codex-overleaf-link 1.3.0 → 1.3.5

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.3.0-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-1.3.5-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -21,136 +21,89 @@ Overleaf is great for collaborative LaTeX writing. Codex is great for AI-assiste
 
 Codex Overleaf Link bridges the two: it adds a Codex panel directly inside Overleaf, mirrors the project locally for Codex to work on, and writes accepted changes back through the browser — with stale-write guards, diff review, and undo checkpoints to reduce the risk of accidental overwrites.
 
-## Preview
-
 <p align="center">
   <img src="assets/codex-preview.png" alt="Codex Overleaf Link running inside Overleaf">
 </p>
 
 ## Install
 
-The recommended release path is npm-first for the native host, plus Chrome's required manual approval for the unpacked extension. The bundled extension key gives the official unpacked build a stable id, so normal release installs do not need `--extension-id`.
-
-1. Install or update the native host with the pinned npm package:
-
-```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- install-native
-```
-
-2. Download `codex-overleaf-link-extension-v1.3.0.zip` from the [v1.3.0 GitHub Release](https://github.com/Ghqqqq/codex-overleaf-link/releases/tag/v1.3.0), then unzip it to a stable local folder.
+Codex Overleaf Link has two pieces, installed separately:
 
-3. Open `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select the unzipped extension folder.
+- **Native host** — installed and updated with the pinned npm package. npm installs, updates, uninstalls, and diagnoses the native host *only*; it never installs the Chrome extension.
+- **Chrome extension** — loaded manually as an unpacked extension from the GitHub Release zip (or a source checkout). The bundled extension key gives the official build a stable id, so normal installs do not need `--extension-id`.
 
-4. Open any Overleaf project. The Codex panel appears on the right.
-
-If you modify the extension key or load a custom build that gets a different id, rerun the native install with `--extension-id <chrome-extension-id>`.
-
-Source installer fallback for macOS / Linux, mainly for development or source checkout installs:
+**1. Install or update the native host:**
 
 ```bash
-CODEX_OVERLEAF_REF=v1.3.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.0/install.sh)"
+npm exec --yes codex-overleaf-link@1.3.5 -- install-native
 ```
 
-Source installer fallback for Windows from PowerShell:
+**2. Load the extension:** Download `codex-overleaf-link-extension-v1.3.5.zip` from the [v1.3.5 GitHub Release](https://github.com/Ghqqqq/codex-overleaf-link/releases/tag/v1.3.5) and unzip it to a stable local folder. In `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select that folder.
 
-```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.0/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.3.0'
-powershell -ExecutionPolicy Bypass -File install.ps1
-```
+**3. Open any Overleaf project.** The Codex panel appears on the right; confirm the native host is connected from the panel diagnostics.
 
-## npm Native Host CLI
+Start in Ask mode; switch to Suggest mode for reviewed edits, or Auto mode once project governance and checkpoint settings are ready for direct writeback.
 
-npm installs, updates, uninstalls, and diagnoses the native host only. npm does not install the Chrome extension; install the Chrome extension separately from the release source checkout or extension zip.
+If Chrome assigns a custom build a different id, rerun the native install with `--extension-id <chrome-extension-id>` so the native manifest `allowed_origins` entry matches.
 
-Install or update the native host for the official release extension id:
+### Source installer fallback
 
-```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- install-native
-```
+If npm is unavailable, use the release-pinned script for your platform. These also serve development and source-checkout installs.
 
-Diagnose the registered native host:
+macOS / Linux:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- doctor
+CODEX_OVERLEAF_REF=v1.3.5 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.5/install.sh)"
 ```
 
-Uninstall the native host:
+Windows PowerShell:
 
-```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native
+```powershell
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.5/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v1.3.5'
+powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
-Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
-
-Open any Overleaf project - the Codex panel appears on the right.
-
-## Quick Start
-
-1. Install or update the native host with the version-pinned npm command, or use the GitHub Release script fallback for your platform.
-2. In `chrome://extensions`, enable Developer mode, load or reload the unpacked extension folder, and confirm the native host is connected from the panel diagnostics.
-3. Open an Overleaf project and start in Ask mode; switch to Suggest mode when you want Codex to propose reviewed edits, or Auto mode when the project governance and checkpoint settings are ready for direct writeback.
-
-<p align="center">
-  <img src="assets/codex-preview.png" alt="Codex Overleaf Link panel inside Overleaf">
-</p>
-
 <details>
-<summary><strong>Manual install</strong> (if you prefer a custom location)</summary>
+<summary><strong>Manual checkout install</strong> (custom location)</summary>
 
 ```bash
 git clone https://github.com/Ghqqqq/codex-overleaf-link.git
 cd codex-overleaf-link
-```
-
-Then load `extension/` as an unpacked extension in Chrome and register the native host:
-
-```bash
 npm run install:native
 ```
 
-If Chrome assigns a different extension id, rerun `npm run install:native -- --extension-id <chrome-extension-id>`.
+Then load `extension/` as an unpacked extension in Chrome. If Chrome assigns a different extension id, rerun `npm run install:native -- --extension-id <chrome-extension-id>`.
 
 </details>
 
-<details>
-<summary><strong>Update</strong></summary>
-
-For a deterministic v1.3.0 update, run the pinned npm command. This is also the native mismatch recovery command shown by the popup and panel when they report **Native host update required**.
-
-```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- install-native
-```
+## npm Native Host CLI
 
-If npm is unavailable, use the GitHub Release script fallback for your platform.
+npm installs, updates, uninstalls, and diagnoses the native host only. npm does not install the Chrome extension; install the Chrome extension separately from the release source checkout or extension zip.
 
-macOS / Linux:
+| Action | Command |
+|--------|---------|
+| Install / update | `npm exec --yes codex-overleaf-link@1.3.5 -- install-native` |
+| Diagnose | `npm exec --yes codex-overleaf-link@1.3.5 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@1.3.5 -- uninstall-native` |
 
-```bash
-CODEX_OVERLEAF_REF=v1.3.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.0/install.sh)"
-```
-
-Windows PowerShell:
+Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
-```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.0/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.3.0'
-powershell -ExecutionPolicy Bypass -File install.ps1
-```
+## Update
 
-Then reload the extension in `chrome://extensions` and refresh the Overleaf page.
+For a deterministic v1.3.5 update, run the pinned npm install command above. This is also the native mismatch recovery command shown by the popup and panel when they report **Native host update required** — it fixes extension/native version mismatch and native protocol mismatch.
 
-</details>
+If npm is unavailable, run the [source installer fallback](#source-installer-fallback) for your platform. After updating, reload the extension in `chrome://extensions` and refresh the Overleaf page.
 
 ## GitHub Release Artifacts
 
-The v1.3.0 GitHub Release contains:
+The v1.3.5 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.3.0.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.3.0.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.3.0.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.3.0` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.3.0` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v1.3.5.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v1.3.5.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-1.3.5.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.3.5` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.3.5` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -158,23 +111,17 @@ The v1.3.0 GitHub Release contains:
 <details>
 <summary><strong>Uninstall</strong></summary>
 
-macOS / Linux:
+Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native
-```
-
-Windows PowerShell:
-
-```powershell
-npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native
+npm exec --yes codex-overleaf-link@1.3.5 -- uninstall-native
 ```
 
-If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
+The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
 
-Remove the extension from `chrome://extensions`. Optionally delete `~/.codex-overleaf` on macOS / Linux to remove local mirrors, native runtime files, and plugin history. On Windows, `%LOCALAPPDATA%\CodexOverleaf` contains the native source, runtime, bridge, and native log, while `%USERPROFILE%\.codex-overleaf` contains project mirrors, plugin Codex home/history, and Codex Overleaf skills. Full Windows cleanup requires deleting both roots, or following [Local Data And Cleanup](#local-data-and-cleanup).
+The uninstaller removes the Native Messaging registration, bridge executable, and native runtime copy. It does not remove browser IndexedDB, `chrome.storage.local`, project mirrors, plugin Codex history, or project/plugin skills.
 
-The uninstaller removes the Native Messaging registration, bridge executable, and native runtime copy. It does not remove browser IndexedDB, `chrome.storage.local`, project mirrors, plugin Codex history, or project/plugin skills. See [Local Data And Cleanup](#local-data-and-cleanup) for full deletion steps.
+Then remove the extension from `chrome://extensions`. To delete local data: on macOS / Linux, delete `~/.codex-overleaf`. On Windows, `%LOCALAPPDATA%\CodexOverleaf` holds the native source, runtime, bridge, and native log, while `%USERPROFILE%\.codex-overleaf` holds project mirrors, plugin Codex home/history, and Codex Overleaf skills — full Windows cleanup requires deleting both roots. See [Local Data And Cleanup](#local-data-and-cleanup) for full deletion steps.
 
 </details>
 
@@ -202,13 +149,13 @@ The uninstaller removes the Native Messaging registration, bridge executable, an
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.3.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.0/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v1.3.5 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.5/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native --browser chromium
+npm exec --yes codex-overleaf-link@1.3.5 -- uninstall-native --browser chromium
 ```
 
 ## Features
@@ -222,22 +169,20 @@ npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native --browser chromium
 - **Auto-recompile** — triggers Overleaf recompile after writeback; logs compile errors as context.
 - **@ context** — attach specific files, `@compile-log`, or `@current-section` to the prompt.
 - **Composer attachments and binary writeback** — paste or drop PDFs, images, and files into the composer as turn-scoped Codex context, and review Codex-created assets before creating or replacing them in Overleaf.
-- **Codex Overleaf skills** — install reusable plugin-scoped skills through the slash menu, then let Codex auto-trigger them or select one explicitly for the next turn.
+- **Codex Overleaf skills** — install reusable plugin-scoped skills through the slash menu, then let Codex auto-trigger them or select one explicitly for the next turn. Each skill has its own enable toggle, honored at run time.
 - **Governance rules** — configure project read-only and writable path rules that block unsafe writeback before browser mutation.
 - **Sensitive preflight** — scan selected project context for likely secrets before sending it to Codex.
 - **Audit and diagnostics** — keep local run records and export redacted diagnostic bundles for issue reports.
 - **Model picker** — discover available Codex models locally, then switch model, reasoning effort, and speed from one compact control.
 - **Session history** — multi-session management with rename, resume, and delete.
-- **Isolated Codex home** — plugin sessions stay under `~/.codex-overleaf/codex-home`, not global `~/.codex/sessions`.
-- **Experimental OT warm mirror** - optional read-only observation of active Overleaf text edits to keep focused local mirror files warm. Falls back to full snapshots when unavailable or inconsistent.
-
-> Note: The OT warm mirror is experimental, off by default, and never writes back to Overleaf through realtime collaboration channels.
+- **Isolated Codex home** — plugin sessions run under `~/.codex-overleaf/codex-home` (not global `~/.codex/sessions`) and do not inherit your global Codex personalization.
+- **Experimental OT warm mirror** — optional read-only observation of active Overleaf text edits to keep focused local mirror files warm. Falls back to full snapshots when unavailable or inconsistent. Off by default; it never writes back to Overleaf through realtime collaboration channels.
 
 ## Common Workflows
 
-- **Fix a compile error** - choose Suggest mode, attach `@compile-log`, ask Codex to diagnose and patch the failing file, review the diff, apply it, then recompile from the panel.
-- **Rewrite a paragraph** - select the target file or `@current-section`, ask for a tone or clarity rewrite in Suggest mode, review the text diff, and accept only the hunks you want.
-- **Translate a section** - attach the source section with `@file` or `@current-section`, specify the target language and terminology constraints, then review the proposed replacement before writeback.
+- **Fix a compile error** — choose Suggest mode, attach `@compile-log`, ask Codex to diagnose and patch the failing file, review the diff, apply it, then recompile from the panel.
+- **Rewrite a paragraph** — select the target file or `@current-section`, ask for a tone or clarity rewrite in Suggest mode, review the text diff, and accept only the hunks you want.
+- **Translate a section** — attach the source section with `@file` or `@current-section`, specify the target language and terminology constraints, then review the proposed replacement before writeback.
 
 ## How It Works
 
@@ -278,16 +223,12 @@ This repo ships a stable Chrome extension `key`, producing the deterministic id:
 illdpneeeopfffmiepaejglgmhpmdhdc
 ```
 
-The installer uses this id by default. If Chrome assigns a different id, reinstall the native host with the actual id.
-
-macOS / Linux:
+The installer uses this id by default. If Chrome assigns a different id, reinstall the native host with the actual id:
 
 ```bash
 cd ~/.codex-overleaf/source && npm run install:native -- --extension-id <your-chrome-extension-id>
 ```
 
-Windows PowerShell:
-
 ```powershell
 cd $env:LOCALAPPDATA\CodexOverleaf\source
 npm run install:native -- --extension-id <your-chrome-extension-id>
@@ -308,7 +249,7 @@ Codex Overleaf Link does not use a hosted backend or default telemetry. Data is
 | macOS/Linux bridge | `~/.codex-overleaf/codex-overleaf-bridge` | Native Messaging launcher executable. |
 | Windows source/runtime/bridge | `%LOCALAPPDATA%\CodexOverleaf` | `source`, `native-host-runtime`, `codex-overleaf-bridge.cmd`, and native debug log. |
 | Project mirrors | `~/.codex-overleaf/projects` on macOS/Linux, `%USERPROFILE%\.codex-overleaf\projects` on Windows | Local mirror workspaces and mirror metadata for each Overleaf project. |
-| Plugin Codex home | `~/.codex-overleaf/codex-home` on macOS/Linux, `%USERPROFILE%\.codex-overleaf\codex-home` on Windows | Isolated Codex home for plugin runs. It copies auth/config metadata but does not reuse global Codex sessions. |
+| Plugin Codex home | `~/.codex-overleaf/codex-home` on macOS/Linux, `%USERPROFILE%\.codex-overleaf\codex-home` on Windows | Isolated Codex home for plugin runs. It copies auth/config metadata but does not reuse global Codex sessions or inherit global Codex personalization. |
 | Codex Overleaf skills | `~/.codex-overleaf/skills` on macOS/Linux, `%USERPROFILE%\.codex-overleaf\skills` on Windows | Project/plugin skills managed by the extension. |
 | Native logs | `~/.codex-overleaf/native-host.log` on macOS/Linux, `%LOCALAPPDATA%\CodexOverleaf\native-host.log` on Windows | Native debug events with content length summaries where possible. |
 | Launcher logs | `~/.codex-overleaf/native-host-launcher.log` on macOS/Linux | POSIX launcher startup path and Node diagnostics. The Windows `.cmd` launcher does not currently emit a separate launcher log. |
@@ -318,6 +259,8 @@ Skill loading toggles default to enabled. In Project Settings:
 - `Load local Codex skills` loads the user's local Codex skill environment from the global Codex home into the isolated `~/.codex-overleaf/codex-home`: `~/.codex/skills`, local Codex `plugins`, `superpowers`, and related skill/plugin configuration. Turning it off hides user/system Codex skills and local Codex plugins from Codex Overleaf runs. This affects only the plugin CODEX_HOME prepared for the run; it does not write to or reuse global `~/.codex/sessions`.
 - `Load Codex Overleaf skills` loads project/plugin skills managed by the extension from `~/.codex-overleaf/skills` on macOS/Linux or `%USERPROFILE%\.codex-overleaf\skills` on Windows into the same isolated Codex home. Turning it off hides those extension-managed skills while preserving the stored skill files. If both toggles are off, the run starts without local Codex skills or Codex Overleaf skills.
 
+The isolated plugin Codex home copies auth and config metadata but excludes global Codex personalization: it does not copy `~/.codex/AGENTS.md`, strips the top-level `personality` key from the copied `config.toml`, and does not link the global `rules` or `memories` directories.
+
 Native registration paths:
 
 | Platform/browser | Registration path |
@@ -341,31 +284,15 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 
 **Native host missing or update required**
 
-Run the pinned npm native-host installer, reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
+Run the pinned npm native-host installer, reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch. If npm is unavailable, use the [source installer fallback](#source-installer-fallback) for your platform.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.3.0 -- install-native
-```
-
-If npm is unavailable, use the GitHub Release script fallback for your platform.
-
-macOS/Linux:
-
-```bash
-CODEX_OVERLEAF_REF=v1.3.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.0/install.sh)"
-```
-
-Windows PowerShell:
-
-```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.3.0/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.3.0'
-powershell -ExecutionPolicy Bypass -File install.ps1
+npm exec --yes codex-overleaf-link@1.3.5 -- install-native
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
 
-Use the PowerShell recovery command above on Windows. The Bash command is for macOS/Linux installers.
+Use the PowerShell recovery command on Windows. The Bash command is for macOS/Linux installers.
 
 **Codex CLI not found**
 
@@ -373,16 +300,7 @@ Confirm `codex --version` works in a new terminal and that you are logged in. On
 
 **Extension id mismatch**
 
-Copy the id shown in `chrome://extensions` and reinstall the native host with that id:
-
-```bash
-cd ~/.codex-overleaf/source && npm run install:native -- --extension-id <your-chrome-extension-id>
-```
-
-```powershell
-cd $env:LOCALAPPDATA\CodexOverleaf\source
-npm run install:native -- --extension-id <your-chrome-extension-id>
-```
+Copy the id shown in `chrome://extensions` and reinstall the native host with that id (see [Extension ID](#extension-id)).
 
 **Linux Chromium does not connect**
 
@@ -418,8 +336,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.3.0 -- install-native` | `npm exec --yes codex-overleaf-link@1.3.0 -- install-native` | `npm exec --yes codex-overleaf-link@1.3.0 -- install-native` | `npm exec --yes codex-overleaf-link@1.3.0 -- install-native --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.3.0 -- uninstall-native --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@1.3.5 -- install-native` | `npm exec --yes codex-overleaf-link@1.3.5 -- install-native` | `npm exec --yes codex-overleaf-link@1.3.5 -- install-native` | `npm exec --yes codex-overleaf-link@1.3.5 -- install-native --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@1.3.5 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.3.5 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.3.5 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.3.5 -- uninstall-native --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |
@@ -430,11 +348,11 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 ## Development
 
 ```bash
-npm test                 # Node.js built-in test runner, zero dependencies
+npm test                   # Node.js built-in test runner, zero dependencies
 npm run check:architecture # enforce v1.0 final architecture budgets
 npm run benchmark:large    # run the synthetic large-project regression gate
-npm run bridge           # run the native host directly for protocol work
-npm run install:native  # reinstall native host after changing native-host/src or extension/src/shared
+npm run bridge             # run the native host directly for protocol work
+npm run install:native     # reinstall native host after changing native-host/src or extension/src/shared
 ```
 
 ## Contributing

package/extension/src/shared/compatibility.js

@@ -12,7 +12,7 @@
   const MIN_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_EXTENSION_VERSION = '1.0.0';
-  const BUILD_TARGET_VERSION = '1.3.0';
+  const BUILD_TARGET_VERSION = '1.3.5';
   const DEFAULT_CHROME_EXTENSION_ID = 'illdpneeeopfffmiepaejglgmhpmdhdc';
   const REQUIRED_CAPABILITIES = Object.freeze([
     'bridgePing',

package/extension/src/shared/i18n.js

@@ -155,15 +155,15 @@
       switchLanguageHint: 'Change panel language',
       close: 'Close',
       closeDiagnostics: 'Close diagnostics result',
-      customInstructionsSettings: 'Custom Instructions',
-      customInstructionsTitle: 'Custom Instructions',
-      customInstructionsSubtitle: 'Give Codex extra instructions and context for this Overleaf project.',
-      customInstructionsLearnMore: 'Learn more',
-      customInstructionsClose: 'Close custom instructions',
+      settingsBack: 'Back',
+      projectSettings: 'Project Settings',
       customInstructionsPlaceholder: 'Style, terminology, venue constraints, and LaTeX conventions for this project.',
-      projectSettingsSavedToast: 'Project settings saved.',
       projectSettingsTitle: 'Project Settings',
-      projectSettingsSubtitle: 'Governance, local skills, and custom instructions for this Overleaf project.',
+      projectSettingsSubtitle: 'Customize how Codex behaves in this and all projects.',
+      settingsScopeProjectTitle: 'This project',
+      settingsScopeProjectSubtitle: 'Instructions and rules applied to this Overleaf project only.',
+      settingsScopeGlobalTitle: 'All projects',
+      settingsScopeGlobalSubtitle: 'Skill loading settings that apply across all Overleaf projects.',
       governanceRulesTitle: 'Governance Rules',
       governanceReadonlyPatterns: 'Read-only patterns',
       governanceWritablePatterns: 'Writable patterns',
@@ -173,13 +173,21 @@
       sensitiveConfirmMessage: 'Codex found possible sensitive content. Raw detected secrets are not shown here. Continue only if this project context may be sent to Codex.',
       sensitiveConfirmRun: 'Run anyway',
       localSkillsTitle: 'Skills',
-      codexOverleafSkillsTitle: 'Codex Overleaf skills',
       codexOverleafSkillsEmpty: 'No Codex Overleaf skills installed.',
       codexOverleafSkillsDisabled: 'Codex Overleaf skills are disabled for runs.',
       loadCodexLocalSkills: 'Load local Codex skills',
       loadCodexOverleafSkills: 'Load Codex Overleaf skills',
       localSkillRemove: 'Remove',
+      localSkillRemoveConfirm: 'Confirm',
+      localSkillRemoveCancel: 'Cancel',
+      localSkillRemoving: 'Removing…',
+      codexOverleafSkillsLoading: 'Loading skills…',
+      codexOverleafSkillEnableToggle: 'Enable this skill',
       codexOverleafSkillRemoveDone: 'Codex Overleaf skill removed.',
+      codexOverleafSkillsTitle: 'Codex Overleaf skills',
+      codexOverleafSkillsEntry: 'Codex Overleaf skills',
+      codexOverleafSkillsSummaryOff: 'Off',
+      codexOverleafSkillsSummaryCount: '{count} enabled',
       slashInstallSkillTitle: 'Install skill',
       slashInstallSkillSubtitle: 'Use the Codex skill installer with natural language.',
       slashUseSkillSubtitle: 'Use this skill for the next Codex turn.',
@@ -191,7 +199,8 @@
       binaryAssetConfirm: 'Write assets',
       binaryAssetCancel: 'Skip assets',
       personalizationConfig: 'Personalization',
-      save: 'Save',
+      settingsSaved: 'Saved',
+      settingsSaving: 'Saving…',
       technicalDetails: 'Technical Details',
       newSession: 'New Session',
       tasks: 'Tasks',
@@ -414,15 +423,15 @@
       switchLanguageHint: '切换面板语言',
       close: '关闭',
       closeDiagnostics: '关闭诊断结果',
-      customInstructionsSettings: '自定义指令',
-      customInstructionsTitle: '自定义指令',
-      customInstructionsSubtitle: '为当前 Overleaf 项目提供额外指令和上下文。',
-      customInstructionsLearnMore: '了解更多',
-      customInstructionsClose: '关闭自定义指令',
+      settingsBack: '返回',
+      projectSettings: '项目设置',
       customInstructionsPlaceholder: '写下此项目的风格、术语、会议要求和 LaTeX 约定。',
-      projectSettingsSavedToast: '项目设置已保存。',
       projectSettingsTitle: '项目设置',
-      projectSettingsSubtitle: '当前 Overleaf 项目的治理规则、本地技能和自定义指令。',
+      projectSettingsSubtitle: '自定义 Codex 在当前项目和所有项目中的行为。',
+      settingsScopeProjectTitle: '当前项目',
+      settingsScopeProjectSubtitle: '仅应用于当前 Overleaf 项目的指令和规则。',
+      settingsScopeGlobalTitle: '所有项目',
+      settingsScopeGlobalSubtitle: '适用于所有 Overleaf 项目的技能加载设置。',
       governanceRulesTitle: '治理规则',
       governanceReadonlyPatterns: '只读路径规则',
       governanceWritablePatterns: '可写路径规则',
@@ -432,13 +441,21 @@
       sensitiveConfirmMessage: 'Codex 发现了可能的敏感内容。这里不会显示原始密钥或秘密值。只有在确认可以把这些项目上下文发送给 Codex 时才继续。',
       sensitiveConfirmRun: '仍然运行',
       localSkillsTitle: '技能',
-      codexOverleafSkillsTitle: 'Codex Overleaf 专属技能',
       codexOverleafSkillsEmpty: '没有安装 Codex Overleaf 专属技能。',
       codexOverleafSkillsDisabled: '运行时已禁用 Codex Overleaf 专属技能。',
       loadCodexLocalSkills: '加载 Codex 本地技能',
       loadCodexOverleafSkills: '加载 Codex Overleaf 专属技能',
       localSkillRemove: '删除',
+      localSkillRemoveConfirm: '确认',
+      localSkillRemoveCancel: '取消',
+      localSkillRemoving: '删除中…',
+      codexOverleafSkillsLoading: '正在加载技能…',
+      codexOverleafSkillEnableToggle: '启用该技能',
       codexOverleafSkillRemoveDone: 'Codex Overleaf 技能已删除。',
+      codexOverleafSkillsTitle: 'Codex Overleaf 专属技能',
+      codexOverleafSkillsEntry: 'Codex Overleaf 专属技能',
+      codexOverleafSkillsSummaryOff: '已关闭',
+      codexOverleafSkillsSummaryCount: '已启用 {count} 个',
       slashInstallSkillTitle: '安装 skill',
       slashInstallSkillSubtitle: '用自然语言调用 Codex 的 skill installer。',
       slashUseSkillSubtitle: '本轮使用这个 skill。',
@@ -450,7 +467,8 @@
       binaryAssetConfirm: '写入资源',
       binaryAssetCancel: '跳过资源',
       personalizationConfig: '个性化配置',
-      save: '保存',
+      settingsSaved: '已保存',
+      settingsSaving: '保存中…',
       technicalDetails: '技术细节',
       newSession: '新建会话',
       tasks: '任务',

package/extension/src/shared/lineReferences.js

@@ -13,8 +13,9 @@
     'markdown-link-target'
   ]);
   const TEXT_EXTENSION_PATTERN = '(?:tex|bib|sty|cls|bst|bbx|cbx|lbx|cfg|def|clo|ist|txt|md|latex)';
-  const REFERENCE_PREFIX_PATTERN = '(^|[\\s\\[({"\'])';
-  const PATH_PATTERN = `([^\\s\\[\\](){}<>"'\`,;]+?\\.${TEXT_EXTENSION_PATTERN})`;
+  const CJK_PUNCTUATION = '、，；。！？：';
+  const REFERENCE_PREFIX_PATTERN = `(^|[\\s\\[({\"',;${CJK_PUNCTUATION}])`;
+  const PATH_PATTERN = `([^\\s\\[\\](){}<>"'\`,;${CJK_PUNCTUATION}]+?\\.${TEXT_EXTENSION_PATTERN})`;
   const BARE_LOCAL_PATH_PATTERN = /(?:file:\/\/\/?[^\s)\]]+|[A-Za-z]:[\\/][^\s)\]]+|\/(?:Users|home|private|var|tmp)\/[^\s)\]]+|[^\s)\]]*[\\/]\.codex-overleaf[\\/]projects[\\/][^\s)\]]+)/gi;
 
   function parseLineReferencesFromText({ text, mode }) {
@@ -76,9 +77,6 @@
       placeholderBrackets: true
     });
 
-    if (context === 'render' || context === 'persist') {
-      return sanitized;
-    }
     return sanitized;
   }
 
@@ -460,7 +458,7 @@
   }
 
   function splitTrailingPunctuation(value) {
-    const match = String(value || '').match(/^(.*?)([.,;!?]+)$/);
+    const match = String(value || '').match(/^(.*?)([.,;!?、，；。！？：]+)$/);
     if (!match) {
       return { value, trailing: '' };
     }

package/extension/src/shared/sessionState.js

@@ -17,6 +17,7 @@
     autoOpen: true,
     loadCodexLocalSkills: true,
     loadCodexOverleafSkills: true,
+    codexOverleafSkillEnabled: {},
     panelWidth: 380,
     task: '',
     focusFiles: [],
@@ -105,6 +106,7 @@
     state.autoOpen = state.autoOpen !== false;
     state.loadCodexLocalSkills = state.loadCodexLocalSkills !== false;
     state.loadCodexOverleafSkills = state.loadCodexOverleafSkills !== false;
+    state.codexOverleafSkillEnabled = normalizeCodexOverleafSkillEnabled(state.codexOverleafSkillEnabled);
     state.panelWidth = normalizePanelWidth(state.panelWidth);
     state.task = typeof state.task === 'string' ? state.task : '';
     state.model = typeof state.model === 'string' && state.model ? state.model : DEFAULT_PANEL_STATE.model;
@@ -669,6 +671,23 @@
     return result;
   }
 
+  function normalizeCodexOverleafSkillEnabled(value) {
+    const result = {};
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+      return result;
+    }
+    for (const key of Object.keys(value)) {
+      if (typeof key !== 'string' || !key) {
+        continue;
+      }
+      if (typeof value[key] !== 'boolean') {
+        continue;
+      }
+      result[key] = value[key];
+    }
+    return result;
+  }
+
   function normalizeProjectPrefKey(value) {
     const key = typeof value === 'string' ? value.trim() : '';
     if (!key) {
@@ -714,6 +733,7 @@
       autoOpen: source.autoOpen !== false,
       loadCodexLocalSkills: source.loadCodexLocalSkills !== false,
       loadCodexOverleafSkills: source.loadCodexOverleafSkills !== false,
+      codexOverleafSkillEnabled: normalizeCodexOverleafSkillEnabled(source.codexOverleafSkillEnabled),
       panelWidth: normalizePanelWidth(source.panelWidth),
       task: summarizeTextForStorage(active?.task || source.task || '', 'task'),
       focusFiles: normalizeFocusFiles(active?.focusFiles || source.focusFiles),

package/extension/src/shared/storageDb.js

@@ -342,11 +342,31 @@
       experimentalOtByProject: normalizeBooleanMap(state.experimentalOtByProject),
       customInstructionsByProject: normalizeStringMap(state.customInstructionsByProject),
       governanceRulesByProject: normalizeGovernanceRulesMap(state.governanceRulesByProject),
-      selectedLocalSkillIdsByProject: normalizeStringListMap(state.selectedLocalSkillIdsByProject)
+      selectedLocalSkillIdsByProject: normalizeStringListMap(state.selectedLocalSkillIdsByProject),
+      codexOverleafSkillEnabled: normalizeCodexOverleafSkillEnabledMap(state.codexOverleafSkillEnabled)
     };
     return prefs;
   }
 
+  function normalizeCodexOverleafSkillEnabledMap(value) {
+    var result = {};
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+      return result;
+    }
+    var keys = Object.keys(value);
+    for (var i = 0; i < keys.length; i++) {
+      var key = keys[i];
+      if (typeof key !== 'string' || !key) {
+        continue;
+      }
+      if (typeof value[key] !== 'boolean') {
+        continue;
+      }
+      result[key] = value[key];
+    }
+    return result;
+  }
+
   function normalizeBooleanMap(value) {
     var result = {};
     if (!value || typeof value !== 'object' || Array.isArray(value)) {

package/native-host/src/codexHome.js

@@ -7,25 +7,31 @@ const {
   getNativeHostPlatform
 } = require('./nativeHostPlatform');
 const {
+  ensureCodexOverleafSkillInstalled,
   getCodexOverleafSkillsRoot,
-  materializeProjectSkillsAsCodexSkills
+  materializeProjectSkillsAsCodexSkills,
+  OFFICIAL_CODEX_OVERLEAF_SKILL_IDS
 } = require('./localSkills');
 
 const COPIED_USER_CODEX_FILES = [
   'auth.json',
   'config.toml',
-  'AGENTS.md',
   'installation_id',
   'models_cache.json',
   'version.json'
 ];
 
 const LINKED_USER_CODEX_DIRS = [
-  'rules',
-  'memories',
   'vendor_imports'
 ];
 
+// User-global Codex instruction/memory entries that must never enter the plugin
+// Codex home. The extension supplies its own per-project personalization via the
+// prompt; inheriting the user's global Codex guidance here is a leak. The plugin
+// home is reused across runs, so these are removed every prepare to also clear
+// entries left by earlier extension versions.
+const ISOLATED_USER_INSTRUCTION_ENTRIES = ['AGENTS.md', 'rules', 'memories'];
+
 const LOCAL_SKILL_USER_CODEX_DIRS = [
   'plugins',
   'superpowers'
@@ -93,6 +99,18 @@ function preparePluginCodexHome(env = process.env, options = {}) {
     copied.push(fileName);
   }
 
+  // Personalization isolation: the plugin Codex home must never inherit the
+  // user's global Codex instructions/memory. Remove them every run — this also
+  // clears stale entries left by earlier extension versions. This runs after
+  // the samePath early-return above, so it never touches the user's real
+  // ~/.codex when the plugin home and user home are the same directory.
+  for (const entryName of ISOLATED_USER_INSTRUCTION_ENTRIES) {
+    removePluginHomeEntry(pluginHome, entryName, skippedLinks);
+  }
+  if (!isRegularFile(path.join(userHome, 'config.toml'))) {
+    removePluginHomeEntry(pluginHome, 'config.toml', skippedLinks);
+  }
+
   if (!loadCodexLocalSkills) {
     for (const entryName of LOCAL_SKILL_PLUGIN_HOME_ENTRIES) {
       removePluginHomeEntry(pluginHome, entryName, skippedLinks);
@@ -119,6 +137,8 @@ function preparePluginCodexHome(env = process.env, options = {}) {
     linked.push(dirName);
   }
 
+  ensureDefaultCodexOverleafSkills({ env });
+
   const skillsResult = composePluginSkillsDirectory({
     userHome,
     pluginHome,
@@ -137,13 +157,68 @@ function preparePluginCodexHome(env = process.env, options = {}) {
   return { userHome, pluginHome, copied, linked, skippedLinks };
 }
 
+function ensureDefaultCodexOverleafSkills({ env = process.env } = {}) {
+  for (const id of OFFICIAL_CODEX_OVERLEAF_SKILL_IDS) {
+    const src = path.resolve(__dirname, 'skills', id, 'SKILL.md');
+    const content = fs.readFileSync(src, 'utf8');
+    ensureCodexOverleafSkillInstalled({ skillId: id, content, env });
+  }
+}
+
 function copyUserCodexFile(source, target, fileName, options = {}) {
-  if (fileName !== 'config.toml' || options.loadCodexLocalSkills !== false) {
+  if (fileName !== 'config.toml') {
     fs.copyFileSync(source, target);
     return;
   }
-  const content = fs.readFileSync(source, 'utf8');
-  fs.writeFileSync(target, sanitizeCodexConfigForLocalSkillIsolation(content), 'utf8');
+  let content = stripPersonalizationFromCodexConfig(fs.readFileSync(source, 'utf8'));
+  if (options.loadCodexLocalSkills === false) {
+    content = sanitizeCodexConfigForLocalSkillIsolation(content);
+  }
+  fs.writeFileSync(target, content, 'utf8');
+}
+
+// Removes the top-level `personality` key (Codex's built-in "personality"
+// feature) so the plugin Codex home never inherits the user's global
+// personalization. Only the top-level key is removed — a `personality` key
+// inside a [section] is a different key and is preserved. Handles single-line
+// values and both multi-line string forms (""" basic and ''' literal). All
+// other lines pass through unchanged, aside from line endings being normalized to LF.
+function stripPersonalizationFromCodexConfig(content) {
+  const lines = String(content || '').split(/\r?\n/);
+  const output = [];
+  let beforeFirstSection = true;
+  let closingDelimiter = '';
+
+  for (const line of lines) {
+    if (closingDelimiter) {
+      if (line.includes(closingDelimiter)) {
+        closingDelimiter = '';
+      }
+      // Drop every line of the multi-line value, including the one that closes it.
+      continue;
+    }
+    if (parseTomlSectionName(line)) {
+      beforeFirstSection = false;
+      output.push(line);
+      continue;
+    }
+    if (beforeFirstSection) {
+      const match = line.match(/^\s*personality\s*=\s*(.*)$/);
+      if (match) {
+        const value = match[1];
+        const opener = value.startsWith('"""') ? '"""'
+          : value.startsWith("'''") ? "'''"
+            : '';
+        if (opener && value.indexOf(opener, opener.length) === -1) {
+          closingDelimiter = opener;
+        }
+        continue;
+      }
+    }
+    output.push(line);
+  }
+
+  return output.join('\n');
 }
 
 function sanitizeCodexConfigForLocalSkillIsolation(content) {
@@ -532,6 +607,7 @@ module.exports = {
   buildCodexHomeEnv,
   clearPluginCodexHistory,
   composePluginSkillsDirectory,
+  ensureDefaultCodexOverleafSkills,
   getPluginCodexHome,
   getUserCodexHome,
   preparePluginCodexHome

package/native-host/src/codexSessionRunner.js

@@ -68,6 +68,7 @@ async function runCodexSession({ params = {}, env = process.env, emit = () => {}
   const codexSkillInvocationContext = loadCodexSkillInvocationContext({
     skillInvocation,
     loadCodexOverleafSkills: skillLoading.loadCodexOverleafSkills,
+    enabledCodexOverleafSkillIds: params.enabledCodexOverleafSkillIds,
     env,
     emit
   });
@@ -385,6 +386,7 @@ function normalizeSkillLoadingSettings(params = {}) {
 function loadCodexSkillInvocationContext({
   skillInvocation,
   loadCodexOverleafSkills = true,
+  enabledCodexOverleafSkillIds,
   env = process.env,
   emit = () => {}
 } = {}) {
@@ -399,6 +401,7 @@ function loadCodexSkillInvocationContext({
   const result = loadSelectedCodexOverleafSkill({
     skillId: invocation.id,
     loadCodexOverleafSkills,
+    enabledCodexOverleafSkillIds,
     env
   });
   if (result.missing.length) {

package/native-host/src/localSkills.js

@@ -13,6 +13,7 @@ const MAX_SKILL_CONTENT_CHARS = MAX_SKILL_CONTENT_BYTES;
 const MAX_SKILL_PREVIEW_CHARS = 240;
 const PROJECT_SKILL_SCOPE = 'project';
 const CODEX_OVERLEAF_SKILL_SCOPE = 'codex-overleaf';
+const OFFICIAL_CODEX_OVERLEAF_SKILL_IDS = ['annotated-rewrite'];
 
 function listProjectSkills({ projectId, rootDir } = {}) {
   const skillsDir = getProjectSkillsDir(projectId, { rootDir });
@@ -110,13 +111,18 @@ function listCodexOverleafSkills({ env = process.env, skillsRoot } = {}) {
       continue;
     }
     const content = fs.readFileSync(filePath, 'utf8');
-    skills.push(buildSkillMetadata({
-      id: entry.name,
-      content,
-      size: stat.size,
-      updatedAt: stat.mtime.toISOString(),
-      scope: CODEX_OVERLEAF_SKILL_SCOPE
-    }));
+    const isOfficial = OFFICIAL_CODEX_OVERLEAF_SKILL_IDS.includes(entry.name);
+    skills.push({
+      ...buildSkillMetadata({
+        id: entry.name,
+        content,
+        size: stat.size,
+        updatedAt: stat.mtime.toISOString(),
+        scope: CODEX_OVERLEAF_SKILL_SCOPE
+      }),
+      official: isOfficial,
+      removable: !isOfficial
+    });
   }
 
   return { skills: skills.sort((left, right) => left.id.localeCompare(right.id)) };
@@ -147,6 +153,9 @@ function installCodexOverleafSkill({ skillId, content, env = process.env, skills
 
 function removeCodexOverleafSkill({ skillId, env = process.env, skillsRoot } = {}) {
   const id = validateSkillId(skillId);
+  if (OFFICIAL_CODEX_OVERLEAF_SKILL_IDS.includes(id)) {
+    throw new Error(`Cannot remove official skill: ${id}`);
+  }
   const root = getCodexOverleafSkillsRoot({ env, skillsRoot });
   const skillDir = resolveInside(root, id, 'Unsafe Codex Overleaf skill path');
   const removed = fs.existsSync(skillDir);
@@ -156,6 +165,21 @@ function removeCodexOverleafSkill({ skillId, env = process.env, skillsRoot } = {
   return { id, scope: CODEX_OVERLEAF_SKILL_SCOPE, removed };
 }
 
+function ensureCodexOverleafSkillInstalled({ skillId, content, env = process.env } = {}) {
+  const root = getCodexOverleafSkillsRoot({ env });
+  const skillPath = resolveCodexOverleafSkillPath(skillId, { env });
+  if (fs.existsSync(skillPath)) {
+    assertNoSymlinkEscape(skillPath, root, 'Existing official skill path is unsafe');
+    const stat = fs.lstatSync(skillPath);
+    if (stat.isFile()) {
+      return;
+    }
+    // symlink, directory, or other — remove and reinstall
+    fs.rmSync(skillPath, { recursive: true, force: true });
+  }
+  installCodexOverleafSkill({ skillId, content, env });
+}
+
 function loadSelectedProjectSkills({ projectId, selectedSkillIds, rootDir, projectRoot } = {}) {
   const ids = normalizeSelectedSkillIds(selectedSkillIds);
   const skills = [];
@@ -230,6 +254,7 @@ function materializeProjectSkillsAsCodexSkills({
 function loadSelectedCodexOverleafSkill({
   skillId,
   loadCodexOverleafSkills = true,
+  enabledCodexOverleafSkillIds,
   env = process.env,
   skillsRoot
 } = {}) {
@@ -248,6 +273,18 @@ function loadSelectedCodexOverleafSkill({
       }]
     };
   }
+  // Per-skill enable check: if enabledCodexOverleafSkillIds is provided and does not include
+  // this skill, treat it as not available. Absent param = all enabled (backward-safe).
+  if (Array.isArray(enabledCodexOverleafSkillIds) && !enabledCodexOverleafSkillIds.includes(id)) {
+    return {
+      skill: null,
+      missing: [],
+      ignored: [{
+        id,
+        reason: 'codex_overleaf_skill_disabled'
+      }]
+    };
+  }
 
   const filePath = resolveCodexOverleafSkillPath(id, { env, skillsRoot });
   if (!fs.existsSync(filePath)) {
@@ -461,7 +498,9 @@ module.exports = {
   CODEX_OVERLEAF_SKILL_SCOPE,
   MAX_SKILL_CONTENT_BYTES,
   MAX_SKILL_CONTENT_CHARS,
+  OFFICIAL_CODEX_OVERLEAF_SKILL_IDS,
   PROJECT_SKILL_SCOPE,
+  ensureCodexOverleafSkillInstalled,
   getDefaultCodexOverleafSkillsRoot,
   getCodexOverleafSkillsRoot,
   installCodexOverleafSkill,

package/native-host/src/skills/annotated-rewrite/SKILL.md

@@ -0,0 +1,71 @@
+---
+name: annotated-rewrite
+description: >
+  When editing `.tex` files, use this skill as often as possible. When
+  rewriting `.tex` content spanning more than a few words, comment out the
+  original and write the replacement below it so the user can review the
+  before/after diff directly in the source.
+---
+
+# Annotated Rewrite
+
+When rewriting `.tex` file content (paragraphs, sentences, equations, list
+bodies, or any block larger than a few words), preserve the original by
+commenting it out rather than deleting it, then write the replacement below.
+This lets the user review exactly what changed before accepting the edit.
+
+## When to apply
+
+Default to this pattern whenever the replaced content is **more than a short inline phrase** (see the word-level exception below), regardless of content type — prose, equations, lists, environment bodies, or any contiguous block. Use it as often as possible — when in doubt, use it.
+
+A useful guide: if the replaced content is **3 or more source lines**, always apply it. For shorter replacements (1-2 source lines), lean toward applying it unless the change is purely **word-level**: replacing a single word, fixing a typo, or changing a run of 1-5 words within an unbroken clause.
+
+Word-level edits are the only case where skipping the annotated format is clearly appropriate (subject to the structural exceptions in Rule 8).
+
+## Edit format
+
+```tex
+% [original]
+% The proposed method encodes user history as a fixed-length vector,
+% then applies a linear projection before computing dot-product scores.
+% Training uses binary cross-entropy loss over sampled negatives.
+%
+% \begin{equation}
+%   \hat{y}_{ui} = \mathbf{u}_i^\top \mathbf{v}_j
+% \end{equation}
+
+% [revised]
+We encode user history with a transformer encoder, producing a
+context-aware representation that is projected into the item space.
+Training minimises a softmax loss over in-batch negatives.
+
+\begin{equation}
+  \hat{y}_{ui} = \mathrm{softmax}(\mathbf{U}\mathbf{V}^\top)_{ij}
+\end{equation}
+```
+
+## Rules
+
+1. Copy the original lines **verbatim** into the comment block — do not alter them
+2. Include every line of the replaced content verbatim with `%` prepended;
+   blank lines within the block become `%` empty-comment lines (a line
+   containing only `%`). Include `\begin{...}` / `\end{...}` markers only when
+   they are part of the replaced content — do not comment out enclosing
+   environment markers that are not themselves changing
+3. No blank line between `% [original]` and the first commented line
+4. One blank line between the last commented line and `% [revised]`; one blank
+   line before `% [original]` and after the last line of the replacement (to
+   separate the annotated construct from surrounding document text)
+5. The new content after `% [revised]` is normal LaTeX (not commented)
+6. For multiple non-adjacent replaced blocks, apply the pattern independently
+   to each block
+7. **Idempotency**: if the content being edited already contains a
+   `% [original]` / `% [revised]` block, edit only the active content after
+   `% [revised]` — do not re-wrap the existing annotated block or create a new
+   outer annotation around it
+8. **Structure safety**: only apply this pattern at **block level** (paragraph,
+   sentence, equation block, list body, or environment body). Do NOT insert
+   `% [original]` / `% [revised]` inside
+   macro arguments, table rows, math expressions, `\caption{...}`,
+   `\item[...]`, or preamble commands — make minimal direct edits there instead,
+   or ask for confirmation before changing structurally sensitive content

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-overleaf-link",
-  "version": "1.3.0",
+  "version": "1.3.5",
   "description": "Cross-platform Chrome bridge that connects Codex to the active Overleaf project.",
   "license": "MIT",
   "type": "commonjs",