[Bug][Windows] v1.5.6 installer cannot auto-load Microsoft.PowerShell.Security for Get-AuthenticodeSignature

[Mory-lan]

Platform / 平台

Windows

OS version / 系统版本

Windows 11 Home China, 25H2, build 26200.8894, 64-bit

CPU / 架构

Windows x64

Codex Desktop version / source / Codex 桌面版版本或来源

Microsoft Store official package OpenAI.Codex 26.721.4979.0 (Status: Ok)

Dream Skin version / 皮肤工具版本

Official Release v1.5.6; installer SHA-256 e0b2dc47ec775a160ae620455ecc2433462595be1ab61a1122212f071efab947 (matches official SHA256SUMS.txt)

Problem category / 问题类型

Install failed / 安装失败

Self-check / 自检

• Ran Verify / doctor (or Windows verify script) / 已运行 Verify 或 doctor
• Tried Restore, then re-apply / 已尝试完全恢复后再应用
• Official Codex still opens without the skin tools / 不用皮肤工具时官方 Codex 仍可正常打开
• Searched existing issues / 已搜索现有 Issue

Steps to reproduce / 复现步骤

1. Download CodexDreamSkin-Setup-v1.5.6.exe from the official GitHub Release and verify its SHA-256.
2. Run the installer with the default destination and leave “Start Codex Dream Skin when I sign in” unchecked.
3. When Setup reports that Codex is running, close Codex completely and click Retry.
4. Setup begins initialization, then shows the PowerShell error below and aborts with exit code 1.

Expected behavior / 期望结果

The installer should load the system Microsoft.PowerShell.Security module, validate the bundled Node.js runtime signature, and complete installation.

Actual behavior / 实际结果

Dream Skin first shows this error:

在模块“Microsoft.PowerShell.Security”中找到“Get-AuthenticodeSignature”命令，
但无法加载该模块。有关详细信息，请运行
“Import-Module Microsoft.PowerShell.Security”。

Setup then reports:

Runtime error (at 9:623):

Codex Dream Skin could not be initialized (exit code 1).
No installed application files were changed.

Modified official Codex install? / 是否改过官方 Codex 安装？

No — official app only / 否，仅官方安装

Logs / Verify / doctor output（recommended）/ 日志与校验输出（强烈建议）

The installation aborts before the runtime is committed, so no Dream Skin verify/doctor log is available.

Host-side diagnostics after the failure:

Windows PowerShell: 5.1.26100.8894
Import-Module Microsoft.PowerShell.Security -ErrorAction Stop: succeeded
Get-Command Get-AuthenticodeSignature: succeeded

Bundled payload node.exe:
Status: Valid
Signer: CN=OpenJS Foundation, O=OpenJS Foundation,
        L=San Francisco, S=California, C=US

After the failure, the following were absent:

%LOCALAPPDATA%\Programs\CodexDreamSkin
%LOCALAPPDATA%\CodexDreamSkin
HKCU uninstall registration for Codex Dream Skin

PowerShell 7.6.4 from Microsoft Store is also installed, but the direct validation above was explicitly run with 64-bit Windows PowerShell 5.1 and succeeded. The installer source appears to target {sysnative}\WindowsPowerShell\v1.0\powershell.exe, so this may be an installer-process module-loading/environment issue rather than a missing Windows component.

Screenshots / video / 截图或录屏

Attached:

1. The Microsoft.PowerShell.Security / Get-AuthenticodeSignature error dialog.
2. The subsequent Inno Setup exit code 1 dialog.

The screenshots contain no API keys, private chats, usernames, or private filesystem paths.

Extra context / 其他信息

• The installer itself is unsigned, as documented by the release page.
• No security check was bypassed and no system security setting was changed.
• Manual signature verification of the bundled Node.js binary succeeded, so the failure appears to be command/module auto-loading inside the installer bootstrap context.

Confirmation / 确认

• I did not paste API keys or secrets / 我未粘贴 API Key 或其它密钥
• I understand this is an unofficial theme tool (loopback CDP only) / 我理解这是非官方换肤工具（仅本机 CDP）

[Fei-Away]

更新：这条 v1.5.7 通知已被后续 v1.5.8 取代，请以当前 issue 里最新的 v1.5.8 评论为准。issue 也已重新打开，等待用户环境升级确认后再关闭。

原说明保留如下，作为修复链路记录：

@Mory-lan v1.5.7 已发布： https://github.com/Fei-Away/Codex-Dream-Skin/releases/tag/v1.5.7

这版针对你定位的 Microsoft.PowerShell.Security / Get-AuthenticodeSignature 问题做了明确修复：Windows 安装器在 Node Authenticode 校验前会先按模块名导入 Microsoft.PowerShell.Security，失败时再尝试 $PSHOME\Modules\Microsoft.PowerShell.Security\Microsoft.PowerShell.Security.psd1。签名检查仍然保留，没有改成跳过校验。

验证结果：PR #315 已合并到 main@454013a；主分支 Windows PowerShell 5.1 / PowerShell 7 CI 均通过；v1.5.7 Release workflow 已成功发布；公开 Setup.exe、DMG 和 SHA256SUMS.txt 已下载并完成 SHA-256 校验。

[Fei-Away]

这里先重新打开等待用户环境确认。上一条说明的是 v1.5.7 已发布且代码/CI/Release 校验通过，但这不等于报告环境已经确认恢复；等升级 v1.5.7 重新运行安装器反馈 OK 后再关闭。

[Fei-Away]

@Mory-lan 补充：刚刚发布了 v1.5.8，Release: https://github.com/Fei-Away/Codex-Dream-Skin/releases/tag/v1.5.8

v1.5.8 继承 v1.5.7 的 Microsoft.PowerShell.Security / Get-AuthenticodeSignature 显式加载修复，并补上了 #313 截图暴露的 Windows 安装器多行 TOML 数组问题。签名检查仍然保留，不跳过校验。这里保持 open，等你升级 v1.5.8 后确认安装是否恢复，再关闭。