feat: rename Windots to Customize, fix pipeline leaks, config restore

 - Rename modules/windots/ to modules/customize/, rewrite all Windots.* to Customize.*
  - Add Customize.Desktop.ps1 (GlazeWM, Zebar, Flow Launcher, Windhawk, Rainmeter)
  - Add GlazeWM config with height resize keybindings (alt+i/o)
  - Add Restore-ConfigBackup — scan .bak files, show date/size, restore one or all
  - Add Install-WingetPackage helper with exit code handling and Out-Host
  - Add Start-UserProcess for launching modules without admin elevation
  - Add Wiki link to Docs & Guides submenu
  - Fix pipeline pollution (True/False leak) in Invoke-Tool, Invoke-SecureScript
  - Fix UniGetUI package ID MartiCliment → Devolutions, winget list → Test-Path
  - Fix PC Manager install: Microsoft.PCManager → 9PM860492SZD --source msstore
  - Fix DefendNot reinstall conflict — clean previous installation before extract
  - Fix RemoveWindowsAI — run as separate powershell.exe process for GUI
  - Fix Show-MenuBox overflow — auto-calculate width from content
  - Fix Copy-ConfigFiles backup — preserve original .bak, no overwrite on repeat
  - Fix hardcoded Documents path → Environment.GetFolderPath in Set-PwshConfig
  - Fix em-dash encoding and remove noisy "No hash provided" warnings
  - Change Customize and App Bundles to run without admin (Start-UserProcess)
  - Change macOS Cursor to inline Invoke-WebRequest with SHA256 verification
  - Change Intel DSA to launch after install/already-installed
  - Change Oh My Posh, Starship, FastFetch to use Install-WingetPackage
  - Clean VSCode settings: remove 13 dead breadcrumb, stickyScroll, layoutControl
  - Remove old Windots module files and config/vscode/snippet.txt

Author: emylfy

CHANGELOG.md

@@ -5,6 +5,52 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project uses [Calendar Versioning](https://calver.org/) (YY.M format).
 
+## [26.3] - 2026-03-23
+
+### March 23 — Rename Windots to Customize, fix pipeline leaks, restore backups, config quality
+
+- Renamed `modules/windots/` to `modules/customize/` — all files renamed from `Windots.*` to `Customize.*`
+- Added `Customize.Desktop.ps1` — GlazeWM, Zebar/YASB, Flow Launcher, Windhawk, Rainmeter, wallpaper browser
+- Added GlazeWM config (`config/glazewm/config.yaml`) with height resize keybindings (alt+i/o)
+- Added PowerShell 7 profile to `terminal.json`
+- Added `Restore-ConfigBackup` function — scans for `.bak` files across all config locations, shows date/size, restore one or all
+- Added `Install-WingetPackage` helper to `Common.ps1` — unified winget install with exit code handling, already-installed detection, `| Out-Host` to prevent pipeline pollution
+- Added `Pause-ForUser` helper to `Common.ps1`
+- Added `Start-UserProcess` to `AdminLaunch.ps1` for launching modules without elevation (WT tab support)
+- Added Wiki link to Docs & Guides submenu
+- Added `rectify11` entry to `tools.json`
+- Changed `Show-MenuBox` to auto-calculate width from content (no more overflow past box borders)
+- Changed Customize and App Bundles to run without admin elevation (`Start-UserProcess`)
+- Changed `Invoke-ReturnToMenu` placement inside `try/finally` in `Customize.ps1`
+- Changed `Copy-ConfigFiles` backup logic — preserves original `.bak`, won't overwrite on repeat runs
+- Changed `Set-PwshConfig` to use `[Environment]::GetFolderPath('MyDocuments')` instead of hardcoded path
+- Changed `Set-WinTermConfig` to properly handle font cancel in combo selection
+- Changed Oh My Posh, Starship, FastFetch installers to use `Install-WingetPackage` instead of raw `Start-Process winget`
+- Changed Starship, Oh My Posh, FastFetch menus — moved descriptions inside menu box instead of loose `Write-Log` above
+- Changed `Install-Starship` to show both PS 5.1 and PS 7+ profile paths
+- Changed `Disable-QuickAccess` — proper COM object cleanup, polling-based Explorer restart
+- Changed `Install-MacOSCursor` — inlined download with `Invoke-WebRequest`/`Get-FileHash`, `try/finally` for temp cleanup, combined path traversal regex
+- Changed macOS Cursor in `tools.json` from `browser` type to `download` with SHA256 hash verification
+- Changed UniGetUI package ID from `MartiCliment.UniGetUI` to `Devolutions.UniGetUI`
+- Changed UniGetUI install check from slow `winget list` to instant `Test-Path` for UniGetUI.exe
+- Changed PC Manager install from `Microsoft.PCManager` to `9PM860492SZD --source msstore`
+- Changed Intel DSA to launch after install/already-installed
+- Changed DefendNot to clean previous installation before re-install (fixes ExtractToDirectory conflict)
+- Changed RemoveWindowsAI to run as separate `powershell.exe` process (fixes GUI not showing)
+- Fixed pipeline pollution in `Invoke-Tool`, `Invoke-SecureScript`, `Install-WingetPackage` — added `| Out-Host` to prevent `True`/`False` leaking to console
+- Fixed `Invoke-SecureScript`/`Invoke-SecureDownload` — removed noisy "No hash provided" warning (only 1 of 14 tools has a hash)
+- Fixed em-dash encoding (`—` → `--`) in Common.ps1 warning messages for PS 5.1
+- Fixed PowerShell profile — replaced `Write-Warning` on startup with silent skip
+- Removed 13 redundant breadcrumb settings from VSCode `settings.json` (only `breadcrumbs.enabled: false` needed)
+- Removed dead `stickyScroll.scrollWithEditor`/`scrolling` settings, duplicate `layoutControl` from VSCode config
+- Removed `Windots.Apps.ps1`, `Windots.Configs.ps1`, `Windots.Customization.ps1`, `Windots.Menu.ps1`, `windots.ps1`, `config/vscode/snippet.txt`
+- Renamed `Set-WallpaperPack` to `Open-WallpaperBrowser`
+- Updated menu text "Windows Terminal config + Fira Code" → "Windows Terminal config + Nerd Font"
+- Changed README security note from collapsible `<details>` to blockquote
+- Changed `Benchmark.ps1` — added `$env:USERPROFILE` fallback chain for benchmark directory path
+- Changed `Initialize-Logging` — wrapped `Start-Transcript` in try/catch for locked file handling
+- Updated README, CONTRIBUTING, tests, and Customize README to match all renames
+
 ## [26.3] - 2026-03-22
 
 ### March 22 — Rebrand to Winrift, menu restructure, benchmark promotion, config flatten

CONTRIBUTING.md

@@ -66,7 +66,7 @@ winrift/
 │   ├── drivers/            # Driver installation
 │   ├── tools/              # Third-party tool integrations
 │   ├── unigetui/           # Package manager integration
-│   └── windots/            # Customization and ricing
+│   └── customize/          # Desktop environment, themes, configs
 ├── docs/                   # Documentation and guides
 └── media/                  # Icons, logos, assets
 ```

README.md

@@ -51,12 +51,7 @@ irm https://raw.githubusercontent.com/emylfy/winrift/main/scripts/install.ps1 |
 
 </details>
 
-<details>
-<summary>Security note on irm | iex</summary>
-
-This is a common PowerShell install pattern (similar to `curl | sh`). The full source code is open at [github.com/emylfy/winrift](https://github.com/emylfy/winrift). All external scripts are verified with SHA256 hashes before execution.
-
-</details>
+> **Security note:** This is a common PowerShell install pattern (similar to `curl | sh`). The full source code is open at [github.com/emylfy/winrift](https://github.com/emylfy/winrift). All external scripts are verified with SHA256 hashes before execution.
 
 ---
 
@@ -105,7 +100,7 @@ Other tools apply tweaks and hope for the best. Winrift measures 13 system metri
 | **GPU Tweaks** | NVIDIA and AMD-specific optimizations with automatic device detection; hybrid GPU support |
 | **Security & Privacy** | Disable Defender ([DefendNot](https://github.com/es3n1n/defendnot)), remove Copilot/Recall ([RemoveWindowsAI](https://github.com/zoicware/RemoveWindowsAI)), privacy hardening ([privacy.sexy](https://github.com/undergroundwires/privacy.sexy)) |
 | **Drivers** | NVIDIA, AMD, Intel DSA auto-install, HP, Lenovo, ASUS, Acer, MSI, Dell, Huawei, Xiaomi, Gigabyte |
-| **Desktop Ricing** | Configs for VSCode/Cursor/Windsurf, Terminal, PowerShell, Oh My Posh, FastFetch, SpotX, Spicetify, Steam themes, Rectify11, macOS cursor |
+| **Customize** | Desktop environment ([GlazeWM](https://github.com/glzr-io/glazewm), [Zebar](https://github.com/glzr-io/zebar), [Flow Launcher](https://github.com/Flow-Launcher/Flow.Launcher), [Windhawk](https://windhawk.net/), [Rainmeter](https://www.rainmeter.net/)), terminal & shell configs, editor configs, app themes (Spotify, Steam, browser), Windows look & feel (dark mode, taskbar, accent color) |
 | **App Bundles** | Curated winget collections via [UniGetUI](https://github.com/marticliment/UniGetUI) — Development, Browsers, Utilities, Productivity, Creative & Media, Gaming, Communications |
 | **[Answer File](docs/autounattend_guide.md)** | Automated Windows 11 install — removes 25 bloatware apps, disables telemetry, cleans taskbar |
 

config/tools.json

@@ -96,8 +96,10 @@
             "id": "macos-cursor",
             "name": "macOS Cursor",
             "description": "macOS cursor theme for Windows",
-            "type": "browser",
+            "type": "download",
             "url": "https://github.com/ful1e5/apple_cursor/releases/download/v2.0.1/macOS-Windows.zip",
+            "filename": "macOS-Windows.zip",
+            "sha256": "64A2C74780908954A2EC497F67919709280EBB8EBDF3E3B9336BAC071589C9DE",
             "docs": "https://github.com/ful1e5/apple_cursor"
         },
         {
@@ -107,6 +109,14 @@
             "type": "irm",
             "url": "https://community.chocolatey.org/install.ps1",
             "docs": "https://chocolatey.org"
+        },
+        {
+            "id": "rectify11",
+            "name": "Rectify11",
+            "description": "Windows 11 UI consistency fixes",
+            "type": "browser",
+            "url": "https://rectify11.net/home",
+            "docs": "https://github.com/Rectify11/Installer"
         }
     ]
 }

modules/customize/Customize.Apps.ps1

@@ -0,0 +1,228 @@
+function Invoke-Rectify11 {
+    Clear-Host
+    Invoke-Tool "rectify11"
+    Pause-ForUser
+}
+
+function Install-SpotX {
+    Clear-Host
+    Invoke-Tool "spotx"
+    Pause-ForUser
+}
+
+function Install-Spicetify {
+    Clear-Host
+    Invoke-Tool "spicetify"
+    Pause-ForUser
+}
+
+function Install-SteamMillennium {
+    Clear-Host
+    $result = Invoke-Tool "steam-millennium" -Wait -ErrorMessage "Failed to install Steam Millennium. Make sure Steam is installed"
+    if (-not $result) {
+        Pause-ForUser
+        return
+    }
+
+    Clear-Host
+    Show-MenuBox -Title "Space Theme Installation" -Items @(
+        "Would you like to install Space Theme for Steam?",
+        "[Y] Yes   [N] No"
+    )
+    $installChoice = Read-Host "Install Space Theme? (Y/N)"
+
+    if ($installChoice -eq 'y') {
+        Invoke-Tool "spacetheme"
+    }
+    Pause-ForUser
+}
+
+function Install-MacOSCursor {
+    Clear-Host
+
+    $tool = Get-ToolConfig "macos-cursor"
+    if (-not $tool) {
+        Write-Log -Message "macOS Cursor tool config not found." -Level ERROR
+        Pause-ForUser
+        return
+    }
+
+    $confirmed = Confirm-ExternalTool -Tool $tool
+    if (-not $confirmed) {
+        Write-Log -Message "User cancelled macOS Cursor download." -Level INFO
+        return
+    }
+
+    $zipPath = Join-Path $env:TEMP $tool.filename
+    $extractPath = Join-Path $env:TEMP "macos-cursor"
+
+    try {
+        # Download
+        Write-Log -Message "Downloading $($tool.name) from $($tool.url)..." -Level INFO
+        Invoke-WebRequest -Uri $tool.url -OutFile $zipPath -UseBasicParsing -ErrorAction Stop
+        if (-not (Test-Path $zipPath)) {
+            throw "Download failed: file not found after download"
+        }
+        if ($tool.sha256) {
+            $actualHash = (Get-FileHash -Path $zipPath -Algorithm SHA256).Hash
+            if ($actualHash -ne $tool.sha256) {
+                Remove-Item $zipPath -Force -ErrorAction SilentlyContinue
+                throw "Hash mismatch! Expected: $($tool.sha256), Got: $actualHash"
+            }
+            Write-Log -Message "Hash verified." -Level SUCCESS
+        }
+
+        # Extract
+        Write-Log -Message "Extracting..." -Level INFO
+        if (Test-Path $extractPath) { Remove-Item $extractPath -Recurse -Force }
+        Expand-Archive -Path $zipPath -DestinationPath $extractPath -Force
+
+        # Find available cursor themes (folders with .inf files)
+        $infFiles = Get-ChildItem -Path $extractPath -Filter "*.inf" -Recurse
+        if ($infFiles.Count -eq 0) {
+            Write-Log -Message "No cursor .inf files found in archive." -Level ERROR
+            Pause-ForUser
+            return
+        }
+
+        # Let user pick theme
+        $themes = $infFiles | ForEach-Object { [PSCustomObject]@{ Name = $_.Directory.Name; InfPath = $_.FullName } }
+
+        if ($themes.Count -eq 1) {
+            $selectedInf = $themes[0].InfPath
+            Write-Log -Message "Found theme: $($themes[0].Name)" -Level INFO
+        } else {
+            $menuItems = @()
+            for ($i = 0; $i -lt $themes.Count; $i++) {
+                $menuItems += "[$($i + 1)] $($themes[$i].Name)"
+            }
+            $menuItems += "---"
+            $menuItems += "[$($themes.Count + 1)] Cancel"
+
+            Show-MenuBox -Title "Select cursor theme" -Items $menuItems
+            $choice = Read-Host ">"
+
+            $idx = 0
+            if ([int]::TryParse($choice, [ref]$idx) -and $idx -ge 1 -and $idx -le $themes.Count) {
+                $selectedInf = $themes[$idx - 1].InfPath
+            } else {
+                return
+            }
+        }
+
+        # Parse .inf to extract cursor registry mappings
+        Write-Log -Message "Installing cursor theme..." -Level INFO
+
+        $cursorDir = Split-Path $selectedInf -Parent
+        $cursorRegPath = "HKCU:\Control Panel\Cursors"
+        $infContent = Get-Content $selectedInf -Raw
+
+        # Copy cursor files to a persistent user location — validate theme name to prevent path traversal
+        $themeName = (Split-Path $cursorDir -Leaf)
+        if ($themeName -match '(\.\.|[\\\/])') {
+            Write-Log -Message "Invalid theme directory name: $themeName" -Level ERROR
+            Pause-ForUser
+            return
+        }
+        $persistDir = Join-Path "$env:USERPROFILE\.cursors" $themeName
+        if (-not (Test-Path $persistDir)) {
+            New-Item -Path $persistDir -ItemType Directory -Force | Out-Null
+        }
+        Copy-Item -Path "$cursorDir\*" -Destination $persistDir -Recurse -Force
+        Write-Log -Message "Cursor files copied to $persistDir" -Level SUCCESS
+
+        # Parse .inf for HKCU,"Control Panel\Cursors","<Name>",,"%10%\...\<file>" lines
+        $cursorMap = @{}
+        $infContent -split "`r?`n" | ForEach-Object {
+            if ($_ -match 'HKCU,\s*"Control Panel\\Cursors",\s*"([^"]+)",,\s*".*\\([^"\\]+)"') {
+                $regName = $Matches[1]
+                $fileName = $Matches[2]
+                $cursorMap[$regName] = $fileName
+            }
+        }
+
+        # Also check for the scheme name line: HKCU,"Control Panel\Cursors",,"<name>"
+        $schemeName = $themeName
+        if ($infContent -match 'HKCU,\s*"Control Panel\\Cursors",,\s*"([^"]+)"') {
+            $schemeName = $Matches[1]
+        }
+
+        if ($cursorMap.Count -eq 0) {
+            Write-Log -Message "Could not parse cursor mappings from .inf file. Trying file scan..." -Level WARNING
+            # Fallback: scan for .cur/.ani files and use filename-based guessing
+            $curFiles = Get-ChildItem -Path $persistDir -Include "*.cur","*.ani" -Recurse
+            Write-Log -Message "Found $($curFiles.Count) cursor files in $persistDir" -Level INFO
+
+            # Common filename mappings for apple_cursor
+            $fallbackMap = @{
+                "left_ptr"     = "Arrow";       "help"       = "Help"
+                "wait"         = "Wait";         "progress"   = "AppStarting"
+                "crosshair"    = "Crosshair";    "cross"      = "Crosshair"
+                "text"         = "IBeam";        "xterm"      = "IBeam"
+                "pencil"       = "NWPen";        "handwriting"= "NWPen"
+                "circle"       = "No";           "not-allowed"= "No";   "forbidden" = "No"
+                "size_ver"     = "SizeNS";       "ns-resize"  = "SizeNS"
+                "size_hor"     = "SizeWE";       "ew-resize"  = "SizeWE"
+                "size_fdiag"   = "SizeNWSE";     "nwse-resize"= "SizeNWSE"
+                "size_bdiag"   = "SizeNESW";     "nesw-resize"= "SizeNESW"
+                "size_all"     = "SizeAll";      "all-scroll" = "SizeAll"; "move" = "SizeAll"
+                "up_arrow"     = "UpArrow";      "center_ptr" = "UpArrow"
+                "hand"         = "Hand";         "pointer"    = "Hand";  "link" = "Hand"
+            }
+
+            foreach ($file in $curFiles) {
+                $baseName = $file.BaseName.ToLower()
+                if ($fallbackMap.ContainsKey($baseName)) {
+                    $cursorMap[$fallbackMap[$baseName]] = $file.Name
+                }
+            }
+        }
+
+        if ($cursorMap.Count -eq 0) {
+            Write-Log -Message "No cursor mappings found. Installation cannot proceed." -Level ERROR
+            Pause-ForUser
+            return
+        }
+
+        Write-Log -Message "Applying $($cursorMap.Count) cursor mappings..." -Level INFO
+
+        # Set registry values for each cursor
+        $applied = 0
+        foreach ($regName in $cursorMap.Keys) {
+            $curFile = Join-Path $persistDir $cursorMap[$regName]
+            if (Test-Path $curFile) {
+                Set-ItemProperty -Path $cursorRegPath -Name $regName -Value $curFile -Force
+                $applied++
+            }
+        }
+
+        # Set the scheme name
+        Set-ItemProperty -Path $cursorRegPath -Name "(Default)" -Value $schemeName -Force
+
+        Write-Log -Message "Set $applied cursor registry entries." -Level SUCCESS
+
+        # Notify the system of cursor change
+        if (-not ('CursorHelper' -as [type])) {
+            Add-Type -TypeDefinition @"
+                using System;
+                using System.Runtime.InteropServices;
+                public class CursorHelper {
+                    [DllImport("user32.dll", SetLastError = true)]
+                    public static extern bool SystemParametersInfo(uint uiAction, uint uiParam, string pvParam, uint fWinIni);
+                }
+"@
+        }
+        # SPI_SETCURSORS = 0x0057, SPIF_UPDATEINIFILE | SPIF_SENDCHANGE = 0x03
+        [CursorHelper]::SystemParametersInfo(0x0057, 0, $null, 0x03) | Out-Null
+
+        Write-Log -Message "macOS cursor applied successfully!" -Level SUCCESS
+    } catch {
+        Write-Log -Message "Failed to apply cursor: $($_.Exception.Message)" -Level ERROR
+    } finally {
+        # Cleanup temp files regardless of success or failure
+        Remove-Item $zipPath -Force -ErrorAction SilentlyContinue
+        Remove-Item $extractPath -Recurse -Force -ErrorAction SilentlyContinue
+    }
+
+    Pause-ForUser
+}