codex-overleaf-link 1.9.7 → 1.9.9

package/README.md

@@ -3,7 +3,7 @@
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
   <p>
-    <img src="https://img.shields.io/badge/version-1.9.7-blue" alt="version">
+    <img src="https://img.shields.io/badge/version-1.9.9-blue" alt="version">
     <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
@@ -38,14 +38,14 @@ One command installs the managed native host **and** managed extension runtime.
 macOS / Linux:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.7 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.7/install.sh)"
+CODEX_OVERLEAF_REF=v1.9.9 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.9/install.sh)"
 ```
 
 Windows PowerShell:
 
 ```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.7/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v1.9.7'
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.9/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v1.9.9'
 powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
@@ -56,7 +56,7 @@ Then, in the `chrome://extensions` tab the script opened: enable **Developer mod
 `npm exec` installs the same managed native host and extension runtime without keeping a source checkout. Use it if you prefer a pinned npm package.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.7 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.9 -- install-managed
 ```
 
 Then, in `chrome://extensions`, enable **Developer mode**, click **Load unpacked**, and select the managed extension path printed by the command. The Release extension zip remains available for explicitly unmanaged/manual installations.
@@ -86,9 +86,9 @@ npm installs, updates, and uninstalls the coordinated managed extension/native p
 
 | Action | Command |
 |--------|---------|
-| Install / update | `npm exec --yes codex-overleaf-link@1.9.7 -- install-managed` |
-| Diagnose | `npm exec --yes codex-overleaf-link@1.9.7 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-managed` |
+| Install / update | `npm exec --yes codex-overleaf-link@1.9.9 -- install-managed` |
+| Diagnose | `npm exec --yes codex-overleaf-link@1.9.9 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-managed` |
 
 Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id.
 
@@ -98,13 +98,13 @@ Managed installations discover signed stable updates automatically and apply the
 
 ## GitHub Release Artifacts
 
-The v1.9.7 GitHub Release contains:
+The v1.9.9 GitHub Release contains:
 
-- `codex-overleaf-link-extension-v1.9.7.zip`: loadable Chrome extension package for manual unpacked installation.
-- `codex-overleaf-native-host-v1.9.7.tar.gz`: native host runtime files used by the installer and release verification.
-- `codex-overleaf-link-1.9.7.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
-- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.7` when run directly from the release artifact.
-- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.7` when run directly from the release artifact.
+- `codex-overleaf-link-extension-v1.9.9.zip`: loadable Chrome extension package for manual unpacked installation.
+- `codex-overleaf-native-host-v1.9.9.tar.gz`: native host runtime files used by the installer and release verification.
+- `codex-overleaf-link-1.9.9.tgz`: npm native host CLI package for pinned install, doctor, and uninstall flows.
+- `install.sh`: release-pinned macOS / Linux installer that defaults to `v1.9.9` when run directly from the release artifact.
+- `install.ps1`: release-pinned Windows PowerShell installer that defaults to `v1.9.9` when run directly from the release artifact.
 - `uninstall-native-host.mjs`: native host uninstaller that removes the Chrome Native Messaging manifest, bridge executable, and runtime copy.
 - `nativeHostPlatform.js`, `manifest.js`, `runtimeInstaller.js`: helper files required by the loose uninstaller asset.
 - `SHA256SUMS` and `release-manifest.json`: checksum and artifact metadata for release verification.
@@ -115,7 +115,7 @@ The v1.9.7 GitHub Release contains:
 Remove the native host (use `--browser chromium` on Linux Chromium):
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-managed
+npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-managed
 ```
 
 The same command works on Windows PowerShell. If you installed from a manual checkout or source installer, you can also run `npm run uninstall:native` inside the repo, use `node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs` on macOS / Linux, or use `node $env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs` on Windows PowerShell.
@@ -150,13 +150,13 @@ Then remove the extension from `chrome://extensions`. To delete local data: on m
 Linux Chromium install or update:
 
 ```bash
-CODEX_OVERLEAF_REF=v1.9.7 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.7/install.sh)" -- --browser chromium
+CODEX_OVERLEAF_REF=v1.9.9 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v1.9.9/install.sh)" -- --browser chromium
 ```
 
 Linux Chromium uninstall:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-managed --browser chromium
+npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-managed --browser chromium
 ```
 
 ## Features
@@ -291,7 +291,7 @@ Composer attachments are turn-scoped Codex context. Limits are 8 attachments per
 Re-run any [native host installer](#install), reload the extension in `chrome://extensions`, then refresh the Overleaf tab. This also fixes extension/native version mismatch and native protocol mismatch.
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.7 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.9 -- install-managed
 ```
 
 **The Windows popup or panel shows a Bash recovery command**
@@ -340,8 +340,8 @@ Use this matrix for release-candidate signoff and compatibility reports. Record
 | Browser/channel/version | Google Chrome channel and version. | Google Chrome channel and version. | Google Chrome channel and version. | Chromium channel/package and version. |
 | Install mode | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout. | Manual unpacked extension from GitHub Release zip or checkout; native host installed with `--browser chromium`. |
 | Extension id | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. | Bundled id `illdpneeeopfffmiepaejglgmhpmdhdc`, or actual custom id passed with `--extension-id`. |
-| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.7 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.7 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.7 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.7 -- install-managed --browser chromium` |
-| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-managed --browser chromium` |
+| Installer/update command | `npm exec --yes codex-overleaf-link@1.9.9 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.9 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.9 -- install-managed` | `npm exec --yes codex-overleaf-link@1.9.9 -- install-managed --browser chromium` |
+| Uninstall command | `npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-managed` | `npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-managed --browser chromium` |
 | Manifest/registry path | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` -> `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime\com.codex.overleaf.json` | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
 | Bridge/runtime/source path | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`; runtime `%LOCALAPPDATA%\CodexOverleaf\native-host-runtime`; source `%LOCALAPPDATA%\CodexOverleaf\source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. | Bridge `~/.codex-overleaf/codex-overleaf-bridge`; runtime `~/.codex-overleaf/native-host-runtime`; source `~/.codex-overleaf/source`. |
 | Node/Git/Codex/TeX | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. | Node.js >= 20; Git; Codex CLI installed and logged in; TeX optional. |
@@ -377,7 +377,7 @@ Contributions are welcome. Please open an issue before submitting large changes
 The recommended v1.9 installation owns one stable unpacked-extension directory and a versioned native-host directory:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.7 -- install-managed
+npm exec --yes codex-overleaf-link@1.9.9 -- install-managed
 ```
 
 Load the printed extension path once from `chrome://extensions`. Starting with the next signed stable release, Codex Overleaf Link checks GitHub Releases automatically, downloads and verifies the coordinated extension/native-host bundle, waits until every connected Overleaf tab is saved and idle, and then updates both components together. A failed health check restores the previous version automatically.
@@ -387,11 +387,11 @@ The stable updater ignores drafts and prereleases, performs no telemetry, and ca
 The legacy native-only installer remains available for source or unmanaged extension directories:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.7 -- install-native
+npm exec --yes codex-overleaf-link@1.9.9 -- install-native
 ```
 
 Legacy native-only installations can be removed with:
 
 ```bash
-npm exec --yes codex-overleaf-link@1.9.7 -- uninstall-native
+npm exec --yes codex-overleaf-link@1.9.9 -- uninstall-native
 ```

package/extension/bootstrap/background.js

@@ -6,11 +6,23 @@ const UPDATE_STATE_KEY = 'codex-overleaf-managed-update-state-v1';
 const UPDATE_RELOAD_TABS_KEY = 'codex-overleaf-managed-update-tabs-v1';
 const CHECK_ALARM = 'codex-overleaf-stable-update-check';
 const IDLE_ALARM = 'codex-overleaf-staged-update-idle';
-const OVERLEAF_MATCHES = [
+const OVERLEAF_EDITOR_MATCHES = [
   'https://www.overleaf.com/project/*',
   'https://overleaf.com/project/*'
 ];
+const OVERLEAF_MATCHES = [
+  'https://www.overleaf.com/project',
+  'https://overleaf.com/project',
+  ...OVERLEAF_EDITOR_MATCHES
+];
 const APPLYING_STATES = new Set(['applying', 'awaiting_health', 'rolling_back']);
+const FAST_IDLE_RETRY_BLOCKERS = new Set(['recent_user_activity', 'save_state_not_stable']);
+const FAST_IDLE_RETRY_MS = 4000;
+const SLOW_IDLE_RETRY_MS = 15000;
+const IDLE_RETRY_ALARM_MINUTES = 0.5;
+
+let idleRetryTimer = null;
+let idleApplyPromise = null;
 
 let runtimeLoadError = null;
 try {
@@ -80,7 +92,7 @@ async function initializeBootstrap() {
   chrome.alarms.create(CHECK_ALARM, { delayInMinutes: 0.5, periodInMinutes: 24 * 60 });
   const state = await getUpdateState();
   if (state.state === 'staged' || state.state === 'waiting_for_idle') {
-    chrome.alarms.create(IDLE_ALARM, { delayInMinutes: 0.1 });
+    scheduleIdleRetry(state.blockers);
   }
 }
 
@@ -183,19 +195,28 @@ async function checkAndStage(options = {}) {
     blockers: []
   });
   await broadcastUpdateState('staged');
-  chrome.alarms.create(IDLE_ALARM, { delayInMinutes: 0.1 });
   return tryApplyStagedUpdate();
 }
 
-async function tryApplyStagedUpdate() {
+function tryApplyStagedUpdate() {
+  if (idleApplyPromise) return idleApplyPromise;
+  idleApplyPromise = tryApplyStagedUpdateCore().finally(() => {
+    idleApplyPromise = null;
+  });
+  return idleApplyPromise;
+}
+
+async function tryApplyStagedUpdateCore() {
+  cancelIdleRetryTimer();
   const state = await getUpdateState();
   if (!['staged', 'waiting_for_idle'].includes(state.state)) {
+    await clearIdleRetry();
     return state;
   }
   if (Number(state.postponeUntil || 0) > Date.now()) {
     return state;
   }
-  const tabs = await chrome.tabs.query({ url: OVERLEAF_MATCHES });
+  const tabs = await chrome.tabs.query({ url: OVERLEAF_EDITOR_MATCHES });
   const probes = await Promise.all(tabs.map(tab => probeTabIdle(tab)));
   const nativeGate = await requestInternal({ method: 'update.canApply', params: {} }).catch(error => ({
     ok: false,
@@ -210,10 +231,12 @@ async function tryApplyStagedUpdate() {
       blocker: blockers[0],
       blockers
     });
-    chrome.alarms.create(IDLE_ALARM, { delayInMinutes: 1 });
+    await broadcastUpdateState('waiting_for_idle');
+    scheduleIdleRetry(blockers);
     return waiting;
   }
 
+  await clearIdleRetry();
   await chrome.storage.local.set({ [UPDATE_RELOAD_TABS_KEY]: tabs.map(tab => tab.id).filter(Number.isInteger) });
   await setUpdateState({ ...state, state: 'applying', blocker: '', blockers: [] });
   await broadcastUpdateState('applying');
@@ -229,6 +252,30 @@ async function tryApplyStagedUpdate() {
   return { state: 'awaiting_health' };
 }
 
+function scheduleIdleRetry(blockers = []) {
+  cancelIdleRetryTimer();
+  const values = Array.isArray(blockers) ? blockers.filter(Boolean) : [];
+  const onlyFastBlockers = values.length > 0 && values.every(value => FAST_IDLE_RETRY_BLOCKERS.has(value));
+  const delayMs = onlyFastBlockers ? FAST_IDLE_RETRY_MS : SLOW_IDLE_RETRY_MS;
+  idleRetryTimer = setTimeout(() => {
+    idleRetryTimer = null;
+    tryApplyStagedUpdate().catch(() => {});
+  }, delayMs);
+  chrome.alarms.create(IDLE_ALARM, { delayInMinutes: IDLE_RETRY_ALARM_MINUTES });
+}
+
+function cancelIdleRetryTimer() {
+  if (idleRetryTimer !== null) {
+    clearTimeout(idleRetryTimer);
+    idleRetryTimer = null;
+  }
+}
+
+async function clearIdleRetry() {
+  cancelIdleRetryTimer();
+  await chrome.alarms.clear(IDLE_ALARM).catch(() => {});
+}
+
 async function probeTabIdle(tab) {
   if (!Number.isInteger(tab?.id)) {
     return { idle: false, blockers: ['tab_unavailable'] };

package/extension/bootstrap/manifest.template.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Codex Overleaf Link",
-  "version": "1.9.7",
+  "version": "1.9.9",
   "description": "Connect the active Overleaf project to a local Codex bridge.",
   "icons": {
     "16": "assets/icons/icon16.png",
@@ -17,6 +17,8 @@
     "storage"
   ],
   "host_permissions": [
+    "https://www.overleaf.com/project",
+    "https://overleaf.com/project",
     "https://www.overleaf.com/project/*",
     "https://overleaf.com/project/*"
   ],

package/extension/bootstrap/popup.html

@@ -13,18 +13,6 @@
     </div>
     <button id="open-panel" data-popup-context>Open panel in Overleaf</button>
     <p id="status" data-popup-context>Use this on an Overleaf project tab.</p>
-    <section class="updates" aria-labelledby="updates-title">
-      <div class="section-head">
-        <strong id="updates-title">Stable updates</strong>
-        <span id="update-state" class="update-state">Checking</span>
-      </div>
-      <p id="update-versions">Current unknown · Latest unknown</p>
-      <p id="update-detail" class="muted">Automatic updates apply when Overleaf is saved and idle.</p>
-      <div class="update-actions">
-        <button id="check-update" class="secondary" type="button">Check now</button>
-        <button id="postpone-update" class="quiet" type="button" hidden>Later</button>
-      </div>
-    </section>
     <div id="native-install" class="install" data-popup-context hidden>
       <strong>Native host attention required</strong>
       <p>Run this command in Terminal, then reload this extension in Chrome.</p>
@@ -34,6 +22,5 @@
     <script src="../runtime/src/shared/compatibility.js"></script>
     <script src="../runtime/src/popup.js"></script>
     <script src="updateStatus.js"></script>
-    <script src="popup.js"></script>
   </body>
 </html>

package/extension/bootstrap/update.js

@@ -176,10 +176,7 @@
     if (ACTIVE_PHASES.has(phase)) {
       return [{ id: 'close', label: 'Close window', kind: 'quiet' }];
     }
-    return [
-      { id: 'close', label: 'Close', kind: 'quiet' },
-      { id: 'check', label: 'Check latest', kind: 'primary' }
-    ];
+    return [{ id: 'close', label: 'Close', kind: 'quiet' }];
   }
 
   function renderActions(phase) {

package/extension/runtime-manifest.json

@@ -1,6 +1,8 @@
 {
   "schemaVersion": 1,
   "matches": [
+    "https://www.overleaf.com/project",
+    "https://overleaf.com/project",
     "https://www.overleaf.com/project/*",
     "https://overleaf.com/project/*"
   ],

package/extension/src/backgroundUpdateCoordinator.js

@@ -10,6 +10,8 @@
   const CHECK_REQUEST_TIMEOUT_MS = 15 * 1000;
   const LEGACY_GUARD = Number.MAX_SAFE_INTEGER;
   const OVERLEAF_MATCHES = [
+    'https://www.overleaf.com/project',
+    'https://overleaf.com/project',
     'https://www.overleaf.com/project/*',
     'https://overleaf.com/project/*'
   ];
@@ -412,13 +414,16 @@
   }
 
   function isAllowedSender(sender) {
-    if (sender?.id && sender.id !== chrome.runtime.id) return false;
-    if (!sender?.tab) return true;
+    if (sender?.id !== chrome.runtime.id) return false;
     try {
-      const url = new URL(sender.tab.url || '');
+      const url = new URL(sender?.url || sender?.tab?.url || '');
+      const extensionRoot = new URL(chrome.runtime.getURL(''));
+      if (url.origin === extensionRoot.origin) {
+        return url.pathname === '/bootstrap/popup.html';
+      }
       return url.protocol === 'https:' &&
         (url.hostname === 'www.overleaf.com' || url.hostname === 'overleaf.com') &&
-        url.pathname.startsWith('/project/');
+        (url.pathname === '/project' || url.pathname.startsWith('/project/'));
     } catch (_error) {
       return false;
     }

package/extension/src/content/contentRuntime.js

@@ -715,7 +715,7 @@
       reviewAction: trackedChangeInFlight.size > 0,
       dialog: Boolean(activePluginConfirmResolve)
     }),
-    checkSaved: () => callPageBridge('waitForSaveState', { deadlineMs: 0, pollIntervalMs: 1 }),
+    checkSaved: () => callPageBridge('waitForSaveState', { deadlineMs: 1500, pollIntervalMs: 100, requirePositiveSignal: true }),
     onApplyingChange: applying => { if (panel) panel.dataset.updating = applying ? 'true' : 'false'; },
     showToast: (...args) => showPluginToast(...args),
     getStateMessage: state => ({

package/extension/src/content/settingsPanel.js

@@ -146,6 +146,18 @@
               <p class="codex-set-row-help" data-i18n="languageHelp">Panel display language.</p>
             </div>
           </details>
+          <details class="codex-set-group" data-set-group="updates" open>
+            <summary class="codex-set-group-head">
+              <span class="codex-set-group-title">${codexSetIcon('appearance')}<span data-i18n="softwareUpdatesTitle">Software updates</span></span>
+            </summary>
+            <div class="codex-set-card" data-update-settings>
+              <div class="codex-set-row">
+                <p class="codex-set-row-help" data-update-settings-summary data-i18n="softwareUpdatesHelp">Automatically checks signed stable releases for the Extension and Native Host.</p>
+                <p class="codex-set-note" data-update-settings-state aria-live="polite" hidden></p>
+                <button type="button" class="codex-set-btn" data-check-updates data-i18n="checkForUpdates">Check for updates</button>
+              </div>
+            </div>
+          </details>
           <details class="codex-set-group" data-set-group="storage" data-storage-card>
             <summary class="codex-set-group-head">
               <span class="codex-set-group-title">${codexSetIcon('database')}<span data-i18n="storageTitle">History &amp; storage</span></span>

package/extension/src/content/updateIdle.js

@@ -6,7 +6,11 @@
     let stableSavedSince = 0;
     let applying = false;
     const documentRef = options.document || root.document;
-    const noteActivity = () => { lastUserActivityAt = Date.now(); stableSavedSince = 0; };
+    const noteActivity = event => {
+      if (event?.target?.closest?.('#codex-overleaf-panel')) return;
+      lastUserActivityAt = Date.now();
+      stableSavedSince = 0;
+    };
     for (const eventName of ['input', 'keydown', 'pointerdown']) {
       documentRef?.addEventListener?.(eventName, noteActivity, true);
     }

package/extension/src/content/updateNotice.js

@@ -5,9 +5,10 @@
   let currentView = null;
   let mountedPanel = null;
   let actionInFlight = false;
-  let completionTimer = null;
   let listenerInstalled = false;
   let getLocale = () => '';
+  let settingsRoot = null;
+  let settingsActionInFlight = false;
 
   function mount(panelLike, options = {}) {
     if (typeof options.getLocale === 'function') {
@@ -16,10 +17,12 @@
     const panel = panelLike?.panelEl || panelLike;
     if (!panel) return;
     if (mountedPanel === panel) {
+      bindSettingsControls(panel);
       render();
       return;
     }
     mountedPanel = panel;
+    bindSettingsControls(panel);
     notice?.remove();
     notice = document.createElement('section');
     notice.className = 'codex-update-notice';
@@ -61,8 +64,9 @@
     try {
       currentView = await request({
         install: 'codex-overleaf/consent-update-install',
+        retry: 'codex-overleaf/consent-update-check',
         later: 'codex-overleaf/consent-update-later',
-        retry: 'codex-overleaf/consent-update-check'
+        dismiss: 'codex-overleaf/consent-update-dismiss'
       }[action]);
     } catch (error) {
       currentView = {
@@ -93,9 +97,53 @@
     return response.result;
   }
 
+  function bindSettingsControls(panel) {
+    settingsRoot = panel;
+    const button = panel.querySelector?.('[data-check-updates]');
+    if (button && button.dataset.updateSettingsBound !== 'true') {
+      button.dataset.updateSettingsBound = 'true';
+      button.addEventListener('click', handleSettingsAction);
+    }
+    renderSettings();
+  }
+
+  async function handleSettingsAction() {
+    if (settingsActionInFlight) return;
+    settingsActionInFlight = true;
+    renderSettings();
+    const stateName = currentView?.state?.state || 'idle';
+    try {
+      if (stateName === 'update_available') {
+        currentView = await request('codex-overleaf/consent-update-install');
+      } else if (['failed', 'rolled_back'].includes(stateName)) {
+        currentView = await request('codex-overleaf/consent-update-check');
+      } else if (!['downloading', 'staged', 'waiting_for_idle', 'applying', 'awaiting_health'].includes(stateName)) {
+        currentView = await request('codex-overleaf/consent-update-check');
+      } else {
+        return;
+      }
+    } catch (error) {
+      currentView = {
+        ...(currentView || {}),
+        state: {
+          ...(currentView?.state || {}),
+          state: 'failed',
+          code: error?.code || 'update_failed',
+          message: error?.message || tx('Update check failed.', '更新检查失败。')
+        },
+        progress: { value: 0, determinate: true, phase: 'failed' },
+        showPanel: true
+      };
+    } finally {
+      settingsActionInFlight = false;
+      render();
+    }
+  }
+
   function render() {
-    if (!notice || !currentView) return;
-    clearTimeout(completionTimer);
+    if (!currentView) return;
+    renderSettings();
+    if (!notice) return;
     if (!currentView.showPanel) {
       notice.hidden = true;
       notice.replaceChildren();
@@ -150,11 +198,53 @@
     if (focusedAction) {
       notice.querySelector('[data-update-notice-action="' + focusedAction + '"]:not(:disabled)')?.focus();
     }
-    if (state.state === 'committed') {
-      completionTimer = setTimeout(() => {
-        if (notice?.dataset.state === 'committed') notice.hidden = true;
-      }, 5000);
+  }
+
+  function renderSettings() {
+    if (!settingsRoot) return;
+    const summary = settingsRoot.querySelector?.('[data-update-settings-summary]');
+    const status = settingsRoot.querySelector?.('[data-update-settings-state]');
+    const button = settingsRoot.querySelector?.('[data-check-updates]');
+    if (!summary || !status || !button) return;
+
+    const state = currentView?.state || {};
+    const stateName = state.state || 'idle';
+    const manifestVersion = typeof chrome.runtime.getManifest === 'function'
+      ? chrome.runtime.getManifest().version
+      : '';
+    const currentVersion = state.currentVersion || manifestVersion || '';
+    const latestVersion = state.latestVersion || '';
+    const activeStates = ['downloading', 'staged', 'waiting_for_idle', 'applying', 'awaiting_health'];
+    let summaryText = tx(
+      `Current v${currentVersion}. Signed stable releases are checked automatically.`,
+      `当前版本 v${currentVersion}。系统会自动检查签名稳定版本。`
+    );
+    let statusText = '';
+    let buttonText = tx('Check for updates', '检查更新');
+
+    if (stateName === 'checking') {
+      statusText = tx('Checking the latest stable release…', '正在检查最新稳定版本…');
+      buttonText = tx('Checking…', '检查中…');
+    } else if (stateName === 'update_available') {
+      summaryText = tx(`Stable v${latestVersion} is available.`, `稳定版本 v${latestVersion} 已可用。`);
+      statusText = tx('Ready to download and verify.', '已可下载并验证。');
+      buttonText = tx('Update now', '立即更新');
+    } else if (activeStates.includes(stateName)) {
+      statusText = getCopy(state).detail;
+      buttonText = tx('Update in progress', '更新进行中');
+    } else if (stateName === 'failed' || stateName === 'rolled_back') {
+      statusText = state.message || getCopy(state).detail;
+      buttonText = tx('Retry', '重试');
+    } else if (stateName === 'committed') {
+      summaryText = tx(`Current v${currentVersion}. Update completed successfully.`, `当前版本 v${currentVersion}。更新已成功完成。`);
+      statusText = tx('Both components passed the health check.', '两个组件均已通过健康检查。');
     }
+
+    summary.textContent = summaryText;
+    status.textContent = statusText;
+    status.hidden = !statusText;
+    button.textContent = buttonText;
+    button.disabled = settingsActionInFlight || stateName === 'checking' || activeStates.includes(stateName);
   }
 
   function visibleActions(state) {
@@ -171,12 +261,15 @@
     if (['failed', 'rolled_back'].includes(state)) {
       return [{ id: 'retry', label: tx('Retry', '重试'), primary: true }];
     }
+    if (state === 'committed') {
+      return [{ id: 'dismiss', label: tx('Done', '完成'), primary: true }];
+    }
     return [];
   }
 
   function getCopy(state) {
     const target = state.latestVersion ? 'v' + state.latestVersion : '';
-    const blocker = blockerCopy(state.blocker);
+    const blocker = blockersCopy(state.blockers?.length ? state.blockers : [state.blocker]);
     return {
       update_available: {
         eyebrow: tx('Update available', '发现新版本'),
@@ -230,15 +323,35 @@
     return {
       unsaved: tx('Overleaf has not confirmed that this document is saved.', 'Overleaf 尚未确认当前文档已保存。'),
       active_run: tx('A Codex task is still running.', 'Codex 任务仍在运行。'),
+      run: tx('A Codex task is still running in an Overleaf tab.', '某个 Overleaf 标签页中的 Codex 任务仍在运行。'),
       cancelling: tx('Cancellation is still settling.', '取消操作仍在收尾。'),
       storage_write: tx('Extension state is still being saved.', '扩展状态仍在保存。'),
+      storage: tx('Extension state is still being saved.', '扩展状态仍在保存。'),
       review_action: tx('Accept or Undo is still running.', '接受或撤销操作仍在进行。'),
+      reviewAction: tx('Accept or Undo is still running.', '接受或撤销操作仍在进行。'),
       dialog_open: tx('A confirmation dialog is open.', '确认对话框仍处于打开状态。'),
+      dialog: tx('A confirmation dialog is open.', '确认对话框仍处于打开状态。'),
+      recent_user_activity: tx('Waiting briefly after the latest editor activity.', '正在等待最近一次编辑操作稳定下来。'),
+      save_state_not_stable: tx('The saved state is being confirmed.', '正在确认稳定的已保存状态。'),
+      save_state_unverified: tx('An Overleaf tab has not verified its saved state yet.', '某个 Overleaf 标签页尚未验证已保存状态。'),
+      tab_probe_timeout: tx('An Overleaf tab did not answer the safety check. Reload that tab if this persists.', '某个 Overleaf 标签页未响应安全检查；若持续出现，请刷新该标签页。'),
+      tab_probe_unavailable: tx('An Overleaf tab needs to be reloaded before it can join the safety check.', '某个 Overleaf 标签页需要刷新后才能参与安全检查。'),
+      tab_unavailable: tx('An Overleaf tab is unavailable for the safety check.', '某个 Overleaf 标签页当前无法完成安全检查。'),
+      idle_probe_failed: tx('The Overleaf safety check failed. Reload the affected tab and retry.', 'Overleaf 安全检查失败；请刷新受影响的标签页后重试。'),
       native_project_locked: tx('Native Host still holds a project lock.', 'Native Host 仍持有项目锁。'),
-      native_run_active: tx('Native Host is still processing a task.', 'Native Host 仍在处理任务。')
+      native_run_active: tx('Native Host is still processing a task.', 'Native Host 仍在处理任务。'),
+      busy: tx('A component is still busy.', '某个组件仍处于忙碌状态。')
     }[value] || tx('Waiting until every Overleaf tab is saved and idle.', '正在等待所有 Overleaf 标签页完成保存并进入空闲状态。');
   }
 
+  function blockersCopy(values = []) {
+    const messages = [...new Set(values.filter(Boolean).map(blockerCopy))];
+    return messages.join(' ') || tx(
+      'Waiting until every Overleaf tab is saved and idle.',
+      '正在等待所有 Overleaf 标签页完成保存并进入空闲状态。'
+    );
+  }
+
   function tx(english, chinese) {
     const locale = String(getLocale() || document.documentElement?.lang || 'en');
     return /^zh\b/i.test(locale) ? chinese : english;

package/extension/src/popup.js

@@ -248,39 +248,9 @@
 
   function scheduleConsentUpdateUi() {
     const start = () => {
-      if (typeof document.createElement !== 'function') return;
-      injectConsentUpdateStyles();
-      const section = ensureUpdateSection();
-      let actionInFlight = false;
-      let currentView = null;
-
-      section.addEventListener('click', async event => {
-        const action = event.target?.closest?.('[data-update-action]')?.dataset?.updateAction;
-        if (!action || actionInFlight) return;
-        actionInFlight = true;
-        renderUpdateSection(section, currentView, { busyAction: action });
-        try {
-          currentView = await sendConsentAction(action);
-        } catch (error) {
-          currentView = failedUpdateView(currentView, error);
-        } finally {
-          actionInFlight = false;
-          renderUpdateSection(section, currentView);
-        }
-      });
-
-      chrome.runtime.onMessage.addListener(message => {
-        if (message?.type !== 'codex-overleaf/consent-update-state') return;
-        currentView = message.view;
-        if (!actionInFlight) renderUpdateSection(section, currentView);
-      });
-
-      sendConsentAction('get')
-        .then(view => {
-          currentView = view;
-          renderUpdateSection(section, view);
-        })
-        .catch(error => renderUpdateSection(section, failedUpdateView(null, error)));
+      if (typeof document.querySelector !== 'function') return;
+      document.querySelector('.updates')?.remove();
+      document.body?.classList?.remove('consent-update-focus');
     };
 
     if (document.readyState === 'loading') {

package/extension/src/shared/compatibility.js

@@ -12,7 +12,7 @@
   const MIN_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_NATIVE_VERSION = '1.0.0';
   const MIN_COMPATIBLE_EXTENSION_VERSION = '1.0.0';
-  const BUILD_TARGET_VERSION = '1.9.7';
+  const BUILD_TARGET_VERSION = '1.9.9';
   const DEFAULT_CHROME_EXTENSION_ID = 'illdpneeeopfffmiepaejglgmhpmdhdc';
   const REQUIRED_CAPABILITIES = Object.freeze([
     'bridgePing',

package/extension/src/shared/i18n.js

@@ -284,6 +284,9 @@
       eventsTruncatedNote: 'Earlier steps of this run were trimmed.',
       newSessionTooltip: 'Start a fresh conversation — the current session\u2019s context will not carry over',
       storageTitle: 'History & storage',
+      softwareUpdatesTitle: 'Software updates',
+      softwareUpdatesHelp: 'Automatically checks signed stable releases for the Extension and Native Host.',
+      checkForUpdates: 'Check for updates',
       storageUsageLoading: 'Calculating usage\u2026',
       storageClearAll: 'Clear all history\u2026',
       storageClearAllHelp: 'Removes every stored session, run and audit record for all projects. Project settings and rules are kept.',
@@ -756,6 +759,9 @@
       eventsTruncatedNote: '本轮更早的步骤已精简。',
       newSessionTooltip: '开启全新对话——当前会话的上下文不会带入',
       storageTitle: '历史与存储',
+      softwareUpdatesTitle: '软件更新',
+      softwareUpdatesHelp: '自动检查 Extension 与 Native Host 的签名稳定版本。',
+      checkForUpdates: '检查更新',
       storageUsageLoading: '正在计算占用…',
       storageClearAll: '清空全部历史…',
       storageClearAllHelp: '删除所有项目已存储的全部会话、运行与审计记录。项目设置与规则会保留。',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-overleaf-link",
-  "version": "1.9.7",
+  "version": "1.9.9",
   "description": "Cross-platform Chrome bridge that connects Codex to the active Overleaf project.",
   "license": "MIT",
   "type": "commonjs",