codex-overleaf-link 1.9.5 → 1.9.6

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.9.5-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-1.9.6-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the managed native host **and** managed extension runtime.
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.5 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.5/install.sh)"
+CODEX_OVERLEAF_REF=v1.9.6 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.6/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.5/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.9.5'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.6/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v1.9.6'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,7 +56,7 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs the same managed native host and extension runtime without keeping a source checkout. Use it if you prefer a pinned npm package.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.5 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.6 -- install-managed
 ```
 
 Then, in `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select the managed extension path printed by the command. The Release extension zip remains available for explicitly unmanaged/manual installations.
@@ -86,9 +86,9 @@ npm installs, updates, and uninstalls the coordinated managed extension/native p
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` |
-| Diagnose | `npm exec --yes codex-overleaf-link@1.9.5 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` |
+| Install / update | `npm exec --yes codex-overleaf-link@1.9.6 -- install-managed` |
+| Diagnose | `npm exec --yes codex-overleaf-link@1.9.6 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-managed` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -98,13 +98,13 @@ Managed installations discover signed stable updates automatically and apply the
 
 ## GitHub Release Artifacts
 
-The v1.9.5 GitHub Release contains:
+The v1.9.6 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.9.5.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.9.5.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.9.5.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.5` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.5` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v1.9.6.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v1.9.6.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-1.9.6.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.6` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.6` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -115,7 +115,7 @@ The v1.9.5 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed
+npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-managed
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -150,13 +150,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.5 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.5/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v1.9.6 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.6/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed --browser chromium
+npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-managed --browser chromium
 ```
 
 ## Features
@@ -291,7 +291,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.5 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.6 -- install-managed
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -340,8 +340,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- install-managed --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-managed --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.6 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.6 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.6 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.6 -- install-managed --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-managed --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |
@@ -377,7 +377,7 @@ Contributions are welcome. Please open an issue before submitting large changes
 The recommended v1.9 installation owns one stable unpacked-extension directory and a versioned native-host directory:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.5 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.6 -- install-managed
 ```
 
 Load the printed extension path once from `chrome://extensions`. Starting with the next signed stable release, Codex Overleaf Link checks GitHub Releases automatically, downloads and verifies the coordinated extension/native-host bundle, waits until every connected Overleaf tab is saved and idle, and then updates both components together. A failed health check restores the previous version automatically.
@@ -387,11 +387,11 @@ The stable updater ignores drafts and prereleases, performs no telemetry, and ca
 The legacy native-only installer remains available for source or unmanaged extension directories:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.5 -- install-native
+npm exec --yes codex-overleaf-link@1.9.6 -- install-native
 ```
 
 Legacy native-only installations can be removed with:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.5 -- uninstall-native
+npm exec --yes codex-overleaf-link@1.9.6 -- uninstall-native
 ```

package/extension/bootstrap/background.js

@@ -24,6 +24,10 @@ try {
   runtimeLoadError = error;
 }
 
+globalThis.CodexOverleafManagedUpdateExecutor = Object.freeze({
+  installAuthorizedUpdate: () => checkAndStage({ manual: true })
+});
+
 chrome.runtime.onMessage.addListener((message, _sender, sendResponse) => {
   if (message?.type === 'codex-overleaf/update-get-state') {
     getUpdateState().then(sendResponse);

package/extension/bootstrap/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Codex Overleaf Link",
-  "version": "1.9.5",
+  "version": "1.9.6",
   "description": "Connect the active Overleaf project to a local Codex bridge.",
   "icons": {
     "16": "assets/icons/icon16.png",

package/extension/bootstrap/popup.css

@@ -1,26 +1,176 @@
+:root {
+  color-scheme: dark;
+  --popup-bg: #151816;
+  --popup-surface: #1d211f;
+  --popup-surface-raised: #222724;
+  --popup-border: #303733;
+  --popup-border-strong: #3d4842;
+  --popup-text: #edf1ee;
+  --popup-muted: #9da6a0;
+  --popup-green: #82d596;
+  --popup-blue: #62a8e8;
+  --popup-danger: #e27b72;
+}
+
+html {
+  margin: 0;
+  overflow: hidden;
+  background: var(--popup-bg);
+}
+
+* { box-sizing: border-box; }
+
 body {
-  width: 328px;
+  width: 340px;
   margin: 0;
-  padding: 16px;
-  color: #e8ecef;
-  background: #171918;
+  padding: 18px;
+  color: var(--popup-text);
+  background:
+    radial-gradient(circle at 88% -20%, rgba(98, 168, 232, 0.1), transparent 42%),
+    var(--popup-bg);
   font: 13px/1.45 -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  animation: popup-enter 160ms ease-out both;
 }
-h1 { margin: 0 0 12px; font-size: 16px; }
+
+h1 {
+  margin: 0 0 12px;
+  font-size: 16px;
+  font-weight: 720;
+  letter-spacing: -0.025em;
+}
+
 p { margin: 8px 0 0; }
-.version-status, .section-head, .update-actions { display: flex; align-items: center; gap: 8px; }
-.version-status { margin-bottom: 12px; color: #a8aeaa; font-size: 12px; }
+
+.version-status,
+.section-head,
+.update-actions {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.version-status {
+  margin-bottom: 12px;
+  color: var(--popup-muted);
+  font-size: 12px;
+}
+
 .section-head { justify-content: space-between; }
-.status-icon { display: inline-flex; min-width: 24px; min-height: 24px; align-items: center; justify-content: center; border-radius: 999px; color: #fff; font: 10px/1 ui-monospace, monospace; }
-.status-icon.compatible { background: #397d50; }
-.status-icon.update-available { background: #9b6a26; }
-.status-icon.incompatible { background: #a84038; }
-button { width: 100%; border: 1px solid #5b8fc9; background: #2f6eae; color: #fff; border-radius: 7px; padding: 8px 10px; cursor: pointer; }
-button.secondary { margin-top: 8px; border-color: #3c4440; background: #242826; color: #dce1de; }
-button.quiet { margin-top: 8px; border-color: transparent; background: transparent; color: #b8bfba; }
-.updates, .install { margin-top: 14px; padding: 11px; border: 1px solid #303532; border-radius: 9px; background: #1d201e; }
-.install[hidden], button[hidden] { display: none; }
-.update-state { color: #83cf96; font-size: 11px; text-transform: capitalize; }
-.muted { color: #939a96; font-size: 12px; }
+
+.status-icon {
+  display: inline-flex;
+  width: 10px;
+  min-width: 10px;
+  height: 10px;
+  min-height: 10px;
+  overflow: hidden;
+  align-items: center;
+  justify-content: center;
+  border-radius: 999px;
+  color: transparent;
+  font-size: 0;
+  box-shadow: 0 0 0 3px rgba(255, 255, 255, 0.035);
+}
+
+.status-icon.compatible { background: var(--popup-green); }
+.status-icon.update-available { background: #d5b46e; }
+.status-icon.incompatible { background: var(--popup-danger); }
+
+button {
+  width: 100%;
+  border: 1px solid #4d88c0;
+  border-radius: 8px;
+  padding: 8px 11px;
+  color: #f7fbff;
+  background: #2f70ad;
+  font: inherit;
+  font-weight: 650;
+  cursor: pointer;
+  transition: border-color 140ms ease, background 140ms ease, transform 140ms ease;
+}
+
+button:hover:not(:disabled) {
+  border-color: #6aa7df;
+  background: #397dbb;
+}
+
+button:active:not(:disabled) { transform: translateY(1px); }
+button:disabled { cursor: default; opacity: 0.62; }
+
+button.secondary {
+  margin-top: 8px;
+  border-color: var(--popup-border-strong);
+  color: #e2e8e4;
+  background: #222724;
+}
+
+button.quiet {
+  margin-top: 8px;
+  border-color: transparent;
+  color: #b8c0bb;
+  background: transparent;
+}
+
+.updates {
+  margin-top: 16px;
+  padding: 13px 0 0;
+  border: 0;
+  border-top: 1px solid var(--popup-border);
+  border-radius: 0;
+  background: transparent;
+}
+
+.install {
+  margin-top: 14px;
+  padding: 12px;
+  border: 1px solid var(--popup-border);
+  border-radius: 10px;
+  background: var(--popup-surface);
+}
+
+.install[hidden],
+button[hidden] { display: none; }
+
+.update-state {
+  color: var(--popup-green);
+  font-size: 11px;
+  text-transform: capitalize;
+}
+
+.muted {
+  color: var(--popup-muted);
+  font-size: 12px;
+}
+
 .update-actions > button { flex: 1; }
-code { display: block; margin-top: 8px; padding: 8px; overflow: auto; border-radius: 6px; background: #111312; color: #dce1de; white-space: pre-wrap; word-break: break-word; font: 11px/1.45 ui-monospace, monospace; }
+
+code {
+  display: block;
+  margin-top: 8px;
+  padding: 8px;
+  overflow: auto;
+  border-radius: 6px;
+  color: #dce3df;
+  background: #101311;
+  white-space: pre-wrap;
+  word-break: break-word;
+  font: 11px/1.45 ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+}
+
+body.consent-update-focus {
+  min-height: 340px;
+  padding: 20px;
+}
+
+body.consent-update-focus > [data-popup-context] { display: none !important; }
+body.consent-update-focus > .popup-brand { margin-bottom: 18px; }
+
+@keyframes popup-enter {
+  from { opacity: 0; }
+  to { opacity: 1; }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  body { animation: none; }
+  button { transition: none; }
+}

package/extension/bootstrap/popup.html

@@ -6,13 +6,13 @@
     <link rel="stylesheet" href="popup.css">
   </head>
   <body>
-    <h1>Codex Overleaf Link</h1>
-    <div class="version-status">
+    <h1 class="popup-brand">Codex Overleaf Link</h1>
+    <div class="version-status" data-popup-context>
       <span id="compat-status-icon" class="status-icon incompatible" title="Native host incompatible">X</span>
       <span id="version-pair">Extension unknown / Native unknown</span>
     </div>
-    <button id="open-panel">Open panel in Overleaf</button>
-    <p id="status">Use this on an Overleaf project tab.</p>
+    <button id="open-panel" data-popup-context>Open panel in Overleaf</button>
+    <p id="status" data-popup-context>Use this on an Overleaf project tab.</p>
     <section class="updates" aria-labelledby="updates-title">
       <div class="section-head">
         <strong id="updates-title">Stable updates</strong>
@@ -25,7 +25,7 @@
         <button id="postpone-update" class="quiet" type="button" hidden>Later</button>
       </div>
     </section>
-    <div id="native-install" class="install" hidden>
+    <div id="native-install" class="install" data-popup-context hidden>
       <strong>Native host attention required</strong>
       <p>Run this command in Terminal, then reload this extension in Chrome.</p>
       <code id="install-command"></code>

package/extension/src/backgroundUpdateCoordinator.js

@@ -7,6 +7,7 @@
   const CHECK_INTERVAL_MINUTES = 24 * 60;
   const SNOOZE_MS = 24 * 60 * 60 * 1000;
   const CANDIDATE_MAX_AGE_MS = 5 * 60 * 1000;
+  const CHECK_REQUEST_TIMEOUT_MS = 15 * 1000;
   const LEGACY_GUARD = Number.MAX_SAFE_INTEGER;
   const OVERLEAF_MATCHES = [
     'https://www.overleaf.com/project/*',
@@ -16,7 +17,8 @@
     'codex-overleaf/consent-update-get-state',
     'codex-overleaf/consent-update-check',
     'codex-overleaf/consent-update-install',
-    'codex-overleaf/consent-update-later'
+    'codex-overleaf/consent-update-later',
+    'codex-overleaf/consent-update-dismiss'
   ]);
 
   const policy = root.CodexOverleafUpdateConsent;
@@ -60,6 +62,7 @@
       delayInMinutes: 0.5,
       periodInMinutes: CHECK_INTERVAL_MINUTES
     });
+    await recoverInterruptedCheck();
     await settleTerminalConsent();
     await armLegacyGuard();
     await publishView();
@@ -75,6 +78,8 @@
         return installUpdate();
       case 'codex-overleaf/consent-update-later':
         return postponeUpdate();
+      case 'codex-overleaf/consent-update-dismiss':
+        return dismissCompletedUpdate();
       default:
         throw codedError('unknown_update_action', 'Unknown update action.');
     }
@@ -95,10 +100,14 @@
     });
 
     try {
-      const result = await requestNative('update.check', {
-        currentVersion: currentVersion(),
-        etag: currentState.etag || ''
-      });
+      const result = await withTimeout(
+        requestNative('update.check', {
+          currentVersion: currentVersion(),
+          etag: currentState.etag || ''
+        }),
+        CHECK_REQUEST_TIMEOUT_MS,
+        codedError('update_check_timeout', 'The managed update check did not complete in time.')
+      );
       const checkedAt = Date.now();
       if (result.available) {
         const nextConsent = result.latestVersion !== consent.snoozedVersion
@@ -158,6 +167,41 @@
     }
   }
 
+  async function recoverInterruptedCheck() {
+    const state = await getUpdateState();
+    if (state.state !== 'checking') return;
+    const nextState = policy.compareStableVersions(state.latestVersion, currentVersion()) > 0
+      ? 'update_available'
+      : 'idle';
+    await setUpdateState({
+      ...state,
+      state: nextState,
+      blocker: '',
+      blockers: [],
+      code: '',
+      message: ''
+    });
+  }
+
+  async function dismissCompletedUpdate() {
+    const state = await getUpdateState();
+    if (state.state !== 'committed') return getView();
+    const version = state.latestVersion || state.currentVersion || currentVersion();
+    await setUpdateState({
+      ...state,
+      state: 'idle',
+      currentVersion: version,
+      latestVersion: version,
+      transactionId: '',
+      stagedAt: 0,
+      blocker: '',
+      blockers: [],
+      code: '',
+      message: ''
+    });
+    return getView();
+  }
+
   async function installUpdate() {
     let state = await getUpdateState();
     let consent = await getConsentState();
@@ -189,10 +233,11 @@
     await setUpdateState({ ...state, postponeUntil: 0, code: '', message: '' });
 
     try {
-      const result = await chrome.runtime.sendMessage({ type: 'codex-overleaf/update-check-now' });
-      if (result === undefined) {
+      const executor = root.CodexOverleafManagedUpdateExecutor;
+      if (typeof executor?.installAuthorizedUpdate !== 'function') {
         throw codedError('update_executor_unavailable', 'The managed update executor is unavailable.');
       }
+      await executor.installAuthorizedUpdate();
       return getView();
     } catch (error) {
       await bestEffortRevoke({
@@ -393,6 +438,22 @@
     return error;
   }
 
+  function withTimeout(promise, timeoutMs, timeoutError) {
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => reject(timeoutError), timeoutMs);
+      Promise.resolve(promise).then(
+        value => {
+          clearTimeout(timer);
+          resolve(value);
+        },
+        error => {
+          clearTimeout(timer);
+          reject(error);
+        }
+      );
+    });
+  }
+
   function safeError(error) {
     return { code: safeCode(error), message: safeMessage(error) };
   }

package/extension/src/popup.js

@@ -309,6 +309,7 @@
       check: 'codex-overleaf/consent-update-check',
       install: 'codex-overleaf/consent-update-install',
       later: 'codex-overleaf/consent-update-later',
+      dismiss: 'codex-overleaf/consent-update-dismiss',
       retry: 'codex-overleaf/consent-update-check'
     }[action];
     const response = await chrome.runtime.sendMessage({ type });
@@ -339,8 +340,19 @@
     const state = view?.state || { state: 'idle' };
     const progress = view?.progress || { value: 0, determinate: true, phase: 'idle' };
     const copy = getUpdateCopy(state, view);
+    const stateName = state.state || 'idle';
+    const focusMode = Boolean(
+      options.busyAction === 'install' ||
+      view.execution ||
+      ['committed', 'rolled_back', 'failed'].includes(stateName)
+    );
+    section.classList.toggle('is-quiet', stateName === 'idle');
+    section.classList.toggle('is-offer', stateName === 'update_available');
+    section.classList.toggle('is-focus', focusMode);
+    section.classList.toggle('is-result', ['committed', 'rolled_back', 'failed'].includes(stateName));
+    document.body.classList.toggle('consent-update-focus', focusMode);
     const card = document.createElement('div');
-    card.className = 'consent-update-card state-' + (state.state || 'idle');
+    card.className = 'consent-update-card state-' + stateName;
 
     const head = document.createElement('div');
     head.className = 'consent-update-head';
@@ -350,6 +362,14 @@
     version.textContent = copy.version;
     head.append(title, version);
 
+    const route = document.createElement('div');
+    route.className = 'consent-update-route';
+    const currentVersion = state.currentVersion ? 'v' + state.currentVersion : '';
+    const latestVersion = state.latestVersion ? 'v' + state.latestVersion : '';
+    route.textContent = currentVersion && latestVersion && currentVersion !== latestVersion
+      ? currentVersion + ' → ' + latestVersion
+      : latestVersion || currentVersion;
+
     const detail = document.createElement('p');
     detail.className = 'consent-update-detail';
     detail.textContent = copy.detail;
@@ -369,6 +389,9 @@
     const phase = document.createElement('div');
     phase.className = 'consent-update-phase';
     phase.textContent = copy.phase;
+    const showPhaseText = Boolean(copy.phase && copy.phase !== copy.detail);
+    const steps = createUpdateSteps(stateName);
+    const footnote = createUpdateFootnote(stateName);
 
     const actions = document.createElement('div');
     actions.className = 'consent-update-actions';
@@ -387,10 +410,15 @@
     live.setAttribute('aria-live', 'polite');
     live.textContent = ['committed', 'rolled_back', 'failed'].includes(state.state) ? copy.phase : '';
 
-    card.append(head, detail);
+    card.append(head);
+    if ((focusMode || stateName === 'update_available') && route.textContent) card.append(route);
+    card.append(detail);
     if (!['idle', 'update_available'].includes(state.state) || options.busyAction === 'check') {
-      card.append(progressEl, phase);
+      card.append(progressEl);
+      if (showPhaseText) card.append(phase);
     }
+    if (steps) card.append(steps);
+    if (footnote) card.append(footnote);
     card.append(actions, live);
     if (state.state === 'failed' && (state.code || state.message)) {
       const details = document.createElement('details');
@@ -407,6 +435,57 @@
     }
   }
 
+  function createUpdateSteps(state) {
+    const activeIndex = {
+      downloading: 0,
+      staged: 1,
+      waiting_for_idle: 1,
+      applying: 2,
+      awaiting_health: 2,
+      committed: 3,
+      rolled_back: 2
+    }[state];
+    if (!Number.isInteger(activeIndex)) return null;
+    const labels = [
+      utx('Download and verify', '下载并验证'),
+      utx('Wait for a safe point', '等待安全时机'),
+      utx('Restart and health check', '重启并健康检查')
+    ];
+    const list = document.createElement('ol');
+    list.className = 'consent-update-steps';
+    labels.forEach((label, index) => {
+      const item = document.createElement('li');
+      const status = state === 'committed'
+        ? 'done'
+        : state === 'rolled_back' && index === 2
+          ? 'error'
+          : index < activeIndex
+            ? 'done'
+            : index === activeIndex
+              ? 'active'
+              : 'pending';
+      item.className = 'is-' + status;
+      const marker = document.createElement('span');
+      marker.className = 'consent-update-step-marker';
+      marker.textContent = String(index + 1);
+      const text = document.createElement('span');
+      text.textContent = label;
+      item.append(marker, text);
+      list.append(item);
+    });
+    return list;
+  }
+
+  function createUpdateFootnote(state) {
+    if (!['downloading', 'staged', 'waiting_for_idle', 'applying', 'awaiting_health'].includes(state)) return null;
+    const note = document.createElement('p');
+    note.className = 'consent-update-footnote';
+    note.textContent = ['applying', 'awaiting_health'].includes(state)
+      ? utx('This popup may close briefly while the extension restarts.', '扩展重启时此窗口可能会短暂关闭。')
+      : utx('You can close this popup. The update continues in the background.', '可以关闭此窗口，更新会在后台继续。');
+    return note;
+  }
+
   function getVisibleActions(view = {}, busyAction = '') {
     const state = view.state?.state || 'idle';
     if (busyAction) {
@@ -422,6 +501,9 @@
       return [{ id: 'later', label: utx('Later', '稍后提醒'), primary: false }];
     }
     if (['downloading', 'applying', 'awaiting_health', 'checking'].includes(state)) return [];
+    if (state === 'committed') {
+      return [{ id: 'dismiss', label: utx('Done', '完成'), primary: true }];
+    }
     if (['failed', 'rolled_back'].includes(state)) {
       return [{ id: 'retry', label: utx('Retry', '重试'), primary: true }];
     }
@@ -434,6 +516,7 @@
       retry: utx('Checking...', '正在检查...'),
       install: utx('Starting update...', '正在启动更新...'),
       later: utx('Saving...', '正在保存...')
+      , dismiss: utx('Closing...', '正在关闭...')
     }[action] || utx('Working...', '处理中...');
   }
 
@@ -442,7 +525,7 @@
     const latest = state.latestVersion ? 'v' + state.latestVersion : '';
     const blocker = formatBlocker(state.blocker);
     const map = {
-      idle: [utx('Stable updates', '稳定版更新'), utx('Up to date', '已是最新版'), utx('Automatically checks signed stable releases.', '自动检查经过签名验证的稳定版本。')],
+      idle: [utx('Updates', '更新'), utx('Up to date', '已是最新版'), utx('Signed stable channel.', '签名稳定版通道。')],
       checking: [utx('Checking for updates', '正在检查更新'), '', utx('Checking the latest signed stable release', '正在检查最新签名稳定版本')],
       update_available: [utx('Update available', '发现新版本'), latest, view.snoozed ? utx('Reminder paused. Update remains ready here.', '提醒已暂停，仍可随时从这里更新。') : utx('Signed stable update for the extension and Native Host.', '扩展与 Native Host 的签名稳定更新。')],
       downloading: [utx('Downloading update', '正在下载更新'), latest, utx('Downloading and verifying the coordinated update', '正在下载并验证协调更新')],
@@ -450,7 +533,7 @@
       waiting_for_idle: [utx('Waiting for a safe point', '正在等待安全时机'), latest, blocker],
       applying: [utx('Installing update', '正在安装更新'), latest, utx('Installing extension and Native Host', '正在安装扩展与 Native Host')],
       awaiting_health: [utx('Checking updated components', '正在检查更新后的组件'), latest, utx('Restarting and checking both components', '正在重启并检查两个组件')],
-      committed: [utx('Update complete', '更新完成'), latest || current, utx('Extension and Native Host were updated together.', '扩展与 Native Host 已同步更新。')],
+      committed: [utx('Update complete', '更新完成'), latest || current, utx('Extension and Native Host are healthy.', '扩展与 Native Host 均运行正常。')],
       rolled_back: [utx('Previous version restored', '已恢复上一版本'), current, utx('Health check failed, so the previous coordinated pair was restored.', '健康检查失败，已恢复上一组协调版本。')],
       failed: [utx('Update could not continue', '更新无法继续'), latest, state.message || utx('Check the details and retry.', '请查看详情后重试。')]
     };
@@ -482,6 +565,7 @@
     const style = document.createElement('style');
     style.id = 'codex-overleaf-consent-update-styles';
     style.textContent = [
+      'html { overflow:hidden; background:#171918; }',
       'body { width:344px; padding:16px; background:#171918; color:#eceeec; font-family:"Avenir Next","Segoe UI",sans-serif; }',
       'h1 { font-size:16px; letter-spacing:-.01em; }',
       '.version-status { color:#a8ada9; }',
@@ -504,6 +588,31 @@
       '.consent-update-actions button:focus-visible { outline:2px solid #79b8f2; outline-offset:2px; }',
       '.consent-update-live { position:absolute; width:1px; height:1px; overflow:hidden; clip:rect(0 0 0 0); }',
       '.consent-update-card details { margin-top:10px; color:#a9aea9; font-size:11px; } .consent-update-card details code { background:#202320; color:#c9ceca; }',
+      'body .consent-updates { margin-top:16px; padding:13px 0 0; border:0; border-top:1px solid #303733; border-radius:0; background:transparent; }',
+      'body .consent-update-card { border:0; padding:0; background:transparent; box-shadow:none; }',
+      'body .consent-updates.is-quiet .consent-update-card { display:grid; grid-template-columns:minmax(0,1fr) auto; align-items:center; gap:6px 12px; }',
+      'body .consent-updates.is-quiet .consent-update-detail { display:none; }',
+      'body .consent-updates.is-quiet .consent-update-actions { grid-column:2; grid-row:1; margin:0; }',
+      'body .consent-updates.is-quiet .consent-update-actions button { width:auto; min-width:0; padding:5px 9px; border-color:transparent; background:transparent; color:#aeb7b1; }',
+      'body .consent-updates.is-offer, body .consent-updates.is-focus { padding-top:0; border-top:0; }',
+      'body .consent-updates.is-offer .consent-update-card { padding:15px; border:1px solid #34433b; border-radius:12px; background:linear-gradient(145deg,#202622,#1b201d); box-shadow:0 12px 32px rgba(0,0,0,.16); }',
+      'body.consent-update-focus { width:340px; min-height:340px; padding:20px; }',
+      'body.consent-update-focus > .version-status, body.consent-update-focus > #open-panel, body.consent-update-focus > #status, body.consent-update-focus > .install { display:none !important; }',
+      'body.consent-update-focus > h1 { margin-bottom:18px; }',
+      'body.consent-update-focus .consent-updates { margin-top:0; padding:0; border:0; }',
+      'body.consent-update-focus .consent-update-card { min-height:274px; padding:18px; border:1px solid #35443d; border-radius:14px; background:radial-gradient(circle at 95% 0,rgba(79,158,232,.12),transparent 42%),linear-gradient(150deg,#202522,#1a1e1c); box-shadow:0 18px 42px rgba(0,0,0,.24); }',
+      '.consent-update-route { margin:9px 0 0; color:#d9e6dd; font:600 13px/1.2 ui-monospace,SFMono-Regular,Menlo,monospace; letter-spacing:-.02em; }',
+      '.consent-update-steps { display:grid; gap:10px; margin:16px 0 0; padding:0; list-style:none; }',
+      '.consent-update-steps li { display:grid; grid-template-columns:24px minmax(0,1fr); align-items:center; gap:9px; color:#8f9892; font-size:12px; }',
+      '.consent-update-step-marker { display:inline-flex; width:22px; height:22px; align-items:center; justify-content:center; border:1px solid #3a413d; border-radius:999px; color:#89918c; font:700 10px/1 ui-monospace,monospace; }',
+      '.consent-update-steps li.is-done { color:#aeb9b2; }',
+      '.consent-update-steps li.is-done .consent-update-step-marker { border-color:#42694f; color:#8bd79e; background:#21392a; }',
+      '.consent-update-steps li.is-active { color:#edf2ef; }',
+      '.consent-update-steps li.is-active .consent-update-step-marker { border-color:#68a8e2; color:#eef7ff; background:#2d669a; box-shadow:0 0 0 3px rgba(98,168,232,.12); }',
+      '.consent-update-steps li.is-error .consent-update-step-marker { border-color:#9d554f; color:#ffd9d5; background:#542b28; }',
+      '.consent-update-footnote { margin:15px 0 0; padding-top:12px; border-top:1px solid #303733; color:#929b95; font-size:11px; }',
+      'body .consent-updates.is-result .consent-update-progress { margin-top:18px; }',
+      'body .consent-updates.is-focus .consent-update-actions { margin-top:18px; }',
       '@keyframes consent-progress { 0% { transform:translateX(-110%); } 100% { transform:translateX(240%); } }',
       '@media (prefers-reduced-motion:reduce) { .consent-update-progress.is-indeterminate span { animation:none; width:65% !important; } }'
     ].join('\n');

package/extension/src/shared/compatibility.js

@@ -12,7 +12,7 @@
   const MIN_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_EXTENSION_VERSION = '1.0.0';
-  const BUILD_TARGET_VERSION = '1.9.5';
+  const BUILD_TARGET_VERSION = '1.9.6';
   const DEFAULT_CHROME_EXTENSION_ID = 'illdpneeeopfffmiepaejglgmhpmdhdc';
   const REQUIRED_CAPABILITIES = Object.freeze([
     'bridgePing',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-overleaf-link",
-  "version": "1.9.5",
+  "version": "1.9.6",
   "description": "Cross-platform Chrome bridge that connects Codex to the active Overleaf project.",
   "license": "MIT",
   "type": "commonjs",