@luban-code/luban-code 1.100.2 → 1.100.4

package/package.json

@@ -2,7 +2,7 @@
   "name": "@luban-code/luban-code",
   "displayName": "Luban",
   "description": "Luban — a standalone sidebar AI coding agent (multi-provider, OpenAI-compatible, zero source patches)",
-  "version": "1.100.2",
+  "version": "1.100.4",
   "license": "Apache-2.0",
   "author": {
     "name": "eppen (liuhualiang)",
@@ -86,6 +86,8 @@
     "test:i18n": "node scripts/test-i18n.js",
     "test:css": "node scripts/test-css-vars.js",
     "test:webdav": "node scripts/test-webdav.js",
+    "test:mcp-config": "node scripts/test-mcp-config.js",
+    "test:mcp-ext": "node scripts/test-mcp-ext.js",
     "test:webdav-override": "node scripts/test-webdav-override.js",
     "test:browser-events": "node scripts/test-browser-events.js",
     "test:browser-tool": "node scripts/test-browser-tool.js",

package/registry/README.md

@@ -64,6 +64,18 @@ luban skill remove changelog-draft               # 移进 ~/.luban/skills-trash/
 | `permissions` | `{}`（纯 Markdown，没有执行能力） |
 | 包内清单 | `SKILL.md` 的 frontmatter：`name` 必须等于条目名、`version` 可选但写了就要一致 |
 
+纯主题条目（只有 theme、没有 tools）同样是 plugin，只是 `tools` 写 `[]` 并带上 `theme`：
+
+| 字段 | 纯主题插件的值 |
+|---|---|
+| `type` | `"plugin"` |
+| `tools` | `[]`（不新增工具） |
+| `theme` | `{ label, tokens }`，与包内 `plugin.json` **逐字一致**（`sameTheme` 比对 label + 排序后的 tokens） |
+| `permissions` | 五项全 `false`（它确实不执行任何东西，但字段要写） |
+| 包内清单 | `plugin.json`，无 `main` / `index.js` / `tools`；装完**不需要信任确认** |
+
+空 `tools` 必须由 `theme` 证明「是故意的」：既没有 `tools` 也没有 `theme` 的条目判坏，
+否则「忘了写 tools」和「纯数据插件」在索引里长得一模一样。
 ```
 sourceSha256 算法（目录哈希，与机器 / 时间无关）
   1. 遍历目录，跳过 node_modules / .git / .DS_Store，符号链接跳过并告警；
@@ -90,6 +102,8 @@ node scripts/registry-tool.mjs hash /tmp/lp/plugins/demo
 | `permissions` 出现未知权限键 | error | 防止悄悄扩权绕过展示 |
 | 签名与内容不符 | error | 改了权限却没重签 = 篡改 |
 | 索引 tools ≠ 已安装 plugin.json | error | 防「先上架后换包」 |
+| 索引 theme ≠ 包内 plugin.json | error | 纯主题插件唯一的清单校验；市场展示的配色必须与装到盘上的一致 |
+| plugin 既无 tools 也无 theme | error | 纯数据插件要显式写 theme，不能靠「空 tools」蒙混 |
 | `type=skill` 却声明了 `tools` | error | 技能不新增工具，声明了说明字段用错 |
 | `type=skill` 却声明了 `permissions` | warn | 忽略即可；技能没有执行能力 |
 | 索引 name / version ≠ 已安装 `SKILL.md` 的 frontmatter | error | 技能侧的「先上架后换包」检查 |

package/registry/entry.schema.json

@@ -53,7 +53,7 @@
     },
     "tools": {
       "type": "array",
-      "description": "工具清单，必须与包内 plugin.json 逐字一致（校验脚本比对）",
+      "description": "工具清单，必须与包内 plugin.json 逐字一致（校验脚本比对）。纯主题插件写 []",
       "items": {
         "type": "object",
         "additionalProperties": false,
@@ -66,6 +66,22 @@
         }
       }
     },
+    "theme": {
+      "type": "object",
+      "description": "纯数据主题（L0）：只有 theme、没有 tools 的插件合法 —— 它不 require 任何代码，装完也不需要信任确认。token 名与 media/panel.css 的 :root 变量同名（去掉 -- 前缀）",
+      "additionalProperties": false,
+      "required": ["label", "tokens"],
+      "properties": {
+        "label": { "type": "string", "minLength": 1, "description": "界面显示名，如「樱花」" },
+        "description": { "type": "string", "description": "一句话说明适用场景，市场里展示" },
+        "tokens": {
+          "type": "object",
+          "minProperties": 1,
+          "description": "颜色 / 尺寸 token。名字必须在 plugin.js 的白名单内；值逐项过正则，非法项丢弃而不是整份判坏",
+          "additionalProperties": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
     "permissions": {
       "type": "object",
       "description": "L1 核心：作者自报的实际能力。readOnly 只是工具语义，不能推翻这里；审核以本块为准",

package/registry/registry.json

@@ -1,6 +1,6 @@
 {
   "registryVersion": 1,
-  "updatedAt": "2026-11-13T13:53:13Z",
+  "updatedAt": "2026-11-14T02:08:29Z",
   "schema": "./entry.schema.json",
   "signingKeys": [
     {
@@ -173,6 +173,170 @@
         "keyId": "registry-ci",
         "sig": "vvpXf4ApzGh1JpT7B7GuLe4n75s/71GAznRNijP2j3u4LZhkhBZBa36ZjqnhA2mvJrRYyBWSlthujANuelMABA=="
       }
+    },
+    {
+      "name": "brooks-lint",
+      "displayName": "Brooks-Lint 代码质量审查",
+      "description": "基于十二本经典软件工程书籍的代码质量审查方法论：从六个 decay risk 维度诊断代码，输出结构化发现与健康评分",
+      "type": "skill",
+      "version": "0.1.0",
+      "author": "liuhualiang",
+      "license": "MIT",
+      "repo": "https://github.com/eppen/luban-plugins",
+      "tags": [
+        "code-review",
+        "architecture",
+        "quality"
+      ],
+      "install": {
+        "type": "git",
+        "url": "git@github.com:eppen/luban-plugins.git",
+        "subdir": "skills/brooks-lint",
+        "target": "global"
+      },
+      "sourceSha256": "19764b4fc4f450d62fe5c49716a2915937c60d94945a48a90638064dca7aaa8e",
+      "ctxApi": ">=0.1 <1.0",
+      "tools": [],
+      "permissions": {},
+      "review": {
+        "status": "pending",
+        "notes": "技能无执行能力；正文只提供代码审查方法论（六个 decay risk 维度、Iron Law 诊断流程、报告模板），不要求执行任何命令或修改文件。移植自 hyhmrright/brooks-lint（MIT）。"
+      },
+      "signature": {
+        "algo": "ed25519",
+        "keyId": "registry-ci",
+        "sig": "e9/VuEVrDkk7p9AjRamkuFROIIyixDL3SAZCq3+YdXDAd1NdaZztBqH+pvT0VpeIYFa6z1lSx+dOqbsAIhIbDw=="
+      }
+    },
+    {
+      "name": "theme-sakura",
+      "displayName": "樱花主题",
+      "description": "浅粉底 + 樱红强调的 Luban 界面主题，纯数据无工具",
+      "type": "plugin",
+      "version": "0.1.0",
+      "author": "liuhualiang",
+      "license": "MIT",
+      "repo": "https://github.com/eppen/luban-plugins",
+      "tags": [
+        "theme",
+        "ui"
+      ],
+      "install": {
+        "type": "git",
+        "url": "git@github.com:eppen/luban-plugins.git",
+        "subdir": "plugins/theme-sakura",
+        "target": "global"
+      },
+      "sourceSha256": "ee01b21aecb54297191d6aa9e5fc468129f38ff289493b9258580aae4d501afc",
+      "ctxApi": ">=0.1 <1.0",
+      "theme": {
+        "label": "樱花",
+        "description": "浅粉底 + 樱红强调，圆角偏大，适合浅色工作区",
+        "tokens": {
+          "bg": "#fdf6f8",
+          "fg": "#3d2b33",
+          "panel": "#fffafc",
+          "border": "#f0d4de",
+          "accent": "#e26fa4",
+          "accent-fg": "#ffffff",
+          "muted": "#9b7a88",
+          "code-bg": "#f7e8ee",
+          "surface": "#fffafc",
+          "surface-2": "#fbeef3",
+          "hover": "rgba(226, 111, 164, 0.10)",
+          "link": "#c94f86",
+          "ok": "#3f9d6e",
+          "warn": "#c98a2e",
+          "error": "#d64550",
+          "radius-sm": "6",
+          "radius": "10",
+          "radius-lg": "14"
+        }
+      },
+      "tools": [],
+      "permissions": {
+        "fsRead": false,
+        "fsWrite": false,
+        "shell": false,
+        "net": false,
+        "env": false
+      },
+      "review": {
+        "status": "reviewed",
+        "reviewedBy": "liuhualiang",
+        "reviewedAt": "2026-11-14T02:07:46Z",
+        "notes": "纯数据插件：只提供 theme.tokens，无 index.js、无 tools，安装与加载都不执行任何代码。tokens 取值由 plugin.js 白名单逐项校验（非法项丢弃），注入时又逐条复验。"
+      },
+      "signature": {
+        "algo": "ed25519",
+        "keyId": "registry-ci",
+        "sig": "InPR/qeS6d2G0KliVgk9rqYHPGIUa/80VsTNc4Z5hD4rVvSJUc8lpG8iX8EARJGtVaOZSLjLawQ/W8uu/52MAg=="
+      }
+    },
+    {
+      "name": "theme-midnight",
+      "displayName": "午夜主题",
+      "description": "深蓝紫底 + 青蓝强调的 Luban 界面主题，对比度高，纯数据无工具",
+      "type": "plugin",
+      "version": "0.1.0",
+      "author": "liuhualiang",
+      "license": "MIT",
+      "repo": "https://github.com/eppen/luban-plugins",
+      "tags": [
+        "theme",
+        "ui"
+      ],
+      "install": {
+        "type": "git",
+        "url": "git@github.com:eppen/luban-plugins.git",
+        "subdir": "plugins/theme-midnight",
+        "target": "global"
+      },
+      "sourceSha256": "ad78f3284d30cfa433ec7d880ca145dcfd1ac6ada11403007df690405345632b",
+      "ctxApi": ">=0.1 <1.0",
+      "theme": {
+        "label": "午夜",
+        "description": "深蓝紫底 + 青蓝强调，对比度高，适合深色工作区",
+        "tokens": {
+          "bg": "#0f1220",
+          "fg": "#e6e9f5",
+          "panel": "#161a2e",
+          "border": "#2a3050",
+          "accent": "#6c8cff",
+          "accent-fg": "#0b0e1a",
+          "muted": "#8a90b0",
+          "code-bg": "#1a1f38",
+          "surface": "#161a2e",
+          "surface-2": "#1e2440",
+          "hover": "rgba(108, 140, 255, 0.14)",
+          "link": "#7fb0ff",
+          "ok": "#4fd1a5",
+          "warn": "#e0b04a",
+          "error": "#ff6b7a",
+          "radius-sm": "4",
+          "radius": "8",
+          "radius-lg": "12"
+        }
+      },
+      "tools": [],
+      "permissions": {
+        "fsRead": false,
+        "fsWrite": false,
+        "shell": false,
+        "net": false,
+        "env": false
+      },
+      "review": {
+        "status": "reviewed",
+        "reviewedBy": "liuhualiang",
+        "reviewedAt": "2026-11-14T02:07:46Z",
+        "notes": "纯数据插件：只提供 theme.tokens，无 index.js、无 tools，安装与加载都不执行任何代码。tokens 取值由 plugin.js 白名单逐项校验（非法项丢弃），注入时又逐条复验。"
+      },
+      "signature": {
+        "algo": "ed25519",
+        "keyId": "registry-ci",
+        "sig": "TiLK6rNRSm83rHO1uSCosY2rp6Zh1uriGVhMatv+Wu4lfj4/Z/Sp6Oy3d14sYvM15sSSMDnsYvDBpMT/E9o3CA=="
+      }
     }
   ]
 }