codex-overleaf-link 1.9.3 → 1.9.5

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.9.3-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-1.9.5-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the managed native host **and** managed extension runtime.
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.3 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.3/install.sh)"
+CODEX_OVERLEAF_REF=v1.9.5 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.5/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.3/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.9.3'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.5/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v1.9.5'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,7 +56,7 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs the same managed native host and extension runtime without keeping a source checkout. Use it if you prefer a pinned npm package.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.3 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.5 -- install-managed
 ```
 
 Then, in `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select the managed extension path printed by the command. The Release extension zip remains available for explicitly unmanaged/manual installations.
@@ -86,9 +86,9 @@ npm installs, updates, and uninstalls the coordinated managed extension/native p
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` |
-| Diagnose | `npm exec --yes codex-overleaf-link@1.9.3 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` |
+| Install / update | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` |
+| Diagnose | `npm exec --yes codex-overleaf-link@1.9.5 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -98,13 +98,13 @@ Managed installations discover signed stable updates automatically and apply the
 
 ## GitHub Release Artifacts
 
-The v1.9.3 GitHub Release contains:
+The v1.9.5 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.9.3.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.9.3.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.9.3.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.3` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.3` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v1.9.5.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v1.9.5.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-1.9.5.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.5` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.5` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -115,7 +115,7 @@ The v1.9.3 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed
+npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -150,13 +150,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.3 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.3/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v1.9.5 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.5/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed --browser chromium
+npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed --browser chromium
 ```
 
 ## Features
@@ -291,7 +291,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.3 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.5 -- install-managed
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -340,8 +340,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- install-managed --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-managed --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |
@@ -377,7 +377,7 @@ Contributions are welcome. Please open an issue before submitting large changes
 The recommended v1.9 installation owns one stable unpacked-extension directory and a versioned native-host directory:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.3 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.5 -- install-managed
 ```
 
 Load the printed extension path once from `chrome://extensions`. Starting with the next signed stable release, Codex Overleaf Link checks GitHub Releases automatically, downloads and verifies the coordinated extension/native-host bundle, waits until every connected Overleaf tab is saved and idle, and then updates both components together. A failed health check restores the previous version automatically.
@@ -387,11 +387,11 @@ The stable updater ignores drafts and prereleases, performs no telemetry, and ca
 The legacy native-only installer remains available for source or unmanaged extension directories:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.3 -- install-native
+npm exec --yes codex-overleaf-link@1.9.5 -- install-native
 ```
 
 Legacy native-only installations can be removed with:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.3 -- uninstall-native
+npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-native
 ```

package/extension/bootstrap/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Codex Overleaf Link",
-  "version": "1.9.3",
+  "version": "1.9.5",
   "description": "Connect the active Overleaf project to a local Codex bridge.",
   "icons": {
     "16": "assets/icons/icon16.png",

package/extension/runtime-manifest.json

@@ -52,6 +52,7 @@
     "src/content/writebackOrchestrator.js",
     "src/content/panelMaintenance.js",
     "src/content/updateIdle.js",
+    "src/content/updateNotice.js",
     "src/content/contentRuntime.js",
     "src/contentScript.js"
   ],

package/extension/src/background.js

@@ -530,3 +530,23 @@ if (!globalThis.CodexOverleafCompatibility) {
     return true;
   }
 })();
+
+(function loadConsentDrivenUpdateRuntime(root) {
+  'use strict';
+
+  try {
+    const workerPath = chrome.runtime.getManifest().background?.service_worker || '';
+    const runtimePrefix = workerPath.startsWith('bootstrap/') ? 'runtime/' : '';
+    if (!root.CodexOverleafUpdateConsent) {
+      importScripts(chrome.runtime.getURL(runtimePrefix + 'src/shared/updateConsent.js'));
+    }
+    if (!root.CodexOverleafUpdateCoordinator) {
+      importScripts(chrome.runtime.getURL(runtimePrefix + 'src/backgroundUpdateCoordinator.js'));
+    }
+    root.CodexOverleafUpdateCoordinator?.init?.({
+      nativeBridge: root.CodexOverleafNativeBridge
+    });
+  } catch (error) {
+    console.error('Consent-driven updater failed to initialize:', error?.message || String(error));
+  }
+})(globalThis);

package/extension/src/backgroundUpdateCoordinator.js

@@ -0,0 +1,414 @@
+(function initCodexOverleafUpdateCoordinator(root) {
+  'use strict';
+
+  const UPDATE_STATE_KEY = 'codex-overleaf-managed-update-state-v1';
+  const CONSENT_STATE_KEY = 'codex-overleaf-update-consent-v1';
+  const CHECK_ALARM = 'codex-overleaf-consent-update-check';
+  const CHECK_INTERVAL_MINUTES = 24 * 60;
+  const SNOOZE_MS = 24 * 60 * 60 * 1000;
+  const CANDIDATE_MAX_AGE_MS = 5 * 60 * 1000;
+  const LEGACY_GUARD = Number.MAX_SAFE_INTEGER;
+  const OVERLEAF_MATCHES = [
+    'https://www.overleaf.com/project/*',
+    'https://overleaf.com/project/*'
+  ];
+  const MESSAGE_TYPES = new Set([
+    'codex-overleaf/consent-update-get-state',
+    'codex-overleaf/consent-update-check',
+    'codex-overleaf/consent-update-install',
+    'codex-overleaf/consent-update-later'
+  ]);
+
+  const policy = root.CodexOverleafUpdateConsent;
+  let nativeBridge = null;
+  let initialized = false;
+  let policyTail = Promise.resolve();
+
+  function init(options = {}) {
+    if (initialized || !policy) return;
+    initialized = true;
+    nativeBridge = options.nativeBridge || root.CodexOverleafNativeBridge;
+
+    chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
+      if (!MESSAGE_TYPES.has(message?.type)) return undefined;
+      if (!isAllowedSender(sender)) {
+        sendResponse({ ok: false, error: { code: 'forbidden_sender', message: 'Update actions are limited to this extension and Overleaf project tabs.' } });
+        return false;
+      }
+      enqueuePolicyAction(() => handleMessage(message))
+        .then(result => sendResponse({ ok: true, result }))
+        .catch(error => sendResponse({ ok: false, error: safeError(error) }));
+      return true;
+    });
+
+    chrome.alarms?.onAlarm?.addListener(alarm => {
+      if (alarm?.name === CHECK_ALARM) {
+        void enqueuePolicyAction(() => checkOnly({ manual: false })).catch(() => {});
+      }
+    });
+
+    chrome.storage?.onChanged?.addListener((changes, area) => {
+      if (area !== 'local' || (!changes[UPDATE_STATE_KEY] && !changes[CONSENT_STATE_KEY])) return;
+      void handleObservedStateChange();
+    });
+
+    void startup();
+  }
+
+  async function startup() {
+    chrome.alarms?.create?.(CHECK_ALARM, {
+      delayInMinutes: 0.5,
+      periodInMinutes: CHECK_INTERVAL_MINUTES
+    });
+    await settleTerminalConsent();
+    await armLegacyGuard();
+    await publishView();
+  }
+
+  async function handleMessage(message) {
+    switch (message.type) {
+      case 'codex-overleaf/consent-update-get-state':
+        return getView();
+      case 'codex-overleaf/consent-update-check':
+        return checkOnly({ manual: true });
+      case 'codex-overleaf/consent-update-install':
+        return installUpdate();
+      case 'codex-overleaf/consent-update-later':
+        return postponeUpdate();
+      default:
+        throw codedError('unknown_update_action', 'Unknown update action.');
+    }
+  }
+
+  async function checkOnly({ manual }) {
+    const [currentState, consent] = await Promise.all([getUpdateState(), getConsentState()]);
+    if (consent.authorizedVersion || policy.isExecutionState(currentState.state)) {
+      return getView();
+    }
+    await setUpdateState({
+      ...currentState,
+      state: 'checking',
+      code: '',
+      message: '',
+      blocker: '',
+      blockers: []
+    });
+
+    try {
+      const result = await requestNative('update.check', {
+        currentVersion: currentVersion(),
+        etag: currentState.etag || ''
+      });
+      const checkedAt = Date.now();
+      if (result.available) {
+        const nextConsent = result.latestVersion !== consent.snoozedVersion
+          ? { ...consent, snoozedVersion: '', snoozedUntil: 0 }
+          : consent;
+        await setConsentState({
+          ...nextConsent,
+          lastPromptedVersion: result.latestVersion,
+          lastPromptedAt: manual ? checkedAt : nextConsent.lastPromptedAt
+        });
+        await setUpdateState({
+          ...currentState,
+          state: 'update_available',
+          managed: true,
+          currentVersion: result.currentVersion || currentVersion(),
+          latestVersion: result.latestVersion,
+          etag: result.etag || currentState.etag || '',
+          lastCheckedAt: checkedAt,
+          postponeUntil: LEGACY_GUARD,
+          code: '',
+          message: ''
+        });
+      } else if (result.reason === 'not_modified' &&
+          policy.compareStableVersions(currentState.latestVersion, currentVersion()) > 0) {
+        await setUpdateState({
+          ...currentState,
+          state: 'update_available',
+          lastCheckedAt: checkedAt,
+          postponeUntil: LEGACY_GUARD,
+          code: '',
+          message: ''
+        });
+      } else {
+        await setUpdateState({
+          ...currentState,
+          state: 'idle',
+          currentVersion: result.currentVersion || currentVersion(),
+          latestVersion: result.latestVersion || result.currentVersion || currentVersion(),
+          etag: result.etag || currentState.etag || '',
+          lastCheckedAt: checkedAt,
+          postponeUntil: LEGACY_GUARD,
+          transactionId: '',
+          code: '',
+          message: ''
+        });
+      }
+      return getView();
+    } catch (error) {
+      await setUpdateState({
+        ...currentState,
+        state: 'failed',
+        postponeUntil: LEGACY_GUARD,
+        code: safeCode(error),
+        message: safeMessage(error)
+      });
+      throw error;
+    }
+  }
+
+  async function installUpdate() {
+    let state = await getUpdateState();
+    let consent = await getConsentState();
+    const candidateStale = !state.lastCheckedAt || Date.now() - state.lastCheckedAt > CANDIDATE_MAX_AGE_MS;
+    if (state.state !== 'update_available' || candidateStale) {
+      await checkOnly({ manual: true });
+      state = await getUpdateState();
+      consent = await getConsentState();
+    }
+    if (state.state !== 'update_available' ||
+        policy.compareStableVersions(state.latestVersion, currentVersion()) <= 0) {
+      throw codedError('update_candidate_missing', 'No newer signed stable update is available.');
+    }
+
+    const authorizationId = crypto.randomUUID();
+    await requestNative('update.authorize', {
+      authorizationId,
+      targetVersion: state.latestVersion,
+      currentVersion: currentVersion()
+    });
+    await setConsentState({
+      ...consent,
+      snoozedVersion: '',
+      snoozedUntil: 0,
+      authorizedVersion: state.latestVersion,
+      authorizationId,
+      authorizedAt: Date.now()
+    });
+    await setUpdateState({ ...state, postponeUntil: 0, code: '', message: '' });
+
+    try {
+      const result = await chrome.runtime.sendMessage({ type: 'codex-overleaf/update-check-now' });
+      if (result === undefined) {
+        throw codedError('update_executor_unavailable', 'The managed update executor is unavailable.');
+      }
+      return getView();
+    } catch (error) {
+      await bestEffortRevoke({
+        authorizationId,
+        targetVersion: state.latestVersion,
+        transactionId: ''
+      });
+      await setConsentState({
+        ...consent,
+        authorizedVersion: '',
+        authorizationId: '',
+        authorizedAt: 0
+      });
+      await armLegacyGuard();
+      throw error;
+    }
+  }
+
+  async function postponeUpdate() {
+    const [state, consent] = await Promise.all([getUpdateState(), getConsentState()]);
+    if (['applying', 'awaiting_health'].includes(state.state)) {
+      throw codedError('update_revoke_too_late', 'The update is already being installed.');
+    }
+    if (consent.authorizationId) {
+      try {
+        await requestNative('update.revoke', {
+          authorizationId: consent.authorizationId,
+          targetVersion: consent.authorizedVersion || state.latestVersion,
+          transactionId: state.transactionId || ''
+        });
+      } catch (error) {
+        if (error?.code === 'update_revoke_too_late') {
+          return getView();
+        }
+        throw error;
+      }
+    } else if (['staged', 'waiting_for_idle'].includes(state.state)) {
+      throw codedError('update_consent_mismatch', 'The staged update has no matching runtime authorization.');
+    }
+
+    const snoozedUntil = Date.now() + SNOOZE_MS;
+    await setUpdateState({
+      ...state,
+      state: 'update_available',
+      transactionId: '',
+      stagedAt: 0,
+      blocker: '',
+      blockers: [],
+      postponeUntil: LEGACY_GUARD,
+      code: '',
+      message: ''
+    });
+    await setConsentState({
+      ...consent,
+      snoozedVersion: state.latestVersion,
+      snoozedUntil,
+      authorizedVersion: '',
+      authorizationId: '',
+      authorizedAt: 0
+    });
+    return getView();
+  }
+
+  async function settleTerminalConsent() {
+    const [state, consent] = await Promise.all([getUpdateState(), getConsentState()]);
+    if (!policy.isTerminalState(state.state) || !consent.authorizationId) return;
+    await setConsentState({
+      ...consent,
+      authorizedVersion: '',
+      authorizationId: '',
+      authorizedAt: 0
+    });
+  }
+
+  async function handleObservedStateChange() {
+    await settleTerminalConsent();
+    const [state, consent] = await Promise.all([getUpdateState(), getConsentState()]);
+    if (!consent.authorizationId && !policy.isExecutionState(state.state)) {
+      await armLegacyGuard();
+    }
+    await publishView();
+  }
+
+  async function armLegacyGuard() {
+    const [state, consent] = await Promise.all([getUpdateState(), getConsentState()]);
+    if (consent.authorizationId || state.postponeUntil === LEGACY_GUARD) return state;
+    return setUpdateState({ ...state, postponeUntil: LEGACY_GUARD });
+  }
+
+  async function getView() {
+    const [state, consent] = await Promise.all([getUpdateState(), getConsentState()]);
+    return policy.deriveViewModel(state, consent, {
+      currentVersion: currentVersion(),
+      now: Date.now()
+    });
+  }
+
+  async function publishView() {
+    const view = await getView();
+    await setBadge(view.badge);
+    const tabs = await chrome.tabs.query({ url: OVERLEAF_MATCHES }).catch(() => []);
+    await Promise.all((tabs || []).map(tab => {
+      if (!Number.isInteger(tab?.id)) return Promise.resolve();
+      return chrome.tabs.sendMessage(tab.id, {
+        type: 'codex-overleaf/consent-update-state',
+        view
+      }).catch(() => {});
+    }));
+    return view;
+  }
+
+  async function setBadge(badge = {}) {
+    try {
+      await chrome.action.setBadgeText({ text: String(badge.text || '').slice(0, 4) });
+      if (badge.text) {
+        await chrome.action.setBadgeBackgroundColor({ color: badge.color || '#3578bd' });
+      }
+    } catch (_error) {
+      // Badge rendering is best-effort and never participates in update state.
+    }
+  }
+
+  async function getUpdateState() {
+    const stored = await chrome.storage.local.get(UPDATE_STATE_KEY);
+    return policy.normalizeUpdateState(stored?.[UPDATE_STATE_KEY], currentVersion());
+  }
+
+  async function setUpdateState(value) {
+    const next = policy.normalizeUpdateState(value, currentVersion());
+    await chrome.storage.local.set({ [UPDATE_STATE_KEY]: next });
+    return next;
+  }
+
+  async function getConsentState() {
+    const stored = await chrome.storage.local.get(CONSENT_STATE_KEY);
+    return policy.normalizeConsentState(stored?.[CONSENT_STATE_KEY]);
+  }
+
+  async function setConsentState(value) {
+    const next = policy.normalizeConsentState(value);
+    await chrome.storage.local.set({ [CONSENT_STATE_KEY]: next });
+    return next;
+  }
+
+  async function requestNative(method, params = {}) {
+    const response = await nativeBridge?.requestInternal?.({
+      id: crypto.randomUUID(),
+      method,
+      params
+    });
+    if (!response?.ok) {
+      throw codedError(
+        response?.error?.code || 'native_connection_failed',
+        response?.error?.message || 'Native Host update request failed.'
+      );
+    }
+    return response.result || {};
+  }
+
+  async function bestEffortRevoke(params) {
+    try {
+      await requestNative('update.revoke', params);
+    } catch (_error) {
+      // Native authorization remains the hard gate if cleanup cannot connect.
+    }
+  }
+
+  function enqueuePolicyAction(action) {
+    const result = policyTail.then(action, action);
+    policyTail = result.catch(() => {});
+    return result;
+  }
+
+  function isAllowedSender(sender) {
+    if (sender?.id && sender.id !== chrome.runtime.id) return false;
+    if (!sender?.tab) return true;
+    try {
+      const url = new URL(sender.tab.url || '');
+      return url.protocol === 'https:' &&
+        (url.hostname === 'www.overleaf.com' || url.hostname === 'overleaf.com') &&
+        url.pathname.startsWith('/project/');
+    } catch (_error) {
+      return false;
+    }
+  }
+
+  function currentVersion() {
+    return String(
+      root.CodexOverleafCompatibility?.BUILD_TARGET_VERSION ||
+      chrome.runtime.getManifest().version ||
+      ''
+    );
+  }
+
+  function codedError(code, message) {
+    const error = new Error(message);
+    error.code = code;
+    return error;
+  }
+
+  function safeError(error) {
+    return { code: safeCode(error), message: safeMessage(error) };
+  }
+
+  function safeCode(error) {
+    const code = String(error?.code || '');
+    return /^[a-z0-9_]{1,80}$/.test(code) ? code : 'update_failed';
+  }
+
+  function safeMessage(error) {
+    return String(error?.message || 'Update failed.')
+      .replace(/(?:file:\/\/)?(?:[A-Za-z]:[\\/]|\/Users\/|\/home\/)[^\s]*/g, '[local path]')
+      .replace(/\s+/g, ' ')
+      .trim()
+      .slice(0, 300);
+  }
+
+  root.CodexOverleafUpdateCoordinator = Object.freeze({ init });
+})(globalThis);

package/extension/src/content/contentRuntime.js

@@ -778,6 +778,9 @@
     storageKey = getProjectStorageKey(LEGACY_STORAGE_KEY, window.location.href);
     state = normalizePanelState(await loadStoredState(), { restoreRunningRuns: true });
     ensurePanelOpen();
+    root.CodexOverleafUpdateNotice?.mount?.(panel?.panelEl || panel, {
+      getLocale: () => state?.locale || 'en'
+    });
     // v1.8.1: on a non-editor route the panel must NEVER first paint the
     // per-project session UI (composer + probe line) and then swap — mount
     // the dashboard shell synchronously; the account-scope resolution below