Visual design
Image decoding, color controls, preview, and .codexskin package creation happen locally in your browser.
No image-upload APIYour image does not
need a server round trip.
Theme design stays in the browser. Installation stays a separate, reviewable local decision.
Open local studioReviewable data
The package contains an image, theme JSON, a manifest, and a plain-text guide—never executable scripts.
Data onlySeparate behavior
The optional helper invokes the reviewed open-source engine through loopback-only CDP and keeps restore available.
Explicit local trustNon-negotiable
What a theme must never hide.
No provider changes
A visual theme must not rewrite API keys, model providers, or Base URLs.
No official package mutation
The upstream workflow does not replace the official app bundle, app.asar, or code signature.
No silent remote access
The debugging interface stays on 127.0.0.1 and should be closed through restore when unused.
No borrowed rights
Artwork licenses, character rights, likenesses, and trademarks remain the publisher's responsibility.