codex-overleaf-link 2.3.4 → 2.3.6

package/extension/src/content/otWarmMirrorController.js

@@ -10,6 +10,12 @@
   const OT_POLL_INTERVAL_MS = 1000;
   const OT_PATCH_DEBOUNCE_MS = 500;
   const OT_MAX_PATCH_BATCH = 25;
+  const OT_FRESHNESS_MAX_AGE_MS = 30000;
+  const OT_MAX_FILE_BYTES = 1024 * 1024;
+  const OT_MAX_PENDING_EVENTS = 64;
+  const OT_MAX_PENDING_BYTES = 4 * 1024 * 1024;
+  const OT_MAX_BATCH_BYTES = 2 * 1024 * 1024;
+  const encoder = typeof TextEncoder === 'function' ? new TextEncoder() : null;
   const PAUSE_STATES = new Set(['running', 'writing', 'undoing', 'compiling']);
 
   function buildPatchFilesRequest({ projectId, events, nativeCompatibility } = {}) {
@@ -67,13 +73,14 @@
     return { pause: false };
   }
 
-  function canUseOtWarmStart({ enabled, focusFiles, mirrorStatus } = {}) {
+  function canUseOtWarmStart({ enabled, focusFiles, mirrorStatus, now = Date.now() } = {}) {
     if (!enabled) {
       return { ok: false, reason: 'disabled' };
     }
     if (!mirrorStatus || mirrorStatus.exists !== true) {
       return { ok: false, reason: 'mirror_missing' };
     }
+    if (mirrorStatus.dirty === true) return { ok: false, reason: 'mirror_dirty' };
 
     const normalizedFocusFiles = normalizePaths(focusFiles);
     if (!normalizedFocusFiles.length) {
@@ -85,6 +92,8 @@
       if (file?.state !== 'fresh') {
         continue;
       }
+      const age = now - Date.parse(file.observedAt ?? file.lastPatchAt ?? '');
+      if (!Number.isFinite(age) || age < 0 || age > OT_FRESHNESS_MAX_AGE_MS) continue;
       const filePath = normalizePath(file.path);
       if (filePath) {
         freshFiles.add(filePath);
@@ -102,6 +111,88 @@
     return { ok: false, reason: 'missing_ot_fresh_focus' };
   }
 
+  function textBytes(value) {
+    const text = String(value || '');
+    return encoder ? encoder.encode(text).byteLength : text.length * 3;
+  }
+
+  function patchBytes(event) { return textBytes(event.nextContent) + textBytes(event.path) + 512; }
+
+  function queuePatchEvents(queue, events, now = Date.now()) {
+    if (!Array.isArray(events) || events.length > OT_MAX_PENDING_EVENTS) return { ok: false, reason: 'ot_queue_limit' };
+    const next = Array.isArray(queue) ? queue.slice() : [];
+    let bytes = next.reduce((sum, event) => sum + patchBytes(event), 0);
+    if (next.length > OT_MAX_PENDING_EVENTS || bytes > OT_MAX_PENDING_BYTES) return { ok: false, reason: 'ot_queue_limit' };
+    for (const input of events) {
+      const path = normalizePath(input?.path);
+      const time = typeof input?.observedAt === 'number' ? input.observedAt : Date.parse(input?.observedAt || '');
+      if (!isSafeRelativePath(path) || path.length > 1024 || typeof input?.nextContent !== 'string' ||
+          typeof input.baseHash !== 'string' || !input.baseHash || input.baseHash.length > 128) {
+        return { ok: false, reason: 'ot_event_invalid' };
+      }
+      if (!Number.isFinite(time) || now - time < 0 || now - time > OT_FRESHNESS_MAX_AGE_MS) return { ok: false, reason: 'ot_event_expired' };
+      if (textBytes(input.nextContent) > OT_MAX_FILE_BYTES) return { ok: false, reason: 'ot_file_limit' };
+      const event = { path, baseHash: input.baseHash, nextContent: input.nextContent,
+        nextHash: typeof input.nextHash === 'string' && input.nextHash.length <= 128 ? input.nextHash : '',
+        observedAt: new Date(time).toISOString() };
+      if (isPrimitiveMetadata(input.observedVersion) && String(input.observedVersion).length <= 128) event.observedVersion = input.observedVersion;
+      const tail = next[next.length - 1];
+      if (tail?.path === path && tail.nextHash && tail.nextHash === event.baseHash) {
+        event.baseHash = tail.baseHash;
+        bytes -= patchBytes(next.pop());
+      }
+      if (event.nextHash !== event.baseHash) { next.push(event); bytes += patchBytes(event); }
+      if (next.length > OT_MAX_PENDING_EVENTS || bytes > OT_MAX_PENDING_BYTES) return { ok: false, reason: 'ot_queue_limit' };
+    }
+    return { ok: true, queue: next, bytes };
+  }
+
+  function takePatchBatch(queue) {
+    let bytes = 0;
+    let count = 0;
+    while (count < Math.min(queue.length, OT_MAX_PATCH_BATCH)) {
+      const size = patchBytes(queue[count]);
+      if (bytes + size > OT_MAX_BATCH_BYTES) break;
+      bytes += size;
+      count += 1;
+    }
+    return queue.splice(0, count);
+  }
+
+  function validatePatchReceipt(events, result = {}, now = Date.now()) {
+    if ((Array.isArray(result.skippedFiles) && result.skippedFiles.length) || Number(result.skippedCount || 0) > 0) {
+      return { ok: false, reason: 'mirror_patch_skipped' };
+    }
+    if (!events.length || Number(result.appliedCount) !== events.length || !Array.isArray(result.appliedFiles) ||
+        result.appliedFiles.length !== events.length || !result.appliedFiles.every((file, index) =>
+          normalizePath(file?.path) === events[index].path && (!events[index].nextHash || file.hash === events[index].nextHash))) {
+      return { ok: false, reason: 'mirror_patch_invalid_result' };
+    }
+    if (events.some(event => { const time = Date.parse(event.observedAt);
+      return !Number.isFinite(time) || time > now || now - time > OT_FRESHNESS_MAX_AGE_MS;
+    })) return { ok: false, reason: 'ot_event_expired' };
+    return { ok: true };
+  }
+
+  function normalizeFailureCode(value, fallback = 'ot_error') {
+    const code = typeof value === 'string' ? value : value?.code;
+    if (/^[a-z][a-z0-9_]{0,79}$/.test(code || '')) return code;
+    if (/page bridge|capability|bridge timed out/i.test(String(code || ''))) return 'ot_bridge_unavailable';
+    return fallback;
+  }
+
+  function getFailureMessageKey(value) {
+    const code = normalizeFailureCode(value);
+    if (/bridge|ot_status|ot_events/.test(code)) return 'otFailureBridge';
+    if (/missing_ot_text|observer_create|observer_unavailable/.test(code)) return 'otFailureObserver';
+    if (code === 'ot_file_limit') return 'otFailureFileLimit';
+    if (code === 'ot_queue_limit') return 'otFailureQueueLimit';
+    if (code === 'ot_event_expired') return 'otFailureExpired';
+    if (/editor|active_path|document/.test(code)) return 'otFailureEditor';
+    if (/mirror|hash|baseline/.test(code)) return 'otFailureMirror';
+    return 'otFailureGeneric';
+  }
+
   function normalizePath(value) {
     return String(value ?? '')
       .trim()
@@ -165,6 +256,16 @@
     OT_POLL_INTERVAL_MS,
     OT_PATCH_DEBOUNCE_MS,
     OT_MAX_PATCH_BATCH,
+    OT_FRESHNESS_MAX_AGE_MS,
+    OT_MAX_FILE_BYTES,
+    OT_MAX_PENDING_EVENTS,
+    OT_MAX_PENDING_BYTES,
+    OT_MAX_BATCH_BYTES,
+    queuePatchEvents,
+    takePatchBatch,
+    validatePatchReceipt,
+    normalizeFailureCode,
+    getFailureMessageKey,
     buildPatchFilesRequest,
     canUseOtWarmStart,
     normalizePath,

package/extension/src/content/panelMaintenance.js

@@ -129,29 +129,40 @@
   }
 
   // --- History & storage (v1.7.5): usage summary + clear-all in Settings ---
+  let storageUsageRequestId = 0;
   function refreshStorageUsageSummary() {
     const node = getSettingsPanelInstance()?.container?.querySelector('[data-storage-usage]');
     if (!node) {
       return;
     }
-    const sessionCount = Array.isArray(getState()?.sessions) ? getState().sessions.length : 0;
-    const runCount = Array.isArray(getState()?.runs) ? getState().runs.length : 0;
+    const requestId = ++storageUsageRequestId;
+    const projectId = getCurrentProjectId?.();
+    const isCurrent = () => requestId === storageUsageRequestId && projectId === getCurrentProjectId?.()
+      && getSettingsPanelInstance()?.container?.querySelector('[data-storage-usage]') === node;
+    const current = getState();
+    const sessionCount = Array.isArray(current?.sessions) ? current.sessions.length : 0;
+    const runCount = Array.isArray(current?.runs) ? current.runs.length : 0;
     const counts = tx(
-      `${sessionCount} session(s) · ${runCount} recent run(s) kept`,
-      `${sessionCount} 个会话 · 保留最近 ${runCount} 轮运行`
+      `${sessionCount} loaded session(s) in this project · ${runCount} run(s) in the active session`,
+      `当前项目已加载 ${sessionCount} 个会话 · 当前会话 ${runCount} 轮运行`
     );
+    // Dynamic text belongs to this renderer, not the loading-label translator.
+    node.removeAttribute?.('data-i18n');
     node.textContent = counts;
-    const estimate = navigator.storage?.estimate?.();
-    if (estimate?.then) {
-      estimate.then(info => {
-        const usage = Number(info?.usage);
-        if (Number.isFinite(usage) && usage >= 0) {
-          const mb = usage / (1024 * 1024);
-          const size = mb >= 1 ? `${mb.toFixed(1)} MB` : `${Math.max(1, Math.round(usage / 1024))} KB`;
-          node.textContent = tx(`${counts} · ~${size} used on this site`, `${counts} · 本站点约占用 ${size}`);
-        }
-      }).catch(() => { /* estimate unsupported — counts alone are fine */ });
-    }
+    const unavailable = () => {
+      if (isCurrent()) node.textContent = tx(`${counts} · Site storage estimate unavailable`, `${counts} · 本站点容量暂无法估算`);
+    };
+    let timer;
+    const estimate = Promise.resolve().then(() => navigator.storage?.estimate?.());
+    const deadline = new Promise(resolve => { timer = setTimeout(() => resolve(null), 2000); });
+    return Promise.race([estimate, deadline]).then(info => {
+      if (!isCurrent()) return;
+      const usage = info?.usage;
+      if (!Number.isFinite(usage) || usage < 0) { unavailable(); return; }
+      const mb = usage / (1024 * 1024);
+      const size = usage === 0 ? '0 KB' : mb >= 1 ? `${mb.toFixed(1)} MB` : `${Math.max(1, Math.round(usage / 1024))} KB`;
+      node.textContent = tx(`${counts} · Site total ~${size}`, `${counts} · 本站点总占用约 ${size}`);
+    }).catch(unavailable).finally(() => clearTimeout(timer));
   }
 
   async function clearAllHistoryWithConfirm() {

package/extension/src/content/panelRenderer.js

@@ -327,7 +327,8 @@
 
       return new Promise(resolve => {
         let settled = false;
-        const overlay = doc.createElement('div');
+        const returnFocus = doc.activeElement;
+        const overlay = doc.createElement('dialog');
         overlay.className = 'codex-plugin-confirm';
         overlay.setAttribute('data-plugin-confirm', 'true');
         overlay.setAttribute('role', 'dialog');
@@ -371,13 +372,16 @@
         card.append(head, body, actions);
         overlay.append(card);
         panel.append(overlay);
+        overlay.showModal?.();
 
         const cleanup = value => {
           if (settled) return;
           settled = true;
           activeResolve = null;
           doc.removeEventListener('keydown', onKeydown, true);
+          overlay.close?.();
           overlay.remove();
+          returnFocus?.focus?.();
           resolve(value);
         };
         activeResolve = cleanup;
@@ -398,6 +402,7 @@
         overlay.addEventListener('click', event => {
           if (event.target === overlay) cleanup(false);
         });
+        overlay.addEventListener('cancel', event => { event.preventDefault(); cleanup(false); });
         cancel.addEventListener('click', () => cleanup(false));
         confirm.addEventListener('click', () => cleanup(true));
         doc.addEventListener('keydown', onKeydown, true);

package/extension/src/content/projectSettingsCoordinator.js

@@ -293,6 +293,7 @@
       });
       saveStateSoon();
       renderLocalSkillList();
+      deps.updateGlobalPreferences?.({ codexOverleafSkillEnabled: { [skillId]: Boolean(enabled) } })?.catch(() => {});
     }
 
     function readSkillLoadingSettingsFromSettings() {

package/extension/src/content/providerSettingsCoordinator.js

@@ -14,6 +14,7 @@
       getSettingsPanelInstance: options.getSettingsPanelInstance || (() => null),
       getSelectedModel: options.getSelectedModel || (() => ''),
       getSelectedProviderId: options.getSelectedProviderId || (() => 'builtin'),
+      hasCurrentProject: options.hasCurrentProject || (() => true),
       setSelectedProviderId: options.setSelectedProviderId || (() => {}),
       confirmProviderSwitch: options.confirmProviderSwitch || (() => true),
       clearSelectedModel: options.clearSelectedModel || (() => {}),
@@ -43,6 +44,7 @@
       tx: instance.tx,
       ProviderProfiles: Profiles,
       callbacks: {
+        hasCurrentProject: instance.hasCurrentProject,
         getCurrentProjectProviderId: () => instance.getSelectedProviderId() || 'builtin',
         onTest: context => testProvider(instance, context),
         onCancelTest: () => cancelProviderTest(instance),
@@ -57,6 +59,7 @@
     return {
       open: () => open(instance),
       refreshSummary: () => refreshSummary(instance),
+      renderSummary: () => updateSettingsSummary(instance),
       ensureLoaded: () => ensureLoaded(instance),
       getRunSelection: providerId => instance.loaded
         ? Profiles.buildRunSelection(instance.catalog, providerId || instance.getSelectedProviderId())
@@ -208,6 +211,7 @@
   }
 
   async function prepareProviderActivation(instance, providerId) {
+    requireCurrentProject(instance);
     const previousProviderId = instance.getSelectedProviderId() || 'builtin';
     const provider = instance.Profiles.getProviderById(instance.catalog, providerId);
     if (providerId !== previousProviderId) {
@@ -301,6 +305,7 @@
   async function saveProvider(instance, context, action = {}) {
     instance.dialog.setBusy('saving', instance.tx('Saving provider…', '正在保存模型服务…'));
     try {
+      if (action.activate === true) requireCurrentProject(instance);
       const result = await request(instance, 'codex.providers.upsert', {
         profileId: context.profileId,
         expectedRevision: context.expectedRevision,
@@ -495,6 +500,12 @@
   }
 
   function updateSettingsSummary(instance, override = {}) {
+    if (!instance.hasCurrentProject()) {
+      instance.getSettingsPanelInstance()?.setProviderSummary?.({ summary: instance.tx(
+        'Shared model API profiles · open a project to select a provider',
+        '共享模型 API 配置 · 进入项目后选择使用的服务'), tone: 'info' });
+      return;
+    }
     const selectedProviderId = instance.getSelectedProviderId() || 'builtin';
     const catalogProvider = instance.Profiles.getProviderById(
       instance.catalog,
@@ -594,6 +605,11 @@
     });
   }
 
+  function requireCurrentProject(instance) {
+    if (!instance.hasCurrentProject()) throw createClientError(
+      'provider_project_required', instance.tx('Open an Overleaf project before selecting its provider.', '请先进入 Overleaf 项目，再选择该项目使用的模型服务。'));
+  }
+
   function emptyCatalogChange() {
     return { activeProviderChanged: false, activeModelCatalogChanged: false, changedProviderIds: [] };
   }

package/extension/src/content/providerSettingsDialog.js

@@ -47,12 +47,13 @@
     if (instance.root) {
       return instance.root;
     }
-    const root = instance.document.createElement('div');
+    const root = instance.document.createElement('dialog');
     root.className = 'codex-provider-dialog-root';
+    root.setAttribute('aria-labelledby', 'codex-provider-dialog-title');
     root.hidden = true;
     root.innerHTML = `
       <div class="codex-provider-dialog-backdrop" data-provider-backdrop></div>
-      <section class="codex-provider-dialog" role="dialog" aria-modal="true" aria-labelledby="codex-provider-dialog-title">
+      <section class="codex-provider-dialog">
         <header class="codex-provider-dialog-head">
           <div class="codex-provider-dialog-heading">
             <div class="codex-provider-dialog-titleline">
@@ -79,6 +80,7 @@
     root.addEventListener('input', event => handleInput(instance, event));
     root.addEventListener('change', event => handleInput(instance, event));
     root.addEventListener('keydown', event => handleKeydown(instance, event));
+    root.addEventListener('cancel', event => { event.preventDefault(); requestClose(instance); });
     root.addEventListener('mousedown', event => event.stopPropagation());
     root.addEventListener('click', event => event.stopPropagation());
     return root;
@@ -89,9 +91,12 @@
     instance.root.hidden = false;
     syncTheme(instance);
     setCatalog(instance, catalog || instance.catalog);
+    if (!instance.root.open) instance.root.showModal?.();
     queueMicrotask(() => {
-      instance.root.querySelector('[data-provider-row][aria-current="true"]')?.focus?.()
-        || instance.root.querySelector('input, button, select, textarea')?.focus?.();
+      if (!instance.root || instance.root.hidden) return;
+      const target = instance.root.querySelector('[data-provider-row][aria-current="true"]')
+        || instance.root.querySelector('input, button, select, textarea');
+      target?.focus?.();
     });
   }
 
@@ -106,6 +111,7 @@
       instance.callbacks.onCancelTest?.();
       instance.busy = '';
     }
+    instance.root.close?.();
     instance.root.hidden = true;
     instance.busy = '';
     instance.returnFocus?.focus?.();
@@ -159,6 +165,9 @@
       "Configure experimental third-party integrations used by this project's future Codex runs. Compatibility varies by provider and gateway.",
       '配置当前项目后续 Codex 任务使用的实验性第三方集成；兼容性取决于具体模型服务与网关。'
     );
+    if (instance.callbacks.hasCurrentProject?.() === false) instance.root.querySelector('[data-provider-dialog-subtitle]').textContent = tx(
+      'Manage shared model API profiles. Open a project to choose which provider its future turns use.',
+      '管理共享模型 API 配置。进入项目后，再选择该项目后续任务使用的服务。');
     renderProviderList(instance);
     renderDetail(instance);
     renderFooter(instance);
@@ -408,8 +417,8 @@
       <label class="codex-provider-disclosure">
           <input type="checkbox" data-provider-disclosure ${disclosureSatisfied ? 'checked' : ''}>
           <span data-provider-disclosure-text>${escapeHtml(tx(
-            `Future Codex runs in every Overleaf project tab may send selected project content to ${draft.baseUrl || 'this endpoint'}.`,
-            `所有 Overleaf 项目标签页的后续 Codex 任务都可能把所选项目内容发送到 ${draft.baseUrl || '此端点'}。`
+            `Projects using this shared provider may send task context to ${draft.baseUrl || 'this endpoint'}. Each project chooses its own provider.`,
+            `使用此共享服务配置的项目可能把任务上下文发送到 ${draft.baseUrl || '此端点'}。各项目独立选择使用的服务。`
           ))}</span>
       </label>
       <div class="codex-provider-test-row">
@@ -456,7 +465,7 @@
           'Uses the authentication, model catalog, and provider configuration managed by the local Codex CLI.',
           '使用本地 Codex CLI 管理的身份验证、模型目录和服务配置。'
         ))}</p>
-        ${active
+        ${instance.callbacks.hasCurrentProject?.() === false ? '' : active
           ? `<span class="codex-provider-active-badge">${escapeHtml(tx('Current project', '当前项目'))}</span>`
           : `<button type="button" class="codex-provider-primary-button" data-provider-action="activate-builtin">${escapeHtml(tx('Use for this project', '用于当前项目'))}</button>`}
       </div>
@@ -464,6 +473,7 @@
   }
 
   function getCurrentProjectProviderId(instance) {
+    if (instance.callbacks.hasCurrentProject?.() === false) return '';
     const providerId = instance.callbacks.getCurrentProjectProviderId?.();
     return typeof providerId === 'string' && providerId.trim()
       ? providerId.trim()
@@ -487,6 +497,7 @@
       dirty: instance.dirty,
       destinationChanged,
       canSave: canSaveCurrentDraft(instance),
+      hasProject: instance.callbacks.hasCurrentProject?.() !== false,
       canActivate: canActivateCurrentProvider(instance)
     });
     const saveDisabled = actionState.saveEnabled ? '' : ' disabled aria-disabled="true"';
@@ -508,8 +519,8 @@
     const dirty = options.dirty === true;
     return {
       showSave: isNew || dirty,
-      showSaveAndUse: (isNew || dirty) && (!active || options.destinationChanged === true),
-      showUse: !isNew && !active && !dirty,
+      showSaveAndUse: options.hasProject !== false && (isNew || dirty) && (!active || options.destinationChanged === true),
+      showUse: options.hasProject !== false && !isNew && !active && !dirty,
       saveEnabled: options.canSave === true,
       useEnabled: options.canActivate === true
     };
@@ -662,7 +673,7 @@
       return;
     }
     const focusable = Array.from(instance.root.querySelectorAll('button:not([disabled]), input:not([disabled]), select:not([disabled]), textarea:not([disabled])'))
-      .filter(element => !element.closest('[hidden]'));
+      .filter(element => !element.closest('[hidden]') && (!element.getClientRects || element.getClientRects().length));
     if (!focusable.length) {
       return;
     }
@@ -941,8 +952,8 @@
     if (!text) return;
     const baseUrl = getCurrentBaseUrl(instance) || instance.tx('this endpoint', '此端点');
     text.textContent = instance.tx(
-      `Future Codex runs in every Overleaf project tab may send selected project content to ${baseUrl}.`,
-      `所有 Overleaf 项目标签页的后续 Codex 任务都可能把所选项目内容发送到 ${baseUrl}。`
+      `Projects using this shared provider may send task context to ${baseUrl}. Each project chooses its own provider.`,
+      `使用此共享服务配置的项目可能把任务上下文发送到 ${baseUrl}。各项目独立选择使用的服务。`
     );
   }
 
@@ -984,10 +995,7 @@
     if (!panel) {
       return;
     }
-    const style = instance.document.defaultView.getComputedStyle(panel);
     instance.root.dataset.theme = panel.dataset.theme === 'light' ? 'light' : 'dark';
-    instance.root.style.setProperty('--provider-panel-bg', style.backgroundColor || '#151716');
-    instance.root.style.setProperty('--provider-panel-color', style.color || '#eceeea');
   }
 
   function escapeHtml(value) {
@@ -1011,6 +1019,7 @@
   }
 
   function destroy(instance) {
+    instance.root?.close?.();
     instance.root?.remove?.();
     instance.root = null;
   }

package/extension/src/content/runFailureNotice.js

@@ -0,0 +1,104 @@
+(function initRunFailureNotice(root, factory) {
+  if (typeof module === 'object' && module.exports) {
+    module.exports = factory();
+  } else {
+    root.CodexOverleafModuleRegistry.define('RunFailureNotice', [], factory);
+  }
+})(typeof window !== 'undefined' ? window : globalThis, function runFailureNoticeFactory() {
+  'use strict';
+
+  const REVIEW_CODES = new Set(['write_timeout', 'partial_write_needs_review']);
+  const CANCEL_CODES = new Set(['cancelled', 'user_cancelled', 'codex_cancelled']);
+
+  function create({ tr, projectRunSettlement, sanitizeText = value => value,
+    document: documentRef = globalThis.document } = {}) {
+    const notices = new WeakMap();
+
+    function append(report, event = {}, run = {}) {
+      const projection = typeof projectRunSettlement === 'function' && run
+        ? projectRunSettlement(run) : null;
+      const failure = projection?.primaryFailure || event.failure;
+      if (report.dataset.status === 'cancelled' || CANCEL_CODES.has(failure?.code)) return;
+      const facts = run?.settlement || run?.settlementFacts || {};
+      const unconfirmed = REVIEW_CODES.has(failure?.code)
+        || facts.documentEffect === 'possibly-changed'
+        || (facts.evidence?.applied === 'unknown' && facts.evidence?.settled === 'needs-review');
+      const partial = facts.evidence?.applied === 'partial' || run?.partialWriteback === true;
+      if (!failure && !unconfirmed && !partial && report.dataset.status !== 'failed') return;
+
+      const notice = documentRef.createElement('aside');
+      notice.className = 'run-feedback';
+      notice.dataset.tone = unconfirmed || partial || failure?.terminalState === 'degraded'
+        || failure?.terminalState === 'needs_review' ? 'warning' : 'error';
+      notice.setAttribute('role', 'note');
+      const heading = documentRef.createElement('strong');
+      heading.className = 'run-feedback__title';
+      heading.textContent = tr(unconfirmed ? 'runFeedbackUnconfirmedTitle'
+        : partial ? 'runFeedbackPartialTitle' : 'runFeedbackFailedTitle');
+      const message = documentRef.createElement('p');
+      const detail = typeof failure?.userMessage === 'string' ? failure.userMessage : '';
+      const file = safeProjectPath(failure?.file);
+      message.textContent = sanitizeText([file, detail].filter(Boolean).join(': ').slice(0, 1000))
+        || tr('runFeedbackGeneric');
+      notice.append(heading, message);
+      if (unconfirmed) {
+        const warning = documentRef.createElement('p');
+        warning.textContent = tr('runFeedbackUnconfirmed');
+        notice.append(warning);
+      }
+      notices.set(report, { notice, unconfirmed, failure, file });
+      report.append(notice);
+    }
+
+    function formatMetaValue(report, row) {
+      if (!notices.get(report)?.unconfirmed) return row.value;
+      const key = String(row.key || '').toLowerCase().replace(/[^a-z]/g, '');
+      const label = String(row.label || '').trim().toLowerCase();
+      if (key === 'writeresult' || key === 'next'
+        || ['write result', 'next', '\u5199\u5165\u7ed3\u679c', '\u4e0b\u4e00\u6b65'].includes(label)) {
+        return tr('runFeedbackUnconfirmedResult');
+      }
+      return row.value;
+    }
+
+    function prepareRecovery(report, { openFile } = {}) {
+      const info = notices.get(report);
+      const target = info?.notice || report;
+      if (!info?.unconfirmed) return { target, handled: false };
+      const canOpen = Boolean(info.file && typeof openFile === 'function');
+      const button = documentRef.createElement('button');
+      button.type = 'button';
+      button.className = 'run-final-answer__recovery-action';
+      button.dataset.recoveryFor = info.failure?.code || 'write_unconfirmed';
+      button.textContent = tr(canOpen ? 'runFeedbackReviewFile' : 'runFeedbackReviewDetails', { file: info.file });
+      button.addEventListener('click', event => {
+        event.stopPropagation();
+        if (canOpen) {
+          openFile(info.file);
+          return;
+        }
+        const process = report.closest?.('[data-run-id]')?.querySelector?.('[data-run-process]');
+        if (process) {
+          process.open = true;
+          process.scrollIntoView?.({ block: 'nearest' });
+        } else {
+          button.disabled = true;
+          button.title = tr('runFeedbackDetailsUnavailable');
+        }
+      });
+      target.append(button);
+      return { target, handled: true };
+    }
+
+    return Object.freeze({ append, formatMetaValue, prepareRecovery });
+  }
+
+  function safeProjectPath(value) {
+    if (typeof value !== 'string') return '';
+    const path = value.replace(/\\/g, '/');
+    return path && !path.startsWith('/') && !/^[A-Za-z]:/.test(path)
+      && !path.split('/').includes('..') ? path.slice(0, 300) : '';
+  }
+
+  return Object.freeze({ create });
+});