release: prepare v0.3.3 beta

.github/workflows/desktop.yml

@@ -377,7 +377,7 @@ jobs:
         shell: bash
         env:
           RELEASE_TAG: ${{ github.ref_name }}
-        run: test "$RELEASE_TAG" = "v0.3.2"
+        run: test "$RELEASE_TAG" = "v0.3.3"
 
       - name: Build updater-signed beta artifacts and publish the tagged release
         uses: tauri-apps/tauri-action@944946e3e4cac6603d1fe8f514171e9ecd3c78aa # v1
@@ -390,9 +390,9 @@ jobs:
           projectPath: apps/theme-manager
           args: "--config src-tauri/tauri.release.conf.json ${{ matrix.build-args }}"
           tagName: ${{ github.ref_name }}
-          releaseName: "Awesome Codex Theme v0.3.2 Beta"
+          releaseName: "Awesome Codex Theme v0.3.3 Beta"
           releaseAssetNamePattern: ${{ matrix.release-asset-name }}
-          releaseBody: "Updater-signed Tauri Theme Manager beta with ACT Full Skin v1. Windows Authenticode and Apple Developer ID signing/notarization are not included in this beta, so the operating system may show an unknown-publisher warning. macOS bundles carry an ad-hoc signature for package integrity only. The app applies verified backgrounds, materials, colors, and theme copy without modifying ChatGPT application files."
+          releaseBody: "Updater-signed Tauri Theme Manager beta with ACT Full Skin v1. The current v3 runtime is source-tested and requires real-app recapture before a physical-app verification claim; the updater feed remains unreleased. Windows Authenticode and Apple Developer ID signing/notarization are not included in this beta, so the operating system may show an unknown-publisher warning. macOS bundles carry an ad-hoc signature for package integrity only. The app uses only the selected package's loopback target and never modifies application files, user data, or conversations."
           prerelease: true
           releaseDraft: true
 

apps/theme-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awesome-codex-theme/theme-manager",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "private": true,
   "type": "module",
   "description": "Cross-platform declarative full-skin manager for Awesome Codex Theme.",

apps/theme-manager/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "awesome-codex-theme"
-version = "0.3.2"
+version = "0.3.3"
 description = "Cross-platform declarative full-skin manager for Codex"
 authors = ["Awesome Codex Theme contributors"]
 edition = "2024"

apps/theme-manager/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Awesome Codex Theme",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "identifier": "io.github.rwang23.awesomecodextheme",
   "build": {
     "frontendDist": "../src/renderer"

docs/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.3.3 - 2026-07-27
+
 - Added a Chinese collaboration guide explaining local worktrees, branches,
   Issues, draft PRs, reviews, merging, and post-merge verification.
 - Replaced the Theme Manager's custom persistence overlay and incomplete

docs/agent-brief.md

@@ -2,7 +2,7 @@
 
 ## Project snapshot
 
-- Last reviewed: 2026-07-22
+- Last reviewed: 2026-07-27
 - Project: Awesome Codex Theme
 - Project root: `C:\projects\50-developer\codex-tools\awesome-codex-theme`
 - Purpose: free declarative Full Skin standard, Registry, Validator, Gallery,

docs/release-metadata.md

@@ -2,7 +2,7 @@
 
 This file is generated from [`metadata/release.json`](../metadata/release.json). Do not edit it by hand.
 
-- Desktop version: `0.3.2`
+- Desktop version: `0.3.3`
 - Channel: `beta`
 - GitHub prerelease: `true`
 - Update-feed state: `unreleased`

docs/release-notes/v0.3.3.md

@@ -0,0 +1,89 @@
+# Awesome Codex Theme v0.3.3
+
+## Release scope
+
+This prerelease Beta contains the audit-remediation work merged into `main`.
+It covers source-art and release-metadata controls, Theme Manager reliability
+and accessibility, reproducible theme generation, Gallery presentations, and
+runtime and cache safety.
+
+## Delivered
+
+- Release metadata now sets the desktop version, release channel, updater
+  state, capture identity, and platform capability disclosures. Checks keep the
+  packages, Tauri configuration, workflow, Gallery, and documentation in sync.
+- Made theme-source approval hash-bound, added reviewed focal-aware rendering
+  and safe-area grading, and retained reproducible presentation derivatives for
+  every Catalog capture.
+- Improved Full Skin switching, target diagnostics, cache fallbacks, semantic
+  runtime state preservation, bounded renderer repair, and the long-session
+  performance budget.
+- Improved the Theme Manager dialog, keyboard, focus, contrast, and status
+  behavior, with an isolated Chromium accessibility regression gate.
+- CI now reuses generated artifacts across jobs, pins Actions, cancels stale
+  runs, isolates release credentials, and runs workflow security linting.
+
+## Verification
+
+- `npm run check` passed on the release candidate.
+- `npm run a11y:check --prefix apps/theme-manager` passed.
+- `npm run runtime:benchmark` passed its bounded mutation and event-loop budget.
+- The v0.3.3 tag workflow will independently rebuild Windows x64 and macOS
+  Apple Silicon/Intel artifacts before creating a draft prerelease.
+
+## Beta boundaries
+
+- This is a GitHub prerelease Beta. The in-app updater feed remains
+  **unreleased** until a separate signed static feed covers every platform and
+  passes end-to-end verification.
+- The current ACT Full Skin v3 runtime is source-tested. Existing Beta v2
+  captures are reference evidence only; a fresh exact-app capture is still
+  required before claiming physical-app verification.
+- macOS Full Skin and persistence remain build-only or unverified on physical
+  hardware. Windows Authenticode, Apple Developer ID signing, and notarization
+  are not included; Windows or macOS may therefore show trust warnings.
+- Full Skin connects only to the exact selected package's loopback debugging
+  target and `app://` surface. It never modifies application files, user data,
+  or conversations.
+
+---
+
+# Awesome Codex Theme v0.3.3（中文）
+
+## 发布范围
+
+这次 GitHub 预发布 Beta 包含已合入 `main` 的审计修复，涉及源图和发布元数据控制、
+Theme Manager 的可靠性与无障碍、可复现的主题生成、Gallery 展示，以及运行时和缓存安全。
+
+## 本次交付
+
+- 发布元数据现在统一设置桌面版版本、发布通道、更新源状态、采集身份和平台能力说明。
+  校验会让安装包、Tauri 配置、工作流、Gallery 与文档保持同步。
+- 让主题源图审批与字节哈希绑定，新增已审核的焦点感知渲染和安全区域分级，并为每个
+  Catalog 截图保留可复现的展示派生图。
+- 改进 Full Skin 切换、目标诊断、缓存回退、运行时语义状态保持、受限渲染修复，以及
+  长会话性能预算。
+- 改进 Theme Manager 的对话框、键盘、焦点、对比度和状态反馈，并加入隔离 Chromium
+  无障碍回归门禁。
+- CI 现在跨任务复用已生成产物、固定 Actions 版本、取消过期运行、隔离发布凭据，
+  并执行工作流安全 lint。
+
+## 验证
+
+- 候选版本已通过 `npm run check`。
+- 已通过 `npm run a11y:check --prefix apps/theme-manager`。
+- 已通过 `npm run runtime:benchmark` 的受限 mutation 和事件循环预算。
+- v0.3.3 标签工作流会独立重建 Windows x64、macOS Apple Silicon 和 Intel 产物，
+  然后创建 draft prerelease。
+
+## Beta 边界
+
+- 这是 GitHub prerelease Beta。应用内更新源仍为 **unreleased**；只有独立的签名
+  静态清单覆盖全部平台并完成端到端验证后，才可宣称应用内更新可用。
+- 当前 ACT Full Skin v3 运行时已通过源码测试。已有 Beta v2 截图只作为参考证据；
+  在声称实体应用验证前，仍需重新采集准确应用的截图。
+- macOS Full Skin 与常驻功能在实体硬件上仍是仅构建或未验证状态。该 Beta 不包含
+  Windows Authenticode、Apple Developer ID 签名或公证，因此 Windows 或 macOS
+  可能显示信任提示。
+- Full Skin 只会连接准确所选安装包拥有的 loopback 调试目标和 `app://` 页面；不会
+  修改应用文件、用户数据或对话内容。

metadata/release.json

@@ -6,7 +6,7 @@
     "releases": "https://github.com/rwang23/awesome-codex-theme/releases"
   },
   "desktop": {
-    "version": "0.3.2",
+    "version": "0.3.3",
     "channel": "beta",
     "githubPrerelease": true,
     "updater": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "awesome-codex-theme",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "private": true,
   "type": "module",
   "description": "A free declarative Codex Full Skin standard, registry, validator, gallery, and manager.",