codex-overleaf-link 2.5.1 → 2.6.5

package/README.md

@@ -2,515 +2,266 @@
   <img src="extension/assets/icons/codex-overleaf-icon.png" width="72" alt="Codex Overleaf Link">
   <h1>Codex Overleaf Link</h1>
   <p><strong>Empower Overleaf with Codex.</strong></p>
-  <p><img src="https://img.shields.io/badge/version-2.5.1-blue" alt="version 2.5.1"></p>
-  <p>English | <a href="README.zh-CN.md">简体中文</a></p>
-  <p>Chrome · macOS / Windows / Linux · Local Codex</p>
   <p>
-    <img src="https://img.shields.io/badge/platform-macOS%20%2F%20Windows%20%2F%20Linux-lightgrey" alt="platform">
+    <img src="https://img.shields.io/badge/version-2.6.5-blue" alt="version 2.6.5">
     <img src="https://img.shields.io/badge/chrome-MV3-green" alt="chrome manifest v3">
     <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node version">
     <a href="https://github.com/Ghqqqq/codex-overleaf-link/actions/workflows/test.yml"><img src="https://github.com/Ghqqqq/codex-overleaf-link/actions/workflows/test.yml/badge.svg" alt="tests"></a>
     <img src="https://img.shields.io/badge/runtime%20dependencies-0-orange" alt="zero npm runtime dependencies">
     <img src="https://img.shields.io/badge/license-MIT-blue" alt="license">
   </p>
+  <p>English | <a href="README.zh-CN.md">简体中文</a></p>
 </div>
 
-Ask about the project, revise a passage, and review the result beside the PDF. Codex Overleaf Link brings a local Codex workflow into the Overleaf editor, with project context, model selection, and conversations in one place.
-
-![The source editor, PDF preview, and a real Codex project review in the Example paper demo](assets/readme/2.5.0/overview@2x.png)
-
-*Interface captured on 2.5.0. A read-only review of the standard Overleaf example project.*
-
-<details>
-<summary>Read the conversation detail (native 2x PNG)</summary>
-
-<p align="center"><img src="assets/readme/2.5.0/conversation@2x.png" width="393" alt="Native high-resolution capture of the actual Codex conversation"></p>
+Codex Overleaf Link adds a Codex panel next to the Overleaf editor. Ask about your project, or let Codex edit it: changes go back through the editor, as tracked changes if you want, and a run can be undone until you accept its changes. Codex runs on your machine through the Codex CLI.
 
-</details>
+![The panel next to the editor and PDF in the Overleaf example project](assets/readme/2.6.0/overview@2x.png)
 
+[Features](#features) · [Install](#install) · [How it works](#how-it-works) · [Configuration](#configuration) · [Troubleshooting](#troubleshooting)
 
-[Quick start](#quick-start) · [Writing workflow](#workflow) · [Writing style](#writing-style) · [Models](#connections) · [Detailed reference](#reference)
+## Features
 
-<a id="workflow"></a>
+### Ask, Auto and Track
 
-## Read, revise, and review in one workspace
-
-| Intent | Control | Result |
+| Mode | Codex can | Changes go to |
 |---|---|---|
-| Understand a section or investigate a problem | **Ask** | An answer grounded in the available project context, without writing to Overleaf. |
-| Make a change to the paper | **Auto** | Changes are written back to the project and shown in the run record. |
-| Review edits in Overleaf | **Auto + Track** | Text edits appear as Overleaf tracked changes. |
-| Reverse a run | **Undo changes** | Eligible edits are restored and eligible newly created files are removed. |
-
-Undo also works after refresh. If a file was edited again afterwards, that file stays available for review; completed Undo steps are retained so a retry can focus on the remaining work.
-
-### Give the conversation the right context
-
-Use `@` or **＋** to attach project files, add `@compile-log` for a compile issue, or select text in the editor. **Add to Chat** provides context; **Edit Selection** sets the requested edit range. PDFs and images can be attached to the composer as references.
-
-<p align="center"><img src="assets/readme/2.5.0/context@2x.png" width="510" alt="A real composer draft with main.tex and sample.bib attached as context"></p>
-
-*An unsent draft with two project files attached. File context remains visible in the composer.*
-
-### Follow the work and open a subagent's conversation
-
-A run keeps its activity and result together. Expand its timeline to inspect reads, commands, and edits. With **Parallel Subagents** enabled, the main agent can continue working while delegated readers or workers run alongside it. Open a worker card to read that conversation, then return to the main task.
-
-<table>
-  <tr>
-    <td width="50%" align="center"><img src="assets/readme/2.5.0/activity@2x.png" width="393" alt="The actual run timeline and two completed subagent cards"></td>
-    <td width="50%" align="center"><img src="assets/readme/2.5.0/subagent@2x.png" width="393" alt="The actual read-only Structure subagent conversation"></td>
-  </tr>
-</table>
-
-*The same real task, shown as an activity view and as a child conversation. These captures show completed workers. Parallel Subagents is experimental.*
-
-<a id="writing-style"></a>
+| **Ask** | read the project | nowhere; Overleaf is not touched |
+| **Auto** | read and edit | Overleaf, in Editing mode |
+| **Auto + Track** | read and edit | Overleaf, as tracked changes |
 
-## Write in My Style <sub>Experimental</sub>
+With Track on, each rewritten sentence becomes one tracked change and small fixes stay word-level, so the Review panel reads like edits made by hand. **Accept changes** accepts the run's own tracked changes. **Undo changes** restores the files the run wrote and removes the files it created, also after a page reload.
 
-Build a reusable writing-style skill from selected Overleaf projects and PDFs.
+![A tracked change in Overleaf's Review panel, with Accept changes and Undo changes on the run card](assets/readme/2.6.0/review@2x.png)
 
-1. Open **Settings → General & appearance → Writing style**.
-2. Choose references from projects or add text-based PDFs.
-3. Generate the style, then enable it for the project. Add or change references and use **Update style** to refresh the skill.
+- Auto doesn't ask before each edit, but deleting files and adding or replacing images and PDFs always ask first.
+- If a file is edited again after the run, Undo stops at that file instead of overwriting it.
+- **Cancel** stops a run. Files already written stay and can still be undone.
+- Track Changes depends on the project owner's Overleaf plan. When it isn't available, the panel asks before the run whether to write without tracking.
 
-The skill is intended to guide phrasing, rhythm, organization, and tone. Reference material supports the writing style; the current task supplies the paper's facts, results, and citations.
+### Context
 
-![The real Write in My Style reference setup in General settings](assets/readme/2.5.0/writing-style@2x.png)
+Attach project files with `@` or **＋**, add `@compile-log` for a compile problem, or select lines in the editor and choose **Add to Chat** to reference them as a range such as `main.tex:22-24`. **Edit Selection** limits the edit to the selected text. PDFs and images can be attached for Codex to read; they are never added to the project. The line above the composer shows what Codex will read next: the current file, the selected files, or the whole project.
 
-*Reference selection and generation controls. No private writing samples are shown.*
+Up to five project files stay attached across turns. Attachments are limited to 8 per turn, 12 MiB each and 32 MiB in total.
 
-<a id="connections"></a>
+<p align="center">
+  <img src="assets/readme/2.6.0/selection@2x.png" width="340" align="top" alt="Lines selected in the editor, with the Add to Chat and Edit Selection toolbar">
+  <img src="assets/readme/2.6.0/context@2x.png" width="340" align="top" alt="Two files and a line range attached to the composer">
+</p>
 
-## Bring the model that fits
+### Run timeline and subagents
 
-Use the local Codex CLI's model catalog, choose a reasoning level in the composer, or configure a compatible provider in **Settings → Models & connections**.
+Each run keeps its steps and its answer together. Expand the timeline to see what Codex read, ran and changed. With **Parallel Subagents** on *(experimental)*, the main agent can hand work to readers and workers that run alongside it. Open one to read its conversation, then go back to the main task.
 
-Connection shortcuts cover OpenAI-compatible and Anthropic-compatible APIs, Kimi, GLM, and DeepSeek. A shortcut fills connection defaults; the API key and accepted model IDs are still supplied separately. Third-party providers are experimental.
+<p align="center">
+  <img src="assets/readme/2.6.0/activity@2x.png" width="340" align="top" alt="A run timeline with two subagents">
+  <img src="assets/readme/2.6.0/subagent@2x.png" width="340" align="top" alt="A subagent's read-only conversation">
+</p>
 
-![Real connection shortcuts for custom, OpenAI-compatible, Anthropic-compatible, Kimi, GLM, and DeepSeek endpoints](assets/readme/2.5.0/providers@2x.png)
+### Context window
 
-*Actual connection setup. No API keys are visible.*
+The ring beside the model shows how full the conversation's context window is. Open it to see the latest input, cached input and output, or to compact the conversation; `/compact` does the same.
 
-<a id="quick-start"></a>
+<p align="center">
+  <img src="assets/readme/2.6.0/context-window@2x.png" width="340" align="top" alt="Context window usage beside the model">
+  <img src="assets/readme/2.6.0/slash-menu@2x.png" width="340" align="top" alt="Typing / opens the command and skill menu, with /compact first">
+</p>
 
-## Quick start
+### Results and compile check
 
-> **Upgrading from an older version**
->
-> **Local candidate:** 2.5.1 is being tested and has not been published. For this checkout, use `npm run build:content` followed by `npm run install:managed`. The version-pinned npm and download commands below apply after publication. The compatible 2.5.0 → 2.5.1 update migration is implemented and awaiting complete acceptance; it is not yet available through the public update feed.
+Every run ends with a short result. If a run doesn't go as planned, its card names the cause, what it means for the document, and a next step: **Didn't finish**, **Partly written**, **Not written**, or **Check Overleaf** when a write couldn't be confirmed.
 
-> **Versions earlier than 2.5.0 require a manual installation to move to the 2.5.x line.** The in-extension **Update now** action cannot perform this upgrade. Run the installation command below, reload the extension in `chrome://extensions`, then refresh the Overleaf page.
+- If you or a collaborator edit a file while Codex works, Codex's patch is moved around your edit, and Undo keeps it. If both change the same text, the file is left as it is and reported as **Not written**. **Retry sync** writes only the files that are still pending.
+- With **Auto compile** on, Overleaf recompiles after the write. Errors are read from that compile's log and listed on the card. The fix button drafts a request with `@compile-log` in the composer, for you to send.
 
-**Prerequisites:** Chrome, Node.js 20+, and an installed, signed-in Codex CLI. Source installation also uses Git.
+<p align="center">
+  <img src="assets/readme/2.6.0/compile-card@2x.png" width="340" align="top" alt="A compile error on the run card, with a Fix 1 compile error button">
+  <img src="assets/readme/2.6.0/compile-draft@2x.png" width="340" align="top" alt="A fix request with @compile-log drafted in the composer">
+</p>
 
-```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- install-managed
-```
+### Write in My Style *(experimental)*
 
-1. Run the managed installer. It prints the extension directory.
-2. In `chrome://extensions`, enable **Developer mode**, choose **Load unpacked**, and select that directory.
-3. Open an Overleaf project and start with **Ask**. Switch to **Auto** when a file change is intended.
+Builds a writing-style skill from Overleaf projects and PDFs you choose.
 
-The extension supports project pages on `overleaf.com`, `www.overleaf.com`, and `cn.overleaf.com`.
+1. Open **Settings → This project → Writing**.
+2. Under **Write in My Style**, pick reference projects or add text-based PDFs.
+3. Generate the style and turn it on for the project. After you change the references, **Update style** refreshes it.
 
-<a id="reference"></a>
+The style guides phrasing, rhythm, structure and tone; facts, results and citations still come from your project. The same page holds the project's **Personalization** notes for terminology and LaTeX conventions.
 
-## Setup and reference
+<p align="center"><img src="assets/readme/2.6.0/writing-style@2x.png" width="700" alt="The Writing page in Settings"></p>
 
-Detailed installation, upgrade, privacy, troubleshooting, and development instructions are available below.
+### Models and providers
 
-<details>
-<summary><strong>Open the detailed reference</strong></summary>
+The panel uses the local Codex CLI's models by default; choose the model and reasoning level in the composer. To use another endpoint *(experimental)*, add a provider under **Settings → All projects → Models & connections**. Shortcuts fill in the defaults for OpenAI-compatible and Anthropic-compatible APIs, Kimi, GLM and DeepSeek; you add the API key and model IDs.
 
-## What you need
-
-| | |
-|---|---|
-| Computer | macOS, Windows, or Linux |
-| Browser | Google Chrome. Linux Chromium also works; see [Browser support](#browser-support). |
-| Node.js 20+ and Git | Used by the installers and the local bridge |
-| [Codex CLI](https://github.com/openai/codex) | Installed and signed in. Check with `codex --version`. |
-| Overleaf | An account on `overleaf.com` or `cn.overleaf.com` |
-| TeX *(optional)* | Only for local `latexmk` checks |
+<p align="center"><img src="assets/readme/2.6.0/providers@2x.png" width="700" alt="Provider shortcuts in Models & connections"></p>
 
 ## Install
 
-There are two pieces: a small local program, the **native host**, that runs Codex on your machine, and the **Chrome extension** that draws the panel. The installers set up both as a matched pair that can update itself later.
+You need Google Chrome on macOS, Windows or Linux (or Chromium on Linux), Node.js 20+, and the [Codex CLI](https://github.com/openai/codex), installed and signed in. The extension works on `overleaf.com`, `www.overleaf.com` and `cn.overleaf.com`; self-hosted Overleaf is not supported.
 
-Chrome does not let scripts load an extension for you, so every route ends with one short manual step in `chrome://extensions`.
-
-### Option A: Let Codex install it (recommended)
+### Let Codex install it (recommended)
 
 If you already use Codex in a terminal on the computer where Chrome runs, give it this prompt:
 
 ```text
-Install Codex Overleaf Link from https://github.com/Ghqqqq/codex-overleaf-link on this computer.
-
-Read the official README and installation scripts first. Detect the operating system and check Node.js >= 20, Codex CLI, and any other prerequisites required by the selected installation method.
-Use the latest published stable GitHub release, excluding drafts and prereleases, unless a specific version was requested. Use the documented managed installation method and install matching Extension and Native Host versions; do not substitute an unreleased main checkout.
-Reuse the existing Chrome profile and managed installation when available. Preserve project files, session history, settings, and provider credentials. Do not print secrets or remove an existing installation without approval.
-Complete the terminal-side setup and checks. If Chrome requires a manual Load unpacked or Reload action, provide the exact managed extension folder and the remaining steps; do not bypass browser restrictions.
-Report the chosen release, installed Extension and Native Host versions, the browser-loaded version when observable, and the native connection check. Matching on-disk versions alone do not prove Chrome has loaded the update. Clearly identify anything still requiring manual action.
+Install Codex Overleaf Link on this computer. Follow the install steps in https://github.com/Ghqqqq/codex-overleaf-link, then tell me what I still need to do in Chrome.
 ```
 
-### Option B: One-line installer
-
-macOS / Linux:
+### Install with npm
 
 ```bash
-CODEX_OVERLEAF_REF=v2.5.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.5.1/install.sh)"
+npm exec --yes codex-overleaf-link@2.6.5 -- install-managed
 ```
 
-Windows PowerShell:
-
-```powershell
-iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.5.1/install.ps1 -OutFile install.ps1
-$env:CODEX_OVERLEAF_REF='v2.5.1'
-powershell -ExecutionPolicy Bypass -File install.ps1
-```
-
-The script checks the prerequisites, builds the extension, installs the native host, and prints the folder Chrome should load. On macOS it also copies that path and opens Chrome's extensions page. On macOS and Linux it leaves a `~/Codex Overleaf Link Extension` shortcut in your home folder.
-
-### Option C: npm
-
-```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- install-managed
-```
-
-Same result as Option B, without keeping a source checkout around.
+The installer sets up the native host and a managed copy of the extension, then prints the extension's folder.
 
 ### Finish in Chrome
 
-1. Open `chrome://extensions` and turn on **Developer mode**.
-2. Click **Load unpacked** and choose the folder the installer printed.
-3. Open or refresh an Overleaf project. The panel appears on the right.
-
-If an older copy is still loaded from a different folder, remove it so Chrome doesn't show two.
-
-The official build carries a bundled extension key, so it always gets the same stable id and you never need `--extension-id`. Custom builds are covered under [Extension ID](#extension-id).
-
-<details>
-<summary><strong>Manual checkout install</strong> (custom location)</summary>
-
-```bash
-git clone https://github.com/Ghqqqq/codex-overleaf-link.git
-cd codex-overleaf-link
-npm ci
-npm run build:content
-npm run install:native
-```
-
-Then load `extension/` as an unpacked extension in Chrome. This install is unmanaged: rebuild and reload the extension after changes, and rerun `npm run install:native` after changing the native runtime. If Chrome assigns a different extension id, rerun `npm run install:native -- --extension-id <chrome-extension-id>`.
-
-</details>
-
-## Your first run
-
-1. Open a project and click the Codex edge tab if the panel is hidden. The header turns green once the native host is connected.
-2. Leave the mode on **Ask** and try something that reads the project: *"Summarise what each chapter argues, in one sentence each."*
-3. When you want edits, switch to **Auto**, describe the change, and send. Codex edits its local copy, then the extension writes the changes into Overleaf and recompiles if **Compile** is on.
-4. Check the result under the answer. The summary line says what was written and whether it can be undone; the file rows show the actual changes.
-
-The run header tells you what is happening at each moment: reading the project, starting Codex, waiting for the model's first reply, then thinking and editing. If something needs your attention, such as a skipped file or a save Overleaf hasn't confirmed yet, the details open by themselves.
-
-## Ask, Auto and Track
-
-| | What Codex may do | Where the changes go |
-|---|---|---|
-| **Ask** | Read and analyse | Nowhere. Overleaf is not touched. |
-| **Auto** | Read and edit | Written straight into Overleaf in Editing mode. |
-| **Auto + Track** | Read and edit | Written as tracked changes you can review in Overleaf's Review panel. |
-
-Auto does not stop for per-hunk approval, but deleting files and creating or replacing images and PDFs always ask first. Before each write the extension checks that the text it is about to change still matches what Codex saw. If a collaborator edited the same lines in the meantime, that file is skipped and reported, never overwritten.
-
-**Undo changes** puts the run's files back the way they were, created files included, and works after a page reload. If someone edited the same text afterwards, Undo stops for that file instead of guessing.
-
-**Accept changes** finalises a Track run's changes in one step and leaves Overleaf in Editing mode.
-
-> [!WARNING]
-> Don't use the run card's **Accept changes** when the same files contain unrelated tracked changes from collaborators or other runs. Accept those individually in Overleaf's Review panel instead.
-
-**Cancel** stops the run. Anything already written stays, and the card shows which parts landed so you can undo them.
-
-## Models and API providers
-
-By default the panel uses your local Codex CLI: its login, models and settings. Pick a model and reasoning level from the control in the composer.
-
-To use another endpoint, open **Project Settings → Model providers → Configure → Add provider**:
-
-1. Enter a **Provider name**, the **Base URL** and your **API key**. HTTPS is required except for localhost.
-2. Under **Models**, add each model with the exact ID your endpoint accepts, and mark one as the default.
-3. Leave **API protocol** on Auto, or pick Responses API, Chat Completions or Anthropic Messages. If the URL already ends with the full endpoint path, tick **Base URL is the full protocol endpoint**.
-4. **Test connection** sends one real request to a model you pick. Then choose **Save and use for this project**.
-
-The choice applies to every session in the current project; other projects keep their own. Switching keeps your history and starts fresh threads for new turns. Gateways differ in how they handle tools and reasoning, so a passing test doesn't guarantee every model behaves the same in long tasks. API keys stay with the native host on your machine; task context is sent to the endpoint you chose.
-
-## Context and attachments
-
-- **Files**: type `@` or use the **＋** tray to add up to five files. They stay selected across turns until you clear them. Codex can still read the rest of the project.
-- **Selections**: select text in the editor and attach it as context, or as **Selection only** to restrict the edit to that range. The chip stays visible on the message you sent.
-- **Compile log**: `@compile-log` attaches the current errors and warnings.
-- **Attachments**: paste or drop PDFs and images into the composer. Up to 8 per turn, 12 MiB each and 32 MiB in total. They are only for Codex to read and are never written to Overleaf.
-- **Generated files**: images, PDFs and other assets Codex creates (up to 10 MiB each) ask for confirmation before they're added to the project. LaTeX build output is filtered out.
-
-## Updating
-
-Managed installs check GitHub for new signed stable releases on their own. When one is available, choose **Update now** in the notice or under **Settings → Software updates**. The update waits until every Overleaf tab is saved and no task is running, replaces the extension and native host together, and restores the previous version if the new one fails its health check. Drafts and prereleases are never picked up, and an update never adds Chrome permissions silently.
-
-The 2.5.1 candidate adds a compatible update from the published 2.5.0 installation through the same **Update now** action. Its signed package carries the startup-file fixes, retains recovery copies and progress, and reloads the extension before confirming the updated startup code. Bootstrap protocol 3 and existing Chrome permissions remain unchanged. This migration is still undergoing local acceptance; the candidate is unpublished.
-
-The updater respects HTTP(S) proxy environment variables and the macOS/Windows system proxy. SOCKS-only or PAC-only setups need an HTTP proxy endpoint.
-
-### Coming from v2.4.x or earlier
-
-v2.5.0 adds `cn.overleaf.com` support, which needs a new Chrome permission, so it moves the install to Bootstrap protocol 3. Older updaters refuse that step by design rather than granting permissions themselves. **Installations older than 2.5.0 need the full installer for this migration.** Run the installer once:
-
-```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- install-managed
-```
-
-Then click **Reload** on the extension in `chrome://extensions` and refresh Overleaf. Your sessions, settings, provider keys and project mirrors are kept. In-place updates require the target release to pass the Bootstrap compatibility checks.
-
-From v2.5.0 on, a release that ever needs another reinstall is announced in the panel as **Reinstall needed for this update**, with the reason, the exact command for that version, and a copy button, instead of a failed update. New Overleaf sites no longer need a reinstall at all: the extension popup asks you to allow the site, and Chrome confirms it.
-
-Checkout and Release-zip installs are unmanaged and always update by hand.
-
-## Commands
-
-| Action | Command |
-|---|---|
-| Install, repair or migrate | `npm exec --yes codex-overleaf-link@2.5.1 -- install-managed` |
-| Diagnose | `npm exec --yes codex-overleaf-link@2.5.1 -- doctor` |
-| Uninstall | `npm exec --yes codex-overleaf-link@2.5.1 -- uninstall-managed` |
+In `chrome://extensions`, turn on **Developer mode**, click **Load unpacked** and pick the extension folder. Open an Overleaf project and the panel appears on the right.
 
-npm installs, updates, and uninstalls the coordinated managed extension/native pair. The legacy `install-native` command remains available only for explicitly unmanaged extension directories:
-
-```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- install-native
-```
-
-Use `--extension-id <chrome-extension-id>` only for a custom/dev unpacked extension id that differs from the official bundled id. On Linux Chromium, add `--browser chromium` to any of these.
-
-<a id="uninstall"></a>
 <details>
-<summary><strong>Uninstall</strong></summary>
-
-```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- uninstall-managed
-```
-
-This works in PowerShell too, and also removes installs made by `install.sh` / `install.ps1`. For an unmanaged checkout or native-only install, run `npm run uninstall:native` from the checkout, or:
-
-```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- uninstall-native
-```
-
-An older native-only source install can also be removed with its bundled uninstaller:
+<summary>Other ways to install</summary>
 
 ```bash
-node ~/.codex-overleaf/source/scripts/uninstall-native-host.mjs
+# macOS / Linux
+CODEX_OVERLEAF_REF=v2.6.5 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.6.5/install.sh)"
 ```
 
 ```powershell
-node "$env:LOCALAPPDATA\CodexOverleaf\source\scripts\uninstall-native-host.mjs"
+# Windows
+iwr https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.6.5/install.ps1 -OutFile install.ps1
+$env:CODEX_OVERLEAF_REF='v2.6.5'
+powershell -ExecutionPolicy Bypass -File install.ps1
 ```
 
-Uninstalling removes the native host registration, bridge, managed extension and runtimes. It leaves your history, settings, project mirrors, provider keys and skills alone. Remove the extension from `chrome://extensions` as well. On Windows the install lives under `%LOCALAPPDATA%\CodexOverleaf` and your data under `%USERPROFILE%\.codex-overleaf`, so a full cleanup covers both. See [Local data and cleanup](#local-data-and-cleanup).
-
-</details>
-
-## FAQ and troubleshooting
-
-**The panel says "Native host update required", or can't find the native host.**
-Rerun the installer, reload the extension in `chrome://extensions`, then refresh Overleaf:
-
 ```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- install-managed
+# From source. Unmanaged: rebuild and reload the extension yourself after changes.
+git clone https://github.com/Ghqqqq/codex-overleaf-link.git && cd codex-overleaf-link
+npm ci && npm run build:content && npm run install:native
+# then load extension/ as an unpacked extension
 ```
 
-For a checkout install, rebuild and rerun `npm run install:native` from the same checkout.
-
-**Codex CLI not found.**
-Make sure `codex --version` works in a new terminal (on Windows, `Get-Command codex`), and that you're signed in for the built-in provider. Then rerun the installer so the launcher picks up your PATH.
-
-**Extension id mismatch.**
-Copy the id from `chrome://extensions` and reinstall with it. See [Extension ID](#extension-id).
+The official build always has the extension ID `illdpneeeopfffmiepaejglgmhpmdhdc`. If a custom build gets a different ID, pass `--extension-id <id>` to the installer. For Chromium on Linux, add `--browser chromium`.
 
-**A file was skipped.**
-Usually a collaborator changed those lines, the file couldn't be opened in the editor in time, or a project rule marks it read-only. The details under the answer say which, and **Retry sync** writes only the files that are still pending. Don't rerun the whole task just to retry. That can apply the same edit twice.
-
-**Undo changes or Accept changes is missing.**
-Both depend on what the run actually wrote. If files were written but the button is gone, check the changes in Overleaf before doing anything else, and attach exported diagnostics to an issue.
-
-**A write was blocked by a project rule, or the sensitive-content check fired.**
-Rules can make paths read-only or restrict where Codex may write. Adjust them in Project Settings or narrow the request. The sensitive-content check looks for things like tokens and keys before context leaves your machine; remove or redact what it found.
-
-**A queued message or a fork won't run.**
-Queued messages keep the settings they were sent with. If that provider profile was changed or deleted, send the message again. A fork needs a recorded Codex turn and is disabled when there isn't one.
-
-**Reporting a bug.**
-Use **Export Diagnostics** in the panel. The bundle leaves out project text, prompts, compile logs, diffs and secrets by default. If you attach other logs, check them for file names, tokens and document text first.
+</details>
 
 ## How it works
 
 ```mermaid
 flowchart TD
     O[Overleaf project and editor] <--> P[Page bridge]
-    P <--> C[Codex panel and content runtime]
+    P <--> C[Panel and content runtime]
     C <--> B[Extension service worker]
-    B <-->|Native Messaging over stdio| N[Local Node host]
+    B <-->|Native Messaging over stdio| N[Native host, Node]
     N <--> M[Project mirror and baseline]
-    N <-->|JSON RPC over stdio| A[Codex app-server]
-    A -->|Reads and edits| M
+    N <-->|JSON-RPC over stdio| A[codex app-server]
+    A -->|reads and edits| M
 ```
 
-1. When you send a task, the extension captures your settings and syncs the Overleaf project into a local mirror, or reuses the mirror if it's still current.
-2. The native host starts `codex app-server` against that mirror with an isolated Codex home, so plugin runs don't mix with your own Codex sessions.
-3. When Codex finishes, the host compares the mirror with its baseline and turns the differences into text patches and asset transfers. Ask stops here.
-4. In Auto, the extension writes each patch through the Overleaf editor after checking the project, path rules, edit mode and the expected text. Anything that doesn't line up is skipped and reported.
-5. The undo point is recorded before any further step, then the save state is verified, the mirror refreshed and, if enabled, the project recompiled.
+1. When you send a task, the extension saves the run's settings and syncs the project into a local mirror, or reuses the mirror if it is still current.
+2. The native host starts `codex app-server` on the mirror, with a Codex home of its own.
+3. When Codex is done, the host compares the mirror with its baseline and turns the differences into text patches and file transfers. An Ask run ends here.
+4. In Auto, the extension writes each patch through the Overleaf editor. Before writing it checks the project, path rules, edit mode and expected text, and shifts the patch past edits made elsewhere in the file since the run started.
+5. It then records the undo point, confirms the save, refreshes the mirror and, if Auto compile is on, recompiles.
 
-## Development
+Contributor notes on the architecture are in [docs/architecture](docs/architecture/README.md).
 
-```bash
-npm ci
-npm run build:content
-npm test
-npm run verify:source
-npm run verify:npm-package
-npm run verify:update-boundary
-npm run check:architecture
-npm run benchmark:large
-```
+## Configuration
 
-There are no npm runtime dependencies. Development uses a pinned **esbuild**; the Markdown and math libraries are vendored into the extension. Tests use Node's built-in runner, including VM-based browser integration tests. [CI](.github/workflows/test.yml) runs on macOS, Ubuntu and Windows with Node 24.18.0 and rehearses the managed-update hop on Ubuntu.
+**Providers.** In **Settings → All projects → Models & connections → Add provider**, enter the base URL (HTTPS, except for localhost), the API key and the model IDs your endpoint accepts, and pick the protocol: Auto, Responses, Chat Completions or Anthropic Messages. **Test connection** sends one real request. The choice applies to the current project; other projects keep theirs. Keys are stored by the native host, and task context goes to the endpoint you chose.
 
-The content script is bundled from [content-entry.mjs](extension/entries/content-entry.mjs). Edit the modules, run `npm run build:content`, and reload the extension. To push a local build into an existing managed install, run `npm run install:managed`, then reload the extension and Overleaf. `npm run bridge` starts the native host on stdio for protocol work.
+**Skills.** The plugin's Codex home copies your Codex login and config, but not `~/.codex/AGENTS.md`, `personality`, `rules` or `memories`. **Load local Codex skills** adds `~/.codex/skills` and your local plugins; **Load Codex Overleaf skills** adds `~/.codex-overleaf/skills`. Both are on by default.
 
-| Area | Entry points |
-|---|---|
-| Panel and task orchestration | `extension/src/content/contentRuntime.js`, `extension/src/content/runController.js` |
-| Page snapshot and writeback | `extension/src/pageBridge.js`, `extension/src/page/snapshotRouter.js`, `extension/src/page/writebackRouter.js` |
-| Browser/native transport | `extension/src/background.js`, `native-host/src/index.js` |
-| Codex and local mirror | `native-host/src/taskRunnerRuntime.js`, `native-host/src/codexSessionRunner.js`, `native-host/src/mirrorWorkspace.js` |
-| Shared contracts and persistence | `extension/src/shared/`, `extension/src/content/scopedPersistenceCoordinator.js` |
-| Managed updates and packaging | `extension/bootstrap/`, `extension/src/backgroundUpdateCoordinator.js`, `native-host/src/updateManager.js`, `scripts/` |
-
-Browser smoke test against a real project:
-
-```bash
-npm run smoke:extension -- --url 'https://www.overleaf.com/project/<project-id>' --probe panel,native,project,diagnostics --json .local/smoke.json
-```
-
-It launches Chrome with a temporary profile by default. Use `--profile-dir <test-profile-dir> --keep-profile` for a profile that's already signed in to Overleaf. For releases, see `npm run build:release`, `npm run verify:release-artifacts` and `npm run rehearse:update-hop`.
+**Data.** There is no hosted backend and no telemetry. Task context goes to Codex or to the provider you configured, after a check for tokens and keys. Path rules decide what Codex may write; they don't hide files from it.
 
-## Browser support
+<details>
+<summary>Where things are stored</summary>
 
-| Platform | Browser | Notes |
+| What | macOS / Linux | Windows |
 |---|---|---|
-| macOS | Google Chrome | Default installer |
-| Windows | Google Chrome | PowerShell installer |
-| Linux | Google Chrome | Default installer |
-| Linux | Chromium | Add `--browser chromium` when installing or uninstalling |
-
-Chromium on macOS and Windows isn't supported yet. The extension runs on project pages of `overleaf.com`, `www.overleaf.com` and `cn.overleaf.com`; self-hosted Overleaf isn't covered.
-
-Linux Chromium:
+| Sessions and history | IndexedDB `codex-overleaf` on the Overleaf site | same |
+| Preferences | the extension's `chrome.storage.local` | same |
+| Managed extension and native host | `~/.codex-overleaf/managed/` | `%LOCALAPPDATA%\CodexOverleaf\managed\` |
+| Installer checkout | `~/.codex-overleaf/source` | `%LOCALAPPDATA%\CodexOverleaf\source` |
+| Project mirrors | `~/.codex-overleaf/projects` | `%USERPROFILE%\.codex-overleaf\projects` |
+| Plugin Codex home | `~/.codex-overleaf/codex-home` | `%USERPROFILE%\.codex-overleaf\codex-home` |
+| Skills | `~/.codex-overleaf/skills` | `%USERPROFILE%\.codex-overleaf\skills` |
+| Providers and keys | `~/.codex-overleaf/providers.json`, `provider-secrets.json` | `%USERPROFILE%\.codex-overleaf\` |
+| Logs | `~/.codex-overleaf/native-host.log` | `%LOCALAPPDATA%\CodexOverleaf\native-host.log` |
+| Native Messaging manifest | Chrome: `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` (macOS), `~/.config/google-chrome/NativeMessagingHosts/` (Linux); Chromium: `~/.config/chromium/NativeMessagingHosts/` | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` |
+
+The history database belongs to the Overleaf site, so removing the extension doesn't delete it.
 
-```bash
-CODEX_OVERLEAF_REF=v2.5.1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ghqqqq/codex-overleaf-link/v2.5.1/install.sh)" -- --browser chromium
-npm exec --yes codex-overleaf-link@2.5.1 -- uninstall-managed --browser chromium
-```
+</details>
 
-## Extension ID
+## Updating
 
-The repo ships a fixed extension key, so the official build always gets this id:
+Managed installs check GitHub Releases for signed stable versions. **Update now**, in the update notice or under **Settings → All projects → Software updates**, waits until Overleaf is saved and idle, replaces the extension and native host together, and rolls back if the new version fails its health check. **Restore previous version** takes you back. The updater follows HTTP(S) proxy variables and the macOS/Windows system proxy.
 
-```
-illdpneeeopfffmiepaejglgmhpmdhdc
-```
-
-If you load a custom build and Chrome gives it a different id, reinstall with that id so the native host's `allowed_origins` matches:
+- From 2.5.1 or later, updates happen in place.
+- From 2.5.0, update to 2.5.1 first.
+- From anything older, rerun the installer. It moves the install to Bootstrap protocol 3, which the `cn.overleaf.com` permission needs. Then reload the extension. Sessions, settings and keys are kept.
 
-```bash
-npm exec --yes codex-overleaf-link@2.5.1 -- install-managed --extension-id "<your-chrome-extension-id>"
-```
+Source checkouts and release-zip installs are unmanaged; update them by hand. Each GitHub release carries the extension zip, the native host runtime, the update bundle, the npm package, installers pinned to that release, and signed checksums.
 
-For an unmanaged extension, use `install-native --extension-id "<your-chrome-extension-id>"` instead. The source installers also read `CODEX_OVERLEAF_EXTENSION_ID`.
-
-## Release artifacts
-
-Each GitHub Release includes:
+## Commands
 
-- `codex-overleaf-link-extension-v2.5.1.zip`: the extension, for manual unpacked installation.
-- `codex-overleaf-native-host-v2.5.1.tar.gz`: the native host runtime used by the installers.
-- `codex-overleaf-update-v2.5.1.tar.gz`: the combined bundle the in-product updater downloads.
-- `codex-overleaf-link-2.5.1.tgz`: the npm package behind the `npm exec` commands.
-- `install.sh` and `install.ps1`: installers pinned to this release.
-- `uninstall-native-host.mjs` plus its helpers `nativeHostPlatform.js`, `manifest.js` and `runtimeInstaller.js`.
-- `SHA256SUMS`, `release-manifest.json` and `release-manifest.sig`: checksums and the Ed25519-signed release metadata the updater verifies.
-- `release-notes.md`.
+| Task | Command |
+|---|---|
+| Install, repair or migrate | `npm exec --yes codex-overleaf-link@2.6.5 -- install-managed` |
+| Diagnose | `npm exec --yes codex-overleaf-link@2.6.5 -- doctor` |
+| Uninstall | `npm exec --yes codex-overleaf-link@2.6.5 -- uninstall-managed` |
+| Native host only, for an unmanaged extension | `npm exec --yes codex-overleaf-link@2.6.5 -- install-native` / `uninstall-native` |
 
-## Local data and cleanup
+`uninstall-managed` removes the native host registration, the bridge, the managed extension and its runtimes. Your history, settings, mirrors, keys and skills stay. To remove everything, clear the history under **Settings → All projects → Local data → Clear local history…**, uninstall, remove the extension in `chrome://extensions`, and delete `~/.codex-overleaf` and the `~/Codex Overleaf Link Extension` shortcut (on Windows, `%USERPROFILE%\.codex-overleaf` and `%LOCALAPPDATA%\CodexOverleaf`).
 
-There is no hosted backend and no telemetry. Everything below lives on your machine. During a run, task context is sent to Codex or to the provider you configured. Project rules control what may be written; they don't hide files from the model.
+<a name="faq-and-troubleshooting"></a>
 
-| What | Where (macOS/Linux; Windows in brackets) |
-|---|---|
-| Sessions, runs, history | IndexedDB database `codex-overleaf` under the Overleaf site in Chrome |
-| Preferences and project settings | `chrome.storage.local` of the extension |
-| Managed extension | `~/.codex-overleaf/managed/extension` (`%LOCALAPPDATA%\CodexOverleaf\managed\extension`) |
-| Managed native host | `~/.codex-overleaf/managed/native` (`%LOCALAPPDATA%\CodexOverleaf\managed\native`) |
-| Installer checkout | `~/.codex-overleaf/source` (`%LOCALAPPDATA%\CodexOverleaf\source`) |
-| Native bridge | `~/.codex-overleaf/codex-overleaf-bridge` (`%LOCALAPPDATA%\CodexOverleaf\codex-overleaf-bridge.cmd`) |
-| Project mirrors | `~/.codex-overleaf/projects` (`%USERPROFILE%\.codex-overleaf\projects`) |
-| Plugin Codex home | `~/.codex-overleaf/codex-home` (`%USERPROFILE%\.codex-overleaf\codex-home`) |
-| Codex Overleaf skills | `~/.codex-overleaf/skills` (`%USERPROFILE%\.codex-overleaf\skills`) |
-| Provider profiles and keys | `~/.codex-overleaf/providers.json`, `provider-secrets.json` (`%USERPROFILE%\.codex-overleaf`) |
-| Logs | `~/.codex-overleaf/native-host.log`, `native-host-launcher.log` (`%LOCALAPPDATA%\CodexOverleaf\native-host.log`) |
+## Troubleshooting
 
-The history database belongs to the Overleaf page, not to the extension, so removing the extension does not erase it. See Chrome's notes on [content-script storage](https://developer.chrome.com/docs/extensions/develop/concepts/storage-and-cookies#storage).
+- **The native host is missing or needs an update.** Rerun `install-managed`, reload the extension and refresh Overleaf.
+- **Codex CLI not found.** Make sure `codex --version` works in a new terminal, then rerun the installer so it picks up your `PATH`.
+- **Extension ID mismatch.** Copy the ID from `chrome://extensions` and reinstall with `--extension-id <id>`.
+- **A file was skipped.** Its target text changed during the run, the editor couldn't open it, or a path rule makes it read-only. The details under the answer say which.
+- **A write was blocked by a path rule or the sensitive-content check.** Path rules can make files read-only; the check looks for tokens and keys before context leaves your machine. Change the rule in the project settings, or remove what the check found.
+- **The compile result is unconfirmed.** The panel only reports a compile whose log it could read. Check the log in Overleaf.
+- **Undo changes or Accept changes is missing.** Both depend on what the run wrote. If files were written but the button is gone, check the changes in Overleaf and attach **Export Diagnostics** to an issue.
+- **A queued message or a fork won't run.** Queued messages keep the settings they were sent with; if that provider was changed or deleted, send the message again. Forking needs a recorded Codex turn.
+- **Reporting a bug.** Attach **Export Diagnostics** from the panel. By default it leaves out project text, prompts, compile logs, diffs and secrets.
 
-The plugin's Codex home copies your login and config but not your personalisation: no `~/.codex/AGENTS.md`, no top-level `personality` key, no global `rules` or `memories`. Skill loading toggles default to enabled, and both live in Settings:
+## Development
 
-- `Load local Codex skills` brings your own skills and plugins (`~/.codex/skills`, local Codex `plugins`, `superpowers` and related configuration) into the isolated `~/.codex-overleaf/codex-home`. It only affects that plugin home and does not write to or reuse global `~/.codex/sessions`.
-- `Load Codex Overleaf skills` loads the skills this extension manages from `~/.codex-overleaf/skills` (`%USERPROFILE%\.codex-overleaf\skills` on Windows). Turning it off hides them without deleting the files.
+```bash
+npm ci
+npm test                      # core suite
+npm run test:platform         # installation and process contracts
+npm run build:content         # bundle the content script
+npm run install:managed       # put a local build into the managed install
+```
 
-Native Messaging registration:
+The content script is bundled from [content-entry.mjs](extension/entries/content-entry.mjs). There are no npm runtime dependencies: development uses a pinned esbuild, and the Markdown and math libraries are vendored. `npm run bridge` runs the native host on stdio.
 
-| Platform | Path |
+| Area | Entry points |
 |---|---|
-| macOS Chrome | `~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.codex.overleaf.json` |
-| Linux Chrome | `~/.config/google-chrome/NativeMessagingHosts/com.codex.overleaf.json` |
-| Linux Chromium | `~/.config/chromium/NativeMessagingHosts/com.codex.overleaf.json` |
-| Windows Chrome | `HKCU\Software\Google\Chrome\NativeMessagingHosts\com.codex.overleaf` → `%LOCALAPPDATA%\codex-overleaf\native-messaging-hosts\com.codex.overleaf.json` |
-
-To remove everything:
+| Panel and runs | `extension/src/content/contentRuntime.js`, `runController.js` |
+| Snapshots and writeback | `extension/src/pageBridge.js`, `extension/src/page/snapshotRouter.js`, `writebackRouter.js` |
+| Transport | `extension/src/background.js`, `native-host/src/index.js` |
+| Codex and the mirror | `native-host/src/taskRunnerRuntime.js`, `codexSessionRunner.js`, `mirrorWorkspace.js` |
+| Patches | `native-host/src/textPatch.js` |
+| Updates and packaging | `extension/bootstrap/`, `native-host/src/updateManager.js`, `scripts/` |
 
-1. While the extension is still installed, use **Settings → History & storage → Clear local history…** in each Chrome profile you used. If it's already gone, delete the `codex-overleaf` database from the Overleaf page's **DevTools → Application → IndexedDB**.
-2. Run `uninstall-managed` (or `uninstall-native` for an unmanaged install). See [Uninstall](#uninstall).
-3. Remove the extension in `chrome://extensions`. Chrome clears its `chrome.storage.local` with it.
-4. Delete the local folders. **This permanently removes mirrors, plugin history, provider keys and skills.**
+To run standalone panel, Native, project-read and diagnostics probes against a real project:
 
 ```bash
-rm -rf ~/.codex-overleaf ~/Codex\ Overleaf\ Link\ Extension
-```
-
-```powershell
-Remove-Item -Recurse -Force "$env:LOCALAPPDATA\CodexOverleaf", "$env:USERPROFILE\.codex-overleaf" -ErrorAction SilentlyContinue
+npm run smoke:extension -- --url 'https://www.overleaf.com/project/<id>' --probe panel,native,project,diagnostics --json .local/smoke.json
 ```
 
-## Contributing
+For local Managed installation acceptance, follow the [development SOP](docs/architecture/change-workflow.md#4-implement-and-validate-obtain-evidence-proportional-to-risk), including extension Reload, loaded build identity, Ask with zero writes, reversible two-file write/Undo, editor cleanup and refreshed history. Apply the SOP's Luna selection, model/run-ID recording, and unavailable-model blocker rules to real-model runs.
 
-Issues and pull requests are welcome. For larger changes, open an issue first so we can talk through the approach. Run `npm test` before submitting, and keep [README.md](README.md) and [README.zh-CN.md](README.zh-CN.md) in step when behaviour, versions or commands change.
+Pull requests are welcome. For larger changes, please open an issue first, and keep both READMEs in step.
 
 ## License
 
 [MIT](LICENSE)
-
-<p align="center"><strong>English</strong> | <a href="README.zh-CN.md" lang="zh-CN">简体中文</a></p>
-
-
-</details>