codex-overleaf-link 1.6.0 → 1.6.1

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.6.0-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-1.6.1-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the native host **and** sets up the extension: the script r
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.6.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.6.0/install.sh)"
+CODEX_OVERLEAF_REF=v1.6.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.6.1/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.6.0/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.6.0'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.6.1/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v1.6.1'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,10 +56,10 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs and updates the **native host only** — it does not include the Chrome extension. Use it if you prefer a pinned npm package to a source checkout.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.6.0 -- install-native
+npm exec --yes codex-overleaf-link@1.6.1 -- install-native
 ```
 
-Then add the extension yourself: download `codex-overleaf-link-extension-v1.6.0.zip` from the [v1.6.0 GitHub Release](https://github.com/Ghqqqq/codex-overleaf-link/releases/tag/v1.6.0), unzip it to a stable folder, and in `chrome://extensions` enable **Developer mode**, click **Load unpacked**, and select that folder.
+Then add the extension yourself: download `codex-overleaf-link-extension-v1.6.1.zip` from the [v1.6.1 GitHub Release](https://github.com/Ghqqqq/codex-overleaf-link/releases/tag/v1.6.1), unzip it to a stable folder, and in `chrome://extensions` enable **Developer mode**, click **Load unpacked**, and select that folder.
 
 ### Open Overleaf
 
@@ -86,9 +86,9 @@ npm installs, updates, uninstalls, and diagnoses the native host only. npm does
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@1.6.0 -- install-native` |
-| Diagnose | `npm exec --yes codex-overleaf-link@1.6.0 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@1.6.0 -- uninstall-native` |
+| Install / update | `npm exec --yes codex-overleaf-link@1.6.1 -- install-native` |
+| Diagnose | `npm exec --yes codex-overleaf-link@1.6.1 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@1.6.1 -- uninstall-native` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -98,13 +98,13 @@ To update, re-run any of the [native host installers](#install) — they install
 
 ## GitHub Release Artifacts
 
-The v1.6.0 GitHub Release contains:
+The v1.6.1 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.6.0.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.6.0.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.6.0.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.6.0` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.6.0` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v1.6.1.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v1.6.1.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-1.6.1.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.6.1` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.6.1` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -115,7 +115,7 @@ The v1.6.0 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.6.0 -- uninstall-native
+npm exec --yes codex-overleaf-link@1.6.1 -- uninstall-native
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -150,13 +150,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.6.0 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.6.0/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v1.6.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.6.1/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.6.0 -- uninstall-native --browser chromium
+npm exec --yes codex-overleaf-link@1.6.1 -- uninstall-native --browser chromium
 ```
 
 ## Features
@@ -289,7 +289,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.6.0 -- install-native
+npm exec --yes codex-overleaf-link@1.6.1 -- install-native
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -338,8 +338,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.6.0 -- install-native` | `npm exec --yes codex-overleaf-link@1.6.0 -- install-native` | `npm exec --yes codex-overleaf-link@1.6.0 -- install-native` | `npm exec --yes codex-overleaf-link@1.6.0 -- install-native --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.6.0 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.6.0 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.6.0 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.6.0 -- uninstall-native --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@1.6.1 -- install-native` | `npm exec --yes codex-overleaf-link@1.6.1 -- install-native` | `npm exec --yes codex-overleaf-link@1.6.1 -- install-native` | `npm exec --yes codex-overleaf-link@1.6.1 -- install-native --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@1.6.1 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.6.1 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.6.1 -- uninstall-native` | `npm exec --yes codex-overleaf-link@1.6.1 -- uninstall-native --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |

package/extension/src/shared/compatibility.js

@@ -12,7 +12,7 @@
   const MIN_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_EXTENSION_VERSION = '1.0.0';
-  const BUILD_TARGET_VERSION = '1.6.0';
+  const BUILD_TARGET_VERSION = '1.6.1';
   const DEFAULT_CHROME_EXTENSION_ID = 'illdpneeeopfffmiepaejglgmhpmdhdc';
   const REQUIRED_CAPABILITIES = Object.freeze([
     'bridgePing',

package/native-host/src/skills/parallel-subagents/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: parallel-subagents
 description: >
-  When a task decomposes into independent work on two or more SEPARATE files
-  (polish chapters, per-section fixes), fan it out: write job files to the
-  subagent queue and the host runs real parallel Codex workers for you. Use
-  only when file ownership can be split cleanly; fall back to sequential work
-  for a single monolithic file.
+  When a task decomposes into independent slices — separate files, OR
+  separate sections of ONE file — fan it out: write job files to the subagent
+  queue and the host runs real parallel Codex workers for you. For a single
+  file, extract per-section slice files into the queue's work/ zone, let
+  workers polish them in parallel, then reassemble (scatter-gather). Every
+  job must state an explicit, non-overlapping scope.
 ---
 
 # Parallel Subagents
@@ -18,18 +19,26 @@ Codex agent confined to the files you assign it.
 ## 1. When to use
 
 Use this when ALL of these hold:
-- The task splits into ≥ 2 independent slices, each touching **different
-  files** (e.g. one chapter file per slice).
+- The task splits into ≥ 2 independent slices: different **files**, or
+  different **sections of one file** (use the scatter-gather workflow in §5).
 - Slices do not depend on each other's output.
 - Each slice is small enough to finish in a few minutes.
 
 Do NOT use it (work sequentially yourself instead) when:
-- The project keeps everything in one monolithic file — never split one file
-  across jobs.
 - Slices are deeply cross-referenced and must be edited together.
 - There are fewer than 2 real slices.
 - The handshake file below is missing or not `ready`.
 
+## 1b. Explicit scope — the iron rule
+
+Every job's `task` MUST state its exact working scope, and scopes MUST NOT
+overlap:
+- multi-file job: name the file(s) and what inside them is in scope;
+- single-file slice job: name the section (`\section{...}` title) and quote
+  the slice's exact first and last source lines.
+Never write two jobs whose scopes could touch the same text. If you cannot
+state a slice's boundaries precisely, do that slice yourself instead.
+
 ## 2. Handshake
 
 Read `.codex-overleaf-subagents/broker.json`. If it is missing or its
@@ -60,8 +69,10 @@ Rules:
 - `id`: lowercase letters/digits/hyphens, ≤ 32 chars, unique.
 - `task`: complete, self-contained instructions — workers cannot ask
   questions. Repeat shared style guidance in EVERY job.
-- `files`: workspace-relative paths the job may edit. Keep ownership
-  disjoint across jobs.
+- `files`: workspace-relative paths the job may edit — project files or
+  slice files under `.codex-overleaf-subagents/work/`. Jobs that share a
+  file are admitted but run ONE AT A TIME (the broker serializes them);
+  disjoint jobs run in parallel.
 - `readOnlyContext`: files the worker may read but must not edit.
 
 ## 4. Poll for results
@@ -77,23 +88,61 @@ Then read each `results/<id>.json` (`status`: completed | failed | rejected |
 timeout | cancelled; `summary`; `changedFiles`) and, when you need the full
 close-out, `results/<id>.last-message.md`.
 
-## 5. Wave discipline (important)
+## 5. Single file? Two safe modes
+
+Two workers must NEVER edit the same file at the same moment (whole-file
+writes race and silently drop each other's edits) — the broker guarantees
+this for you. Pick per task:
+
+**Mode A — serialized scoped jobs (simple, no slicing).** Just write one job
+per section, all owning the same file, each `task` stating its exact section
+scope (iron rule §1b). The broker runs them one at a time, each seeing the
+previous job's output. No parallel speedup within that file (jobs on OTHER
+files still run alongside), but zero assembly work. Prefer this for 2-3
+sections or quick passes.
+
+**Mode B — scatter-gather slices (true parallelism).** For a big file where
+wall-clock matters, give each worker its own physical slice:
+
+1. **Scatter** — for each independent section, copy its EXACT text (from its
+   `\section{...}` line up to, not including, the next `\section`) into a
+   slice file, verbatim, atomically:
+   `cat > .codex-overleaf-subagents/work/.tmp-sec2 <<'EOF' ... EOF` then
+   `mv .codex-overleaf-subagents/work/.tmp-sec2 .codex-overleaf-subagents/work/sec2.tex`.
+   Preamble, frontmatter, and anything you cannot bound precisely stays with
+   you.
+2. **Jobs** — one per slice. `files` = that slice file only. The `task` must
+   say: this is a fragment of `<original file>` covering section `<title>`
+   (quote first + last line); polish it IN PLACE; do not add a preamble or
+   document wrapper; keep the project's edit conventions (e.g.
+   annotated-rewrite). Put the original file in `readOnlyContext` so the
+   worker sees surrounding context.
+3. **Gather** — after all results: verify each slice still starts with its
+   `\section{...}` line, then replace the corresponding original block in
+   the source file with the slice content, one section at a time, yourself.
+   If a slice lost its boundary line, treat that slice as failed and redo it
+   inline.
+
+Slice files live inside the queue zone, so they are scratch: they never sync
+to Overleaf — only your reassembled edits to the real file do.
+
+## 6. Wave discipline (important)
 
 While any job is queued or running, do **not** edit project files yourself —
 write jobs, poll, wait. Do your own edits before the first job or after the
 last result. Files changed during a wave that no job owns are reported as
 ownership violations and **excluded from the Overleaf writeback**.
 
-## 6. Integrate
+## 7. Integrate
 
 - For each `completed` job: read its summary, spot-check the owned files, and
   smooth terminology/transitions ACROSS slice boundaries yourself.
 - For each `failed` / `timeout` / `rejected` job: do that slice inline
-  yourself now (check `reason`; a `file_conflict` means you mis-partitioned).
+  yourself now (check `reason`).
 - Mention any violations in your close-out so the user knows those edits were
   withheld from writeback.
 
-## 7. Close out
+## 8. Close out
 
 End with a per-slice one-liner (job → what changed) plus an overall summary.
 This becomes the run report the user reads.

package/native-host/src/subagentBroker.js

@@ -76,6 +76,7 @@ function createSubagentBroker(options = {}) {
     fs.mkdirSync(jobsDir, { recursive: true });
     fs.mkdirSync(resultsDir, { recursive: true });
     fs.mkdirSync(logsDir, { recursive: true });
+    fs.mkdirSync(path.join(queueRoot, 'work'), { recursive: true });
     startedAt = Date.now();
     accepting = true;
     writeBrokerFile('ready');
@@ -194,15 +195,10 @@ function createSubagentBroker(options = {}) {
       }
       owned.push(safe);
     }
-    for (const [otherId, entry] of jobs) {
-      if (entry.status === 'rejected') {
-        continue;
-      }
-      const overlap = entry.job.files.find(file => owned.includes(file));
-      if (overlap) {
-        return { reason: 'file_conflict', path: overlap, conflictsWith: otherId };
-      }
-    }
+    // Overlapping ownership no longer rejects: same-file jobs are admitted
+    // and SERIALIZED by the scheduler (fillSlots never runs two jobs whose
+    // files intersect). Prompt-scoped same-file delegation is then safe —
+    // the physical lost-update race only exists under concurrency (v1.6.1).
     // Wave-aware admission: the parent turn has no default absolute deadline,
     // so the broker enforces its own wall-clock envelope across ALL waves.
     const projectedWaves = Math.ceil((queued.length + running.size + 1) / limits.maxWorkers);
@@ -229,6 +225,13 @@ function createSubagentBroker(options = {}) {
       return null;
     }
     if (segments[0] === SUBAGENT_QUEUE_DIR) {
+      // The queue control plane (jobs/results/logs/broker.json) is never
+      // ownable — but the work/ scratch zone IS: single-file fan-out slices
+      // live there (v1.6.1 scatter-gather), excluded from writeback by the
+      // mirror-scan rule yet fully owned/hashed like any other job file.
+      if (segments[1] === 'work' && segments.length >= 3) {
+        return segments.join('/');
+      }
       return null;
     }
     return segments.join('/');
@@ -252,7 +255,20 @@ function createSubagentBroker(options = {}) {
 
   function fillSlots() {
     while (accepting && !cancelled && queued.length && running.size < limits.maxWorkers) {
-      const jobId = queued.shift();
+      const runningFiles = new Set();
+      for (const id of running.keys()) {
+        for (const file of jobs.get(id).job.files) {
+          runningFiles.add(file);
+        }
+      }
+      // FIFO with skip: pick the first queued job whose ownership does not
+      // intersect any running job's files — overlapping jobs wait their turn
+      // (temporal exclusivity replaces the old overlap rejection).
+      const index = queued.findIndex(id => !jobs.get(id).job.files.some(file => runningFiles.has(file)));
+      if (index === -1) {
+        return;
+      }
+      const [jobId] = queued.splice(index, 1);
       startWorker(jobs.get(jobId));
     }
   }
@@ -408,6 +424,10 @@ function createSubagentBroker(options = {}) {
         return;
       }
       for (const entry of entries) {
+        // The whole queue zone (incl. the work/ slice scratch) stays out of
+        // wave hashing: scratch can never reach Overleaf, same-wave slices
+        // are all in the owned union anyway, and a lead staggering slice
+        // creation mid-wave must not read as a violation (v1.6.1).
         if (entry.name === '.DS_Store' || entry.name === SUBAGENT_QUEUE_DIR || entry.name === '.codex-overleaf-attachments') {
           continue;
         }
@@ -446,7 +466,7 @@ function createSubagentBroker(options = {}) {
       'You are a subagent working on one slice of a larger task.',
       'HARD CONSTRAINTS:',
       `- You may modify ONLY these files: ${job.files.join(', ')}.`,
-      readOnly + '- Do not modify, create, or delete any other file. Do not touch .codex-overleaf-subagents/.',
+      readOnly + '- Do not modify, create, or delete any other file. Inside .codex-overleaf-subagents/ you may touch ONLY the slice files listed above (if any).',
       '- Work fully autonomously; nobody can answer questions.',
       '',
       job.task

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-overleaf-link",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "description": "Cross-platform Chrome bridge that connects Codex to the active Overleaf project.",
   "license": "MIT",
   "type": "commonjs",