codex-overleaf-link 1.9.2 → 1.9.3

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.9.2-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-1.9.3-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the managed native host **and** managed extension runtime.
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.2 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.2/install.sh)"
+CODEX_OVERLEAF_REF=v1.9.3 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.3/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.2/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.9.2'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.3/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v1.9.3'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,7 +56,7 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs the same managed native host and extension runtime without keeping a source checkout. Use it if you prefer a pinned npm package.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.2 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.3 -- install-managed
 ```
 
 Then, in `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select the managed extension path printed by the command. The Release extension zip remains available for explicitly unmanaged/manual installations.
@@ -86,9 +86,9 @@ npm installs, updates, and uninstalls the coordinated managed extension/native p
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@1.9.2 -- install-managed` |
-| Diagnose | `npm exec --yes codex-overleaf-link@1.9.2 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-managed` |
+| Install / update | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` |
+| Diagnose | `npm exec --yes codex-overleaf-link@1.9.3 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -98,13 +98,13 @@ Managed installations discover signed stable updates automatically and apply the
 
 ## GitHub Release Artifacts
 
-The v1.9.2 GitHub Release contains:
+The v1.9.3 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.9.2.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.9.2.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.9.2.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.2` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.2` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v1.9.3.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v1.9.3.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-1.9.3.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.3` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.3` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -115,7 +115,7 @@ The v1.9.2 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-managed
+npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -150,13 +150,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.2 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.2/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v1.9.3 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.3/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-managed --browser chromium
+npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed --browser chromium
 ```
 
 ## Features
@@ -291,7 +291,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.2 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.3 -- install-managed
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -340,8 +340,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.2 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.2 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.2 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.2 -- install-managed --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-managed --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |
@@ -377,7 +377,7 @@ Contributions are welcome. Please open an issue before submitting large changes
 The recommended v1.9 installation owns one stable unpacked-extension directory and a versioned native-host directory:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.2 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.3 -- install-managed
 ```
 
 Load the printed extension path once from `chrome://extensions`. Starting with the next signed stable release, Codex Overleaf Link checks GitHub Releases automatically, downloads and verifies the coordinated extension/native-host bundle, waits until every connected Overleaf tab is saved and idle, and then updates both components together. A failed health check restores the previous version automatically.
@@ -387,11 +387,11 @@ The stable updater ignores drafts and prereleases, performs no telemetry, and ca
 The legacy native-only installer remains available for source or unmanaged extension directories:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.2 -- install-native
+npm exec --yes codex-overleaf-link@1.9.3 -- install-native
 ```
 
 Legacy native-only installations can be removed with:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.2 -- uninstall-native
+npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-native
 ```

package/extension/bootstrap/background.js

@@ -16,6 +16,7 @@ let runtimeLoadError = null;
 try {
   globalThis.__CODEX_OVERLEAF_RUNTIME_BASE__ = 'runtime';
   importScripts(
+    chrome.runtime.getURL('bootstrap/updateStatus.js'),
     chrome.runtime.getURL('runtime/src/shared/compatibility.js'),
     chrome.runtime.getURL('runtime/src/background.js')
   );
@@ -118,10 +119,13 @@ async function checkAndStage(options = {}) {
   if (APPLYING_STATES.has(current.state)) {
     return current;
   }
+  if (['staged', 'waiting_for_idle'].includes(current.state) && current.transactionId) {
+    return tryApplyStagedUpdate();
+  }
   if (!options.manual && Number(current.postponeUntil || 0) > Date.now()) {
     return current;
   }
-  await setUpdateState({ ...current, state: 'checking', code: '', message: '' });
+  await setUpdateState({ ...current, state: 'checking', blocker: '', blockers: [], code: '', message: '' });
   const checked = await requestInternal({
     method: 'update.check',
     params: {
@@ -170,7 +174,9 @@ async function checkAndStage(options = {}) {
     currentVersion: chrome.runtime.getManifest().version,
     latestVersion: staged.result.targetVersion,
     transactionId: staged.result.transactionId,
-    stagedAt: Date.now()
+    stagedAt: Date.now(),
+    blocker: '',
+    blockers: []
   });
   await broadcastUpdateState('staged');
   chrome.alarms.create(IDLE_ALARM, { delayInMinutes: 0.1 });
@@ -187,20 +193,25 @@ async function tryApplyStagedUpdate() {
   }
   const tabs = await chrome.tabs.query({ url: OVERLEAF_MATCHES });
   const probes = await Promise.all(tabs.map(tab => probeTabIdle(tab)));
-  const tabBlocker = probes.find(probe => probe.idle !== true);
-  const nativeGate = await requestInternal({ method: 'update.canApply', params: {} });
-  if (tabBlocker || !nativeGate?.ok || nativeGate.result?.idle !== true) {
+  const nativeGate = await requestInternal({ method: 'update.canApply', params: {} }).catch(error => ({
+    ok: false,
+    error: { code: safeCode(error), message: safeMessage(error) }
+  }));
+  const blockers = globalThis.CodexOverleafUpdateStatus?.collectBlockers(probes, nativeGate)
+    || ['busy'];
+  if (blockers.length) {
     const waiting = await setUpdateState({
       ...state,
       state: 'waiting_for_idle',
-      blocker: tabBlocker?.blockers?.[0] || nativeGate?.result?.blockers?.[0] || 'busy'
+      blocker: blockers[0],
+      blockers
     });
     chrome.alarms.create(IDLE_ALARM, { delayInMinutes: 1 });
     return waiting;
   }
 
   await chrome.storage.local.set({ [UPDATE_RELOAD_TABS_KEY]: tabs.map(tab => tab.id).filter(Number.isInteger) });
-  await setUpdateState({ ...state, state: 'applying', blocker: '' });
+  await setUpdateState({ ...state, state: 'applying', blocker: '', blockers: [] });
   await broadcastUpdateState('applying');
   const applied = await requestInternal({
     method: 'update.apply',
@@ -353,6 +364,9 @@ async function getUpdateState() {
 }
 
 async function setUpdateState(next) {
+  const blockers = globalThis.CodexOverleafUpdateStatus?.normalizeBlockers(
+    Array.isArray(next.blockers) ? next.blockers : (next.blocker ? [next.blocker] : [])
+  ) || [];
   const value = {
     state: next.state || 'idle',
     managed: next.managed !== false,
@@ -363,7 +377,8 @@ async function setUpdateState(next) {
     stagedAt: Number(next.stagedAt || 0),
     postponeUntil: Number(next.postponeUntil || 0),
     transactionId: next.transactionId || '',
-    blocker: next.blocker || '',
+    blocker: blockers[0] || '',
+    blockers,
     code: next.code || '',
     message: String(next.message || '').slice(0, 300)
   };

package/extension/bootstrap/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Codex Overleaf Link",
-  "version": "1.9.2",
+  "version": "1.9.3",
   "description": "Connect the active Overleaf project to a local Codex bridge.",
   "icons": {
     "16": "assets/icons/icon16.png",

package/extension/bootstrap/popup.html

@@ -33,6 +33,7 @@
     </div>
     <script src="../runtime/src/shared/compatibility.js"></script>
     <script src="../runtime/src/popup.js"></script>
+    <script src="updateStatus.js"></script>
     <script src="popup.js"></script>
   </body>
 </html>

package/extension/bootstrap/popup.js

@@ -5,6 +5,7 @@ const updateVersions = document.getElementById('update-versions');
 const updateDetail = document.getElementById('update-detail');
 const checkButton = document.getElementById('check-update');
 const postponeButton = document.getElementById('postpone-update');
+const UpdateStatus = globalThis.CodexOverleafUpdateStatus;
 
 checkButton.addEventListener('click', async () => {
   checkButton.disabled = true;
@@ -33,7 +34,10 @@ async function refreshUpdateState() {
   if (state.managed === false) {
     updateDetail.textContent = 'Run install-managed once to enable automatic extension and native-host updates.';
   } else if (state.state === 'waiting_for_idle') {
-    updateDetail.textContent = 'Downloaded and verified. Waiting until every Overleaf tab is saved and idle.';
+    const blockerDetail = UpdateStatus?.formatBlockers(state.blockers || [state.blocker]) || '';
+    updateDetail.textContent = blockerDetail
+      ? `Downloaded and verified. ${blockerDetail}`
+      : 'Downloaded and verified. Waiting until every Overleaf tab is saved and idle.';
   } else if (state.state === 'rolled_back') {
     updateDetail.textContent = 'The previous version was restored after a failed health check.';
   } else if (state.state === 'committed') {

package/extension/bootstrap/updateStatus.js

@@ -0,0 +1,78 @@
+(function initCodexOverleafUpdateStatus(root) {
+  'use strict';
+
+  const BLOCKER_MESSAGES = Object.freeze({
+    run: 'A Codex run is still active.',
+    cancelling: 'A Codex cancellation is still settling.',
+    storage: 'Extension state is still being saved.',
+    reviewAction: 'An Accept or Undo action is still running.',
+    dialog: 'A confirmation dialog is still open.',
+    save_state_unverified: 'Overleaf has not confirmed that the document is saved.',
+    recent_user_activity: 'Recent editor activity must be idle for 30 seconds.',
+    save_state_not_stable: 'The saved state must remain stable for 3 seconds.',
+    idle_probe_failed: 'The Overleaf idle check failed.',
+    tab_unavailable: 'An Overleaf tab is unavailable.',
+    tab_probe_timeout: 'An Overleaf tab did not answer the idle check in time.',
+    tab_probe_unavailable: 'Reload an Overleaf tab so the updater can verify that it is idle.',
+    tab_not_idle: 'An Overleaf tab is still busy.',
+    native_project_locked: 'The native host still holds a project lock.',
+    native_run_active: 'The native host is still processing a Codex run.',
+    native_gate_unavailable: 'The native host could not report whether it is idle.',
+    native_not_idle: 'The native host is still busy.',
+    busy: 'An update safety check is still busy.'
+  });
+
+  function normalizeBlockers(values = []) {
+    const result = [];
+    const seen = new Set();
+    const visit = value => {
+      if (Array.isArray(value)) {
+        value.forEach(visit);
+        return;
+      }
+      const code = String(value || '').trim();
+      if (!code || seen.has(code)) return;
+      seen.add(code);
+      result.push(code);
+    };
+    visit(values);
+    return result;
+  }
+
+  function collectBlockers(probes = [], nativeGate = null) {
+    const blockers = [];
+    for (const probe of probes || []) {
+      if (probe?.idle === true) continue;
+      if (Array.isArray(probe?.blockers) && probe.blockers.length) {
+        blockers.push(probe.blockers);
+      } else {
+        blockers.push('tab_not_idle');
+      }
+    }
+    if (!nativeGate?.ok) {
+      blockers.push(nativeGate?.error?.code || 'native_gate_unavailable');
+    } else if (nativeGate.result?.idle !== true) {
+      blockers.push(nativeGate.result?.blockers?.length ? nativeGate.result.blockers : 'native_not_idle');
+    }
+    return normalizeBlockers(blockers);
+  }
+
+  function describeBlocker(code) {
+    const normalized = String(code || '').trim();
+    if (!normalized) return '';
+    return BLOCKER_MESSAGES[normalized]
+      || `Update is waiting on: ${normalized.replaceAll('_', ' ')}.`;
+  }
+
+  function formatBlockers(blockers = []) {
+    return normalizeBlockers(blockers).map(describeBlocker).filter(Boolean).join(' ');
+  }
+
+  root.CodexOverleafUpdateStatus = Object.freeze({
+    BLOCKER_MESSAGES,
+    collectBlockers,
+    describeBlocker,
+    formatBlockers,
+    normalizeBlockers
+  });
+})(typeof window !== 'undefined' ? window : globalThis);

package/extension/src/shared/compatibility.js

@@ -12,7 +12,7 @@
   const MIN_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_EXTENSION_VERSION = '1.0.0';
-  const BUILD_TARGET_VERSION = '1.9.2';
+  const BUILD_TARGET_VERSION = '1.9.3';
   const DEFAULT_CHROME_EXTENSION_ID = 'illdpneeeopfffmiepaejglgmhpmdhdc';
   const REQUIRED_CAPABILITIES = Object.freeze([
     'bridgePing',

package/native-host/src/updateManager.js

@@ -172,6 +172,23 @@ async function stageCandidate(context, options = {}) {
   if (!isNewerStableVersion(manifest.version, activeVersion)) {
     throw updateError('update_candidate_stale', 'The staged update is no longer newer than the active version.');
   }
+  const existingJournal = readJournal(context);
+  if (existingJournal?.state === 'staged' && existingJournal.targetVersion === manifest.version) {
+    try {
+      verifyStagedPair(existingJournal.payloadRoot, manifest.version);
+      return {
+        transactionId: existingJournal.id,
+        targetVersion: existingJournal.targetVersion,
+        state: existingJournal.state,
+        reused: true
+      };
+    } catch (_error) {
+      cleanupStage(existingJournal.stageRoot);
+    }
+  }
+  if (existingJournal && ['applying', 'awaiting_health'].includes(existingJournal.state)) {
+    throw updateError('update_transaction_in_progress', 'A managed update transaction is already being applied.');
+  }
   const transactionId = crypto.randomUUID();
   const stageRoot = path.join(context.updatesRoot, 'staging-' + transactionId);
   fs.mkdirSync(stageRoot, { recursive: true, mode: 0o700 });
@@ -202,6 +219,7 @@ async function stageCandidate(context, options = {}) {
     updatedAt: new Date().toISOString()
   };
   writeJournal(context, journal);
+  cleanupOrphanStageRoots(context.updatesRoot, [stageRoot]);
   return { transactionId, targetVersion: manifest.version, state: journal.state };
 }
 
@@ -247,6 +265,7 @@ function applyStagedUpdate(context, params = {}, options = {}) {
     atomicWriteText(path.join(context.nativeRoot, 'previous-version'), journal.sourceVersion + '\n');
     atomicWriteText(path.join(context.nativeRoot, 'active-version'), journal.targetVersion + '\n');
     rewriteManagedManifestVersion(manifestPath, journal.targetVersion);
+    syncManagedMarkerVersions(context, journal.targetVersion);
   } catch (error) {
     rollbackFiles(context, { ...journal, previousManifest });
     throw updateError('update_apply_failed', 'Managed update could not be applied atomically.', { cause: error });
@@ -282,6 +301,7 @@ function confirmUpdate(context, params = {}) {
   });
   pruneNativeVersions(context.nativeRoot, new Set([journal.targetVersion, journal.sourceVersion]));
   cleanupStage(journal.stageRoot);
+  cleanupOrphanStageRoots(context.updatesRoot);
   return { version: journal.targetVersion, state: 'committed' };
 }
 
@@ -306,6 +326,7 @@ function rollbackUpdate(context, params = {}) {
     previousManifest: undefined
   });
   cleanupStage(journal.stageRoot);
+  cleanupOrphanStageRoots(context.updatesRoot);
   return { version: journal.sourceVersion, state: 'rolled_back' };
 }
 
@@ -329,6 +350,45 @@ function rollbackFiles(context, journal) {
   } else {
     fs.rmSync(path.join(context.nativeRoot, 'previous-version'), { force: true });
   }
+  if (parseSemver(journal.sourceVersion)) {
+    syncManagedMarkerVersions(context, journal.sourceVersion);
+  }
+}
+
+function syncManagedMarkerVersions(context, version) {
+  rewriteManagedMarkerVersion(context.extensionRoot, EXTENSION_MARKER, 'extension', version);
+  rewriteManagedMarkerVersion(context.nativeRoot, NATIVE_MARKER, 'native', version);
+}
+
+function rewriteManagedMarkerVersion(root, filename, kind, version) {
+  const markerPath = path.join(root, filename);
+  const marker = readJsonSafe(markerPath, null);
+  if (!isManagedMarker(marker, kind)) {
+    throw updateError('update_marker_invalid', `The managed ${kind} marker is missing or invalid.`);
+  }
+  atomicWriteJson(markerPath, {
+    ...marker,
+    version,
+    updatedAt: new Date().toISOString()
+  });
+}
+
+function cleanupOrphanStageRoots(updatesRoot, retainedRoots = []) {
+  const resolvedRoot = path.resolve(String(updatesRoot || ''));
+  if (!resolvedRoot || resolvedRoot === path.parse(resolvedRoot).root) return;
+  const retained = new Set((retainedRoots || []).map(value => path.resolve(String(value || ''))));
+  let entries;
+  try {
+    entries = fs.readdirSync(resolvedRoot, { withFileTypes: true });
+  } catch (_error) {
+    return;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory() || !/^staging-[0-9a-f-]{36}$/i.test(entry.name)) continue;
+    const candidate = path.join(resolvedRoot, entry.name);
+    if (retained.has(path.resolve(candidate))) continue;
+    fs.rmSync(candidate, { recursive: true, force: true });
+  }
 }
 
 function recoverAndReadStatus(context) {
@@ -539,10 +599,13 @@ module.exports = {
   GITHUB_LATEST_URL,
   applyStagedUpdate,
   checkForUpdate,
+  cleanupOrphanStageRoots,
   confirmUpdate,
   getApplyGate,
   getManagedContext,
   handleUpdateRequest,
   isUpdateMethod,
-  rollbackUpdate
+  rollbackUpdate,
+  stageCandidate,
+  syncManagedMarkerVersions
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-overleaf-link",
-  "version": "1.9.2",
+  "version": "1.9.3",
   "description": "Cross-platform Chrome bridge that connects Codex to the active Overleaf project.",
   "license": "MIT",
   "type": "commonjs",