codex-overleaf-link 2.6.0 → 2.6.5

package/extension/styles/panel.css

@@ -403,6 +403,16 @@
   vertical-align: top;
 }
 
+#codex-overleaf-panel :is(.run-stream-text, .run-final-answer) .run-markdown-table :is(th, td) {
+  overflow-wrap: break-word;
+  min-width: 4em;
+}
+
+#codex-overleaf-panel :is(.run-stream-text, .run-final-answer) .run-markdown-table .codex-line-reference {
+  overflow-wrap: normal;
+  white-space: nowrap;
+}
+
 #codex-overleaf-panel :is(.run-stream-text, .run-final-answer) .run-markdown-table th {
   background: var(--tl-surface-2);
   color: var(--tl-fg-1);
@@ -1813,7 +1823,6 @@
 #codex-overleaf-panel .codex-diagnostics-checks {
   display: grid;
   gap: 0;
-  margin-top: 4px;
 }
 
 #codex-overleaf-panel .codex-diagnostics-check {
@@ -1827,7 +1836,7 @@
 
 #codex-overleaf-panel .codex-diagnostics-check > summary {
   display: grid;
-  grid-template-columns: 16px minmax(0, 1fr) 10px;
+  grid-template-columns: 8px minmax(0, 1fr) 10px;
   gap: 8px;
   align-items: center;
   padding: 10px 0;
@@ -1852,37 +1861,39 @@
   transform: rotate(45deg);
 }
 
-#codex-overleaf-panel .codex-diagnostics-check-text {
-  margin: 0 0 10px 24px;
+#codex-overleaf-panel .codex-diagnostics-check-dot {
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: var(--tl-fg-4);
 }
 
-#codex-overleaf-panel .codex-diagnostics-check-glyph::before {
-  content: "·";
-  color: var(--tl-fg-4);
-  font-weight: 700;
-}
+#codex-overleaf-panel .codex-diagnostics-check[data-status="ok"] .codex-diagnostics-check-dot { background: var(--tl-ok); }
+#codex-overleaf-panel .codex-diagnostics-check[data-status="warn"] .codex-diagnostics-check-dot { background: var(--tl-review); }
+#codex-overleaf-panel .codex-diagnostics-check[data-status="fail"] .codex-diagnostics-check-dot { background: var(--tl-fail); }
 
-#codex-overleaf-panel .codex-diagnostics-check[data-status="ok"] .codex-diagnostics-check-glyph::before { content: "✓"; color: var(--tl-ok); }
-#codex-overleaf-panel .codex-diagnostics-check[data-status="warn"] .codex-diagnostics-check-glyph::before { content: "!"; color: var(--tl-review); }
-#codex-overleaf-panel .codex-diagnostics-check[data-status="fail"] .codex-diagnostics-check-glyph::before { content: "✕"; color: var(--tl-fail); }
+#codex-overleaf-panel .codex-diagnostics-check-text {
+  display: grid;
+  gap: 6px;
+  margin: 0 0 10px 16px;
+}
 
 #codex-overleaf-panel .codex-diagnostics-check-title {
   color: var(--tl-fg-1);
   font-size: var(--tl-text-sm, 12px);
-  font-weight: 600;
+  font-weight: 500;
 }
 
 #codex-overleaf-panel .codex-diagnostics-check-summary {
-  color: var(--tl-fg-3);
-  font-size: var(--tl-text-xs, 11px);
-  line-height: 1.4;
+  color: var(--tl-fg-2);
+  font-size: var(--tl-text-sm, 12px);
+  line-height: 1.5;
 }
 
 #codex-overleaf-panel .codex-diagnostics-check-next {
-  color: var(--tl-accent);
-  font-size: var(--tl-text-xs, 11px);
-  line-height: 1.4;
-  margin-top: 2px;
+  color: var(--tl-fg-2);
+  font-size: var(--tl-text-sm, 12px);
+  line-height: 1.5;
 }
 
 #codex-overleaf-panel .codex-toast-region {
@@ -1975,7 +1986,7 @@
   border: 1px solid var(--tl-border-strong);
   border-radius: 6px;
   background: var(--tl-surface-2);
-  box-shadow: 0 8px 22px rgba(0, 0, 0, 0.38);
+  box-shadow: var(--tl-shadow-pop);
   padding: 6px;
 }
 
@@ -2042,7 +2053,7 @@
   border: 1px solid var(--tl-border-strong);
   border-radius: 8px;
   background: var(--tl-surface-1);
-  box-shadow: 0 14px 34px rgba(0, 0, 0, 0.48);
+  box-shadow: var(--tl-shadow-pop);
 }
 
 #codex-overleaf-panel .codex-diagnostics-menu::backdrop,
@@ -2059,14 +2070,6 @@
   border-color: var(--tl-border-strong);
 }
 
-#codex-overleaf-panel .codex-diagnostics-result[data-status="warning"] {
-  border-color: var(--tl-review);
-}
-
-#codex-overleaf-panel .codex-diagnostics-result[data-status="failed"] {
-  border-color: var(--tl-fail);
-}
-
 /* Only embedded settings replace the session view. The modal workbench keeps
    the complete sidebar behind its backdrop, without reflowing the conversation. */
 #codex-overleaf-panel:not([data-settings-workbench="true"])[data-view="settings"] .codex-vscode-head,
@@ -2663,13 +2666,44 @@
 }
 
 #codex-overleaf-panel .codex-diagnostics-result-title {
+  display: flex;
+  align-items: flex-start;
+  gap: 8px;
   color: var(--tl-fg-1);
   font-size: var(--tl-text-base, 14px);
   font-weight: 650;
   line-height: 1.35;
 }
 
+#codex-overleaf-panel .codex-diagnostics-status-dot {
+  flex: 0 0 8px;
+  width: 8px;
+  height: 8px;
+  margin-top: calc((1.35em - 8px) / 2);
+  border-radius: 50%;
+  background: var(--tl-fg-4);
+}
+
+#codex-overleaf-panel .codex-diagnostics-result[data-status="completed"] .codex-diagnostics-status-dot { background: var(--tl-ok); }
+#codex-overleaf-panel .codex-diagnostics-result[data-status="warning"] .codex-diagnostics-status-dot { background: var(--tl-review); }
+#codex-overleaf-panel .codex-diagnostics-result[data-status="failed"] .codex-diagnostics-status-dot { background: var(--tl-fail); }
+#codex-overleaf-panel .codex-diagnostics-result[data-status="running"] .codex-diagnostics-status-dot { animation: codex-diagnostics-pulse 1.2s ease-in-out infinite; }
+
+@keyframes codex-diagnostics-pulse {
+  50% {
+    opacity: 0.3;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  #codex-overleaf-panel .codex-diagnostics-result[data-status="running"] .codex-diagnostics-status-dot {
+    animation: none;
+  }
+}
+
 #codex-overleaf-panel .codex-diagnostics-result-subtitle {
+  text-wrap: pretty;
+  margin-left: 16px;
   margin-top: 2px;
   color: var(--tl-fg-3);
   font-size: var(--tl-text-xs, 11px);
@@ -2707,69 +2741,127 @@
 }
 
 #codex-overleaf-panel .codex-diagnostics-result-body {
-  padding: 10px 12px 12px;
+  display: grid;
+  gap: 12px;
+  padding: 12px;
   color: var(--tl-fg-2);
   font-size: var(--tl-text-sm, 12px);
-  line-height: 1.45;
+  line-height: 1.5;
+  text-wrap: pretty;
 }
 
-#codex-overleaf-panel .codex-diagnostics-result-body p {
-  margin: 0 0 8px;
+#codex-overleaf-panel .codex-diagnostics-result-body > * {
+  margin: 0;
 }
 
-#codex-overleaf-panel .codex-diagnostics-result-body ul {
-  margin: 8px 0;
-  padding-left: 18px;
+#codex-overleaf-panel .codex-diagnostics-result[data-status="running"] .codex-diagnostics-summary { color: var(--tl-fg-3); }
+
+#codex-overleaf-panel .codex-diagnostics-facts {
+  display: grid;
+  grid-template-columns: fit-content(40%) minmax(0, 1fr);
+  column-gap: 16px;
+  row-gap: 6px;
 }
 
-#codex-overleaf-panel .codex-diagnostics-result-body li {
-  margin: 4px 0;
+#codex-overleaf-panel .codex-diagnostics-facts dt {
+  color: var(--tl-fg-3);
+  overflow-wrap: normal;
+}
+
+#codex-overleaf-panel .codex-diagnostics-facts dd {
+  margin: 0;
+  min-width: 0;
+  color: var(--tl-fg-1);
+}
+
+#codex-overleaf-panel .codex-diagnostics-facts dd[data-tone="warn"] { color: var(--tl-review); }
+#codex-overleaf-panel .codex-diagnostics-facts dd[data-tone="fail"] { color: var(--tl-fail); }
+
+#codex-overleaf-panel .codex-diagnostics-notes {
+  display: grid;
+  gap: 4px;
+  padding: 0;
+  list-style: none;
+}
+
+#codex-overleaf-panel .codex-diagnostics-notes li {
+  position: relative;
+  padding-left: 12px;
+}
+
+#codex-overleaf-panel .codex-diagnostics-notes li::before {
+  content: "";
+  position: absolute;
+  left: 2px;
+  top: calc(0.75em - 2px);
+  width: 4px;
+  height: 4px;
+  border-radius: 50%;
+  background: var(--tl-fg-4);
 }
 
 #codex-overleaf-panel .codex-diagnostics-next-step {
-  color: var(--tl-accent);
+  color: var(--tl-fg-2);
+}
+
+#codex-overleaf-panel .codex-diagnostics-next-label {
+  color: var(--tl-fg-1);
+  font-weight: 600;
 }
 
 #codex-overleaf-panel .codex-install-command {
-  margin-top: 10px;
-  padding: 9px;
-  border: 1px solid var(--tl-border-strong);
-  border-radius: 7px;
-  background: var(--tl-surface-0);
+  display: grid;
+  gap: 6px;
 }
 
-#codex-overleaf-panel .codex-diagnostics-result[data-status="failed"] .codex-install-command {
-  border-color: var(--tl-review);
+#codex-overleaf-panel .codex-install-command-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
 }
 
 #codex-overleaf-panel .codex-install-command-label {
-  margin-bottom: 6px;
   color: var(--tl-fg-3);
   font-size: var(--tl-text-xs, 11px);
 }
 
+#codex-overleaf-panel .codex-install-command button {
+  flex: 0 0 auto;
+  width: auto;
+  height: 22px;
+  margin: 0;
+  padding: 0 8px;
+  border: 1px solid var(--tl-border-strong);
+  border-radius: 5px;
+  background: transparent;
+  color: var(--tl-fg-1);
+  font-size: var(--tl-text-xs, 11px);
+  line-height: 20px;
+  cursor: pointer;
+}
+
+#codex-overleaf-panel .codex-install-command button:hover {
+  background: var(--tl-hover);
+}
+
+#codex-overleaf-panel .codex-install-command button:focus-visible {
+  outline: 2px solid var(--tl-accent);
+  outline-offset: 2px;
+}
+
 #codex-overleaf-panel .codex-install-command code {
   display: block;
   overflow: auto;
   max-height: 90px;
-  padding: 7px;
+  padding: 8px 10px;
   border-radius: 6px;
   background: var(--tl-surface-2);
-  color: var(--tl-accent);
+  color: var(--tl-fg-1);
   white-space: pre-wrap;
-  word-break: break-word;
-  font: var(--tl-text-xs, 11px)/1.45 ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
-}
-
-#codex-overleaf-panel .codex-install-command button {
-  width: 100%;
-  margin-top: 8px;
-  border: 1px solid var(--tl-ok);
-  border-radius: 6px;
-  background: var(--tl-ok-wash);
-  color: var(--tl-ok);
-  padding: 6px 8px;
-  font-size: var(--tl-text-sm, 12px);
+  word-break: normal;
+  overflow-wrap: anywhere;
+  font: var(--tl-text-xs, 11px)/1.5 ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
 }
 
 #codex-overleaf-panel .codex-diagnostics-technical {
@@ -2782,11 +2874,41 @@
 }
 
 #codex-overleaf-panel .codex-diagnostics-technical summary {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
   cursor: pointer;
+  list-style: none;
   color: var(--tl-fg-3);
   font-size: var(--tl-text-xs, 11px);
 }
 
+#codex-overleaf-panel .codex-diagnostics-technical summary::-webkit-details-marker {
+  display: none;
+}
+
+#codex-overleaf-panel .codex-diagnostics-technical summary::after {
+  content: "";
+  width: 5px;
+  height: 5px;
+  border-right: 1px solid currentColor;
+  border-bottom: 1px solid currentColor;
+  transform: rotate(-45deg);
+}
+
+#codex-overleaf-panel .codex-diagnostics-technical[open] summary::after {
+  transform: rotate(45deg);
+}
+
+#codex-overleaf-panel .codex-diagnostics-technical summary:hover {
+  color: var(--tl-fg-1);
+}
+
+#codex-overleaf-panel .codex-diagnostics-check .codex-diagnostics-technical {
+  border-top: 0;
+  padding: 0;
+}
+
 #codex-overleaf-panel .codex-diagnostics-technical pre {
   overflow: auto;
   max-height: 220px;
@@ -3112,6 +3234,7 @@
    dark/light/auto). The whole panel reads these tokens so a theme is just a
    value swap — no selector depends on the literals. */
 #codex-overleaf-panel {
+  --tl-shadow-pop: 0 14px 34px rgba(0, 0, 0, 0.48);
   --tl-fg-1: #e4e4e4;   /* primary prose / answer / strong labels */
   --tl-fg-2: #b7b7b7;   /* body text / activity titles / controls */
   --tl-fg-3: #8a8a8a;   /* meta / summaries / captions */
@@ -3157,6 +3280,7 @@
    light via prefers-color-scheme). Dark needs no override (it is the baseline
    above). State colors are darkened for AA contrast on light surfaces. */
 #codex-overleaf-panel[data-theme="light"] {
+  --tl-shadow-pop: 0 12px 32px rgba(31, 35, 40, 0.14), 0 2px 6px rgba(31, 35, 40, 0.08);
   --tl-fg-1: #1f2328;
   --tl-fg-2: #3d4651;
   --tl-fg-3: #6a7280;
@@ -5123,6 +5247,10 @@
   gap: 8px;
   padding: 10px 24px 10px 10px;
 }
+#codex-overleaf-panel .codex-attachment-preview-card[data-loading="true"] {
+  border-style: dashed;
+  background: var(--tl-surface-1);
+}
 #codex-overleaf-panel .codex-attachment-file-icon {
   display: grid;
   place-items: center;

package/native-host/src/codexSessionRunner.js

@@ -102,6 +102,7 @@ async function runCodexSession({ params = {}, env = process.env, emit = () => {}
 
     mirror = await syncOverleafToMirror({
       projectId,
+      evidenceProjectId: params.projectId,
       project: params.project || { files: [] },
       rootDir
     });

package/native-host/src/debugLog.js

@@ -8,6 +8,7 @@ const {
 } = require('./nativeHostPlatform');
 
 const MAX_FIELD_LENGTH = 8000;
+const MAX_DEBUG_LOG_BYTES = 8 * 1024 * 1024;
 
 function getDebugLogDir(options = {}) {
   return getCodexOverleafHome(options);
@@ -22,12 +23,35 @@ function logDebug(event, detail = {}, options = {}) {
   try {
     const logDir = getDebugLogDir(options);
     const logPath = getDebugLogPath(options);
-    fs.mkdirSync(logDir, { recursive: true });
-    fs.appendFileSync(logPath, `${JSON.stringify({
+    const record = `${JSON.stringify({
       time: new Date().toISOString(),
       event,
       detail: sanitize(detail)
-    })}\n`, 'utf8');
+    })}\n`;
+    const recordBytes = Buffer.byteLength(record, 'utf8');
+    if (recordBytes > MAX_DEBUG_LOG_BYTES) return;
+    fs.mkdirSync(logDir, { recursive: true });
+    try {
+      const size = fs.statSync(logPath).size;
+      if (size > MAX_DEBUG_LOG_BYTES) {
+        // Discard oversized legacy logs instead of retaining a huge .1 copy.
+        fs.truncateSync(logPath, 0);
+      } else if (size + recordBytes > MAX_DEBUG_LOG_BYTES) {
+        fs.renameSync(logPath, `${logPath}.1`);
+      }
+    } catch (error) {
+      if (error.code !== 'ENOENT') throw error;
+    }
+    fs.appendFileSync(logPath, record, 'utf8');
+    // Concurrent Hosts can cross the cap between stat and append/rename.
+    // Logging is best-effort: drop an oversized raced file rather than grow it.
+    for (const file of [logPath, `${logPath}.1`]) {
+      try {
+        if (fs.statSync(file).size > MAX_DEBUG_LOG_BYTES) fs.truncateSync(file, 0);
+      } catch (error) {
+        if (error.code !== 'ENOENT') throw error;
+      }
+    }
   } catch {
     // Debug logging must never break the native messaging host.
   }

package/native-host/src/index.js

@@ -11,6 +11,8 @@ const { buildNativeRuntimeEnv, summarizeNativeEnvironment } = require('./nativeE
 let buffered = Buffer.alloc(0);
 let stdoutUnavailable = false;
 let nativeDisconnectHandled = false;
+let fatalShutdownStarted = false;
+const FATAL_SHUTDOWN_TIMEOUT_MS = 3000;
 const runtimeEnv = buildNativeRuntimeEnv(process.env);
 Object.assign(process.env, runtimeEnv);
 logDebug('environment.ready', summarizeNativeEnvironment(runtimeEnv));
@@ -93,21 +95,46 @@ process.on('uncaughtException', error => {
     handleNativeDisconnect('uncaught_native_disconnect', error);
     return;
   }
-  logDebug('process.uncaught_exception', {
-    message: error.message,
-    stack: error.stack
-  });
-  process.exit(1);
+  handleFatalError('process.uncaught_exception', error);
 });
 
 process.on('unhandledRejection', reason => {
-  logDebug('process.unhandled_rejection', {
-    message: reason?.message || String(reason),
-    stack: reason?.stack
-  });
-  process.exit(1);
+  handleFatalError('process.unhandled_rejection', reason);
 });
 
+function handleFatalError(event, error) {
+  if (fatalShutdownStarted) {
+    process.exit(1);
+    return;
+  }
+  fatalShutdownStarted = true;
+  nativeDisconnectHandled = true;
+  stdoutUnavailable = true;
+  process.exitCode = 1;
+  logDebug(event, { message: error?.message || String(error), stack: error?.stack });
+  const exitTimer = setTimeout(() => {
+    const failures = quarantineActiveOperations();
+    logDebug('process.fatal_shutdown_deadline', { persistenceFailures: failures });
+    process.exit(1);
+  }, FATAL_SHUTDOWN_TIMEOUT_MS);
+  try {
+    // Persist protection before aborting; stop confirmation owns its removal.
+    quarantineActiveOperations();
+    Promise.resolve(abortAllActiveOperations('Native Host stopped after a fatal error.')).then(() => {
+      clearTimeout(exitTimer);
+      process.exit(1);
+    }, failure => {
+      logDebug('process.fatal_shutdown_failed', { message: failure?.message });
+      clearTimeout(exitTimer);
+      process.exit(1);
+    });
+  } catch (failure) {
+    logDebug('process.fatal_shutdown_failed', { message: failure?.message });
+    clearTimeout(exitTimer);
+    process.exit(1);
+  }
+}
+
 function writeResponse(response) {
   if (stdoutUnavailable || process.stdout.destroyed || process.stdout.writableEnded) {
     logDebug('stdout.write_skipped', { ok: response?.ok, code: response?.error?.code });
@@ -152,6 +179,7 @@ function handleNativeDisconnect(source, error) {
   // old owned process is still inside its interrupt/termination budget.
   quarantineActiveOperations();
   const exitTimer = setTimeout(() => {
+    if (fatalShutdownStarted) return;
     const failures = quarantineActiveOperations();
     logDebug('native_transport.shutdown_deadline', { persistenceFailures: failures });
     process.exit(failures.length ? 1 : 0);
@@ -160,7 +188,10 @@ function handleNativeDisconnect(source, error) {
   Promise.all([
     abortAllActiveOperations('Native messaging transport disconnected.'),
     new Promise(resolve => setTimeout(resolve, 1500))
-  ]).then(() => { clearTimeout(exitTimer); process.exit(0); });
+  ]).then(() => {
+    clearTimeout(exitTimer);
+    if (!fatalShutdownStarted) process.exit(0);
+  });
 }
 
 function summarizeRequest(message) {

package/native-host/src/localSkills.js

@@ -13,7 +13,7 @@ const MAX_SKILL_CONTENT_CHARS = MAX_SKILL_CONTENT_BYTES;
 const MAX_SKILL_PREVIEW_CHARS = 240;
 const PROJECT_SKILL_SCOPE = 'project';
 const CODEX_OVERLEAF_SKILL_SCOPE = 'codex-overleaf';
-const OFFICIAL_CODEX_OVERLEAF_SKILL_IDS = ['annotated-rewrite', 'parallel-subagents'];
+const OFFICIAL_CODEX_OVERLEAF_SKILL_IDS = ['annotated-rewrite', 'parallel-subagents', 'reviewer-response'];
 
 function listProjectSkills({ projectId, rootDir } = {}) {
   const skillsDir = getProjectSkillsDir(projectId, { rootDir });

package/native-host/src/mirrorWorkspace.js

@@ -5,6 +5,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 const { getHomeDir } = require('./nativeHostPlatform');
 const { assertProjectPathsForPlatform } = require('./projectPathPlatform');
+const { assessDocumentProvenance } = require('../../extension/src/shared/staleGuard');
 
 const BASELINE_FILE = 'baseline.json';
 const MAX_BINARY_FILE_BYTES = 10 * 1024 * 1024;
@@ -34,11 +35,20 @@ function getDefaultMirrorRoot(options = {}) {
   return path.join(getHomeDir(options), '.codex-overleaf', 'projects');
 }
 
-async function syncOverleafToMirror({ projectId, project, rootDir }) {
+async function syncOverleafToMirror({ projectId, project, rootDir, evidenceProjectId }) {
   const mirror = getProjectMirror(projectId, { rootDir });
   const normalized = normalizeProjectFilesDetailed(project?.files || []);
   const files = normalized.files;
   const previous = readBaseline(mirror.baselinePath);
+  // Page already admits evidence-free snapshot text against its own saved
+  // references, which may no longer be present after editor/writeback merging.
+  for (const file of project?.files || []) {
+    if (file.kind === 'binary' || typeof file.content !== 'string') continue;
+    if (file.documentIdentity !== undefined) {
+      assertDocumentProvenance(file.path, file.content, undefined, file.documentIdentity,
+        project?.id !== undefined && project.id !== evidenceProjectId ? undefined : evidenceProjectId);
+    }
+  }
   const fullProjectSnapshot = project?.capabilities?.fullProjectSnapshot !== false;
   const skippedFiles = resolveUnreadSnapshotFiles(project, normalized, previous, fullProjectSnapshot);
   // Runtime platform is authoritative; request fields cannot opt out of this check.
@@ -808,11 +818,20 @@ function buildOtStatusFields(baseline = {}, trusted) {
   };
 }
 
-async function applyFileOverlays({ projectId, overlays, rootDir }) {
+async function applyFileOverlays({ projectId, overlays, rootDir, evidenceProjectId }) {
   const mirror = getProjectMirror(projectId, { rootDir });
   const baseline = readBaseline(mirror.baselinePath);
   const filesByPath = new Map((baseline.files || []).map(f => [f.path, f]));
   const unreadPaths = new Set((baseline.unreadFiles || []).map(file => file.path));
+  const references = baselineTextReferences(baseline);
+  // Validate the entire request against the unchanged baseline before any file
+  // or baseline write. An earlier overlay cannot hide a later misattribution.
+  for (const overlay of overlays || []) {
+    if (!overlay?.path || typeof overlay.content !== 'string') continue;
+    const normalizedPath = normalizeRelativePath(overlay.path);
+    if (!unreadPaths.has(normalizedPath))
+      assertDocumentProvenance(normalizedPath, overlay.content, references, overlay.documentIdentity, evidenceProjectId);
+  }
 
   for (const overlay of overlays || []) {
     if (!overlay?.path || typeof overlay.content !== 'string') {
@@ -828,7 +847,7 @@ async function applyFileOverlays({ projectId, overlays, rootDir }) {
     filesByPath.set(normalizedPath, {
       path: normalizedPath,
       kind: 'text',
-      hash: overlay.hash || hashText(overlay.content),
+      hash: hashText(overlay.content),
       content: overlay.content
     });
   }
@@ -840,6 +859,24 @@ async function applyFileOverlays({ projectId, overlays, rootDir }) {
   });
 }
 
+function baselineTextReferences(baseline) {
+  return new Map((baseline.files || []).filter(file => file.kind === 'text' && typeof file.content === 'string')
+    .map(file => [file.path, file.content]));
+}
+
+function assertDocumentProvenance(path, text, references, documentIdentity, projectId) {
+  const result = documentIdentity !== undefined
+    && (!documentIdentity || documentIdentity.contentSha256 !== hashText(text))
+    ? { ok: false, code: 'document_identity_mismatch' }
+    : assessDocumentProvenance({ path, text, references, documentIdentity, projectId });
+  if (result.ok) return;
+  const error = new Error('Codex could not confirm that the editor content belongs to the target file, so it was not used.');
+  error.code = result.code;
+  error.path = path;
+  error.matchedPath = result.matchedPath;
+  throw error;
+}
+
 // v1.8.0: after a VERIFIED writeback, the workspace already holds the exact
 // content that landed in Overleaf only while its hashes match the page's
 // verified post-images. Check every target before updating any baseline.
@@ -932,6 +969,13 @@ async function patchMirrorFiles({ projectId, files, rootDir, source = 'ot' }) {
   let lastOtPatchAt = baseline.lastOtPatchAt || '';
   let lastOtErrorCode = '';
   let patchBatchAt = '';
+  const references = baselineTextReferences(baseline);
+  for (const patch of Array.isArray(files) ? files : []) {
+    const normalized = normalizePatchPath(patch, mirror.workspacePath);
+    if (normalized.ok && baselineByPath.get(normalized.path)?.kind === 'text' && typeof patch?.nextContent === 'string') {
+      assertDocumentProvenance(normalized.path, patch.nextContent, references);
+    }
+  }
 
   for (const patch of Array.isArray(files) ? files : []) {
     const normalized = normalizePatchPath(patch, mirror.workspacePath);