codex-overleaf-link 2.3.0 → 2.3.1

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-2.3.0-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-2.3.1-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the managed native host **and** managed extension runtime.
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v2.3.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.3.0/install.sh)"
+CODEX_OVERLEAF_REF=v2.3.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.3.1/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.3.0/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v2.3.0'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.3.1/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v2.3.1'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,7 +56,7 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs the same managed native host and extension runtime without keeping a source checkout. Use it if you prefer a pinned npm package.
 
 ```bash
-npm exec --yes codex-overleaf-link@2.3.0 -- install-managed
+npm exec --yes codex-overleaf-link@2.3.1 -- install-managed
 ```
 
 Then, in `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select the managed extension path printed by the command. The Release extension zip remains available for explicitly unmanaged/manual installations.
@@ -88,9 +88,9 @@ npm installs, updates, and uninstalls the coordinated managed extension/native p
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@2.3.0 -- install-managed` |
-| Diagnose | `npm exec --yes codex-overleaf-link@2.3.0 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-managed` |
+| Install / update | `npm exec --yes codex-overleaf-link@2.3.1 -- install-managed` |
+| Diagnose | `npm exec --yes codex-overleaf-link@2.3.1 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-managed` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -104,13 +104,13 @@ Managed installations discover signed stable updates automatically and apply the
 
 v2.2.0 introduces Bootstrap protocol 2. Existing v2.1.x managed installations must run the pinned `install-managed` command once, then reload the extension and Overleaf. Later protocol-2 releases use the in-product signed updater for ordinary runtime, style, vendor, and Native Host feature changes.
 
-The v2.3.0 GitHub Release contains:
+The v2.3.1 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v2.3.0.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v2.3.0.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-2.3.0.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v2.3.0` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v2.3.0` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v2.3.1.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v2.3.1.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-2.3.1.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v2.3.1` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v2.3.1` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -121,7 +121,7 @@ The v2.3.0 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-managed
+npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-managed
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -156,13 +156,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v2.3.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.3.0/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v2.3.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.3.1/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-managed --browser chromium
+npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-managed --browser chromium
 ```
 
 ## Features
@@ -298,7 +298,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@2.3.0 -- install-managed
+npm exec --yes codex-overleaf-link@2.3.1 -- install-managed
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -347,8 +347,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@2.3.0 -- install-managed` | `npm exec --yes codex-overleaf-link@2.3.0 -- install-managed` | `npm exec --yes codex-overleaf-link@2.3.0 -- install-managed` | `npm exec --yes codex-overleaf-link@2.3.0 -- install-managed --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-managed --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@2.3.1 -- install-managed` | `npm exec --yes codex-overleaf-link@2.3.1 -- install-managed` | `npm exec --yes codex-overleaf-link@2.3.1 -- install-managed` | `npm exec --yes codex-overleaf-link@2.3.1 -- install-managed --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-managed --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |
@@ -384,7 +384,7 @@ Contributions are welcome. Please open an issue before submitting large changes
 The recommended v1.9 installation owns one stable unpacked-extension directory and a versioned native-host directory:
 
 ```bash
-npm exec --yes codex-overleaf-link@2.3.0 -- install-managed
+npm exec --yes codex-overleaf-link@2.3.1 -- install-managed
 ```
 
 Load the printed extension path once from `chrome://extensions`. Starting with the next signed stable release, Codex Overleaf Link checks GitHub Releases automatically, downloads and verifies the coordinated extension/native-host bundle, waits until every connected Overleaf tab is saved and idle, and then updates both components together. A failed health check restores the previous version automatically.
@@ -394,11 +394,11 @@ The stable updater ignores drafts and prereleases, performs no telemetry, and ca
 The legacy native-only installer remains available for source or unmanaged extension directories:
 
 ```bash
-npm exec --yes codex-overleaf-link@2.3.0 -- install-native
+npm exec --yes codex-overleaf-link@2.3.1 -- install-native
 ```
 
 Legacy native-only installations can be removed with:
 
 ```bash
-npm exec --yes codex-overleaf-link@2.3.0 -- uninstall-native
+npm exec --yes codex-overleaf-link@2.3.1 -- uninstall-native
 ```

package/extension/bootstrap/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Codex Overleaf Link",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "Connect the active Overleaf project to a local Codex bridge.",
   "icons": {
     "16": "assets/icons/icon16.png",

package/extension/src/background.js

@@ -21,6 +21,7 @@ if (!globalThis.CodexOverleafNativeRequestIdentity) {
 
   const HOST_NAME = 'com.codex.overleaf';
   const MANAGED_UPDATE_STATE_KEY = 'codex-overleaf-managed-update-state-v1';
+  const MANAGED_UPDATE_CONSENT_KEY = 'codex-overleaf-update-consent-v1';
   const MANAGED_UPDATE_TABS_KEY = 'codex-overleaf-managed-update-tabs-v1';
   const MANAGED_OVERLEAF_MATCHES = [
     'https://www.overleaf.com/project',
@@ -406,6 +407,25 @@ if (!globalThis.CodexOverleafNativeRequestIdentity) {
     }
 
     const transaction = response.result?.transaction || null;
+    if (transaction?.state === 'superseded') {
+      const activeVersion = response.result?.activeVersion || chrome.runtime.getManifest().version;
+      await chrome.storage.local.remove([
+        MANAGED_UPDATE_CONSENT_KEY,
+        MANAGED_UPDATE_TABS_KEY
+      ]);
+      await setManagedUpdateState({
+        state: 'idle',
+        managed: true,
+        currentVersion: activeVersion,
+        latestVersion: activeVersion,
+        transactionId: '',
+        blocker: '',
+        blockers: [],
+        code: '',
+        message: ''
+      });
+      return;
+    }
     const state = await getManagedUpdateState();
     const reconciled = ManagedUpdateProjection.reconcile(state, transaction, {
       currentVersion: chrome.runtime.getManifest().version

package/extension/src/content/composerPanel.js

@@ -29,12 +29,10 @@
           <span class="codex-mode-label" data-i18n="mode">Mode</span>
           <div class="codex-mode-switch" role="group" aria-label="Write mode">
             <button type="button" data-mode-choice="ask" aria-pressed="false" title="Read and analyze only. Do not write to Overleaf.">Ask</button>
-            <button type="button" data-mode-choice="confirm" aria-pressed="false" title="Show a change plan first, then write after approval.">Suggest</button>
             <button type="button" data-mode-choice="auto" aria-pressed="false" title="Write directly after authorization. Deletes still require confirmation.">Auto</button>
           </div>
           <select data-mode aria-label="Mode" hidden>
             <option value="ask">Ask</option>
-            <option value="confirm">Suggest</option>
             <option value="auto">Auto</option>
           </select>
         </div>

package/extension/src/content/contentRuntime.js

@@ -50,7 +50,6 @@
     'codex.providers.clear-secret',
     'codex.providers.delete',
     'task.run',
-    'task.confirm',
     'mirror.sync',
     'mirror.patchFiles',
     'mirror.confirmWriteback',
@@ -183,6 +182,7 @@
     callPageBridge,
     getCurrentProjectId,
     getCurrentProjectReferenceFiles,
+    getCurrentProjectMathSources,
     showPluginToast,
     recordRenderingDiagnostic: detail => appendTechnicalEvent({ type: 'rendering.diagnostic', detail })
   });
@@ -526,7 +526,6 @@
     appendOperationsPreview,
     appendPartialWritebackWarning,
     appendApplyResult,
-    renderDiffReview,
     renderReadOnlyDiffReview,
     showPluginConfirm,
     callPageBridge,
@@ -1512,9 +1511,6 @@
     if (mode === 'ask') {
       return 'Ask';
     }
-    if (mode === 'confirm') {
-      return 'Confirm';
-    }
     if (mode === 'auto') {
       return 'Auto';
     }
@@ -1877,7 +1873,7 @@
       if (!useExistingMirror) {
         appendLog(formatProjectSnapshotUserLog(project));
       }
-      currentRunView.projectFiles = captureProjectReferenceFiles(project);
+      persistCurrentProjectReferenceFiles(project);
       const snapshotWarnings = useExistingMirror
         ? { blocking: [], nonBlocking: [] }
         : getProjectSnapshotWarnings(project);
@@ -1924,7 +1920,7 @@
           skippedFiles: [],
           blockedFiles: snapshotWarnings.blocking.map(reason => ({ path: 'project', reason }))
         });
-        finishRunView(tx('Blocked: full project was not read', '已阻止：没有读到完整项目'), 'failed');
+        await finishRunView(tx('Blocked: full project was not read', '已阻止：没有读到完整项目'), 'failed');
         return;
       }
 
@@ -2011,7 +2007,7 @@
             reason: finding.detectorId || 'sensitive'
           }))
         });
-        finishRunView(tx('Blocked: sensitive content review required', '已阻止：需要处理敏感内容'), 'failed');
+        await finishRunView(tx('Blocked: sensitive content review required', '已阻止：需要处理敏感内容'), 'failed');
         return;
       }
       if (sensitiveFindings.findings.length) {
@@ -2049,7 +2045,7 @@
           return;
         }
         project = staleRetry.project;
-        currentRunView.projectFiles = captureProjectReferenceFiles(project);
+        persistCurrentProjectReferenceFiles(project);
         useExistingMirror = false;
         fileOverlays = null;
         otWarmStart = false;
@@ -2104,7 +2100,7 @@
         } else {
           appendRunEvent({ title: tx('Cancelled: user chose not to create a new thread.', '已取消：用户选择不新建线程。'), status: 'rejected' });
           await finalizeAuditRecord(runAuditDraft, { resultStatus: 'rejected' });
-          finishRunView(tx('Cancelled', '已取消'), 'rejected');
+          await finishRunView(tx('Cancelled', '已取消'), 'rejected');
           return;
         }
       }
@@ -2112,7 +2108,7 @@
       if (!response.ok) {
         if (runCancellationRequested || isRunCancellationError(response.error)) {
           appendRunCancelledReport();
-          finishRunView(tx('Cancelled', '已中断'), 'rejected');
+          await finishRunView(tx('Cancelled', '已中断'), 'rejected');
           void finalizeAuditRecord(runAuditDraft, { resultStatus: 'cancelled' });
           return;
         }
@@ -2199,7 +2195,7 @@
           sensitiveFindings: sensitiveFindings.findings,
           blockedFiles: [{ path: 'codex.run', reason: response.error?.code || response.error?.message || 'native_error' }]
         });
-        finishRunView(response.error?.code === 'project_locked'
+        await finishRunView(response.error?.code === 'project_locked'
           ? tx('Codex task already running', 'Codex 任务正在运行')
           : tx('Local Codex error', '本地 Codex 错误'), 'failed');
         return;
@@ -2249,7 +2245,7 @@
           sensitiveFindings: sensitiveFindings.findings,
           blockedFiles: [{ path: 'codex.run', reason: 'codex_no_usable_result' }]
         });
-        finishRunView(tx('Local Codex returned nothing usable', '本地 Codex 没有返回可用结果'), 'failed');
+        await finishRunView(tx('Local Codex returned nothing usable', '本地 Codex 没有返回可用结果'), 'failed');
         return;
       }
       const writebackProject = useExistingMirror
@@ -2272,7 +2268,7 @@
         resultStatus: syncOutcome.hasSkippedOperations ? 'completed_with_skips' : 'completed'
       });
 
-      finishRunView(
+      await finishRunView(
         syncOutcome.hasSkippedOperations ? tx('Sync completed with skipped items', '同步完成但有跳过项') : tx('Sync completed', '同步完成'),
         syncOutcome.hasSkippedOperations ? 'failed' : 'completed'
       );
@@ -2366,7 +2362,7 @@
     } catch (error) {
       if (runCancellationRequested || isRunCancellationError(error)) {
         appendRunCancelledReport();
-        finishRunView(tx('Cancelled', '已中断'), 'rejected');
+        await finishRunView(tx('Cancelled', '已中断'), 'rejected');
         void finalizeAuditRecord(runAuditDraft, { resultStatus: 'cancelled' });
         return;
       }
@@ -2416,7 +2412,7 @@
         resultStatus: 'failed',
         blockedFiles: [{ path: 'task', reason: error.message }]
       });
-      finishRunView(tx('Task failed', '任务失败'), 'failed');
+      await finishRunView(tx('Task failed', '任务失败'), 'failed');
     } finally {
       const settledView = currentRunView;
       const settledRecord = settledView ? findRunRecord(settledView.recordId, settledView.sessionId) : null;
@@ -2489,7 +2485,7 @@
       if (runCancellationRequested || isRunCancellationError(response.error)) {
         appendRunCancelledReport();
         await finalizeAuditRecord(runAuditDraft, { resultStatus: 'cancelled' });
-        finishRunView(tx('Cancelled', '已中断'), 'rejected');
+        await finishRunView(tx('Cancelled', '已中断'), 'rejected');
         return;
       }
       const translated = translateRawError(response.error.message, { mode: submittedMode, locale: getLocale() });
@@ -2522,7 +2518,7 @@
         resultStatus: 'failed',
         blockedFiles: [{ path: 'skill-installer', reason: response.error?.code || response.error?.message || 'native_error' }]
       });
-      finishRunView(tx('Skill installer failed', 'Skill installer 失败'), 'failed');
+      await finishRunView(tx('Skill installer failed', 'Skill installer 失败'), 'failed');
       return;
     }
 
@@ -2536,7 +2532,7 @@
       mode: submittedMode
     });
     await finalizeAuditRecord(runAuditDraft, { resultStatus: 'completed' });
-    finishRunView(tx('Skill installer completed', 'Skill installer 已完成'), 'completed');
+    await finishRunView(tx('Skill installer completed', 'Skill installer 已完成'), 'completed');
 
     const runSessionForHistory = findSessionById(runSessionId) || getActiveSession(state);
     const rawAssistantMessage = assistantMessage;
@@ -2659,7 +2655,7 @@
     const finishTitle = requireReviewing
       ? tx('Not started: could not enable Track Changes', '未开始：无法开启留痕')
       : tx('Not started: could not switch to Editing', '未开始：无法切换到 Editing');
-    finishRunView(finishTitle, 'failed');
+    await finishRunView(finishTitle, 'failed');
     return {
       ok: false,
       reason,
@@ -3857,10 +3853,6 @@
     return diffReviewPanel.createDiffReviewElement(syncChanges, options);
   }
 
-  function renderDiffReview(syncChanges) {
-    return diffReviewPanel.renderDiffReview(syncChanges);
-  }
-
   function renderReadOnlyDiffReview(syncChanges, title = tr('diffWrittenChangesTitle')) {
     return diffReviewPanel.renderReadOnlyDiffReview(syncChanges, title);
   }
@@ -4623,80 +4615,11 @@
         mode,
         operations: [],
         applyResults: [],
-        nextStep: tx('Continue the conversation, or switch to Suggest/Auto to let Codex edit files.', '可以继续追问，或切换到建议修改/自动写入后让 Codex 修改文件。')
+        nextStep: tx('Continue the conversation, or switch to Auto to let Codex edit files.', '可以继续追问，或切换到自动写入后让 Codex 修改文件。')
       });
       return { status: tr('modeAsk'), summaryLine };
     }
 
-    if (result.status === 'requires_task_confirmation') {
-      appendPlannedChangeSummary(result.summary, tx('Preparing changes', '准备修改'));
-      const approved = await showPluginConfirm({
-        title: tx('Apply these changes?', '应用这些修改？'),
-        message: formatSummary(tx('Change Summary', '修改摘要'), result.summary),
-        confirmLabel: tx('Apply changes', '应用修改'),
-        cancelLabel: tr('confirmDefaultCancel')
-      });
-      if (!approved) {
-        appendLog(tx('Cancelled: Codex did not write any files.', '已取消：Codex 没有写入任何文件。'));
-        const summaryLine = appendChangeSummary({ notes, summary: result.summary, status: 'rejected' });
-        appendCompletionReport({
-          conclusion: tx('You cancelled this change. Codex did not write files.', '你取消了这轮修改，Codex 没有写入文件。'),
-          status: 'rejected',
-          notes,
-          summary: result.summary,
-          userReport: result.userReport,
-          mode,
-          operations: [],
-          applyResults: [],
-          nextStep: tx('Adjust the task and run again, or switch to Ask first so Codex can explain the plan.', '可以调整任务描述后重新运行，或切到只问不改先让 Codex 解释方案。')
-        });
-        return { status: 'rejected', summaryLine };
-      }
-      const confirmed = result.planId
-        ? await sendNative({ method: 'task.confirm', params: { planId: result.planId } })
-        : { ok: true, result: { operations: result.operations || [] } };
-      if (!confirmed.ok) {
-        appendLog(`Confirm failed: ${confirmed.error.message}`);
-        const summaryLine = appendChangeSummary({ notes, operations: [], status: 'confirm failed' });
-        appendCompletionReport({
-          conclusion: tx('No writable changes were returned after confirmation.', '确认后没有拿到可写入的修改。'),
-          status: 'confirm failed',
-          notes,
-          userReport: result.userReport,
-          mode,
-          operations: [],
-          applyResults: [],
-          nextStep: confirmed.error.message
-        });
-        return { status: 'confirm failed', summaryLine };
-      }
-      const operations = confirmed.result.operations || [];
-      appendOperationsPreview(operations, tx('Confirmed; preparing to write', '用户已确认，准备写入'));
-      const applied = await applyTaskOperations(project, operations, { allowHighRisk: true });
-      appendApplyResult(applied);
-      recordUndoFromApply(project, applied);
-      const summaryLine = appendChangeSummary({
-        notes,
-        operations,
-        applyResults: [applied],
-        status: 'confirmed and applied'
-      });
-      appendCompletionReport({
-        conclusion: notes || tx('Changes were written after your confirmation.', '已按你的确认写入修改。'),
-        status: 'confirmed and applied',
-        notes,
-        userReport: result.userReport,
-        mode,
-        operations,
-        applyResults: [applied]
-      });
-      return {
-        status: 'confirmed and applied',
-        summaryLine,
-        hasSkippedOperations: hasSkippedApplyOperations([applied])
-      };
-    }
-
     if (result.status === 'delete_plan_required') {
       const operations = result.operations || [];
       const applyResults = [];
@@ -4769,7 +4692,7 @@
 
     const operations = result.operations || [];
     appendOperationsPreview(operations, tx('Preparing to write', '准备写入'));
-    const applied = await applyTaskOperations(project, operations, { allowHighRisk: mode === 'confirm' });
+    const applied = await applyTaskOperations(project, operations);
     appendApplyResult(applied);
     recordUndoFromApply(project, applied);
     appendLog(mode === 'auto' ? tx('Auto write task completed.', '自动写入任务完成。') : tx('Task completed.', '任务完成。'));
@@ -5089,9 +5012,6 @@
     if (mode === 'ask') {
       return tr('modeAsk');
     }
-    if (mode === 'confirm') {
-      return tr('modeConfirm');
-    }
     if (mode === 'auto') {
       return tr('modeAuto');
     }
@@ -5103,8 +5023,6 @@
     const labels = {
       completed: tx('Completed', '已完成'),
       rejected: tx('Cancelled', '已取消'),
-      'confirm failed': tx('Confirmation failed', '确认失败'),
-      'confirmed and applied': tx('Suggested changes applied', '已应用建议修改'),
       'applied with delete plan': tx('Applied with confirmed deletes', '已应用并删除确认项'),
       'applied without deletes': tx('Applied without deletes', '已应用非删除修改'),
       '只问不改': tr('modeAsk')
@@ -5581,7 +5499,7 @@
           history: Array.isArray(session.history) ? session.history : [],
           task: typeof session.task === 'string' ? session.task : '',
           pendingInputs: Array.isArray(session.pendingInputs) ? session.pendingInputs : [],
-          mode: session.mode || prefs.mode || 'confirm', providerId: session.providerId || 'builtin',
+          mode: session.mode || prefs.mode || 'ask', providerId: session.providerId || 'builtin',
           model: session.model || prefs.model || 'gpt-5.4',
           reasoningEffort: session.reasoningEffort || prefs.reasoningEffort || 'high',
           speedTier: session.speedTier || prefs.speedTier || 'standard',
@@ -5984,7 +5902,7 @@
   }
 
   async function selectMode(mode) {
-    if (!['ask', 'confirm', 'auto'].includes(mode)) {
+    if (!['ask', 'auto'].includes(mode)) {
       return;
     }
     const modeSelect = panel?.querySelector('[data-mode]');
@@ -6268,7 +6186,11 @@
       events: root.querySelector('[data-run-events]'),
       report: root.querySelector('[data-run-report]'),
       status: root.querySelector('[data-run-status]'),
-      projectFiles: captureProjectReferenceFiles(arguments[0]?.project),
+      // A run starts before warm-mirror resolution has produced its lightweight
+      // project snapshot. Seed references from the already-prefetched project
+      // inventory so early stream events and fast Ask responses can still
+      // resolve project-relative locations.
+      projectFiles: getCurrentProjectReferenceFiles(),
       startedAt: Date.now(),
       queueItemId,
       nativeRequestId: '',
@@ -6289,7 +6211,7 @@
     return updatedAt;
   }
 
-  function finishRunView(text, status) {
+  async function finishRunView(text, status) {
     if (!currentRunView) {
       return;
     }
@@ -6316,7 +6238,11 @@
       const navigationDivergent = currentRunView.runProjectId
         && activeProjectId !== currentRunView.runProjectId;
       if (!navigationDivergent) {
-        saveStateSoon();
+        // A terminal badge is a durability promise: once the user can see
+        // Done/Failed/Cancelled, an immediate reload must hydrate that same
+        // terminal state. Drain any older running snapshot and persist the
+        // latest record before exposing the terminal UI.
+        await flushQueuedSaveState().catch(() => {});
       }
       renderSessionList();
     }
@@ -6636,6 +6562,39 @@
 
 
 
+  function getCurrentProjectMathSources() {
+    const sources = [];
+    const seen = new Set();
+    let remainingChars = 256 * 1024;
+    const add = item => {
+      if (!item || typeof item !== 'object' || typeof item.content !== 'string') return;
+      const path = normalizeReferencePathForRuntime(item.path || item.filePath || '');
+      if (!path || seen.has(path) || hasUnsafeRuntimePathSegments(path)
+        || !/\.(?:tex|sty|cls|ltx)$/i.test(path) || remainingChars <= 0) return;
+      const content = item.content.slice(0, Math.min(64 * 1024, remainingChars));
+      remainingChars -= content.length;
+      seen.add(path);
+      sources.push({ path, content });
+    };
+    for (const collection of [
+      currentRunView?.projectFiles,
+      currentRunView?.files,
+      currentRunView?.project?.files,
+      currentRunView?.snapshot?.files,
+      currentRunView?.projectSnapshot?.files,
+      currentRunView?.contextFiles,
+      state?.projectFiles,
+      state?.files,
+      state?.project?.files,
+      state?.snapshot?.files,
+      state?.projectSnapshot?.files,
+      state?.contextFiles
+    ]) {
+      if (Array.isArray(collection)) collection.forEach(add);
+    }
+    return sources;
+  }
+
   function getCurrentProjectReferenceFiles() {
     const files = [];
     const seen = new Set();
@@ -6686,7 +6645,14 @@
       }
     };
 
+    const activeSession = typeof getActiveSession === 'function' ? getActiveSession(state) : null;
     addFiles(currentRunView?.projectFiles);
+    addFiles(activeSession?.projectReferenceFiles);
+    // ContextTray owns the exact, background-prefetched project file list.
+    // Warm-mirror runs intentionally carry only the active/focused overlay, so
+    // omitting this inventory makes valid references to every other project
+    // file render as plain text.
+    addFiles(contextTrayController?.getContextProject?.()?.files);
     addFiles(currentRunView?.files);
     addFiles(currentRunView?.project?.files);
     addFiles(currentRunView?.snapshot?.files);
@@ -6700,14 +6666,26 @@
     addFiles(state?.contextFiles);
     addTextPaths(state?.focusFiles);
     addTextPaths(state?.session?.focusFiles);
-    const activeSession = typeof getActiveSession === 'function' ? getActiveSession(state) : null;
     addTextPaths(activeSession?.focusFiles);
     for (const session of Array.isArray(state?.sessions) ? state.sessions : []) {
+      addFiles(session?.projectReferenceFiles);
       addTextPaths(session?.focusFiles);
     }
     return files;
   }
 
+  function persistCurrentProjectReferenceFiles(project) {
+    const projectFiles = captureProjectReferenceFiles(project);
+    if (currentRunView) {
+      currentRunView.projectFiles = projectFiles;
+    }
+    if (getActiveSession(state)) {
+      state = updateActiveSession(state, { projectReferenceFiles: projectFiles });
+      saveStateSoon();
+    }
+    return projectFiles;
+  }
+
   function captureProjectReferenceFiles(project) {
     const result = [];
     const seen = new Set();
@@ -7167,7 +7145,12 @@
       record.undoOperations = [];
       record.undoBaseFiles = [];
       record.undoTrackedChanges = combinedTrackedChanges;
-      record.undoExpectedFiles = selectExpectedFilesForTrackedUndo(project, combinedAppliedOperations, combinedTrackedChanges);
+      record.undoExpectedFiles = selectExpectedFilesForTrackedUndo(
+        project,
+        combinedAppliedOperations,
+        combinedTrackedChanges,
+        record.undoExpectedFiles
+      );
       record.undoStatus = '';
       record.partialWriteback = skippedEntries.length > 0;
       // Recording tracked-change refs enters the run into the tracked-change
@@ -7215,7 +7198,12 @@
     record.undoOperations = checkpoint.undoOperations;
     record.undoBaseFiles = checkpoint.undoBaseFiles;
     record.undoTrackedChanges = [];
-    record.undoExpectedFiles = selectExpectedFilesForTrackedUndo(project, combinedAppliedOperations, []);
+    record.undoExpectedFiles = selectExpectedFilesForTrackedUndo(
+      project,
+      combinedAppliedOperations,
+      [],
+      record.undoExpectedFiles
+    );
     record.undoStatus = '';
     record.partialWriteback = skippedEntries.length > 0;
     refreshRunCardControls(record.id);
@@ -7235,8 +7223,18 @@
     return WritebackSettlement.normalizeApplyTrackedChanges(changes);
   }
 
-  function selectExpectedFilesForTrackedUndo(project, operations = [], trackedChanges = []) {
-    return WritebackSettlement.selectExpectedFilesForTrackedUndo(project, operations, trackedChanges);
+  function selectExpectedFilesForTrackedUndo(
+    project,
+    operations = [],
+    trackedChanges = [],
+    previousExpectedFiles = []
+  ) {
+    return WritebackSettlement.selectExpectedFilesForTrackedUndo(
+      project,
+      operations,
+      trackedChanges,
+      previousExpectedFiles
+    );
   }
 
   function buildTrackedUndoPostFiles(run) {