   async function handleMessage(message) {

package/extension/src/content/contentRuntime.js

@@ -6090,7 +6090,7 @@
           focusFiles: Array.isArray(session.focusFiles) ? session.focusFiles : [],
           createdAt: session.createdAt,
           updatedAt: session.updatedAt
-        })
+        }, { preserveRunActionPayload: true })
       ));
       if (sessionRecords.length) {
         await StorageDb.putRecords('sessions', sessionRecords);

package/extension/src/page/trackedChangesLifecycle.js

@@ -88,7 +88,9 @@
         skipped
       };
     }
-    const snapshotUndo = await restoreExpectedFilesWithNoTraceUndo(expectedFiles, postFiles);
+    const snapshotUndo = await restoreExpectedFilesWithNoTraceUndo(expectedFiles, postFiles, {
+      runProjectId: params.runProjectId
+    });
     if (snapshotUndo.attempted) {
       applied.push(...snapshotUndo.applied);
       skipped.push(...snapshotUndo.skipped);
@@ -291,6 +293,7 @@
       .filter(file => file?.path && typeof file.content === 'string')
       .map(file => [normalizeSafeProjectPath(file.path), file.content])
       .filter(([path]) => path));
+    let snapshotContextRebased = false;
     const paths = Array.from(expectedByPath.keys()).filter(path => postByPath.has(path));
     if (!paths.length) {
       return {
@@ -313,30 +316,63 @@
     // the reject path relies on (its primary path).
     const appliedBeforeUndo = applied.length;
     const editorUndo = await rejectTrackedChangesViaEditorUndo(expectedFiles, postFiles, applied);
+    let undoReady = editorUndo.ok === true;
+    let snapshotUndo = null;
+    // A page refresh preserves the run checkpoint but clears CodeMirror's
+    // in-memory undo history. When the native editor undo made no progress,
+    // reuse Undo's guarded snapshot path: it first verifies that every file is
+    // still exactly at this run's post-write content, then restores the
+    // persisted pre-write content with Track Changes disabled. The normal
+    // Accept replay below can then apply the post-write patch untracked.
+    if (!undoReady && applied.length === appliedBeforeUndo) {
+      snapshotUndo = await restoreExpectedFilesWithNoTraceUndo(expectedFiles, postFiles, {
+        runProjectId: params.runProjectId
+      });
+      if (snapshotUndo.ok) {
+        applied.push(...snapshotUndo.applied);
+        for (const file of snapshotUndo.rebasedExpectedFiles || []) {
+          expectedByPath.set(file.path, file.content);
+        }
+        for (const file of snapshotUndo.rebasedPostFiles || []) {
+          if (postByPath.get(file.path) !== file.content) {
+            snapshotContextRebased = true;
+          }
+          postByPath.set(file.path, file.content);
+        }
+        undoReady = true;
+      }
+    }
     pushDiagnostic('editorUndo', {
-      ok: editorUndo.ok === true,
+      ok: undoReady,
       attempted: editorUndo.attempted === true,
       code: editorUndo.code || '',
       reason: editorUndo.reason || '',
-      pathsProcessed: applied.length - appliedBeforeUndo
+      pathsProcessed: applied.length - appliedBeforeUndo,
+      snapshotFallbackAttempted: snapshotUndo?.attempted === true,
+      snapshotFallbackOk: snapshotUndo?.ok === true,
+      snapshotFallbackApplied: snapshotUndo?.applied?.length || 0,
+      snapshotFallbackSkipped: snapshotUndo?.skipped?.length || 0
     });
-    if (!editorUndo.ok) {
-      // Drift bail: the editor-undo could not reach the pre-write state. Do NOT
-      // re-write — that would only make the document worse. Return not-ok so the
-      // run stays pending and the user can retry, same as Undo.
+    if (!undoReady) {
+      // Drift or a partial editor undo still bails. The snapshot fallback is
+      // allowed only when editor undo made no progress, and its own post-state
+      // verification prevents overwriting edits made after this run.
+      const snapshotFailure = snapshotUndo?.skipped?.[0]?.result;
       return {
         ok: false,
-        applied: [],
-        skipped: [{
-          trackedChange: null,
-          result: editorUndo.attempted || editorUndo.code
-            ? editorUndo
-            : {
-              ok: false,
-              code: 'accept_editor_undo_unavailable',
-              reason: '没有可执行的 Overleaf 原生撤销来清掉本轮留痕；Codex 没有接受这轮改动。'
-            }
-        }],
+        applied: snapshotUndo?.applied || [],
+        skipped: snapshotUndo?.skipped?.length
+          ? snapshotUndo.skipped
+          : [{
+            trackedChange: null,
+            result: snapshotFailure || (editorUndo.attempted || editorUndo.code
+              ? editorUndo
+              : {
+                ok: false,
+                code: 'accept_editor_undo_unavailable',
+                reason: '没有可执行的 Overleaf 原生撤销或安全快照回滚来清掉本轮留痕；Codex 没有接受这轮改动。'
+              })
+          }],
         diagnostics
       };
     }
@@ -417,7 +453,12 @@
     // applyOperationsCore — never a whole-file replaceAll, which would clobber
     // any unrelated content and produce one giant tracked change if anything
     // about the mode switch were imperfect.
-    const operationsResult = buildAcceptReplayOperations(paths, expectedByPath, postByPath, params.appliedOperations);
+    const operationsResult = buildAcceptReplayOperations(
+      paths,
+      expectedByPath,
+      postByPath,
+      snapshotContextRebased ? [] : params.appliedOperations
+    );
     if (!operationsResult.ok) {
       if (weToggledOff) {
         await setReviewingEnabled(true, { waitMs: 1800 });
@@ -975,7 +1016,7 @@
     return { ok: true, attempted: true };
   }
 
-  async function restoreExpectedFilesWithNoTraceUndo(expectedFiles, postFiles) {
+  async function restoreExpectedFilesWithNoTraceUndo(expectedFiles, postFiles, options = {}) {
     const expectedByPath = new Map((expectedFiles || [])
       .filter(file => file?.path && typeof file.content === 'string')
       .map(file => [normalizeSafeProjectPath(file.path), file.content])
@@ -985,12 +1026,16 @@
       .map(file => [normalizeSafeProjectPath(file.path), file.content])
       .filter(([path]) => path));
     const paths = Array.from(expectedByPath.keys()).filter(path => postByPath.has(path));
+    const rebasedExpectedByPath = new Map();
+    const rebasedPostByPath = new Map();
     if (!paths.length) {
       return {
         ok: false,
         attempted: false,
         applied: [],
-        skipped: []
+        skipped: [],
+        rebasedExpectedFiles: [],
+        rebasedPostFiles: []
       };
     }
 
@@ -1008,30 +1053,40 @@
           };
         }
       }
-      const ready = await waitForActiveEditorExpectedText(path, postByPath.get(path), 1500);
+      const ready = await waitForActiveEditorCheckpoint(
+        path,
+        expectedByPath.get(path),
+        postByPath.get(path),
+        1500
+      );
       if (!ready.ok) {
         return {
           ok: false,
           attempted: false,
           applied: [],
           skipped: [],
+          rebasedExpectedFiles: [],
+          rebasedPostFiles: [],
           code: 'snapshot_undo_current_mismatch',
           reason: `${path} 当前内容已经不是本轮写入后的内容；为避免覆盖你的后续修改，Codex 不执行快照撤销。`
         };
       }
+      rebasedExpectedByPath.set(path, ready.expectedContent);
+      rebasedPostByPath.set(path, ready.postContent);
     }
 
     const operations = paths.map(path => ({
       type: 'edit',
       path,
-      replaceAll: expectedByPath.get(path),
+      replaceAll: rebasedExpectedByPath.get(path),
       reason: 'Undo tracked edit'
     }));
     const result = await applyOperationsWithNoTraceUndo(operations, {
       baseFiles: paths.map(path => ({
         path,
-        content: postByPath.get(path)
-      }))
+        content: rebasedPostByPath.get(path)
+      })),
+      runProjectId: typeof options.runProjectId === 'string' ? options.runProjectId : ''
     });
     const toTrackedResult = item => ({
       trackedChange: {
@@ -1046,7 +1101,66 @@
       ok: !(result.skipped || []).length,
       attempted: true,
       applied: (result.applied || []).map(toTrackedResult),
-      skipped: (result.skipped || []).map(toTrackedResult)
+      skipped: (result.skipped || []).map(toTrackedResult),
+      rebasedExpectedFiles: paths.map(path => ({
+        path,
+        content: rebasedExpectedByPath.get(path)
+      })),
+      rebasedPostFiles: paths.map(path => ({
+        path,
+        content: rebasedPostByPath.get(path)
+      }))
+    };
+  }
+
+  async function waitForActiveEditorCheckpoint(filePath, expectedContent, postContent, timeoutMs) {
+    const deadline = Date.now() + Math.max(0, Number(timeoutMs) || 0);
+    let actual = readActiveEditorText();
+    while (Date.now() < deadline) {
+      const activeFileMatches = !filePath || getActiveFilePath() === filePath;
+      actual = readActiveEditorText();
+      if (activeFileMatches) {
+        const rebased = rebaseCheckpointPair(actual, expectedContent, postContent);
+        if (rebased.ok) {
+          return rebased;
+        }
+      }
+      await delay(60);
+    }
+    return {
+      ok: false,
+      text: actual
+    };
+  }
+
+  function rebaseCheckpointPair(actualContent, expectedContent, postContent) {
+    const actual = String(actualContent ?? '');
+    const expected = String(expectedContent ?? '');
+    const post = String(postContent ?? '');
+    if (actual === post) {
+      return {
+        ok: true,
+        expectedContent: expected,
+        postContent: post,
+        prefixLength: 0,
+        suffixLength: 0
+      };
+    }
+    if (!post) {
+      return { ok: false };
+    }
+    const matchIndex = actual.indexOf(post);
+    if (matchIndex < 0 || actual.indexOf(post, matchIndex + 1) >= 0) {
+      return { ok: false };
+    }
+    const prefix = actual.slice(0, matchIndex);
+    const suffix = actual.slice(matchIndex + post.length);
+    return {
+      ok: true,
+      expectedContent: prefix + expected + suffix,
+      postContent: actual,
+      prefixLength: prefix.length,
+      suffixLength: suffix.length
     };
   }
 
@@ -1319,6 +1433,20 @@
 
 
 
+  function diffTrackedChangeRefs(before = [], after = []) {
+    const beforeKeys = new Set((before || []).map(ref => ref.key).filter(Boolean));
+    const seen = new Set();
+    const added = [];
+    for (const ref of after || []) {
+      if (!ref?.key || beforeKeys.has(ref.key) || seen.has(ref.key)) {
+        continue;
+      }
+      seen.add(ref.key);
+      added.push(ref);
+    }
+    return added;
+  }
+
   async function waitForTrackedChangeDiff(trackedBefore, paths, options = {}) {
     const waitMs = Number.isFinite(Number(options.waitMs)) ? Number(options.waitMs) : 3000;
     const intervalMs = Number.isFinite(Number(options.intervalMs)) ? Number(options.intervalMs) : 180;

package/extension/src/page/writebackRouter.js

@@ -791,19 +791,17 @@
     }
     const trackedChanges = [];
     if (observeTrackedChanges) {
-      const trackedDiff = forbidTrackedChanges
-        ? await waitForTrackedChangeDiff(trackedBefore, operationPaths, {
-          waitMs: 3600,
-          intervalMs: 180
-        })
-        : (() => null)();
-      if (trackedDiff) {
-        trackedChanges.push(...trackedDiff.trackedChanges);
-      } else {
-        await delay(120);
-        const trackedAfter = collectTrackedChangeRefsForPaths(operationPaths);
-        trackedChanges.push(...diffTrackedChangeRefs(trackedBefore, trackedAfter));
-      }
+      // Overleaf renders review markers asynchronously after the editor text
+      // has already changed. A single 120 ms snapshot intermittently missed
+      // those markers, leaving a Reviewing write with Undo but no Accept.
+      // Poll both paths: normal Reviewing writes get a shorter capture window,
+      // while Accept replay keeps the longer safety window used to prove that
+      // it did not create fresh tracked changes.
+      const trackedDiff = await waitForTrackedChangeDiff(trackedBefore, operationPaths, {
+        waitMs: forbidTrackedChanges ? 3600 : 1800,
+        intervalMs: 180
+      });
+      trackedChanges.push(...trackedDiff.trackedChanges);
       if (forbidTrackedChanges && trackedChanges.length > 0) {
         return {
           ok: false,
@@ -1707,20 +1705,6 @@
   }
 
 
-  function diffTrackedChangeRefs(before = [], after = []) {
-    const beforeKeys = new Set((before || []).map(ref => ref.key).filter(Boolean));
-    const seen = new Set();
-    const added = [];
-    for (const ref of after || []) {
-      if (!ref?.key || beforeKeys.has(ref.key) || seen.has(ref.key)) {
-        continue;
-      }
-      seen.add(ref.key);
-      added.push(ref);
-    }
-    return added;
-  }
-
   function mergeTrackedChangeRefs(refs = []) {
     return normalizeTrackedChangeRefs(refs);
   }

package/extension/src/shared/compatibility.js

@@ -7,12 +7,12 @@
 })(typeof globalThis !== 'undefined' ? globalThis : window, function compatibilityFactory() {
   'use strict';
 
-  const EXTENSION_PROTOCOL_VERSION = 1;
-  const SUPPORTED_NATIVE_PROTOCOL = Object.freeze({ min: 1, max: 1 });
+  const EXTENSION_PROTOCOL_VERSION = 2;
+  const SUPPORTED_NATIVE_PROTOCOL = Object.freeze({ min: 1, max: 2 });
   const MIN_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_EXTENSION_VERSION = '1.0.0';
-  const BUILD_TARGET_VERSION = '1.9.12';
+  const BUILD_TARGET_VERSION = '2.0.0';
   const DEFAULT_CHROME_EXTENSION_ID = 'illdpneeeopfffmiepaejglgmhpmdhdc';
   const REQUIRED_CAPABILITIES = Object.freeze([
     'bridgePing',
@@ -153,7 +153,7 @@
       return { status: 'native_too_old', classification: 'incompatible' };
     }
 
-    if (!reportsProtocolOne(native)) {
+    if (!reportsSupportedProtocol(native)) {
       return { status: 'protocol_unsupported', classification: 'incompatible' };
     }
 
@@ -233,8 +233,10 @@
     return requiredCapabilities.filter(capability => capabilities[capability] !== true);
   }
 
-  function reportsProtocolOne(native) {
-    if (native.protocolVersion !== EXTENSION_PROTOCOL_VERSION) {
+  function reportsSupportedProtocol(native) {
+    if (!Number.isInteger(native.protocolVersion) ||
+        native.protocolVersion < SUPPORTED_NATIVE_PROTOCOL.min ||
+        native.protocolVersion > SUPPORTED_NATIVE_PROTOCOL.max) {
       return false;
     }
     if (native.supportedProtocol === undefined || native.supportedProtocol === null) {

package/extension/src/shared/storageDb.js

@@ -1,13 +1,17 @@
 (function initStorageDb(root, factory) {
   if (typeof module === 'object' && module.exports) {
-    module.exports = factory();
+    module.exports = factory(require('./storageRunActions'));
   } else {
-    root.CodexOverleafStorageDb = factory();
+    root.CodexOverleafStorageDb = factory(root.CodexOverleafStorageRunActions);
   }
-})(typeof globalThis !== 'undefined' ? globalThis : window, function storageDbFactory() {
+})(typeof globalThis !== 'undefined' ? globalThis : window, function storageDbFactory(StorageRunActions) {
   'use strict';
-
-  var TARGET_SCHEMA_VERSION = 2;
+  if (!StorageRunActions?.compactRunsForStorage || !StorageRunActions?.compactRunActionPayload) {
+    throw new Error('Codex Overleaf storage run-action helpers are unavailable.');
+  }
+  // IndexedDB versions are monotonic; v2.0 RC profiles have already opened v3.
+  // Lowering it hides otherwise-intact session history behind fallback state.
+  var TARGET_SCHEMA_VERSION = 3;
   var DB_NAME = 'codex-overleaf';
   var CUSTOM_INSTRUCTIONS_MAX_CHARS = 12000;
   var PROJECT_PREF_KEY_MAX_CHARS = 160;
@@ -235,7 +239,8 @@
 
   // --- Record builders ---
 
-  function buildSessionRecord(input) {
+  function buildSessionRecord(input, options) {
+    options = options || {};
     var now = new Date().toISOString();
     var titleSource = input.titleSource === 'manual' ? 'manual' : 'auto';
     var updatedAt = typeof input.updatedAt === 'string' ? input.updatedAt : now;
@@ -268,7 +273,7 @@
       status: typeof input.status === 'string' && input.status ? input.status : 'active',
       focusFiles: normalizePathList(input.focusFiles),
       history: compactHistoryForStorage(input.history),
-      runs: compactRunsForStorage(input.runs),
+      runs: compactRunsForStorage(input.runs, options),
       task: normalizeDisplayTextForStorage(input.task, SESSION_STORAGE_LIMITS.taskChars),
       mode: typeof input.mode === 'string' ? input.mode : '',
       model: typeof input.model === 'string' ? input.model : '',
@@ -628,14 +633,17 @@
       });
   }
 
-  function compactRunsForStorage(runs) {
-    return (Array.isArray(runs) ? runs : [])
-      .filter(function (run) { return run && typeof run.id === 'string'; })
-      .slice(-SESSION_STORAGE_LIMITS.maxRunsPerSession)
-      .map(compactRunForStorage);
+  function compactRunsForStorage(runs, options) {
+    return StorageRunActions.compactRunsForStorage(
+      runs,
+      options,
+      SESSION_STORAGE_LIMITS.maxRunsPerSession,
+      compactRunForStorage
+    );
   }
 
-  function compactRunForStorage(run) {
+  function compactRunForStorage(run, keepActionPayload) {
+    var actionPayload = StorageRunActions.compactRunActionPayload(run, keepActionPayload);
     var compact = {
       id: run.id,
       task: normalizeDisplayTextForStorage(run.task || 'untitled task', SESSION_STORAGE_LIMITS.taskChars),
@@ -650,11 +658,11 @@
       finishedAt: typeof run.finishedAt === 'string' ? redactSecretLikeText(run.finishedAt) : '',
       events: compactRunEventsForStorage(run.events),
       attachments: compactRunAttachmentsForStorage(run.attachments),
-      appliedOperations: [],
-      undoOperations: [],
-      undoBaseFiles: [],
-      undoTrackedChanges: [],
-      undoExpectedFiles: [],
+      appliedOperations: actionPayload.appliedOperations,
+      undoOperations: actionPayload.undoOperations,
+      undoBaseFiles: actionPayload.undoBaseFiles,
+      undoTrackedChanges: actionPayload.undoTrackedChanges,
+      undoExpectedFiles: actionPayload.undoExpectedFiles,
       undoStatus: normalizeDisplayTextForStorage(run.undoStatus, SESSION_STORAGE_LIMITS.statusTextChars)
     };
     if (VALID_TRACKED_CHANGE_STATUSES[run.trackedChangeStatus] === true) {

package/extension/src/shared/storageRunActions.js

@@ -0,0 +1,99 @@
+(function initStorageRunActions(root, factory) {
+  if (typeof module === 'object' && module.exports) {
+    module.exports = factory();
+  } else {
+    root.CodexOverleafStorageRunActions = factory();
+  }
+})(typeof globalThis !== 'undefined' ? globalThis : window, function storageRunActionsFactory() {
+  'use strict';
+
+  var MAX_PERSISTED_ACTION_RUNS_PER_SESSION = 2;
+  var MAX_PERSISTED_ACTION_BYTES_PER_RUN = 320 * 1024;
+
+  function compactRunsForStorage(runs, options, maxRuns, compactRun) {
+    if (typeof compactRun !== 'function') {
+      throw new TypeError('compactRun must be a function.');
+    }
+    var selectedRuns = (Array.isArray(runs) ? runs : [])
+      .filter(function (run) { return run && typeof run.id === 'string'; })
+      .slice(-Math.max(0, Number(maxRuns) || 0));
+    var actionRunIds = new Set();
+    if (options && options.preserveRunActionPayload === true) {
+      for (var index = selectedRuns.length - 1;
+        index >= 0 && actionRunIds.size < MAX_PERSISTED_ACTION_RUNS_PER_SESSION;
+        index -= 1) {
+        if (hasReloadableRunActionPayload(selectedRuns[index])) {
+          actionRunIds.add(selectedRuns[index].id);
+        }
+      }
+    }
+    return selectedRuns.map(function (run) {
+      return compactRun(run, actionRunIds.has(run.id));
+    });
+  }
+
+  function hasReloadableRunActionPayload(run) {
+    var trackedStatus = run && run.trackedChangeStatus;
+    var trackedLifecycle = (trackedStatus === 'pending' || trackedStatus === 'needs_review')
+      && Array.isArray(run.undoTrackedChanges) && run.undoTrackedChanges.length > 0
+      && Array.isArray(run.undoExpectedFiles) && run.undoExpectedFiles.length > 0
+      && Array.isArray(run.appliedOperations) && run.appliedOperations.length > 0;
+    var legacyUndo = Array.isArray(run && run.undoOperations) && run.undoOperations.length > 0;
+    return trackedLifecycle || legacyUndo;
+  }
+
+  function compactRunActionPayload(run, keepActionPayload) {
+    var empty = emptyActionPayload();
+    if (!keepActionPayload || !hasReloadableRunActionPayload(run)) {
+      return empty;
+    }
+    var payload = {
+      appliedOperations: cloneSerializableArray(run.appliedOperations),
+      undoOperations: cloneSerializableArray(run.undoOperations),
+      undoBaseFiles: cloneSerializableArray(run.undoBaseFiles),
+      undoTrackedChanges: cloneSerializableArray(run.undoTrackedChanges),
+      undoExpectedFiles: cloneSerializableArray(run.undoExpectedFiles)
+    };
+    var serialized;
+    try {
+      serialized = JSON.stringify(payload);
+    } catch (_error) {
+      return empty;
+    }
+    return getUtf8ByteLength(serialized) <= MAX_PERSISTED_ACTION_BYTES_PER_RUN ? payload : empty;
+  }
+
+  function emptyActionPayload() {
+    return {
+      appliedOperations: [],
+      undoOperations: [],
+      undoBaseFiles: [],
+      undoTrackedChanges: [],
+      undoExpectedFiles: []
+    };
+  }
+
+  function cloneSerializableArray(value) {
+    if (!Array.isArray(value)) {
+      return [];
+    }
+    try {
+      var clone = JSON.parse(JSON.stringify(value));
+      return Array.isArray(clone) ? clone : [];
+    } catch (_error) {
+      return [];
+    }
+  }
+
+  function getUtf8ByteLength(value) {
+    if (typeof TextEncoder === 'function') {
+      return new TextEncoder().encode(value).byteLength;
+    }
+    return value.length * 2;
+  }
+
+  return {
+    compactRunsForStorage: compactRunsForStorage,
+    compactRunActionPayload: compactRunActionPayload
+  };
+});

package/native-host/src/taskRunnerRuntime.js

@@ -48,7 +48,7 @@ async function handleRequest(request, env = process.env, emit = () => {}) {
     return okResponse(request.id, {
       host: HOST_NAME,
       platform: getNativeRuntimePlatform({ env }),
-      protocolVersion: 1,
+      protocolVersion: 2,
       supportedProtocol: { ...SUPPORTED_NATIVE_PROTOCOL },
       capabilities: Object.fromEntries(REQUIRED_CAPABILITIES.map(capability => [capability, true])),
       minExtensionVersion: MIN_COMPATIBLE_EXTENSION_VERSION,

package/native-host/src/updateTrust.js

@@ -58,7 +58,8 @@ function validateReleaseManifest(manifest, options = {}) {
     throw updateError('update_manifest_origin_mismatch', 'Update manifest repository or channel does not match this installation.');
   }
   const version = parseSemver(manifest.version);
-  if (!version || manifest.tag !== 'v' + manifest.version) {
+  const expectedTag = options.tag || 'v' + manifest.version;
+  if (!version || manifest.tag !== expectedTag) {
     throw updateError('update_manifest_version_invalid', 'Update manifest version or tag is invalid.');
   }
   if (!Number.isInteger(manifest.bootstrapProtocol) || manifest.bootstrapProtocol !== bootstrapProtocol) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-overleaf-link",
-  "version": "1.9.12",
+  "version": "2.0.0",
   "description": "Cross-platform Chrome bridge that connects Codex to the active Overleaf project.",
   "license": "MIT",
   "type": "commonjs",