feat: improve Windows compatibility and add switchable home styles

.github/workflows/ci.yml

@@ -23,6 +23,9 @@ jobs:
         with:
           node-version: "22"
 
+      - name: Check tracked files for secrets
+        run: node tools/check-secrets.mjs
+
       - name: Check shell syntax
         shell: bash
         run: |

.gitignore

@@ -4,9 +4,38 @@
 .DS_Store
 .idea/
 .vscode/
+
+# Local credentials and signing material. Commit only explicit examples.
+.env
+.env.*
+!.env.example
+!**/.env.example
+*.pem
+*.key
+*.p12
+*.pfx
+*.jks
+*.keystore
+id_rsa*
+id_dsa*
+id_ecdsa*
+id_ed25519*
+.netrc
+.npmrc
+.pypirc
+credentials.json
+secrets.json
+auth.json
+service-account*.json
+*.secrets.*
+
+# Local build tools, generated artifacts, and smoke fixtures.
+.release-tools/
+.tmp-theme-repair/
 README.preview.html
 docs/readme-preview.html
 release/
+.tools/
 # Keep the large captured DOM/screenshot fixtures local, but version the
 # canonical renderer sources that generate both platform assets.
 runtime/*

README.md

@@ -1,5 +1,11 @@
 # Codex Dream Skin
 
+当前 fork 版本为 `v1.6.0`，基于上游 `v1.5.6` 继续维护 Windows 兼容性：
+
+- Windows PowerShell 5.1 托盘菜单兼容修复（现已被上游吸收）。
+- 左侧栏与菜单栏左段采用连续的深色背景块；首页右侧保持无遮罩，对话页菜单栏右段与主窗口遮罩连续。
+- 适配 Codex 26.721+ 首页结构，收紧首页布局并移除三个多余的装饰文字。
+
 <p align="center">
   <strong>中文</strong> · <a href="./README.en.md">English</a>
 </p>
@@ -207,6 +213,8 @@ macOS 菜单栏和 Windows 托盘都有「主题库 Gallery」和「在线 Studi
 | Apple Silicon / Intel Mac | [`macos/`](./macos/) | 双击 `Install Codex Dream Skin.command` |
 | Windows | [`windows/`](./windows/) | `scripts/install-dream-skin.ps1` → `start-dream-skin.ps1` |
 
+Windows 用户请先阅读 [`windows/README.md`](./windows/README.md)。安装脚本运行时必须完全退出 Codex；源码更新后也需要退出托盘和 Codex，再重新运行安装器，已保存主题和导入图片不会被删除。
+
 更细的说明：
 
 - Mac：[`macos/README.md`](./macos/README.md)

TASK_PROGRESS.md

@@ -1,5 +1,37 @@
 # Task Progress
 
+## Fork Sync With Upstream v1.5.6 (2026-07-28 CST)
+
+- [complete] Configured `upstream` as `https://github.com/Fei-Away/Codex-Dream-Skin.git` and fetched `upstream/main@611c101` (`v1.5.6`).
+- [complete] Audited the three fork-only commits. The PowerShell 5.1 empty tray collection fix is already present upstream; the two local documentation screenshots remain fork-only; the light-shell native menu readability fix still needs migration to the shared runtime CSS.
+- [complete] Merged `upstream/main` into `fix/windows-tray-menu-readability` without rewriting the fork's existing commits. Documentation and tray conflicts use current upstream behavior; the light-shell native menu readability fix now lives in shared `runtime/dream-skin.css` and is synchronized to both platform assets with a Windows regression assertion.
+- [verified] Runtime sync check, Windows injector/renderer syntax, 16 focused portable Node regressions, and the complete Windows PowerShell regression suite pass. The suite's forced cleanup warnings are intentional failure-injection fixtures; all five final groups report `PASS`.
+- [complete] Reviewed the final fork-only delta against `upstream/main` and created local merge commit `13d1237`. The fork's own delta is whitespace-clean; repository-wide `git diff --cached --check` only reported an upstream-preserved trailing space in the official Inno Setup translation file.
+- [pending] Do not push until the user finishes testing the v1.5.6 Release and asks to publish the branch.
+- [fact] No push, pull request, tag, Release, or local Codex installation/update has been performed in this task.
+
+## Codex 26.721+ Home Layout Follow-up (2026-07-28 CST)
+
+- [reported] The user confirmed upstream v1.5.6 installs and runs successfully, but the new-task/home page layout differs from the earlier presentation.
+- [reproduced] Real Windows Codex home capture at 1920x1040 shows the 26.721+ sibling content layout is visible, but the title overlaps right-side subject art with weak contrast, four suggestion cards span too widely, and the combined project/composer surface is oversized and pinned near the bottom edge. Normal task layout remains healthy.
+- [reported] The user also identified three redundant skin-only labels: the home lower-right quote and the task page upper-left brand / upper-right online-status text. Remove these decorative pseudo-elements while preserving native controls and theme identity in the tray/library.
+- [decision] Drop the fork's shell-independent light application-menu backdrop and retain upstream's left-sidebar dark overlay plus dark-shell-only native menu treatment; the user prefers the upstream visual hierarchy.
+- [complete] Added a 26.721+-scoped shared-runtime layout refinement for the sibling content wrapper, removed the three redundant decorative labels, and retained upstream's dark-sidebar/dark-shell menu strategy without restoring the obsolete nested `:has()` rules that caused #244.
+- [complete] Bumped the six release sources and four current-version assertions to fork version `1.5.7`; added matching Windows/macOS changelog entries while retaining the truthful upstream base of `v1.5.6`.
+- [verified] Shared runtime assets are synchronized. Windows injector/renderer syntax, 18 portable Node regressions, the complete Windows PowerShell suite, and installer static contracts pass. Forced cleanup warnings are intentional failure-injection fixtures.
+- [superseded] The initial 24,462,494-byte local `v1.5.7` installer was overwritten after the login-startup defect was reproduced; it is no longer the deliverable.
+- [fact] The installer is intentionally unsigned, matching upstream's current first-run warning behavior. No installation, push, tag, PR, or public Release was performed.
+
+## Windows Login Startup Repair (2026-07-28 CST)
+
+- [reproduced] Installed engine and installer payload both report `1.5.7`, but the Inno-created startup shortcut targets `C:\Windows\Sysnative\WindowsPowerShell\...`; that alias is unavailable to 64-bit Explorer while the real `System32` executable exists. The tray mutex is not held, the recorded injector PID is dead, and its log says the original CDP browser identity closed.
+- [root cause] All persisted Inno launch surfaces used the process-only `Sysnative` alias. In addition, the Release Start-menu entry and login task launched only the tray, even though an ordinary Codex launch cannot expose the verified CDP endpoint required for injection.
+- [decision] Keep fork version `1.5.7` at the user's explicit request because it has not been published. Rebuild and overwrite only the local installer, then report a new checksum.
+- [complete] Added a login orchestrator that starts the tray and a verified skin session while respecting pause, split the Release Start-menu skin/tray entries, and use the real `System32` path for every persisted entry. Ordinary Codex launches are never silently killed; an already-open non-CDP session still requires explicit restart consent.
+- [verified] Installer static contracts, PowerShell parsing, 18 portable Node regressions, the complete Windows PowerShell suite, and `git diff --check` pass. Forced cleanup warnings remain intentional failure-injection fixtures.
+- [complete] Rebuilt and overwrote local `release/CodexDreamSkin-Setup-v1.5.7.exe` with pinned Inno Setup 6.7.1 and bundled Node 22.23.1. It is 24,463,555 bytes and reports product version `1.5.7`; the prior checksum sidecar was deleted at the user's request.
+- [fact] The repaired installer has not been installed, pushed, tagged, or publicly released.
+
 Updated: 2026-07-25 08:31 HKT (Asia/Hong_Kong)
 
 ## v1.5.1 Version Release (2026-07-25 08:28 HKT)

macos/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 1.6.0 — 2026-07-29
+
+- 共享 renderer 新增首页样式属性和 v1.5.8 简洁首页 CSS 门控，默认仍保持 v1.5.9 标题与玻璃建议卡视觉。
+- Windows 托盘首页样式偏好通过共享载荷同步到渲染器；macOS 本版保持默认 v1.5.9 首页，不新增菜单项。
+
+## 1.5.9 — 2026-07-29
+
+- 在 Codex 26.721.4979 的双层首页建议 DOM 上恢复 v1.5.6/v1.5.7 的主题标题、主题副标题及玻璃建议卡视觉。
+- 保留 v1.5.8 的当前首页与对话页兼容性、跨平台选择器同步和路由状态刷新修复。
+
+## 1.5.8 — 2026-07-28
+
+### 内部
+
+- 同步修复宽图首页主表面仍绘制深色渐变的问题：首页右侧恢复透明，对话页任务渐变保持不变。
+- 修复共享 Safe CSS 校验器无法解析已登记的 `backdrop-filter: blur(var(--ds-theme-surface-blur))`；未知变量、fallback 和越界 blur 继续 fail closed。
+- 同步共享渲染器的侧栏宽度桥接与清理逻辑。该逻辑不执行同步布局读取；macOS 没有 Windows 原生应用菜单栏匹配项，因此视觉效果保持不变。
+
+## 1.5.7 — 2026-07-28
+
+### 修复
+
+- 适配 Codex 26.721+ 的新首页兄弟节点结构，限制标题区、建议卡片、项目选择与输入框的最大宽度，避免宽屏下内容过度拉伸、标题与主题主体重叠。
+- 移除首页右下角引语、任务页左上角主题标签和右上角在线状态三个皮肤装饰文字。
+- 采用上游的左侧栏深色蒙版与仅深色外壳生效的应用菜单处理，不再给浅色原生菜单栏额外增加独立背景。
+
 ## 1.5.6 — 2026-07-26
 
 ### 安全

macos/VERSION

@@ -1 +1 @@
-1.5.6
+1.6.0