Theme Report 0.9.2

• Restore the badge on stable Omarchy. Use standard Quickshell IPC and optionally register with newer shells' socket registry, rather than requiring their ShellIpc type. Fixes the widget failing to load on Omarchy 4.0.2. Regression tests cover both APIs, native IPC calls, registry lifecycle and monitor ownership.

• Pin downloaded executables to reviewed source. The installer checks the archive against a SHA-256 embedded in its version/architecture table, never a checksum downloaded from the same release. Optional GitHub attestation verification now requires the exact source commit, tag and release workflow. Unknown versions fail closed; release publishing no longer replaces existing assets. Addresses marketplace submission #12129.

• Two-command install. omarchy plugin add … --enable, then bash ~/.config/omarchy/plugins/oldjobobo.theme-report/scripts/install.sh. The installer now downloads the matching release binary itself and checks its checksum, plus its GitHub attestation when gh is logged in. No Rust toolchain, cd or tarball handling needed. --build compiles from source instead, with build files kept in ~/.cache.

• The installer asks before adding the badge to your bar or restarting the shell, instead of printing commands to copy. install.sh --help lists the options.

• When the analyzer is missing, the panel shows the install command instead of a path to check.

Built by GitHub Actions from 95d946e53b744689298a7eb19d6e5e66fb4f3146 with Rust 1.99.0 on ubuntu-24.04.
Verify: gh attestation verify <archive> -R OldJobobo/theme-report

Updating an existing install

omarchy plugin update oldjobobo.theme-report
bash ~/.config/omarchy/plugins/oldjobobo.theme-report/scripts/install.sh

If the badge is still missing, restart the shell with omarchy restart shell while the desktop is unlocked.

--[ Pi :: gpt-6.1-sol ]--
--- on behalf of: @OldJobobo

Theme Report 0.9.1

Security hardening for the marketplace review.

• The panel never reads files itself. It only watches the saved report, the agent review, theme.name and the default-agent setting for changes, then asks the analyzer's new read-only theme-report state command for them. That command reads with the same bounded reader as audits: no symlinks, regular files only, nonblocking, size-limited. A review written by an agent can no longer point the panel at another file, hang it on a FIFO, or make it load a huge file.
• Bounded reads everywhere in the analyzer. Prompts and handoffs now read the report, theme.name, the default-agent setting and agent.toml through the same reader.
• Release archives are built by CI. A new release workflow builds the archive from the tagged commit, rebuilds it from a second checkout and requires identical bytes, installs and runs the exact archive, and publishes it with a signed provenance attestation (gh attestation verify). The build no longer embeds local paths, and BUILDINFO.txt records the commit and toolchain.

Built by GitHub Actions from 3407b2670c63b24dafe4f215081ba14d490d6543 with Rust 1.99.0 on ubuntu-24.04.
Verify: gh attestation verify <archive> -R OldJobobo/theme-report

Theme Report 0.9.0

Superseded by 0.9.1. The 0.9.0 prebuilt archive was withdrawn; 0.9.1 archives are built and attested by CI.

The first public release of Theme Report: a read-only health check for Omarchy themes. A bar badge shows your current theme's grade; click it for a report card with the measurements behind every finding, and hand the problems to your Omarchy default agent to fix.

Install

Plugin manager:

omarchy plugin add https://github.com/OldJobobo/theme-report.git
cd ~/.config/omarchy/plugins/oldjobobo.theme-report
export CARGO_TARGET_DIR=~/.cache/theme-report/build
cargo build --release --locked          # or: --binary <archive>/bin/theme-report below
bash scripts/install.sh
omarchy plugin enable oldjobobo.theme-report

Prebuilt archive (x86_64, no Rust needed): download theme-report-0.9.0-linux-x86_64.tar.gz, check it with sha256sum -c theme-report-0.9.0-linux-x86_64.tar.gz.sha256, unpack it, then from that folder:

bash scripts/install.sh
omarchy-shell shell rescanPlugins
omarchy plugin enable oldjobobo.theme-report

Optional: ffmpeg for video wallpapers, ImageMagick for color-profiled or very large images. See the README for details and removal.

New since 0.8.0

• Installs directly with omarchy plugin add.
• Prebuilt x86_64 archive; install.sh uses its bundled binary automatically.
• Every agent prompt and the skill treat the theme's files as data: no instructions followed, no commands run, no network.
• Agent review cards never load images or URLs.
• Docs rewritten in plain language; minimum Rust version (1.88) declared.

Full history: CHANGELOG.md.