minecodex 2.0.14 → 2.0.16

package/README.md

@@ -50,11 +50,18 @@ mcx open
 | `mcx uninstall [--purge]` | 移除扩展；默认保留个人数据，带 `--purge` 参数才会清理 |
 | `mcx update` | 更新到最新的稳定版本 |
 | `mcx open` | 打开 MineCodex 控制台 |
+| `mcx plugin install` | 通过官方插件机制注册 Codex 内的 MineCodex 控制台入口 |
 | `mcx status [--json]` | 查看安装与插件运行状态 |
 | `mcx restart` | 重启 Codex 并应用插件开启/关闭状态 |
 
 关闭某项功能仅停用对应的扩展服务，不会删除任何个人数据；修改设置后运行 `mcx restart` 即可应用更改。
 
+运行 `mcx plugin install` 后，在 Codex 的 Explore／探索中打开 MineCodex，也可按原生
+导航设置固定到侧栏。该本地插件使用官方 MCP Apps 入口与面板，复用原有控制台。
+关闭面板不会停止增强；各项功能继续由 MineCodex 本地服务和注入运行时提供。
+当前正在运行的窗口若未刷新插件目录，下次正常启动后查看。安装命令不会重启 Codex。
+插件卸载使用 `codex plugin remove minecodex@minecodex-local`，不删除增强配置或数据。
+
 运行 `mcx uninstall` 会移除名为 MineCodex 的后台项目，并默认保留配置设置、Notes 笔记和 Images 图片索引；只有显式加上 `--purge` 参数，才会清理 MineCodex 产生的本地配置。MineCodex 绝不会删除 `~/.codex/generated_images` 中的原始图片或 Notes 引用的本地文件。
 
 ## 数据与图片操作
@@ -106,3 +113,5 @@ MineCodex 是非官方独立扩展项目，与 OpenAI 无关联。项目自有
 支持 Prompts 与分类、公网 Sites、模型收藏。模型旧收藏在新版模型滑条首次启动后收录，
 导入收藏在下次启动 Codex 后载入。图片文件、本地站点、账号信息与设备设置不包含在文件中；
 可迁移功能的特殊说明可通过 info 查看。这是手动迁移，不是自动云同步。文件包含提示词正文，请妥善保管。
+
+官方插件提供 MineCodex 控制台与 **Prompt** 两个入口，分别使用 MCX 品牌图标与 Prompt 图标。Prompt 仍由 MCX 管理，沿用原有提示词数据；输入框里的快捷提示词继续只填入、不发送。

package/apps/dashboard/app.js

@@ -1,4 +1,5 @@
 import {diagnosticReport} from "./assets/diagnostics.js";
+import {dashboardFetch} from "./transport.js";
 let savedLocale;
 try { savedLocale = localStorage.getItem("minecodex-language"); } catch { /* 存储不可用时跟随浏览器语言。 */ }
 const locale = ["en", "zh-CN"].includes(savedLocale) ? savedLocale
@@ -310,7 +311,7 @@ function replaceFeatureInState(featureId, patch) {
 async function load() {
   elements.loadError.hidden = true;
   try {
-    const response = await fetch("/api/status", { headers: { "Accept-Language": locale } });
+    const response = await dashboardFetch("/api/status", { headers: { "Accept-Language": locale } });
     if (!response.ok) throw new Error(`HTTP ${response.status}`);
     const fresh = await response.json();
     if (pendingFeatureIds.size && state) fresh.features = fresh.features.map(feature =>
@@ -339,7 +340,7 @@ elements.pluginList.addEventListener("change", async (event) => {
   updatePluginCard(card, state.features.find((feature) => feature.id === featureId));
   elements.saveState.textContent = copy.saving;
   try {
-    const response = await fetch(`/api/features/${encodeURIComponent(featureId)}`, {
+    const response = await dashboardFetch(`/api/features/${encodeURIComponent(featureId)}`, {
       method: "PATCH",
       headers: { "Content-Type": "application/json", "Accept-Language": locale },
       body: JSON.stringify({ enabled: input.checked }),
@@ -369,7 +370,7 @@ elements.restartButton.addEventListener("click", async () => {
   elements.restartButton.disabled = true;
   elements.restartButton.querySelector(".button-label").textContent = copy.restarting;
   try {
-    const response = await fetch("/api/restart", {
+    const response = await dashboardFetch("/api/restart", {
       method: "POST",
       headers: { "Content-Type": "application/json", "Accept-Language": locale },
       body: "{}",
@@ -404,7 +405,7 @@ elements.updateButton.addEventListener("click", async () => {
   elements.updateButton.querySelector(".button-label").textContent = copy.checkingUpdates;
   elements.updateResult.hidden = true;
   try {
-    const response = await fetch("/api/update");
+    const response = await dashboardFetch("/api/update");
     if (!response.ok) throw new Error(`HTTP ${response.status}`);
     const update = await response.json();
     elements.updateResult.textContent = update.available ? copy.updateAvailable(update.latest) : copy.current;
@@ -422,7 +423,8 @@ const systemTheme = matchMedia("(prefers-color-scheme: dark)");
 let selectedTheme = null;
 try { selectedTheme = localStorage.getItem("minecodex-appearance"); } catch { /* 存储不可用时仍允许本次切换。 */ }
 function applyTheme() {
-  const dark = selectedTheme === "dark" || (selectedTheme !== "light" && systemTheme.matches);
+  const hostDark = window.minecodexHostTheme ? window.minecodexHostTheme === "dark" : systemTheme.matches;
+  const dark = selectedTheme === "dark" || (selectedTheme !== "light" && hostDark);
   document.documentElement.dataset.theme = dark ? "dark" : "light";
   elements.themeToggle.setAttribute("aria-label", locale === "zh-CN" ? "外观" : "Appearance");
   for (const button of elements.themeButtons) {
@@ -447,6 +449,7 @@ elements.languageToggle.addEventListener("click", (event) => {
   location.reload();
 });
 systemTheme.addEventListener("change", applyTheme);
+window.addEventListener("minecodex-host-theme", applyTheme);
 document.addEventListener("keydown", () => { document.documentElement.dataset.input = "keyboard"; });
 document.addEventListener("pointerdown", () => { document.documentElement.dataset.input = "pointer"; });
 applyStaticCopy();

package/apps/dashboard/assets/data-transfer.js

@@ -1,4 +1,5 @@
 import { installFeatureTooltips } from './ui-tooltip.js';
+import {dashboardFetch} from '../transport.js';
 const tooltipLifetime = new AbortController();
 const { tooltipSurface } = installFeatureTooltips(tooltipLifetime.signal);
 window.addEventListener('pagehide', event => { if (!event.persisted) tooltipLifetime.abort(); });
@@ -20,7 +21,7 @@ document.querySelector('#data-close').setAttribute('aria-label', t('关闭', 'Cl
 exportButton.querySelector('.button-label').textContent = t('导出', 'Export');
 importButton.querySelector('.button-label').textContent = t('导入', 'Import');
 async function request(url, data) {
-  const response = await fetch(url, data ? { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(data) } : {});
+  const response = await dashboardFetch(url, data ? { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(data) } : {});
   if (!response.ok) throw new Error(String(response.status));
   return response.json();
 }

package/apps/dashboard/transport.js

@@ -0,0 +1,18 @@
+// 浏览器继续走同源 HTTP；官方插件面板通过 MCP 调用同一套本地服务。
+export async function dashboardFetch(url, options = {}) {
+  const app = window.minecodexMcpApp;
+  if (!app) return fetch(url, options);
+  const method = options.method ?? "GET";
+  const result = await app.callServerTool({
+    name: method === "GET" ? "minecodex_read" : "minecodex_write",
+    arguments: {
+      route: url,
+      method,
+      locale: new Headers(options.headers).get("Accept-Language") ?? document.documentElement.lang,
+      ...(options.body ? { body: JSON.parse(options.body) } : {}),
+    },
+  });
+  if (result.isError) throw new Error(result.content?.find(item => item.type === "text")?.text ?? "MineCodex request failed");
+  const { status, body } = result.structuredContent;
+  return new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json" } });
+}

package/assets/brand/minecodex-icon-selected.svg

@@ -0,0 +1,4 @@
+<!-- Generated by scripts/build-brand-icons.mjs from assets/brand/minecodex-icon.svg. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24"><defs><mask id="pickaxe-cutout" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24" style="mask-type:luminance"><rect width="24" height="24" fill="white"/><g id="pickaxe" transform="translate(6.24 6.24) scale(.48)" fill="black">
+    <path d="M15.686 4.314 16.3 3.7a1 1 0 0 1 1.4 0l2.6 2.6a1 1 0 0 1 0 1.4l-.614.614a12.501 12.501 0 0 1 1.356 10.225 1 1 0 0 1-1.751-.119 22 22 0 0 0-3.393-6.319l-.198.199a1 1 0 0 1-1.4 0l-.219.169L6.619 20.38a1 1 0 1 1-3-3l7.912-7.912.169.232a1 1 0 0 1 0-1.4l.198-.197A22 22 0 0 0 5.58 4.71a1 1 0 0 1-.119-1.752 12.5 12.5 0 0 1 10.225 1.356Z"/>
+  </g></mask></defs><path fill="currentColor" mask="url(#pickaxe-cutout)" d="M9.3316 2.03768C11.1644 1.54688 13.0268 2.04668 14.356 3.20174C16.0859 2.86512 17.9511 3.36418 19.2935 4.70663C20.6356 6.04882 21.1326 7.91288 20.7964 9.64217C21.9527 10.9716 22.4534 12.8349 21.9625 14.6685C21.4711 16.5025 20.1051 17.8657 18.439 18.439C17.8658 20.1047 16.503 21.47 14.6695 21.9615C12.8356 22.4528 10.9727 21.9519 9.64312 20.7955C7.91371 21.1319 6.04993 20.635 4.70757 19.2926C3.36558 17.9505 2.86659 16.0866 3.20269 14.357C2.04693 13.0273 1.54757 11.1638 2.03863 9.33065C2.52997 7.49759 3.89436 6.13282 5.56011 5.55917C6.13382 3.8935 7.49837 2.52891 9.3316 2.03768Z"/></svg>

package/features/markdown-reading/src/adapters/codex/rich-text.mjs

@@ -176,7 +176,8 @@ export function installMarkdownRichText(view, api, native, codex) {
         button.dataset.mcxFootnoteRef = this.options.id;
         button.addEventListener('click', (event) => {
           event.preventDefault();
-          footnoteReturns.set(this.options.id, view.scrollDOM.scrollTop);
+          // 虚拟段落重新测量后像素高度会变化，使用原生文档锚点恢复阅读位置。
+          footnoteReturns.set(this.options.id, view.scrollSnapshot());
           jump(this.options.to);
         });
         sup.append(button);
@@ -201,8 +202,7 @@ export function installMarkdownRichText(view, api, native, codex) {
           const previous = footnoteReturns.get(this.options.id);
           if (previous === undefined) jump(this.options.to);
           else {
-            view.scrollDOM.scrollTop = previous;
-            view.requestMeasure();
+            view.dispatch({ effects: previous });
           }
         });
         element.append(back);
@@ -478,7 +478,14 @@ export function installMarkdownRichText(view, api, native, codex) {
         );
       }
     }
-    const { definitions: footnotes, references } = collectMarkdownFootnotes(text, protectedRanges);
+    const { definitions: footnotes, references, definitionRanges } = collectMarkdownFootnotes(text, protectedRanges);
+    // 同名定义沿用最后一条；早期定义不再被误作引用或普通正文。
+    for (const note of definitionRanges) {
+      if (footnotes.get(note.id).from === note.from) continue;
+      replace(note.from, note.to);
+      for (let i = doc.lineAt(note.from).number; i <= doc.lineAt(note.to).number; i++)
+        hiddenLines.add(doc.line(i).from);
+    }
     for (const reference of references)
       replace(
         reference.from,
@@ -505,7 +512,7 @@ export function installMarkdownRichText(view, api, native, codex) {
       const line = doc.line(i);
       if (
         protectedAt(line.from) ||
-        [...footnotes.values()].some((n) => line.from >= n.from && line.from <= n.to)
+        definitionRanges.some((n) => line.from >= n.from && line.from <= n.to)
       )
         continue;
       for (const m of line.text.matchAll(/(?<![\\$])\$(?![\s$])([^$\n]+?)(?<![\s\\])\$(?!\$)/g)) {

package/features/markdown-reading/src/adapters/codex/table-actions.mjs

@@ -1,6 +1,17 @@
 import { loadNativeMarkdownRenderer } from './markdown-native.mjs';
 import { captureMarkdownProviders } from './providers.mjs';
 
+export function markdownExportAlias(source, name) {
+  const start = source.lastIndexOf('export{');
+  if (start < 0) return undefined;
+  const entries = source.slice(start + 7).split('}')[0].split(',');
+  for (const entry of entries) {
+    const [local, alias = local] = entry.trim().split(/\s+as\s+/);
+    if (local === name) return alias;
+  }
+  return undefined;
+}
+
 // 从 Chat Markdown 的公开组件发现悬浮操作栏和控件，不绑定构建 hash。
 export async function loadNativeMarkdownTableActions(native) {
   const url = [...document.querySelectorAll('link[rel="modulepreload"],script[src]')]
@@ -21,7 +32,7 @@ export async function loadNativeMarkdownTableActions(native) {
   const exported = source.slice(source.lastIndexOf('export{'));
   const module = await import(url);
   const publicBinding = (name) => {
-    const alias = exported.match(new RegExp(`\\b${name} as ([\\w$]+)`))?.[1];
+    const alias = markdownExportAlias(exported, name);
     if (!alias || !module[alias]) throw new Error('native-table-actions-export-unavailable');
     return module[alias];
   };
@@ -56,7 +67,7 @@ export async function loadNativeMarkdownTableActions(native) {
   );
   if (wrapAt < 0 || !wrapPair) throw new Error('native-code-wrap-icons-unavailable');
   const sharedExports = sharedSource.slice(sharedSource.lastIndexOf('export{'));
-  const sharedBinding = (name) => shared[sharedExports.match(new RegExp(`\\b${name} as ([\\w$]+)`))?.[1]];
+  const sharedBinding = (name) => shared[markdownExportAlias(sharedExports, name)];
   const assignment = sharedSource.indexOf(`${wrapPair[1]}=`);
   const initialize = sharedSource
     .slice(sharedSource.lastIndexOf('function ', assignment))

package/features/markdown-reading/src/domain/footnotes.mjs

@@ -8,6 +8,7 @@ export function collectMarkdownFootnotes(text, excludedRanges) {
   });
   const excluded = (position) => excludedRanges.some(([from, to]) => position >= from && position < to);
   const definitions = new Map();
+  const definitionRanges = [];
   for (let index = 0; index < lines.length; index++) {
     const line = lines[index];
     const match = line.text.match(/^ {0,3}\[\^([^\]]+)\]:\s*(.*)$/);
@@ -25,6 +26,7 @@ export function collectMarkdownFootnotes(text, excludedRanges) {
       refs: [],
       number: 0,
     });
+    definitionRanges.push({ id: match[1], from: line.from, to: lines[end].to });
     index = end;
   }
   const notes = [...definitions.values()];
@@ -37,7 +39,7 @@ export function collectMarkdownFootnotes(text, excludedRanges) {
       escaped ||
       !note ||
       excluded(match.index) ||
-      notes.some((note) => match.index >= note.from && match.index < note.to)
+      definitionRanges.some((note) => match.index >= note.from && match.index < note.to)
     )
       continue;
     if (!note.number) note.number = ++number;
@@ -52,5 +54,5 @@ export function collectMarkdownFootnotes(text, excludedRanges) {
   }
   // 没有引用的定义仍保留，沿用正文末尾的连续编号。
   for (const note of notes) if (!note.number) note.number = ++number;
-  return { definitions, references };
+  return { definitions, references, definitionRanges };
 }

package/features/markdown-reading/src/injection-source.mjs

@@ -7,6 +7,7 @@ import {
 } from './adapters/codex/reading-runtime.mjs';
 import { loadNativeMarkdownRichText, installMarkdownRichText } from './adapters/codex/rich-text.mjs';
 import {
+  markdownExportAlias,
   loadNativeMarkdownTableActions,
   installMarkdownTableActions,
 } from './adapters/codex/table-actions.mjs';
@@ -32,6 +33,7 @@ export async function createPageScriptSource() {
     loadNativeMarkdownToc,
     installMarkdownToc,
     loadNativeMarkdownRenderer,
+    markdownExportAlias,
     loadNativeMarkdownTableActions,
     installMarkdownTableActions,
     loadNativeMarkdownRichText,

package/features/markdown-reading/src/reading.css

@@ -313,18 +313,18 @@
   padding-inline-start: calc(var(--mcx-list-indent) + var(--mcx-list-marker-width));
 }
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-alert-title {font-weight:var(--font-weight-semibold,600); color:var(--color-text-primary);}
-.cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich-code {margin-block:16px; max-width:100%;}
+.cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich-code {padding-block:16px; max-width:100%;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-code-block {position:relative; min-width:0;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-code-block [data-block-actions] {top:4px; right:4px; transform:none; transition:opacity 120ms linear;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-code-block:focus-within [data-block-actions],
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-code-block:hover [data-block-actions] {opacity:1; pointer-events:auto;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-code-scroll {max-width:100%; scrollbar-width:thin;}
-.cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich-html-block {margin-block:1em;}
+.cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich-html-block {padding-block:1em;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich mark {background:color-mix(in srgb, var(--color-content-yellow) 25%, transparent); color:inherit; border-radius:2px; padding-inline:2px;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich kbd {font-family:var(--font-mono,monospace); font-size:.9em; background:var(--color-token-bg-secondary); border:1px solid var(--color-border); border-radius:4px; padding:1px 4px;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich a,
 .cm-editor[data-minecodex-markdown-reading] :is(.mcx-reading-rich-footnote-ref,.mcx-reading-footnote-body) button {color:var(--color-text-accent, var(--color-token-text-link-foreground)); cursor:var(--cursor-interaction,pointer);}
-.cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich-footnote-ref button {font:inherit; padding:0 2px; background:transparent; border:0;}
+.cm-editor[data-minecodex-markdown-reading] .mcx-reading-rich-footnote-ref button {font:inherit; line-height:1; padding:0 2px; background:transparent; border:0;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-footnote-body {font-size:.9em; color:var(--color-text-secondary);}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-footnote-body button {margin-inline-start:8px; background:transparent; border:0;}
 .cm-editor[data-minecodex-markdown-reading] .mcx-reading-definition-term {font-weight:var(--font-weight-semibold,600);}

package/features/notes/assets/icons/prompt-entry-selected.svg

@@ -0,0 +1 @@
+<svg width="20" height="20" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256" fill="currentColor"><path d="M240,56V200a8,8,0,0,1-8,8H160a24,24,0,0,0-24,23.94,7.9,7.9,0,0,1-5.12,7.55A8,8,0,0,1,120,232a24,24,0,0,0-24-24H24a8,8,0,0,1-8-8V56a8,8,0,0,1,8-8H88a32,32,0,0,1,32,32v87.73a8.17,8.17,0,0,0,7.47,8.25,8,8,0,0,0,8.53-8V80a32,32,0,0,1,32-32h64A8,8,0,0,1,240,56Z"/></svg>

package/features/notes/assets/icons/prompt-entry.svg

@@ -0,0 +1,16 @@
+<!-- @license lucide-static v0.577.0 - ISC -->
+<svg
+  class="lucide lucide-book-open"
+  xmlns="http://www.w3.org/2000/svg"
+  width="20"
+  height="20"
+  viewBox="-1.5 -1.5 27 27"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="1.8"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M12 7v14" />
+  <path d="M3 18a1 1 0 0 1-1-1V4a1 1 0 0 1 1-1h5a4 4 0 0 1 4 4 4 4 0 0 1 4-4h5a1 1 0 0 1 1 1v13a1 1 0 0 1-1 1h-6a3 3 0 0 0-3 3 3 3 0 0 0-3-3z" />
+</svg>

package/features/notes/codex-feature.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "notes",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "label": {
     "en": "Prompt Library",
     "zh-CN": "提示词库"
@@ -19,7 +19,8 @@
       "icons": "src/frontend/icons.json",
       "styles": "src/frontend/styles.css",
       "previews": "assets/prompt-previews.json"
-    }
+    },
+    "sourceFactory": "src/injection-source.mjs"
   },
   "placement": {
     "order": 20

package/features/notes/src/adapters/codex/insertion.mjs

@@ -0,0 +1,92 @@
+// 请求只到达发起 App 所在窗口，不经共享服务队列寻找任意聚焦窗口。
+export function installPromptInsertion(signal, {codex, api, insertText}) {
+  const navigation = codex.navigation();
+  let remembered = null, busy = false;
+  function remember(composer) {
+    const location = navigation?.location();
+    if (!location || location.path.startsWith('/mcp-app/') || !composer) return;
+    remembered = {location, editable:composer.editable, threadId:composer.threadId,
+      placement:composer.root.getAttribute('data-composer-placement')};
+  }
+  function available() {
+    const target = remembered?.editable;
+    return codex.composer(target ?? null, {purpose:'insertion'});
+  }
+  function waitForComposer(valid, original, deadline) {
+    return new Promise((resolve,reject) => {
+      let observer, timer;
+      const finish = (error, value) => {observer?.disconnect();clearTimeout(timer);error ? reject(error) : resolve(value);};
+      const check = () => {
+        if (!valid()) return finish(new Error('Input changed before insertion'));
+        const candidates = [...document.querySelectorAll('[contenteditable="true"]')]
+          .map(editable => codex.composer(editable,{purpose:'insertion'}))
+          .filter(composer => composer && composer.threadId === original.threadId
+            && composer.root.getAttribute('data-composer-placement') === original.placement);
+        if (candidates.length > 1) return finish(new Error('Input changed before insertion'));
+        if (candidates.length === 1) finish(null,candidates[0]);
+      };
+      observer = new MutationObserver(check);
+      observer.observe(document.documentElement,{childList:true,subtree:true,attributes:true,attributeFilter:['hidden','inert','aria-hidden']});
+      timer = setTimeout(() => finish(new Error('No available input in the focused window')),Math.max(0,Math.min(2000,deadline-Date.now())));
+      check();
+    });
+  }
+  async function receive(event) {
+    if (event.data?.type !== 'minecodex:insert-prompt' || typeof event.data.promptId !== 'string') return;
+    const port = event.ports?.[0];
+    const source = codex.mcpAppSource(event.source,{server:'minecodex',pluginId:'minecodex@minecodex-local',resourceUri:'ui://minecodex/prompts.html'});
+    if (!source || !port) return;
+    if (busy || !document.hasFocus()) {port.postMessage({error:'Input changed before insertion'});port.close();return;}
+    busy = true;
+    const deadline = Math.min(Date.now() + 4000, event.data.expiresAt ?? Infinity);
+    let cancelled = false, navigating = false, restoring = false, expected = navigation?.location(), inserted = false;
+    const target = available();
+    const original = target ? {editable:target.editable,threadId:target.threadId,placement:target.root.getAttribute('data-composer-placement')} : remembered;
+    const onBlur = () => {queueMicrotask(() => {if (!document.hasFocus()) cancelled = true;});};
+    const onFocus = event => {
+      const editable = event.target.closest?.('[contenteditable="true"]');
+      if (editable && editable !== original?.editable) {
+        const focused = codex.composer(editable,{purpose:'insertion'});
+        if (!restoring || navigation.location().path !== remembered?.location.path
+          || focused?.threadId !== original?.threadId
+          || focused?.root.getAttribute('data-composer-placement') !== original?.placement) cancelled = true;
+      }
+    };
+    window.addEventListener('blur',onBlur);
+    document.addEventListener('focusin',onFocus);
+    const unsubscribe = navigation?.subscribe(location => {
+      if (navigating && location.path === remembered?.location.path) {expected = location;navigating = false;}
+      else if (location.key !== expected?.key) cancelled = true;
+    });
+    const valid = () => !cancelled && !signal.aborted && Date.now() < deadline && document.hasFocus();
+    try {
+      const state = await api('/api/state');
+      const prompt = state.prompts.find(item => item.id === event.data.promptId);
+      if (!prompt) throw new Error('Prompt was not found');
+      if (!valid() || !source.connected()) throw new Error('Input changed before insertion');
+      let composer = target && codex.composer(target.editable,{purpose:'insertion'});
+      if (target && !composer) throw new Error('Input changed before insertion');
+      if (!composer) {
+        if (!original || !remembered || !navigation) throw new Error('No available input in the focused window');
+        navigating = restoring = true;
+        let timer;
+        try {await Promise.race([navigation.navigate(remembered.location.path),new Promise((_,reject) => {
+          timer = setTimeout(() => {cancelled = true;reject(new Error('No available input in the focused window'));},2000);
+        })]);} finally {clearTimeout(timer);}
+        composer = await waitForComposer(valid,original,deadline);
+      }
+      if (!valid() || composer.threadId !== original?.threadId
+        || composer.root.getAttribute('data-composer-placement') !== original?.placement
+        || (!navigating && navigation && navigation.location().key !== expected?.key)) throw new Error('Input changed before insertion');
+      // 校验与同步填入之间不再等待；成功后计数失败不报告为可重试的插入失败。
+      insertText(prompt.body,composer.editable);
+      inserted = true;
+      port.postMessage({ok:true});
+      try {await api(`/api/prompts/${encodeURIComponent(prompt.id)}/use`,{method:'POST',body:{action:'insert',success:true}});}
+      catch (error) {console.warn('[Prompts] Usage could not be saved',error);}
+    } catch (error) {if (!inserted) port.postMessage({error:error.message});}
+    finally {unsubscribe?.();window.removeEventListener('blur',onBlur);document.removeEventListener('focusin',onFocus);port.close();busy=false;}
+  }
+  window.addEventListener('message',receive,{signal});
+  return {remember};
+}

package/features/notes/src/adapters/codex/requests.mjs

@@ -0,0 +1,7 @@
+export function assertPromptsRequest(route, method = 'GET') {
+  const allowed = (route === '/api/state' && method === 'GET')
+    || (['/api/prompts', '/api/categories', '/api/reorder'].includes(route) && method === 'POST')
+    || (/^\/api\/(prompts|categories)\/[a-zA-Z0-9-]+$/.test(route) && ['PATCH','DELETE'].includes(method))
+    || (/^\/api\/prompts\/[a-zA-Z0-9-]+\/use$/.test(route) && method === 'POST');
+  if (!allowed) throw new Error('Unsupported Prompts operation');
+}