Privacy by construction

Your image does not
need a server round trip.

Theme design stays in the browser. Installation stays a separate, reviewable local decision.

Open local studio
01 · Browser

Visual design

Image decoding, crop, color controls, preview, and ZIP creation happen locally in your browser.

No image-upload API
02 · Data recipe

Reviewable export

The archive contains an image, JSON, CSS variables, a manifest, and a plain-text guide.

No executable installer
03 · Local engine

Separate behavior

The upstream open-source scripts apply the theme through loopback-only CDP after you review them.

Explicit local trust
Non-negotiable

What a theme must never hide.

No provider changes

A visual theme must not rewrite API keys, model providers, or Base URLs.

No official package mutation

The upstream workflow does not replace the official app bundle, app.asar, or code signature.

No silent remote access

The debugging interface stays on 127.0.0.1 and should be closed through restore when unused.

No borrowed rights

Artwork licenses, character rights, likenesses, and trademarks remain the publisher's responsibility.