Theme (theme) guide

1. Create a plugin of kind theme, with an ID such as acme.dev.ocean.
2. Write theme.json: id must be market.<plugin id> and version equal to the plugin version.
3. Put the SHA-256 of theme.json in spec.entrypoint.sha256, declare only platform.themes.provide, sign and upload.

{
  "schema": "cdnca.theme/v1",
  "id": "market.acme.dev.ocean",
  "version": "1.0.0",
  "name": {"zh-CN": "海蓝", "en-US": "Ocean"},
  "description": {"zh-CN": "蓝色系主控外观"},
  "tokens": {"colorPrimary": "#1769aa", "borderRadius": 6},
  "layout_slots": {"login_layout": "centered", "sidebar": "dark"},
  "templates": {
    "styles": [{"selector": ".cf-page", "declarations": {"background-color": "token:colorBgContainer"}}],
    "error_page": "<!doctype html><html><head><title>{{title}}</title></head><body><main class=\"cf-page\"><h1>{{status}} {{title}}</h1><p>{{message}}</p></main></body></html>",
    "email": "<!doctype html><html><head><title>{{subject}}</title></head><body><main class=\"cf-page\">{{#lines}}<p>{{.}}</p>{{/lines}}</main></body></html>"
  }
}Copy

Signing and key registration are on the plugin signing page. Signing tool and steps →

Any string containing url(, @import, expression(, javascript:, <script, <link, <iframe, <object, <embed, src=, href= or srcset= is rejected (except header_links urls and base64 images). A theme package is at most 8 MiB.

After upload the review worker runs the validating phase (manifest, entrypoint, permissions, the kind’s own checks); any reject stops it before scanning, then the scanning phase runs. Outcome: a reject → changes requested (fix it and press “Resubmit”, at most 10 scans per version); a quarantine → human review; neither → approved directly or sent to human review under the conditions below.

• The first version (the plugin has no reviewed version yet)
• Permissions differ from the last reviewed version (added or removed)
• Privileged kinds: module, engine_module, provider
• Sellers who joined less than 90 days ago (market default, adjustable by the operator)
• Three scan attempts in a row errored

Any one of them sends the version to human review. The full rule table (rule ID, severity, reject or quarantine, evaluation mode) is on the review rules page.

• theme.invalid: not a valid cdnca.theme/v1 package (tokens, slots, templates, external references); detail carries code and field (reject).
• theme.id_mismatch: id is not market.<plugin id> (reject).
• theme.version_mismatch: the theme version differs from the plugin version (reject).

Rules for this kind are in the review rule list: metadata.* entrypoint.* permissions.* theme.*

Review runs the control plane’s renderer, libs/themepack Render. Precheck with it from the repository root; the error code / field match the scan report:

mkdir -p libs/themepack/cmd/thc && cat > libs/themepack/cmd/thc/main.go <<'EOF'
package main

import (
	"fmt"
	"os"

	"github.com/cdnca/cdnca/libs/themepack"
)

func main() {
	raw, _ := os.ReadFile(os.Args[1])
	r, err := themepack.Render(raw)
	if err != nil {
		fmt.Fprintln(os.Stderr, err)
		os.Exit(1)
	}
	fmt.Println(r.Package.ID, r.Package.Version, r.PackageSHA256)
}
EOF
GOWORK=off go -C libs/themepack run ./cmd/thc "$PWD/theme.json"Copy

The built-in themes in libs/themepack/builtin/*.json show a complete package (change id to market.<your plugin id>).