openclacky 1.3.7 → 1.3.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 48e94ccf83645b5e18be8d5d33582dc128b06824ab226dd314540658b9cc7e4a
-  data.tar.gz: 1112ed443505eca99e745838377ebbf4b6f1e96a7c7f83c7bf1cff844b5ddea9
+  metadata.gz: 589d52edb2af8ec7ebea8d596a4b342791230009666a8757f4391b95df22d667
+  data.tar.gz: 07c80f79e8a9df57b4232a1317b1a6f8b4557cf136289f7ea1b7a9e93caba5aa
 SHA512:
-  metadata.gz: b0e4b2664bb7990ec91dd7c5598cfb561ce6f931b1f006a962b6cbf5516ee424b3a6f605fd70c3996ad4d0e0bf1a20dfd626d6466020393cc8cf18832008a68a
-  data.tar.gz: 2b74eea0a552e5d26545779da2f0a2b1f88812063398ffbf15be913e396d6efe7131d8205bff766939ef252c4ca3b8075ce8e86c855de59774226e3e03bdbfde
+  metadata.gz: e474dff0d682c03bbd9756a37e9c64a29d13f51c35b73a76440e62eeac4b92d5ce6251e7357493531ce0669a770607a37a17ceb8715eadf5f849a7b04a6f373a
+  data.tar.gz: 8863d9a310224162b3fc0dad4513c933ebafcc74be5d2157d890d7a4f2dd667f66c9f658e61d289c078fdf39c5961bb5c0895317553c0f25b5054142f2c127b9

data/CHANGELOG.md

@@ -5,6 +5,30 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.8] - 2026-07-07
+
+### Added
+- Shell hook `type:rewrite` protocol with `updatedInput` support — hooks can now rewrite the command before execution
+- Support for `AGENTS.md` workspace rules — agent reads project-level rules from AGENTS.md automatically
+- Avatar support in Web UI
+- Open first tab automatically on session start
+
+### Improved
+- New-session page UI humanized with improved layout and discoverability
+- Session bar slot support for extension customization
+- Extension description metadata in ext-studio
+
+### Fixed
+- Mobile new-session page layout uses fixed positioning correctly
+- Weekly stats period now starts from Monday instead of a rolling 7-day window
+- i18n translations updated and UI refreshes immediately on language change
+- Extension market toolbar layout and back button styling
+- Skeleton screen rendering in ext-studio and extension market
+- Trash skeleton screen restored on loading state
+- Media usage logging now passes session_id correctly for image/video generation
+- Billing writes in tests isolated via `CLACKY_BILLING_DIR` env var
+- Meeting panel no longer overrides aside-panel container class
+
 ## [1.3.7] - 2026-07-06
 
 ### Added

data/lib/clacky/agent/hook_manager.rb

@@ -28,7 +28,16 @@ module Clacky
       @hooks[event].each do |hook|
         begin
           hook_result = hook.call(*args)
-          result.merge!(hook_result) if hook_result.is_a?(Hash)
+          next unless hook_result.is_a?(Hash)
+          # First deny wins and stops the chain: a weaker later verdict must
+          # never clobber a stronger earlier one, and the first deny's reason
+          # is the one that reaches the agent. Rewrite hooks mutate `call` in
+          # place (chained rewrite), so for non-deny results there's nothing to
+          # merge — we just keep going.
+          if hook_result[:action] == :deny
+            result = hook_result
+            break
+          end
         rescue StandardError => e
           # Log error but don't fail
           Clacky::Logger.error("Hook error", event: event, error: e)

data/lib/clacky/agent/system_prompt_builder.rb

@@ -8,7 +8,7 @@ module Clacky
     # Builds system prompt by composing layers:
     #   1. Agent-specific system_prompt.md  (role & responsibilities)
     #   2. base_prompt.md                   (universal rules: todo manager, tool usage, etc.)
-    #   3. Project rules                    (.clackyrules / .cursorrules / CLAUDE.md)
+    #   3. Project rules                    (.clackyrules / AGENTS.md / .cursorrules / CLAUDE.md)
     #   4. SOUL.md                          (agent personality — user override or built-in default)
     #   5. USER.md                          (user profile — user override or built-in default)
     #   6. Skills context                   (available skills list)

data/lib/clacky/agent.rb

@@ -145,8 +145,15 @@ module Clacky
       # Register built-in tools
       register_builtin_tools
 
-      # Load declarative shell hooks from ~/.clacky/hooks.yml
-      ShellHookLoader.load_into(@hooks)
+      # Load declarative shell hooks from ~/.clacky/hooks.yml. Entries with
+      # `type: rewrite` use the rich JSON protocol (updatedInput rewrite);
+      # entries without `type` use the simple exit-code protocol.
+      ShellHookLoader.load_into(
+        @hooks,
+        session_id_fn:      -> { @session_id },
+        cwd_fn:             -> { @working_dir },
+        permission_mode_fn: -> { @config.permission_mode.to_s }
+      )
 
       # Copy ext.yml-contributed hook callbacks (contributes.hooks) onto this
       # agent's hook manager. The callbacks were registered process-wide at

data/lib/clacky/agent_profile.rb

@@ -53,11 +53,11 @@ module Clacky
 
     # List all available agent profiles across user + extension layers.
     # Precedence on id collision: user override → extension unit.
-    # @return [Array<Hash>] each: { id:, title:, title_zh:, description:, description_zh:, source:, order:, layer:, author: }
+    # @return [Array<Hash>] each: { id:, title:, title_zh:, description:, description_zh:, source:, order:, layer:, author:, avatar: }
     def self.all
       out = {}
 
-      add = lambda do |id, title, title_zh, description, description_zh, source, order, layer, author|
+      add = lambda do |id, title, title_zh, description, description_zh, source, order, layer, author, avatar|
         next if id.nil? || id.empty?
         out[id] = {
           id: id,
@@ -69,6 +69,7 @@ module Clacky
           order: order,
           layer: layer,
           author: author,
+          avatar: avatar,
         }
       end
 
@@ -77,11 +78,12 @@ module Clacky
         spec = unit.spec || {}
         title = spec["title"].to_s
         title = unit.id if title.empty?
+        avatar = spec["avatar_abs"].to_s.empty? ? nil : "/agent_avatar/#{unit.id}"
         add.call(
           unit.id, title, spec["title_zh"].to_s,
           spec["description"].to_s, spec["description_zh"].to_s,
           "extension", spec["order"], unit.layer.to_s,
-          spec["author"].to_s
+          spec["author"].to_s, avatar
         )
       end
 
@@ -91,11 +93,12 @@ module Clacky
         next if id.start_with?("_")
         next unless File.file?(File.join(path, "profile.yml"))
         meta = read_profile_yml(File.join(path, "profile.yml"))
+        user_avatar = File.file?(File.join(path, "avatar.png")) ? "/agent_avatar/#{id}" : nil
         add.call(
           id, meta["title"] || meta["name"] || id, meta["title_zh"].to_s,
           meta["description"].to_s, meta["description_zh"].to_s,
           "user", meta["order"], "user",
-          meta["author"].to_s.empty? ? "You" : meta["author"].to_s
+          meta["author"].to_s.empty? ? "You" : meta["author"].to_s, user_avatar
         )
       end
 

data/lib/clacky/billing/billing_store.rb

@@ -13,7 +13,7 @@ module Clacky
       BILLING_DIR = File.join(Dir.home, ".clacky", "billing")
 
       def initialize(billing_dir: nil)
-        @billing_dir = billing_dir || BILLING_DIR
+        @billing_dir = billing_dir || ENV["CLACKY_BILLING_DIR"] || BILLING_DIR
         ensure_billing_dir
       end
 
@@ -339,7 +339,8 @@ module Clacky
         when :day
           Time.new(now.year, now.month, now.day)
         when :week
-          now - (7 * 24 * 60 * 60)
+          days_since_monday = now.wday == 0 ? 6 : now.wday - 1
+          Time.new(now.year, now.month, now.day) - (days_since_monday * 24 * 60 * 60)
         when :month
           Time.new(now.year, now.month, 1)
         when :year

data/lib/clacky/default_extensions/coding/ext.yml

@@ -10,9 +10,10 @@ contributes:
   agents:
     - id: coding
       title: Coding
-      title_zh: 编程
-      description: AI coding assistant and technical co-founder
-      description_zh: AI 编程助手，你的技术合伙人
+      title_zh: 编程开发
+      description: Claude Code-grade coding capability, your technical co-founder
+      description_zh: 对齐 Claude Code 的编程能力，你的技术合伙人
       order: 2
       prompt: agents/coding/system_prompt.md
+      avatar: agents/coding/avatar.png
       panels: [git/git, time_machine/time_machine]

data/lib/clacky/default_extensions/ext-studio/ext.yml

@@ -24,6 +24,7 @@ contributes:
       description_zh: 帮你开发、调试、发布 OpenClacky 扩展的 AI 专家
       order: 5
       prompt: agents/ext-developer/system_prompt.md
+      avatar: agents/ext-developer/avatar.png
       panels: [studio]
       skills: [ext-scaffold, ext-debug, ext-publish]
   skills:

data/lib/clacky/default_extensions/ext-studio/panels/studio/view.js

@@ -787,6 +787,23 @@
     };
   }
 
+  function _skeletonHtml() {
+    return Array.from({ length: 3 }).map(() => `
+      <div class="studio-skill-card" style="pointer-events:none">
+        <div class="studio-skill-head">
+          <span class="skel" style="display:inline-block;height:1rem;width:40%"></span>
+          <span class="skel" style="display:inline-block;height:1.2rem;width:3.5rem;border-radius:4px;"></span>
+        </div>
+        <div class="studio-skill-meta" style="margin-top:6px">
+          <span class="skel" style="display:inline-block;height:0.85rem;width:20%"></span>
+        </div>
+        <div class="studio-actions">
+          <span class="skel" style="display:inline-block;height:1.75rem;width:5rem;border-radius:6px;"></span>
+          <span class="skel" style="display:inline-block;height:1.75rem;width:4rem;border-radius:6px;"></span>
+        </div>
+      </div>`).join("");
+  }
+
   // ── Extensions tab (full-page): cloud + local extension cards ──────────────
   // Reuses backend endpoints GET /published (cloud), the shared `store` (local,
   // GET /extensions), POST /publish|/pack|/unpublish, and POST /develop to open
@@ -926,7 +943,7 @@
       async attach(root) {
         container = el("div", { class: "studio-panel" });
         root.appendChild(container);
-        container.appendChild(el("p", { class: "studio-hint", text: t("extlist.loading") }));
+        container.innerHTML = _skeletonHtml();
         try { await reload(); rebuild(); }
         catch (e) { container.innerHTML = ""; container.appendChild(el("p", { class: "studio-empty", text: t("err.generic", { msg: e.message }) })); }
       },
@@ -1090,7 +1107,7 @@
       async attach(root) {
         container = el("div", { class: "studio-panel" });
         root.appendChild(container);
-        container.appendChild(el("p", { class: "studio-hint", text: t("skills.loading") }));
+        container.innerHTML = _skeletonHtml();
         try { await reload(); rebuild(); }
         catch (e) { container.innerHTML = ""; container.appendChild(el("p", { class: "studio-empty", text: t("err.generic", { msg: e.message }) })); }
       },
@@ -1146,7 +1163,7 @@
     createSkillsPanel().attach(root);
   }
 
-  function navRow(label, onClick) {
+  function navRow(labelKey, onClick) {
     const item = el("div", { class: "task-item task-item-summary" });
     item.innerHTML =
       '<div class="task-row">' +
@@ -1159,7 +1176,9 @@
         '</svg>' +
         '<div class="task-info"><span class="task-name"></span></div>' +
       '</div>';
-    item.querySelector(".task-name").textContent = label;
+    const nameEl = item.querySelector(".task-name");
+    nameEl.textContent = t(labelKey);
+    document.addEventListener("langchange", () => { nameEl.textContent = t(labelKey); });
     item.addEventListener("click", onClick);
     return item;
   }
@@ -1170,7 +1189,7 @@
   });
 
   Clacky.ext.ui.mount("sidebar.nav.bottom", function () {
-    return navRow(t("nav.entry"), function () { Clacky.ext.ui.openWorkspace(WS_ID); });
+    return navRow("nav.entry", function () { Clacky.ext.ui.openWorkspace(WS_ID); });
   }, { workspace: WS_ID });
 
   // Extension-developer session tools: debug + publish, as aside tabs. These

data/lib/clacky/default_extensions/general/ext.yml

@@ -10,9 +10,10 @@ contributes:
   agents:
     - id: general
       title: General
-      title_zh: 通用
-      description: A versatile digital employee living on your computer
-      description_zh: 驻留在你电脑里的多面手数字员工
+      title_zh: 日常工作
+      description: Handles your everyday work
+      description_zh: 帮你打理日常工作，查资料、写东西、整理归纳都行
       order: 1
       prompt: agents/general/system_prompt.md
+      avatar: agents/general/avatar.png
       panels: [meeting/meeting]

data/lib/clacky/default_extensions/git/panels/git/view.js

@@ -187,12 +187,12 @@
     );
   }
 
-  Clacky.ext.ui.mount("session.aside", (ctx) => {
-    if (!ctx || !ctx.sessionId) return null;
+  Clacky.ext.ui.mount("session.aside", (container, ctx) => {
+    if (!ctx || !ctx.sessionId) return;
     const body = el("div", { class: "changes-panel" });
     const root = el("div", { class: "changes-root", "data-panel": "changes" }, body);
+    container.appendChild(root);
     refresh(ctx.sessionId, root, body, ctx);
-    return root;
   }, {
     order: 10,
     tab: { id: "changes", label: () => t("changes.tab") },

data/lib/clacky/default_extensions/meeting/panels/meeting/view.js

@@ -893,7 +893,6 @@
       // Every tab activation gets a fresh empty container; wire it into state
       // and paint the current state onto it.
       attach(container) {
-        container.className = "meeting-container";
         state.container = container;
         renderUI(container);
       },
@@ -923,7 +922,7 @@
   // Inject minimal styles
   const style = document.createElement("style");
   style.textContent = `
-    .meeting-container { padding: 16px; font-size: 13px; color: var(--color-text-secondary); }
+    .meeting-panel { padding: 16px; font-size: 13px; color: var(--color-text-secondary); }
     .meeting-btn { padding: 7px 14px; border-radius: var(--radius-sm); border: 1px solid transparent; cursor: pointer; font-size: 13px; font-weight: 500; transition: background .15s, border-color .15s; }
     .meeting-btn-start { background: var(--color-button-primary); color: var(--color-button-primary-text); }
     .meeting-btn-start:hover { background: var(--color-button-primary-hover); }

data/lib/clacky/extension/loader.rb

@@ -391,6 +391,10 @@ module Clacky
           return nil
         end
 
+        avatar_rel = spec["avatar"].to_s
+        avatar_abs = avatar_rel.empty? ? "" : File.join(container[:dir], avatar_rel)
+        avatar_abs = "" unless !avatar_abs.empty? && File.file?(avatar_abs)
+
         Unit.new(kind: :agent, id: spec["id"].to_s, ext_id: ext_id,
                  layer: container[:layer], origin: container[:origin],
                  dir: container[:dir],
@@ -399,6 +403,8 @@ module Clacky
                    "title_zh"       => spec["title_zh"].to_s,
                    "prompt"         => spec["prompt"],
                    "prompt_abs"     => prompt_abs,
+                   "avatar"         => avatar_rel,
+                   "avatar_abs"     => avatar_abs,
                    "description"    => spec["description"].to_s,
                    "description_zh" => spec["description_zh"].to_s,
                    "order"          => spec["order"],

data/lib/clacky/extension/verifier.rb

@@ -22,7 +22,7 @@ module Clacky
     PANEL_KEYS   = %w[id title title_zh description description_zh view order attach].freeze
     API_KEYS     = %w[id handler].freeze
     SKILL_KEYS   = %w[id dir protected].freeze
-    AGENT_KEYS   = %w[id title title_zh description description_zh order prompt panels skills].freeze
+    AGENT_KEYS   = %w[id title title_zh description description_zh order prompt panels skills avatar].freeze
     CHANNEL_KEYS = %w[id platform adapter].freeze
     PATCH_KEYS   = %w[target file fingerprint on_mismatch].freeze
     HOOK_KEYS    = %w[event file].freeze

data/lib/clacky/server/http_server.rb

@@ -369,6 +369,8 @@ module Clacky
             res.body                  = html
           elsif req.path.start_with?("/agent_ui/")
             self.send(:serve_agent_ui, req, res)
+          elsif req.path.start_with?("/agent_avatar/")
+            self.send(:serve_agent_avatar, req, res)
           elsif req.path.start_with?("/ext_ui/")
             self.send(:serve_ext_ui, req, res)
           else
@@ -623,6 +625,9 @@ module Clacky
           elsif method == "GET" && path.match?(%r{^/api/sessions/[^/]+/skills$})
             session_id = path.sub("/api/sessions/", "").sub("/skills", "")
             api_session_skills(session_id, res)
+          elsif method == "GET" && path.match?(%r{^/api/agents/[^/]+/skills$})
+            agent_id = path[%r{^/api/agents/([^/]+)/skills$}, 1]
+            api_agent_skills(agent_id, res)
           elsif method == "GET" && path.match?(%r{^/api/sessions/[^/]+/git/[a-z]+$})
             session_id = path[%r{^/api/sessions/([^/]+)/git/}, 1]
             action     = path[%r{/git/([a-z]+)$}, 1]
@@ -1061,6 +1066,7 @@ module Clacky
       private def webui_ext_script_tags
         [
           panel_agents_script,
+          ext_contributions_script,
           agent_webui_script_tags,
           container_ext_script_tags,
         ].reject(&:empty?).join("\n")
@@ -1097,6 +1103,36 @@ module Clacky
         "<script>Clacky.ext.registerPanelAgents(#{map.to_json})</script>"
       end
 
+      # Inline script mapping agent id => the panels & skills its extension
+      # contributes (straight from ext.yml). Built-in extensions are excluded so
+      # the new-session page only advertises what a third-party agent adds.
+      private def ext_contributions_script
+        map = ext_contributions_map
+        return "" if map.empty?
+
+        "<script>Clacky.ext.registerAgentContributions(#{map.to_json})</script>"
+      end
+
+      private def ext_contributions_map
+        result = Clacky::ExtensionLoader.load_all
+        by_ext = Hash.new { |h, k| h[k] = { "panels" => [], "skills" => [] } }
+        label = lambda do |unit|
+          { "id" => unit.id, "title" => unit.spec["title"] || unit.id, "title_zh" => unit.spec["title_zh"] }
+        end
+
+        result.panels.each { |u| by_ext[u.ext_id]["panels"] << label.call(u) unless u.layer == :builtin }
+        result.skills.each { |u| by_ext[u.ext_id]["skills"] << label.call(u) unless u.layer == :builtin }
+
+        out = {}
+        result.agents.each do |u|
+          next if u.layer == :builtin
+          contrib = by_ext[u.ext_id]
+          next if contrib["panels"].empty? && contrib["skills"].empty?
+          out[u.id] = contrib
+        end
+        out
+      end
+
       # panel id => list of agent names allowed to see it. Two sources merge:
       #   1. `agent.panels: [id]` — agent-side explicit reference (opt-in mount)
       #   2. `panel.attach: [...]` — panel-author's default suggestion
@@ -1283,6 +1319,42 @@ module Clacky
         serve_static_under(File.join(dir, "webui"), rel, res)
       end
 
+      # GET /agent_avatar/<id> — serve an agent's avatar image (extension
+      # `avatar` file, or a user agent's avatar.png). Read-only, images only.
+      private def serve_agent_avatar(req, res)
+        id = req.path.delete_prefix("/agent_avatar/").split("/").first.to_s
+        return (res.status = 404; res.body = "not found") if id.empty?
+
+        abs = agent_avatar_path(id)
+        unless abs && File.file?(abs)
+          res.status = 404
+          res.body   = "not found"
+          return
+        end
+
+        ctype = { ".png" => "image/png", ".jpg" => "image/jpeg", ".jpeg" => "image/jpeg",
+                  ".webp" => "image/webp", ".svg" => "image/svg+xml", ".gif" => "image/gif" }[File.extname(abs).downcase]
+        unless ctype
+          res.status = 415
+          res.body   = "unsupported media type"
+          return
+        end
+
+        res.status          = 200
+        res["Content-Type"] = ctype
+        res["Cache-Control"] = "public, max-age=86400"
+        res.body            = File.binread(abs)
+      end
+
+      private def agent_avatar_path(id)
+        unit = Clacky::ExtensionLoader.last_result&.agents&.find { |u| u.id == id }
+        avatar_abs = unit&.spec&.[]("avatar_abs").to_s
+        return avatar_abs unless avatar_abs.empty?
+
+        user_png = File.expand_path("~/.clacky/agents/#{id}/avatar.png")
+        File.file?(user_png) ? user_png : nil
+      end
+
       # Read-only static serve of `rel` under `root`, JS/CSS/HTML only, with
       # strict path containment so a crafted rel cannot escape `root`.
       private def serve_static_under(root, rel, res)
@@ -1419,6 +1491,9 @@ module Clacky
         output_dir   = body["output_dir"].to_s
         output_dir   = @agent_config.default_working_dir || Dir.pwd if output_dir.empty?
 
+        session_id = body["session_id"].to_s
+        session_id = nil if session_id.empty?
+
         result = Clacky::Media::Generator.new(@agent_config).generate_image(
           prompt: prompt,
           aspect_ratio: aspect_ratio,
@@ -1427,7 +1502,7 @@ module Clacky
           images: body["images"]
         )
         if result["success"]
-          log_media_usage(result, prompt: prompt)
+          log_media_usage(result, prompt: prompt, session_id: session_id)
         end
         status = result["success"] ? 200 : 422
         json_response(res, status, result)
@@ -1451,6 +1526,9 @@ module Clacky
         output_dir   = body["output_dir"].to_s
         output_dir   = @agent_config.default_working_dir || Dir.pwd if output_dir.empty?
 
+        session_id = body["session_id"].to_s
+        session_id = nil if session_id.empty?
+
         result = Clacky::Media::Generator.new(@agent_config).generate_video(
           prompt: prompt,
           aspect_ratio: aspect_ratio,
@@ -1459,7 +1537,7 @@ module Clacky
           image: image
         )
         if result["success"]
-          log_media_usage(result, prompt: prompt)
+          log_media_usage(result, prompt: prompt, session_id: session_id)
         end
         status = result["success"] ? 200 : 422
         json_response(res, status, result)
@@ -1480,13 +1558,16 @@ module Clacky
         output_dir = body["output_dir"].to_s
         output_dir = @agent_config.default_working_dir || Dir.pwd if output_dir.empty?
 
+        session_id = body["session_id"].to_s
+        session_id = nil if session_id.empty?
+
         result = Clacky::Media::Generator.new(@agent_config).generate_speech(
           input: input,
           voice: voice,
           output_dir: output_dir
         )
         if result["success"]
-          log_media_usage(result, prompt: input)
+          log_media_usage(result, prompt: input, session_id: session_id)
         end
         status = result["success"] ? 200 : 422
         json_response(res, status, result)
@@ -1547,7 +1628,7 @@ module Clacky
         json_response(res, 500, { error: e.message })
       end
 
-      private def log_media_usage(result, prompt:)
+      private def log_media_usage(result, prompt:, session_id: nil)
         usage = result["usage"]
         cost  = result["cost_usd"]
         return if usage.nil? && cost.nil?
@@ -1568,6 +1649,20 @@ module Clacky
                else "image"
                end
         Clacky::Logger.info("[Media] #{kind} generated #{parts.join(" ")}")
+
+        require_relative "../billing/billing_store"
+        require_relative "../billing/billing_record"
+        record = Clacky::Billing::BillingRecord.new(
+          session_id:        session_id,
+          model:             result["model"].to_s,
+          prompt_tokens:     usage.is_a?(Hash) ? usage["prompt_tokens"].to_i : 0,
+          completion_tokens: usage.is_a?(Hash) ? usage["completion_tokens"].to_i : 0,
+          cache_read_tokens: usage.is_a?(Hash) ? usage["cache_read_tokens"].to_i : 0,
+          cache_write_tokens: usage.is_a?(Hash) ? usage["cache_write_tokens"].to_i : 0,
+          cost_usd:          cost.to_f,
+          cost_source:       :api
+        )
+        Clacky::Billing::BillingStore.new.append(record)
       end
 
       # GET /api/media/types
@@ -3917,7 +4012,36 @@ module Clacky
         json_response(res, 200, { skills: skill_data })
       end
 
-      # GET /api/sessions/:id/git/<action> — read-only git info for the session's
+      # GET /api/agents/:id/skills — like api_session_skills but keyed on an
+      # agent id rather than a live session. Used by the New Session page so the
+      # first-message composer can offer slash-command autocomplete before a
+      # session exists.
+      def api_agent_skills(agent_id, res)
+        profile = begin
+          Clacky::AgentProfile.load(agent_id)
+        rescue StandardError
+          nil
+        end
+
+        @skill_loader.load_all
+        skills = @skill_loader.user_invocable_skills
+        skills = skills.select { |s| s.allowed_for_agent?(profile.name) } if profile
+
+        loaded_from = @skill_loader.loaded_from
+        skill_data = skills.map do |skill|
+          {
+            name:           skill.identifier,
+            name_zh:        skill.name_zh,
+            description:    skill.description || skill.context_description,
+            description_zh: skill.description_zh,
+            encrypted:      skill.encrypted?,
+            source_type:    loaded_from[skill.identifier],
+            always_show:    skill.always_show
+          }
+        end
+
+        json_response(res, 200, { skills: skill_data })
+      end
       # working_dir. action ∈ status|diff|log|branches. diff accepts ?file=,
       # log accepts ?limit=.
       def api_session_git(session_id, action, req, res)