Plugin Center

Kafka Studio

v0.1.53

jinpy · MIT · updated Oct 4, 2026

SourceHomepage

About

Operate Apache Kafka from one DBX workspace: inspect topics, brokers, and consumer lag; search, stream, and produce messages with multi-channel filters and payload decoding; manage offsets, ACLs, and Schema Registry. Read-only by default, with guarded writes and 11 MCP tools for AI automation.

kafkastreamingmessagingschema-registry

Permissions

3 permissions

host.eventshost.storagehost.workbench

Permission codes are granted at install time and shown verbatim from the manifest.

Install in DBX

Click Install in DBX and confirm in the app. Prefer manual steps? Open the DBX Plugin Center, choose Install from URL, and paste the link for your platform — packages are signature-checked before install.

Install in DBX
PlatformSizeSHA-256Download
macOS (Apple Silicon)13.7 MBdc1630d6c05e0d86…Download
macOS (Intel)14.5 MB8dcd2720e09d58c9…Download
Linux (ARM64)12.9 MB3ed7562c8de7a16f…Download
Linux (x64)14.0 MB838c8c1e9a9434dc…Download
Windows (x64)14.1 MB86d7b79bc7c07ccc…Download

Versions

  • v0.1.53Oct 4, 2026Latest

    2026-09-26/27 代码评审修复批次（2 高危 + 6 中危 + 6 低危全项）：digest 大扫描新增 64MiB 留存字节预算并跳过 valueBase64 通道（合法 maxScanRecords=100000 不再可能把 sidecar 打到 OOM），payload 新增 retentionTruncated 标记；消费池 release 路径字段写入收拢进池锁并新增 -race 并发压测；stdio 改有界增量读行（超限请求不再预缓冲整行）并加每请求 32 并发背压；整数参数严格解析（partition/partitionOffsets/timestampMs 拒绝小数与越界值，绝不静默折算）；Schema Registry 非 2xx 错误体 2KB 截断；消息过滤 key/value 通道免整串拷贝；前端解压全线 16MiB 上限（gzip 计数断流、zstd/snappy 帧头预检、lz4 输出后检），补齐后端防护的镜像缺口；presets 契约四方对齐；confirmToken 在随机源失败时拒绝签发而非回退可预测值；timestampMs=0 前后端同线拒绝。工程面新增方法契约机器守护：methodContract.json 单一事实源 + backend AST/实调 + frontend mock 三方测试（漂移注入演练验证有效）；shared/frontend 五文件补 vendored 来源戳并纳入 validate_repo 检查。Security review fixes (2 high, 6 medium, 6 low): digest scans now cap retained payloads at 64MiB and skip the valueBase64 channel (maxScanRecords=100000 can no longer OOM the sidecar), with a retentionTruncated flag; consume-pool release writes moved under the pool lock with a -race stress test; stdio now reads lines with a bounded accumulator (oversized requests are rejected without buffering the whole line) plus a 32-request concurrency backpressure; integer arguments reject fractional and out-of-range values; Schema Registry error bodies are truncated to 2KB; key/value filter channels match bytes without full copies; frontend decompression is capped at 16MiB across gzip/zstd/snappy/lz4; presets contract aligned on all four surfaces; confirmToken issuance fails hard when the random source fails; timestampMs=0 is rejected end to end. Engineering: a machine-enforced method contract (methodContract.json verified by backend AST/live-call and frontend mock tests, proven by drift injection), and vendored provenance headers on shared/frontend files checked by validate_repo.

  • v0.1.52Oct 1, 2026

    2026-09-26/27 代码评审修复批次（2 高危 + 6 中危 + 6 低危全项）：digest 大扫描新增 64MiB 留存字节预算并跳过 valueBase64 通道（合法 maxScanRecords=100000 不再可能把 sidecar 打到 OOM），payload 新增 retentionTruncated 标记；消费池 release 路径字段写入收拢进池锁并新增 -race 并发压测；stdio 改有界增量读行（超限请求不再预缓冲整行）并加每请求 32 并发背压；整数参数严格解析（partition/partitionOffsets/timestampMs 拒绝小数与越界值，绝不静默折算）；Schema Registry 非 2xx 错误体 2KB 截断；消息过滤 key/value 通道免整串拷贝；前端解压全线 16MiB 上限（gzip 计数断流、zstd/snappy 帧头预检、lz4 输出后检），补齐后端防护的镜像缺口；presets 契约四方对齐；confirmToken 在随机源失败时拒绝签发而非回退可预测值；timestampMs=0 前后端同线拒绝。工程面新增方法契约机器守护：methodContract.json 单一事实源 + backend AST/实调 + frontend mock 三方测试（漂移注入演练验证有效）；shared/frontend 五文件补 vendored 来源戳并纳入 validate_repo 检查。Security review fixes (2 high, 6 medium, 6 low): digest scans now cap retained payloads at 64MiB and skip the valueBase64 channel (maxScanRecords=100000 can no longer OOM the sidecar), with a retentionTruncated flag; consume-pool release writes moved under the pool lock with a -race stress test; stdio now reads lines with a bounded accumulator (oversized requests are rejected without buffering the whole line) plus a 32-request concurrency backpressure; integer arguments reject fractional and out-of-range values; Schema Registry error bodies are truncated to 2KB; key/value filter channels match bytes without full copies; frontend decompression is capped at 16MiB across gzip/zstd/snappy/lz4; presets contract aligned on all four surfaces; confirmToken issuance fails hard when the random source fails; timestampMs=0 is rejected end to end. Engineering: a machine-enforced method contract (methodContract.json verified by backend AST/live-call and frontend mock tests, proven by drift injection), and vendored provenance headers on shared/frontend files checked by validate_repo.

    Artifacts
  • v0.1.51Sep 27, 2026

    2026-09-26/27 代码评审修复批次（2 高危 + 6 中危 + 6 低危全项）：digest 大扫描新增 64MiB 留存字节预算并跳过 valueBase64 通道（合法 maxScanRecords=100000 不再可能把 sidecar 打到 OOM），payload 新增 retentionTruncated 标记；消费池 release 路径字段写入收拢进池锁并新增 -race 并发压测；stdio 改有界增量读行（超限请求不再预缓冲整行）并加每请求 32 并发背压；整数参数严格解析（partition/partitionOffsets/timestampMs 拒绝小数与越界值，绝不静默折算）；Schema Registry 非 2xx 错误体 2KB 截断；消息过滤 key/value 通道免整串拷贝；前端解压全线 16MiB 上限（gzip 计数断流、zstd/snappy 帧头预检、lz4 输出后检），补齐后端防护的镜像缺口；presets 契约四方对齐；confirmToken 在随机源失败时拒绝签发而非回退可预测值；timestampMs=0 前后端同线拒绝。工程面新增方法契约机器守护：methodContract.json 单一事实源 + backend AST/实调 + frontend mock 三方测试（漂移注入演练验证有效）；shared/frontend 五文件补 vendored 来源戳并纳入 validate_repo 检查。Security review fixes (2 high, 6 medium, 6 low): digest scans now cap retained payloads at 64MiB and skip the valueBase64 channel (maxScanRecords=100000 can no longer OOM the sidecar), with a retentionTruncated flag; consume-pool release writes moved under the pool lock with a -race stress test; stdio now reads lines with a bounded accumulator (oversized requests are rejected without buffering the whole line) plus a 32-request concurrency backpressure; integer arguments reject fractional and out-of-range values; Schema Registry error bodies are truncated to 2KB; key/value filter channels match bytes without full copies; frontend decompression is capped at 16MiB across gzip/zstd/snappy/lz4; presets contract aligned on all four surfaces; confirmToken issuance fails hard when the random source fails; timestampMs=0 is rejected end to end. Engineering: a machine-enforced method contract (methodContract.json verified by backend AST/live-call and frontend mock tests, proven by drift injection), and vendored provenance headers on shared/frontend files checked by validate_repo.

    Artifacts
  • v0.1.49Sep 26, 2026

    2026-09-26 安全审查修复批次：解压全分支 16MiB 上限（LimitReader 与 zstd max-memory）并给 valueText 补齐同规格 base64 截断，杜绝解压炸弹；修复消费池竞态（consumePoolPut 跳过 inUse 条目，并发同形状消费不再互杀）；LoadSettings 补 cursorTtlSecs/maxCursorSessions 持久化往返；regex 过滤命中预编译缓存；stream/start 预校验 decode/decompression 参数。Schema Registry 客户端接入连接 TLS 配置，skip-verify 连接在审计中留痕并修订三值契约注释；消费组删除新增输入组名确认（ensureGroupDeleteConfirm，前端七语），CSS 令牌语义化。打包链路改为源码现构建前端（ui/index.html 脱库），build.sh 支持 DBX_PREBUILT_UI=1 复用 CI 预置产物。Security review fixes: 16MiB cap on all decompress branches (LimitReader + zstd max-memory) with matching base64 truncation for valueText to defuse decompression bombs; consume-pool race fix (consumePoolPut skips inUse entries so concurrent same-shape consumes no longer evict each other); LoadSettings now round-trips cursorTtlSecs/maxCursorSessions; regex filter hits the precompiled cache; stream/start pre-validates decode/decompression params. The Schema Registry client now honors connection TLS settings, skip-verify connections are recorded in the audit trail, and group deletion gained a type-the-group-name confirmation (seven languages). Packaging now builds the frontend from source (ui/index.html de-vendored), and build.sh supports DBX_PREBUILT_UI=1 to reuse CI-built UI.

    Artifacts
  • v0.1.48Sep 26, 2026

    修复工作台状态在真机上不持久化的问题：DBX 沙箱 iframe 的 opaque origin 下 localStorage 直接抛错，原持久化静默失效；现在统一经 pluginStorage 适配器接入宿主 window.dbxPlugin.storage（Host API 1.2，capabilities.storage 探测，降级链：宿主桥 → 受控 localStorage → 内存，旧键一次性搬家），消息查询表单、树宽/折叠、内部 topic 显示、收藏 topic 与时区设置刷新后均保留。同步完成依赖升级：后端 twmb/franz-go 1.22.0、golang.org/x/net 0.59.0 等，前端 vue 3.5.43、ag-grid-community 36.2.0 等，工具链基线提升至 Go 1.26。Fixed workbench state not persisting on the desktop host: localStorage throws under the sandbox iframe's opaque origin, so the previous persistence silently failed; state now goes through a pluginStorage adapter backed by the host window.dbxPlugin.storage bridge (Host API 1.2, capabilities.storage detection, with guarded localStorage and in-memory fallbacks and one-shot legacy-key migration), keeping the messages form, tree width/collapse, internal-topic visibility, favorite topics and timezone across reloads. Dependencies were upgraded in lockstep: twmb/franz-go 1.22.0 and golang.org/x/net 0.59.0 on the backend, vue 3.5.43 and ag-grid-community 36.2.0 on the frontend, with the toolchain floor raised to Go 1.26.

    Artifacts
  • v0.1.47Sep 21, 2026

    修复深色主题下 Topic 侧栏不可读的问题：图标色随 color-scheme 自动翻转，核心颜色令牌改为实时跟随宿主主题（不再被内联快照冻结），并提升树行/星标对比度。消息查询新增「最近 N 条」Offset 策略并设为默认：原「最新」策略从日志末端只等待新消息，对没有持续流量的 topic 总是「已扫描 0 · 命中 0」，现在默认即可读到每个分区最新的历史记录。Fixed topics sidebar legibility in dark theme: icon hues follow color-scheme, core color tokens now track the host theme live instead of being frozen by an inline snapshot, and tree row/star contrast was raised. Messages query adds a recent-N offset strategy and defaults to it: the previous latest default only waited for new records and always scanned zero on idle topics; the new default surfaces the newest existing records per partition.

    Artifacts
  • v0.1.45Sep 20, 2026

    修复深色主题下 Topic 侧栏不可读的问题：图标色随 color-scheme 自动翻转，核心颜色令牌改为实时跟随宿主主题（不再被内联快照冻结），并提升树行/星标对比度。消息查询新增「最近 N 条」Offset 策略并设为默认：原「最新」策略从日志末端只等待新消息，对没有持续流量的 topic 总是「已扫描 0 · 命中 0」，现在默认即可读到每个分区最新的历史记录。Fixed topics sidebar legibility in dark theme: icon hues follow color-scheme, core color tokens now track the host theme live instead of being frozen by an inline snapshot, and tree row/star contrast was raised. Messages query adds a recent-N offset strategy and defaults to it: the previous latest default only waited for new records and always scanned zero on idle topics; the new default surfaces the newest existing records per partition.

    Artifacts
  • v0.1.44Sep 20, 2026

    修复深色主题下 Topic 侧栏不可读的问题：图标色随 color-scheme 自动翻转，核心颜色令牌改为实时跟随宿主主题（不再被内联快照冻结），并提升树行/星标对比度。消息查询新增「最近 N 条」Offset 策略并设为默认：原「最新」策略从日志末端只等待新消息，对没有持续流量的 topic 总是「已扫描 0 · 命中 0」，现在默认即可读到每个分区最新的历史记录。Fixed topics sidebar legibility in dark theme: icon hues follow color-scheme, core color tokens now track the host theme live instead of being frozen by an inline snapshot, and tree row/star contrast was raised. Messages query adds a recent-N offset strategy and defaults to it: the previous latest default only waited for new records and always scanned zero on idle topics; the new default surfaces the newest existing records per partition.

    Artifacts
  • v0.1.43Sep 19, 2026

    修复深色主题下 Topic 侧栏不可读的问题：图标色随 color-scheme 自动翻转，核心颜色令牌改为实时跟随宿主主题（不再被内联快照冻结），并提升树行/星标对比度。消息查询新增「最近 N 条」Offset 策略并设为默认：原「最新」策略从日志末端只等待新消息，对没有持续流量的 topic 总是「已扫描 0 · 命中 0」，现在默认即可读到每个分区最新的历史记录。Fixed topics sidebar legibility in dark theme: icon hues follow color-scheme, core color tokens now track the host theme live instead of being frozen by an inline snapshot, and tree row/star contrast was raised. Messages query adds a recent-N offset strategy and defaults to it: the previous latest default only waited for new records and always scanned zero on idle topics; the new default surfaces the newest existing records per partition.

    Artifacts
  • v0.1.42Sep 17, 2026

    修复深色主题下 Topic 侧栏不可读的问题：图标色随 color-scheme 自动翻转，核心颜色令牌改为实时跟随宿主主题（不再被内联快照冻结），并提升树行/星标对比度。消息查询新增「最近 N 条」Offset 策略并设为默认：原「最新」策略从日志末端只等待新消息，对没有持续流量的 topic 总是「已扫描 0 · 命中 0」，现在默认即可读到每个分区最新的历史记录。Fixed topics sidebar legibility in dark theme: icon hues follow color-scheme, core color tokens now track the host theme live instead of being frozen by an inline snapshot, and tree row/star contrast was raised. Messages query adds a recent-N offset strategy and defaults to it: the previous latest default only waited for new records and always scanned zero on idle topics; the new default surfaces the newest existing records per partition.

    Artifacts
  • v0.1.41Sep 16, 2026

    修复 DBX 隧道/代理下的 Kafka 连接：插件改为拨宿主下发的最终端点 runtime.host:port，并在宿主下发 runtime.proxy 时让所有 broker（含 advertised.listeners 发现的）共用同一个 SOCKS5 dialer，admin/生产/一次性消费/流式消费一致生效；代理路径补齐 TLS 握手与按 broker 的 SNI。消费组 offset 重置修复 Kafka 4.x 误报成功的问题（OffsetCommit v10 起以 topic id 标识主题，旧提交被 broker 以 UNKNOWN_TOPIC_ID 拒绝），任一分区被拒即返回错误。Fixes Kafka connections behind DBX transport/proxy layers: the sidecar now dials the host-provided runtime endpoint and, when the host publishes runtime.proxy, routes every broker (including brokers discovered via advertised.listeners) through one SOCKS5 dialer shared by admin, produce, one-shot consume and stream clients, with the TLS handshake and per-broker SNI applied after the proxy CONNECT. Consumer-group offset reset now commits by topic id for Kafka 4.x (OffsetCommit v10+) instead of being rejected as UNKNOWN_TOPIC_ID and misreported as success.

    Artifacts
  • v0.1.40Sep 16, 2026

    首个商店版本（Kafka Studio）：在一个 DBX 工作台中管理 Apache Kafka——topic/分区/消费组巡检、消息生产与消费（本地聚合 digest、cursor 翻页与流式导出）、消费组 lag 监控与受控 offset 重置、topic/ACL 运维，支持 PLAINTEXT/TLS/SASL（PLAIN/SCRAM）、Kerberos、OAUTHBEARER 与 Confluent/AWS Glue Schema Registry；工作台界面提供 7 种语言（en/zh-CN/zh-TW/es/it/ja/pt-BR）；写操作受只读、allowDelete 与两阶段确认保护，并提供 11 个 MCP 工具供 AI 自动化调用。

    Artifacts
  • v0.1.39Sep 15, 2026

    首个商店版本（Kafka Studio）：在一个 DBX 工作台中管理 Apache Kafka——topic/分区/消费组巡检、消息生产与消费（本地聚合 digest、cursor 翻页与流式导出）、消费组 lag 监控与受控 offset 重置、topic/ACL 运维，支持 PLAINTEXT/TLS/SASL（PLAIN/SCRAM）、Kerberos、OAUTHBEARER 与 Confluent/AWS Glue Schema Registry；工作台界面提供 7 种语言（en/zh-CN/zh-TW/es/it/ja/pt-BR）；写操作受只读、allowDelete 与两阶段确认保护，并提供 11 个 MCP 工具供 AI 自动化调用。

    Artifacts