openclacky 1.3.6 → 1.3.7

data/lib/clacky/extension/scaffold/templates/full/panels/dashboard/view.js.erb

@@ -0,0 +1,194 @@
+// Dashboard panel + demo UI hooks for the "<%= slug %>" extension.
+// One file, six slots + one workspace — a tour of every UI hook:
+//   • sidebar.nav.top    — top-of-rail entry for a first-class workspace
+//   • sidebar.nav        — regular menu entry (between Sessions and Config)
+//   • sidebar.nav.bottom — end-of-rail entry for a secondary link
+//   • main.workspace     — a full-page view opened by those entries
+//   • session.banner     — a strip above the message list
+//   • session.aside      — a tab in the right aside
+//   • session.composer   — quick-action buttons above the input bar
+// Reload the WebUI page to see edits.
+(function () {
+  var EXT = "<%= slug %>";
+
+  // ── 0. Full-page workspace: a "console" view mounted in #main.
+  //   Registered once; opened via openWorkspace(id) below or by
+  //   navigating to #ext/<%= slug %>. Router hides other panels first,
+  //   then calls render(container) — container is empty on entry.
+  Clacky.ext.ui.registerWorkspace(EXT, {
+    title: EXT + " console",
+    render: function (container) {
+      container.innerHTML =
+        '<div style="max-width:720px;margin:32px auto;padding:24px;">' +
+          '<h2 style="margin:0 0 8px">' + EXT + ' console</h2>' +
+          '<p style="opacity:.7;margin:0 0 16px">' +
+            'Full-page workspace registered by the ' + EXT + ' extension. ' +
+            'Replace this render() with a real dashboard, form, or embedded iframe.' +
+          '</p>' +
+          '<button id="ws-load-stats" class="btn-primary">Load stats</button>' +
+          '<pre id="ws-out" style="margin-top:12px;white-space:pre-wrap;"></pre>' +
+        '</div>';
+      container.querySelector("#ws-load-stats").addEventListener("click", async function () {
+        var res = await fetch("/api/ext/" + EXT + "/stats");
+        container.querySelector("#ws-out").textContent =
+          JSON.stringify(await res.json(), null, 2);
+      });
+    },
+  });
+
+  // Shared factory for a sidebar row (icon + label + click handler).
+  function navRow(label, onClick) {
+    var item = document.createElement("div");
+    item.className = "task-item task-item-summary";
+    item.innerHTML =
+      '<div class="task-row">' +
+        '<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" ' +
+             'fill="none" stroke="currentColor" stroke-width="2" ' +
+             'stroke-linecap="round" stroke-linejoin="round" class="task-icon">' +
+          '<rect x="3" y="3" width="7" height="7"/>' +
+          '<rect x="14" y="3" width="7" height="7"/>' +
+          '<rect x="3" y="14" width="7" height="7"/>' +
+          '<rect x="14" y="14" width="7" height="7"/>' +
+        '</svg>' +
+        '<div class="task-info"><span class="task-name">' + label + '</span></div>' +
+      '</div>';
+    item.addEventListener("click", onClick);
+    return item;
+  }
+
+  // ── 1a. Top slot: first-class workspace entry, above Sessions ──
+  //   Global chrome — visible for every agent regardless of the
+  //   panel file this mount lives in.
+  Clacky.ext.ui.mount("sidebar.nav.top", function () {
+    return navRow(EXT + " console", function () {
+      Clacky.ext.ui.openWorkspace(EXT);
+    });
+  });
+
+  // ── 1b. Main slot: regular menu row between Sessions and Config ─
+  Clacky.ext.ui.mount("sidebar.nav", function () {
+    return navRow(EXT + " menu (middle)", function () {
+      Clacky.ext.ui.openWorkspace(EXT);
+    });
+  });
+
+  // ── 1c. Bottom slot: secondary link at the end of the rail ─────
+  Clacky.ext.ui.mount("sidebar.nav.bottom", function () {
+    return navRow(EXT + " footer link", function () {
+      Clacky.ext.ui.openWorkspace(EXT);
+    });
+  });
+
+  // ── 2. Session banner: horizontal strip above the messages ─────
+  Clacky.ext.ui.mount("session.banner", function () {
+    var bar = document.createElement("div");
+    bar.style.cssText =
+      "padding:8px 12px;margin:8px 0;border-radius:var(--radius-sm,6px);" +
+      "background:var(--color-bg-hover,#f4f4f2);color:var(--color-text-primary,#334);" +
+      "display:flex;align-items:center;gap:8px;font-size:13px;";
+    bar.innerHTML = '<strong>' + EXT + '</strong> — banner slot demo. ';
+    var dismiss = document.createElement("button");
+    dismiss.className = "btn-secondary";
+    dismiss.textContent = "Dismiss";
+    dismiss.style.cssText = "margin-left:auto;padding:4px 12px;font-size:12px;";
+    dismiss.addEventListener("click", function () { bar.remove(); });
+    bar.appendChild(dismiss);
+    return bar;
+  });
+
+  // ── 3. Session aside: a tab in the right column (tabbed slot) ──
+  //
+  // This form (spec = plain function) is stateless: every time the tab is
+  // shown the render runs from scratch. Fine for panels that are pure
+  // reflections of server data.
+  //
+  // If you need a runtime that lives as long as the session (a canvas'
+  // undo stack, a running audio recorder, a websocket client), pass an
+  // object with `create(ctx)` / `render(container, ctx, runtime)` /
+  // optional `runtime.dispose()`. `create` runs once per session and its
+  // return value is passed to every `render`; `dispose` runs when the
+  // session leaves the sidebar. Example:
+  //
+  //   Clacky.ext.ui.mount("session.aside", {
+  //     create(ctx) {
+  //       const state = { count: 0 };
+  //       return { state, dispose() { /* release resources */ } };
+  //     },
+  //     render(container, ctx, runtime) {
+  //       const btn = document.createElement("button");
+  //       btn.textContent = "Clicked " + runtime.state.count + " times";
+  //       btn.onclick = () => { runtime.state.count++; render(container, ctx, runtime); };
+  //       container.appendChild(btn);
+  //     },
+  //   }, { tab: { id: "counter", label: "Counter" } });
+  Clacky.ext.ui.mount("session.aside", function (ctx) {
+    var el = document.createElement("div");
+    el.style.padding = "16px";
+    el.innerHTML = '<h3 style="margin:0 0 8px">' + EXT + ' dashboard</h3>';
+
+    var btn = document.createElement("button");
+    btn.className = "btn-primary";
+    btn.textContent = "Load stats";
+    var out = document.createElement("pre");
+    out.style.cssText = "margin-top:12px;white-space:pre-wrap;";
+
+    btn.addEventListener("click", async function () {
+      var res = await fetch("/api/ext/" + EXT + "/stats");
+      out.textContent = JSON.stringify(await res.json(), null, 2);
+    });
+
+    el.appendChild(btn);
+    el.appendChild(out);
+    return el;
+  }, {
+    tab: { id: EXT, label: () => EXT },
+    order: 500,
+  });
+
+  // ── 4. Session composer: quick-action buttons above the input ──
+  //   Clicking a button injects a slash command into #user-input
+  //   and clicks #btn-send — the same code path as typing it.
+  //
+  //   These "chips" are pill-shaped so they read differently from
+  //   full btn-primary/btn-secondary buttons. Colors/radii still
+  //   pull from host CSS variables so themes travel with them.
+  Clacky.ext.ui.mount("session.composer", function () {
+    var wrap = document.createElement("div");
+    wrap.style.cssText = "display:flex;gap:6px;padding:6px 8px;flex-wrap:wrap;";
+
+    function quick(label, command) {
+      var b = document.createElement("button");
+      b.type = "button";
+      b.textContent = label;
+      b.style.cssText =
+        "padding:4px 12px;font-size:12px;border-radius:14px;cursor:pointer;" +
+        "border:1px solid var(--color-border-primary,#e8e8e4);" +
+        "background:var(--color-bg-primary,#fff);" +
+        "color:var(--color-text-secondary,#56585e);" +
+        "transition:background var(--transition-fast,120ms), border-color var(--transition-fast,120ms), color var(--transition-fast,120ms);";
+      b.addEventListener("mouseenter", function () {
+        b.style.background   = "var(--color-bg-hover,#f4f4f2)";
+        b.style.borderColor  = "var(--color-border-strong,#d4d4d0)";
+        b.style.color        = "var(--color-text-primary,#1a1a1a)";
+      });
+      b.addEventListener("mouseleave", function () {
+        b.style.background   = "var(--color-bg-primary,#fff)";
+        b.style.borderColor  = "var(--color-border-primary,#e8e8e4)";
+        b.style.color        = "var(--color-text-secondary,#56585e)";
+      });
+      b.addEventListener("click", function () {
+        var input = document.getElementById("user-input");
+        var send  = document.getElementById("btn-send");
+        if (!input || !send) return;
+        input.value = command;
+        input.dispatchEvent(new Event("input", { bubbles: true }));
+        send.click();
+      });
+      return b;
+    }
+
+    wrap.appendChild(quick("Say hi", "/" + EXT + "-skill hi"));
+    wrap.appendChild(quick("Explain code", "/" + EXT + "-skill explain the current file"));
+    return wrap;
+  });
+})();

data/lib/clacky/extension/scaffold/templates/full/patches/audit.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+# Example monkey-patch. Prepends onto Clacky::Tools::Terminal#execute
+# so we get one log line per shell tool invocation.
+# In production a patch might enforce a denylist, rewrite arguments,
+# or measure timing. Keep the body small and always call `super`.
+module ExtSampleAuditPatch
+  def execute(*args, **kwargs)
+    cmd = kwargs[:command] || args.first
+    Clacky::Logger.info("[ext-audit] terminal.execute", command: cmd.to_s[0, 200])
+    super
+  end
+end
+
+Clacky::Tools::Terminal.prepend(ExtSampleAuditPatch)

data/lib/clacky/extension/scaffold/templates/full/skills/__slug__-skill/SKILL.md.erb

@@ -0,0 +1,8 @@
+---
+name: <%= slug %>-skill
+description: Demo skill contributed by the "<%= slug %>" extension. Greets in style.
+---
+
+You are the <%= slug %> demo skill.
+
+When the user asks for a greeting, respond with one short, friendly line.

data/lib/clacky/extension/scaffold/templates/hello/api/handler.rb.erb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# API backend for "<%= slug %>". Mounted at /api/ext/<%= slug %>/.
+# Routes here are relative to that mount.
+class <%= const_prefix %>Ext < Clacky::ApiExtension
+  get "/" do
+    json(message: "hello from <%= slug %>")
+  end
+end

data/lib/clacky/extension/scaffold/templates/hello/ext.yml.erb

@@ -0,0 +1,12 @@
+id: <%= slug %>
+name: <%= slug %>
+description: (describe what this extension does)
+version: "0.1.0"
+author: (your name)               # shown as the credit on the New Session card
+origin: self
+contributes:
+  api: api/handler.rb
+  panels:
+    - id: hello
+      view: panels/hello/view.js
+      attach: ["*"]          # panels/agents this panel wants to attach to; "*" = all

data/lib/clacky/extension/scaffold/templates/hello/panels/hello/view.js.erb

@@ -0,0 +1,31 @@
+// Hello panel for the "<%= slug %>" extension.
+// Mounts a tab in the session aside; talks to its backend at
+// /api/ext/<%= slug %>/. Reload the WebUI page to see edits.
+//
+// Styling: use host classes (btn-primary, btn-secondary, form-input,
+// form-textarea, form-label) so extensions inherit theme + hover
+// states automatically. See docs/extensions/ui-styling.md.
+(function () {
+  Clacky.ext.ui.mount("session.aside", function (ctx) {
+    var el = document.createElement("div");
+    el.style.padding = "16px";
+
+    var btn = document.createElement("button");
+    btn.className = "btn-primary";
+    btn.textContent = "Ping backend";
+    var out = document.createElement("pre");
+    out.style.cssText = "margin-top:12px;white-space:pre-wrap;";
+
+    btn.addEventListener("click", async function () {
+      var res = await fetch("/api/ext/<%= slug %>/");
+      out.textContent = JSON.stringify(await res.json(), null, 2);
+    });
+
+    el.appendChild(btn);
+    el.appendChild(out);
+    return el;
+  }, {
+    tab: { id: "<%= slug %>", label: () => "<%= slug %>" },
+    order: 500,
+  });
+})();

data/lib/clacky/extension/scaffold.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+require "fileutils"
+
+module Clacky
+  # Scaffolds extension containers for the `ext new` command.
+  # Generated containers are complete, runnable examples — the best
+  # documentation for an AI author is a working "hello panel" it can copy.
+  module ExtensionScaffold
+    TEMPLATES_DIR = File.expand_path("scaffold/templates", __dir__)
+
+    class << self
+      # Create a new local container with a runnable hello panel + backend.
+      # @param full [Boolean] when true, generate a "kitchen-sink" container
+      #   exercising all 7 contributes types (panels, api, skills, agents,
+      #   channels, patches, hooks) — useful as a learn-by-example reference.
+      # @return [String] path to the created container directory
+      def new_container(id, dir: Clacky::ExtensionLoader::LOCAL_DIR, full: false)
+        slug = slugify(id)
+        raise ArgumentError, "invalid extension id: #{id.inspect}" if slug.empty?
+
+        target = File.join(dir, slug)
+        raise ArgumentError, "extension already exists: #{target}" if Dir.exist?(target)
+
+        return new_full_container(slug, target) if full
+
+        FileUtils.mkdir_p(target)
+        TemplateRenderer.render(
+          template_dir: File.join(TEMPLATES_DIR, "hello"),
+          target: target,
+          locals: { slug: slug, const_prefix: camelize(slug) }
+        )
+        target
+      end
+
+      private def slugify(id)
+        id.to_s.strip.downcase.gsub(/[^a-z0-9_-]+/, "-").gsub(/\A-+|-+\z/, "")
+      end
+
+      private def camelize(slug)
+        slug.split(/[-_]/).map(&:capitalize).join
+      end
+
+      private def new_full_container(slug, target)
+        FileUtils.mkdir_p(target)
+        TemplateRenderer.render(
+          template_dir: File.join(TEMPLATES_DIR, "full"),
+          target: target,
+          locals: { slug: slug, const_prefix: camelize(slug) }
+        )
+        target
+      end
+    end
+  end
+end

data/lib/clacky/extension/verifier.rb

@@ -0,0 +1,196 @@
+# frozen_string_literal: true
+
+require "set"
+
+module Clacky
+  # Static checks layered on top of ExtensionLoader's structural validation.
+  #
+  # ExtensionLoader already enforces required fields and file existence per unit
+  # while loading. The Verifier adds whole-program checks an AI author needs to
+  # close the feedback loop: unknown manifest keys, cross-unit reference
+  # integrity, and id collisions across layers (formal "override" warnings).
+  #
+  # Output is a flat array of Issue records — { ext, unit, level, code, message,
+  # file, hint } — each individually addressable so callers can render them in
+  # any UI (CLI, Web, JSON for tooling).
+  module ExtensionVerifier
+    Issue = Struct.new(:ext, :unit, :level, :code, :message, :file, :hint, keyword_init: true)
+
+    KNOWN_TOP_KEYS    = %w[id name title description version origin author homepage license public license_required keywords contributes].freeze
+    KNOWN_CONTRIBUTES = %w[panels api skills agents channels patches hooks].freeze
+
+    PANEL_KEYS   = %w[id title title_zh description description_zh view order attach].freeze
+    API_KEYS     = %w[id handler].freeze
+    SKILL_KEYS   = %w[id dir protected].freeze
+    AGENT_KEYS   = %w[id title title_zh description description_zh order prompt panels skills].freeze
+    CHANNEL_KEYS = %w[id platform adapter].freeze
+    PATCH_KEYS   = %w[target file fingerprint on_mismatch].freeze
+    HOOK_KEYS    = %w[event file].freeze
+
+    ATTACH_TOKEN_RE = /\A(\*|[\w\-]+)\z/.freeze
+
+    class << self
+      # Run all checks against a fully-loaded ExtensionLoader::Result. Returns
+      # an array of Issue. The result already contains structural Errors from
+      # the loader; those are converted to Issues so callers see one stream.
+      def verify(result)
+        issues = []
+        issues.concat(loader_errors_as_issues(result))
+        issues.concat(override_issues(result))
+        issues.concat(manifest_schema_issues(result))
+        issues.concat(reference_issues(result))
+        issues
+      end
+
+      private def loader_errors_as_issues(result)
+        Array(result.errors).map do |err|
+          Issue.new(
+            ext: err.ext_id, unit: err.unit, level: :error,
+            code: "loader.error", message: err.message, file: err.file, hint: nil
+          )
+        end
+      end
+
+      private def override_issues(result)
+        Array(result.overridden).map do |(ext_id, losing, winning)|
+          Issue.new(
+            ext: ext_id, unit: nil, level: :warning, code: "override",
+            message: "container present in #{losing} layer is shadowed by #{winning}",
+            file: nil, hint: "Remove or rename one copy if the override is unintended."
+          )
+        end
+      end
+
+      private def manifest_schema_issues(result)
+        issues = []
+        Array(result.containers).each do |ext_id, container|
+          dir = container[:dir]
+          manifest = read_manifest_safely(dir)
+          next unless manifest.is_a?(Hash)
+
+          (manifest.keys.map(&:to_s) - KNOWN_TOP_KEYS).each do |unknown|
+            issues << Issue.new(
+              ext: ext_id, unit: nil, level: :warning, code: "schema.unknown_key",
+              message: "unknown top-level key #{unknown.inspect} in ext.yml",
+              file: File.join(dir, "ext.yml"),
+              hint: "Allowed: #{KNOWN_TOP_KEYS.join(', ')}"
+            )
+          end
+
+          contributes = manifest["contributes"]
+          next unless contributes.is_a?(Hash)
+
+          (contributes.keys.map(&:to_s) - KNOWN_CONTRIBUTES).each do |unknown|
+            issues << Issue.new(
+              ext: ext_id, unit: nil, level: :warning, code: "schema.unknown_contributes",
+              message: "unknown contributes type #{unknown.inspect}",
+              file: File.join(dir, "ext.yml"),
+              hint: "Allowed: #{KNOWN_CONTRIBUTES.join(', ')}"
+            )
+          end
+
+          issues.concat(per_unit_schema_issues(ext_id, dir, contributes))
+        end
+        issues
+      end
+
+      private def per_unit_schema_issues(ext_id, dir, contributes)
+        issues = []
+        manifest_path = File.join(dir, "ext.yml")
+
+        check_unit_keys(issues, ext_id, manifest_path, contributes["panels"],   PANEL_KEYS,   "panel")
+        check_unit_keys(issues, ext_id, manifest_path, contributes["api"],      API_KEYS,     "api")
+        check_unit_keys(issues, ext_id, manifest_path, contributes["skills"],   SKILL_KEYS,   "skill")
+        check_unit_keys(issues, ext_id, manifest_path, contributes["agents"],   AGENT_KEYS,   "agent")
+        check_unit_keys(issues, ext_id, manifest_path, contributes["channels"], CHANNEL_KEYS, "channel")
+        check_unit_keys(issues, ext_id, manifest_path, contributes["patches"],  PATCH_KEYS,   "patch")
+        check_unit_keys(issues, ext_id, manifest_path, contributes["hooks"],    HOOK_KEYS,    "hook")
+
+        Array(contributes["panels"]).each do |entry|
+          next unless entry.is_a?(Hash)
+          attach = entry["attach"]
+          next if attach.nil?
+          unless attach.is_a?(Array) && attach.all? { |t| t.is_a?(String) && t.match?(ATTACH_TOKEN_RE) }
+            issues << Issue.new(
+              ext: ext_id, unit: entry["id"], level: :error, code: "schema.bad_attach",
+              message: "panel `attach` must be an array of agent ids or `\"*\"`, got #{attach.inspect}",
+              file: manifest_path, hint: 'Example: attach: [coding]  or  attach: ["*"]'
+            )
+          end
+        end
+
+        issues
+      end
+
+      private def check_unit_keys(issues, ext_id, manifest_path, list, allowed, kind_label)
+        Array(list).each do |entry|
+          next unless entry.is_a?(Hash)
+          unknown = entry.keys.map(&:to_s) - allowed
+          next if unknown.empty?
+          issues << Issue.new(
+            ext: ext_id, unit: entry["id"], level: :warning, code: "schema.unknown_field",
+            message: "#{kind_label} unit has unknown key(s): #{unknown.join(', ')}",
+            file: manifest_path,
+            hint: "Allowed for #{kind_label}: #{allowed.join(', ')}"
+          )
+        end
+      end
+
+      private def reference_issues(result)
+        issues = []
+        panel_ids   = result.panels.map { |u| "#{u.ext_id}/#{u.id}" }.to_set
+        agent_ids   = result.agents.map { |u| u.id }.to_set
+        skill_ids   = result.skills.map { |u| u.id }.to_set
+
+        result.agents.each do |agent|
+          spec = agent.spec || {}
+
+          Array(spec["panels"]).each do |pid|
+            ref = pid.include?("/") ? pid : "#{agent.ext_id}/#{pid}"
+            next if panel_ids.include?(ref)
+            issues << Issue.new(
+              ext: agent.ext_id, unit: agent.id, level: :error, code: "ref.missing_panel",
+              message: "agent references panel #{pid.inspect} which does not exist",
+              file: File.join(agent.dir, "ext.yml"),
+              hint: "Define it under contributes.panels or remove the reference."
+            )
+          end
+
+          Array(spec["skills"]).each do |sid|
+            next if skill_ids.include?(sid)
+            issues << Issue.new(
+              ext: agent.ext_id, unit: agent.id, level: :warning, code: "ref.missing_skill",
+              message: "agent references skill #{sid.inspect} which is not contributed by this container",
+              file: File.join(agent.dir, "ext.yml"),
+              hint: "User-installed default skills resolve at runtime; this is a hint, not a hard error."
+            )
+          end
+        end
+
+        result.panels.each do |panel|
+          Array(panel.spec && panel.spec["attach"]).each do |target|
+            next if target == "*"
+            next if agent_ids.include?(target)
+            issues << Issue.new(
+              ext: panel.ext_id, unit: panel.id, level: :warning, code: "ref.missing_attach_agent",
+              message: "panel `attach` references agent #{target.inspect} not present in any container",
+              file: File.join(panel.dir, "ext.yml"),
+              hint: "User-defined agents resolve at runtime; verify the id spelling."
+            )
+          end
+        end
+
+        issues
+      end
+
+      private def read_manifest_safely(dir)
+        require "yaml"
+        path = File.join(dir, "ext.yml")
+        return nil unless File.file?(path)
+        YAML.safe_load(File.read(path), permitted_classes: [Symbol]) || {}
+      rescue StandardError
+        nil
+      end
+    end
+  end
+end

data/lib/clacky/identity.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+require "yaml"
+require "fileutils"
+
+module Clacky
+  # Identity stores the client's platform-account binding, separate from
+  # BrandConfig (white-label / license). It holds the long-lived device token
+  # issued by the RFC 8628 device-authorization flow, which proves creator
+  # identity when publishing extensions to the marketplace.
+  #
+  # ~/.clacky/identity.yml structure:
+  #   device_token: "clacky-dt-..."
+  #   user_id: 42
+  #   bound_at: "2026-07-05T00:00:00Z"
+  class Identity
+    CONFIG_DIR    = File.join(Dir.home, ".clacky")
+    IDENTITY_FILE = File.join(CONFIG_DIR, "identity.yml")
+
+    attr_reader :device_token, :user_id, :bound_at
+
+    def initialize(attrs = {})
+      @device_token = attrs["device_token"]
+      @user_id      = attrs["user_id"]
+      @bound_at     = attrs["bound_at"]
+    end
+
+    def self.load
+      data = File.exist?(IDENTITY_FILE) ? (YAML.safe_load(File.read(IDENTITY_FILE)) || {}) : {}
+      new(data)
+    rescue StandardError
+      new({})
+    end
+
+    # True when this device has a device token bound to a platform account.
+    def bound?
+      !@device_token.nil? && !@device_token.to_s.strip.empty?
+    end
+
+    # Persist a fresh binding from a device-authorization approval.
+    def bind!(device_token:, user_id:)
+      @device_token = device_token
+      @user_id      = user_id
+      @bound_at     = Time.now.utc.iso8601
+      save
+      self
+    end
+
+    def clear!
+      @device_token = nil
+      @user_id      = nil
+      @bound_at     = nil
+      FileUtils.rm_f(IDENTITY_FILE)
+    end
+
+    def save
+      FileUtils.mkdir_p(CONFIG_DIR)
+      File.write(IDENTITY_FILE, to_yaml)
+      FileUtils.chmod(0o600, IDENTITY_FILE)
+    end
+
+    private def to_yaml
+      {
+        "device_token" => @device_token,
+        "user_id"      => @user_id,
+        "bound_at"     => @bound_at
+      }.compact.to_yaml
+    end
+  end
+end

data/lib/clacky/locales/en.rb

@@ -20,7 +20,25 @@ module Clacky
       "llm.error.bad_request"           => "Bad request: invalid parameters. Please check your model configuration",
       "llm.error.request_timeout"       => "Request timed out after %<retries>d retries",
       "llm.error.network_failed"        => "Network connection failed after %<retries>d retries",
-      "llm.error.service_unavailable"   => "Service unavailable after %<retries>d retries"
+      "llm.error.service_unavailable"   => "Service unavailable after %<retries>d retries",
+      "platform.error.invalid_proof"        => "Invalid license key — please check and try again.",
+      "platform.error.invalid_signature"    => "Invalid request signature.",
+      "platform.error.nonce_replayed"       => "Duplicate request detected. Please try again.",
+      "platform.error.timestamp_expired"    => "System clock is out of sync. Please adjust your time settings.",
+      "platform.error.license_revoked"      => "This license has been revoked. Please contact support.",
+      "platform.error.license_expired"      => "This license has expired. Please renew to continue.",
+      "platform.error.device_limit_reached" => "Device limit reached for this license.",
+      "platform.error.device_revoked"       => "This device has been revoked from the license.",
+      "platform.error.invalid_license"      => "License key not found. Please verify the key.",
+      "platform.error.device_not_found"     => "Device not registered. Please re-activate.",
+      "platform.error.contributor_required" => "Publishing extensions requires becoming a contributor. Sign in, open \"My Extensions\", and click \"Become a contributor\" (no review needed).",
+      "platform.error.missing_device_token" => "This device is not bound to a platform account. Authorize it before publishing.",
+      "platform.error.invalid_device_token" => "Device authorization is invalid. Please re-authorize this device.",
+      "platform.error.device_token_revoked" => "This device's authorization has been revoked. Please re-authorize before publishing.",
+      "platform.error.device_token_expired" => "This device's authorization has expired. Please re-authorize before publishing.",
+      "platform.error.owner_user_not_found" => "No account found for this device. Please re-authorize it.",
+      "platform.error.generic"              => "Request failed (HTTP %<code>s). Please contact support.",
+      "platform.error.generic_with_code"    => "Request failed (HTTP %<code>s, code: %<error_code>s). Please contact support."
     }.freeze
   end
 end

data/lib/clacky/locales/zh.rb

@@ -20,7 +20,25 @@ module Clacky
       "llm.error.bad_request"           => "请求参数有误，请检查模型配置或重试",
       "llm.error.request_timeout"       => "请求超时（已重试 %<retries>d 次）",
       "llm.error.network_failed"        => "网络连接失败（已重试 %<retries>d 次）",
-      "llm.error.service_unavailable"   => "服务暂时不可用（已重试 %<retries>d 次）"
+      "llm.error.service_unavailable"   => "服务暂时不可用（已重试 %<retries>d 次）",
+      "platform.error.invalid_proof"        => "许可证密钥无效，请检查后重试。",
+      "platform.error.invalid_signature"    => "请求签名无效。",
+      "platform.error.nonce_replayed"       => "检测到重复请求，请重试。",
+      "platform.error.timestamp_expired"    => "系统时钟不同步，请校准本机时间后重试。",
+      "platform.error.license_revoked"      => "该许可证已被吊销，请联系客服。",
+      "platform.error.license_expired"      => "该许可证已过期，请续订后继续。",
+      "platform.error.device_limit_reached" => "该许可证的设备数量已达上限。",
+      "platform.error.device_revoked"       => "该设备已从许可证中移除。",
+      "platform.error.invalid_license"      => "未找到许可证密钥，请核对后重试。",
+      "platform.error.device_not_found"     => "设备未注册，请重新激活。",
+      "platform.error.contributor_required" => "发布扩展需要先成为扩展贡献者。请登录平台，打开「我的扩展」页面，点击「成为扩展贡献者」即可开通（无需审核）。",
+      "platform.error.missing_device_token" => "当前设备未绑定平台账户，请先授权此设备后再发布。",
+      "platform.error.invalid_device_token" => "设备授权已失效，请重新授权此设备。",
+      "platform.error.device_token_revoked" => "此设备的授权已被撤销，请重新授权后再发布。",
+      "platform.error.device_token_expired" => "此设备的授权已过期，请重新授权后再发布。",
+      "platform.error.owner_user_not_found" => "未找到该设备对应的账户，请重新授权此设备。",
+      "platform.error.generic"              => "请求失败（HTTP %<code>s），请联系客服。",
+      "platform.error.generic_with_code"    => "请求失败（HTTP %<code>s，错误码：%<error_code>s），请联系客服。"
     }.freeze
   end
 end