Add Codex Prompt Center

README.md

@@ -202,6 +202,8 @@ Rules that matter:
 - [Agent configuration](docs/agent-configuration.md): config fields, metadata, and agent setup.
 - [Shared context](docs/features/shared-context.md): generic shared repositories, proposals, partial acceptance, skills, freshness, and permissions.
 - [Context Hub](docs/features/context-hub.md): one UI for local-only, shared-only, and linked local-plus-shared projects.
+- [Codex Prompt Center](docs/features/codex-prompt-center.md): edit runtime-published Codex prompt targets through exact private overlays, inspect per-process runtime-loaded proof, then quit Codex completely, reopen it, and create a new task.
+- Codex Prompt Center contracts: [catalog/snapshot v1](schemas/codex-prompt-catalog-v1.schema.json), [overrides v1](schemas/codex-prompt-overrides-v1.schema.json), [publication state v2](schemas/codex-prompt-publication-state-v2.schema.json), and [runtime receipt v2](schemas/codex-prompt-runtime-receipt-v2.schema.json).
 - [Documentation research agent](docs/features/documentation-agent.md): working-agent launcher, dedicated documentation CLI, Codex isolation, evidence schema, and safety boundaries.
 - [Documentation lifecycle](docs/features/documentation-lifecycle.md): creation, scheduled audit, task proposal reuse, and local/shared/mixed routing.
 

docs/agent-configuration.md

@@ -4,8 +4,8 @@ context_room:
   scope: context-room
   status: current
   canonical_for: agent configuration
-  last_verified: 2026-07-21
-  sources: [bin/context-room.mjs, src/context_room.mjs, src/shared_context.mjs, schemas/config.schema.json]
+  last_verified: 2026-07-23
+  sources: [bin/context-room.mjs, src/context_room.mjs, src/codex_prompt_center.mjs, src/shared_context.mjs, schemas/config.schema.json, schemas/codex-prompt-catalog-v1.schema.json, schemas/codex-prompt-overrides-v1.schema.json, schemas/codex-prompt-publication-state-v2.schema.json, schemas/codex-prompt-runtime-receipt-v2.schema.json]
 ---
 
 # Agent configuration guide
@@ -26,6 +26,14 @@ Appearance preferences are shared across every Context Room on the computer and
 
 Use the Settings screen to change the app theme, hidden-file visibility, or `Auto-open Git diff`. Project paths, review rules, scanners, templates, and hub cards remain local to `.context-room/config.json`.
 
+Codex prompt overrides are also computer-wide, but they are not preferences and never belong in project configuration:
+
+```text
+$CODEX_HOME/prompt-overrides/
+```
+
+Use **Context Hub → Codex prompts** to inspect the runtime-published catalog and edit only targets marked `securityClass: local_user_editable`. Context Room writes the strict private `overrides.json` contract; a compatible Codex runtime regenerates the catalog and per-process runtime receipts. After a change, quit Codex completely (`⌘Q` on macOS), reopen it, then create a new task. See [Codex Prompt Center](features/codex-prompt-center.md).
+
 The human-owned review gate is also stored separately:
 
 ```text

docs/features/context-hub.md

@@ -4,8 +4,8 @@ context_room:
   scope: context-room
   status: current
   canonical_for: global Context Hub
-  last_verified: 2026-07-22
-  sources: [src/context_hub.mjs, src/context_room.mjs, src/shared_context.mjs, bin/context-room.mjs, docs/features/shared-context.md]
+  last_verified: 2026-07-23
+  sources: [src/context_hub.mjs, src/context_room.mjs, src/codex_prompt_center.mjs, src/shared_context.mjs, bin/context-room.mjs, docs/features/shared-context.md, docs/features/codex-prompt-center.md]
 ---
 
 # Context Hub
@@ -48,7 +48,7 @@ Normal `init`, `setup`, and `start` flows register their initialized project aut
 
 `hub proposals` exposes the aggregated proposal index to agents and can filter by project or Codex task ID. `hub open` prints a deep link into the running Hub with the same focus.
 
-## Inbox And Projects
+## Inbox, Projects, And Codex Prompts
 
 **Inbox** combines work that may need attention:
 
@@ -60,6 +60,8 @@ Normal `init`, `setup`, and `start` flows register their initialized project aut
 
 Repository-wide proposal scopes appear as a dedicated **Global skills** project. They stay searchable and filterable without being duplicated under every project that consumes them.
 
+**Codex prompts** loads a compatible installed Codex runtime's global prompt catalog on demand. It groups every runtime-published target without hardcoding mode or model names, compares official, effective-after-restart, and runtime-loaded versions, and saves exact private overlays. Runtime receipts prove local resolution by target, not mode selection or task delivery. Prompt state is not project configuration and never enters the local or shared review workflow. See [Codex Prompt Center](codex-prompt-center.md).
+
 Keyboard shortcuts inside the Hub:
 
 - `/`: focus search;
@@ -77,7 +79,8 @@ The global registry lives at `$HOME/.context-room/hub/registry.json`. The runnin
 ## Source Map
 
 - `src/context_hub.mjs`: global project, shared-repository, and runtime registry.
-- `src/context_room.mjs`: aggregate Hub state, inbox UI, project-room isolation, and exact review embedding.
+- `src/context_room.mjs`: aggregate Hub state, inbox UI, prompt-center UI, project-room isolation, and exact review embedding.
+- `src/codex_prompt_center.mjs`: runtime-published prompt catalog, private overlays, and load receipts.
 - `src/shared_context.mjs`: shared-only repository listing, proposal lifecycle signals, and exact review materialization.
 - `bin/context-room.mjs`: `context-room hub` commands and automatic registration.
 - [Shared context](shared-context.md): proposal, acceptance, skills, freshness, and permission contracts.

docs/features/index.md

@@ -4,8 +4,8 @@ context_room:
   scope: context-room
   status: current
   canonical_for: features
-  last_verified: 2026-07-22
-  sources: [README.md, docs/product-overview.md, bin/context-room.mjs, src/context_room.mjs, src/context_hub.mjs, src/doc_agent.mjs, src/shared_context.mjs, schemas/config.schema.json]
+  last_verified: 2026-07-23
+  sources: [README.md, docs/product-overview.md, bin/context-room.mjs, src/context_room.mjs, src/context_hub.mjs, src/codex_prompt_center.mjs, src/doc_agent.mjs, src/shared_context.mjs, schemas/config.schema.json]
 ---
 
 # Features
@@ -16,6 +16,7 @@ This folder explains Context Room by user-facing feature. Read this when changin
 
 - [Hub and navigation](hub-and-navigation.md)
 - [Context Hub](context-hub.md)
+- [Codex Prompt Center](codex-prompt-center.md)
 - [File explorer and editor](file-explorer-and-editor.md)
 - [HTML visual documents](html-visual-documents.md)
 - [Review queue](review-queue.md)

docs/features/settings.md

@@ -4,8 +4,8 @@ context_room:
   scope: context-room
   status: current
   canonical_for: settings
-  last_verified: 2026-07-20
-  sources: [src/context_room.mjs, schemas/config.schema.json, docs/agent-configuration.md]
+  last_verified: 2026-07-23
+  sources: [src/context_room.mjs, src/codex_prompt_center.mjs, schemas/config.schema.json, docs/agent-configuration.md, docs/features/codex-prompt-center.md]
 ---
 
 # Settings
@@ -14,6 +14,8 @@ context_room:
 
 Settings separates project setup from computer-wide preferences without exposing every option at once.
 
+Codex prompts are not a Settings category. They use the global [Codex Prompt Center](codex-prompt-center.md), whose versioned runtime catalog, conflict handling, and private storage are separate from project configuration and appearance preferences.
+
 ## Categories
 
 - `Review`: simple watched paths, structured folder watch rules, and required-review paths.

docs/product-overview.md

@@ -5,7 +5,7 @@ context_room:
   status: current
   canonical_for: product overview
   last_verified: 2026-07-23
-  sources: [README.md, bin/context-room.mjs, src/context_room.mjs, src/context_hub.mjs, src/doc_agent.mjs, src/shared_context.mjs, schemas/config.schema.json, schemas/doc-context.schema.json, schemas/shared-repository.schema.json, docs/agent-configuration.md]
+  sources: [README.md, bin/context-room.mjs, src/context_room.mjs, src/codex_prompt_center.mjs, src/context_hub.mjs, src/doc_agent.mjs, src/shared_context.mjs, schemas/config.schema.json, schemas/codex-prompt-catalog-v1.schema.json, schemas/codex-prompt-overrides-v1.schema.json, schemas/codex-prompt-publication-state-v2.schema.json, schemas/codex-prompt-runtime-receipt-v2.schema.json, schemas/doc-context.schema.json, schemas/shared-repository.schema.json, docs/agent-configuration.md]
 ---
 
 # Product Overview
@@ -28,7 +28,8 @@ Projects that need cross-project documentation or skills can add the optional [S
 ## Main Surfaces
 
 - Hub: card-based navigation from `hubSections`.
-- Context Hub: one computer-local inbox and project switcher for local review queues and shared proposals, while each opened project keeps an isolated server and identity.
+- Context Hub: one computer-local inbox and project switcher for local review queues and shared proposals, plus a lazy global Codex Prompt Center; each opened project keeps an isolated server and identity.
+- Codex Prompt Center: runtime-published prompt targets with official, effective-after-restart, and runtime-loaded views; exact overrides remain private to `$CODEX_HOME`, while protected and server-owned targets stay visible and read-only.
 - Explorer and editor: safe project text, with editing limited by `allowedPaths` and four explicit folder watch modes.
 - Changed files to review: Git-backed review queue, required review paths, project `AGENTS.md` files unless implicit review is disabled, and every skill exposed by Startup skills.
 - Startup context: project instruction files by default, with ancestor and global discovery available by opt-in.
@@ -69,6 +70,7 @@ Feature-level docs live in [Features](features/index.md).
 - `context_room` metadata: optional Markdown frontmatter used by `doctor`, graph health, and briefs.
 - `~/.context-room/shared/registry.json`: user-approved source-repository and subpath bindings for generic shared context.
 - `$HOME/.context-room/hub/registry.json`: local project and shared-repository catalog used by the global Context Hub.
+- `$CODEX_HOME/prompt-overrides/`: private Codex-owned prompt catalog, exact overrides, hash-only runtime receipts, and immutable per-process catalog snapshots; it is never project configuration.
 - `<shared-repository>/.context-room/shared-repository.json`: versioned contract for a shared repository's branch and path layout.
 - `schemas/doc-context.schema.json`: structured evidence contract returned by the documentation research agent.
 
@@ -78,14 +80,19 @@ Feature-level docs live in [Features](features/index.md).
 - `src/context_room.mjs`: server, file access, review queue, graph, brief, UI, and API.
 - `src/shared_context.mjs`: shared repository sync, snapshots, skill links, proposals, review materialization, and acceptance.
 - `src/context_hub.mjs`: global project/shared-repository registration and single-Hub runtime discovery.
+- `src/codex_prompt_center.mjs`: generic Codex prompt catalog, exact overlays, private storage, optimistic concurrency, and per-process receipt/snapshot proof.
 - `src/doc_agent.mjs`: documentation-only corpus, section retrieval, Codex researcher invocation, and evidence packet rendering.
 - `src/codex_composer_bridge.mjs`: loopback-only insertion into the active Codex composer.
 - `src/doc_metadata.mjs`: Markdown metadata parsing.
 - `src/yaml_utils.mjs`: YAML helpers.
 - `schemas/config.schema.json`: config contract.
+- `schemas/codex-prompt-catalog-v1.schema.json`: strict runtime catalog and immutable snapshot contract.
+- `schemas/codex-prompt-overrides-v1.schema.json`: strict private override-manifest contract.
+- `schemas/codex-prompt-runtime-receipt-v2.schema.json`: strict hash-only runtime receipt contract.
 - `schemas/shared-repository.schema.json`: shared repository manifest contract.
 - `schemas/doc-context.schema.json`: documentation research output contract.
 - `test/context_room.test.mjs`: CLI, config, review, startup scanner, and UI behavior tests.
+- `test/codex_prompt_center.test.mjs`: synthetic prompt catalog, overlay, storage, receipt, privacy, and API tests.
 - `test/shared_context.test.mjs`: shared snapshots, skills, offline fallback, proposal scope, hash expiry, and partial-acceptance tests.
 - `test/doc_agent.test.mjs`: documentation corpus, retrieval, provenance, prompt boundaries, and Codex invocation tests.
 - `docs/agent-configuration.md`: detailed config guide.