openclacky 1.5.4 → 1.5.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 10e414552c9ae0e3bb7a0b547f2e4da0709c83e0a0925f3b708820848e1a4cf3
-  data.tar.gz: 6caa29ccd3048e95912500be99000ae7ca883c9a5ad473ebc1bb2f243aef5cc3
+  metadata.gz: 5803d9775474800f6f61d6771837ebe90597080e0f068a9dff49d5d44fdc90d1
+  data.tar.gz: f111f2b083635876cd2e4477e5a64da14245684c5c18a5f5f23860541ac9def0
 SHA512:
-  metadata.gz: 26f220973c6821a411362df35ca281ef53ae58e6ab36d26651db393b31713340ca9bcf131f69bf4e6aa391eec3f4f21fc7d0d12cb4bbbdc368b6fe8068fa2dfa
-  data.tar.gz: 84faf59b60486d29a9168f847c97d7fd5670dac293f967bd713c08049612adab7f947fa38af3a7e89c4a5acc2cc8c460e9b8ebbf53c189c19a52bf7e89a44388
+  metadata.gz: a0cc2a8397b5165b941a5aec4f1fc72770d47fdee4b24b72d862b12154d6a9b8114563b2e977d64e43a39c86d278fb5bbb97b045357c0a00c2f818f6466dbbf8
+  data.tar.gz: '07913be97ae9966164649f88a8e8abc60346c80038aec65886c51d9552e75eaf1050e3a9cc6fc6e28d1137d00d9fabcf735a8ac195bc3c5554890a6a8c0a073d'

data/CHANGELOG.md

@@ -4,6 +4,37 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
+## [1.5.5] - 2026-08-04
+
+### Added
+- Ollama (Cloud) provider preset — connect to self-hosted Ollama instances with one click
+- Extension WebSocket bridge — extensions can now subscribe to session events via `Clacky.ext` bus
+- Hidden field support for extension agent profiles
+- Max reasoning effort level beyond `xhigh` (supports `max` tier)
+- Smart terminal output truncation — keeps head and tail of long output instead of cutting at the end
+- Time machine panel now attached to all views
+- Persist sort and installed filter selection across sessions in extensions panel
+- New extension button added to extensions management page header
+- Auto cleanup of trash sessions after 7 days
+
+### Improved
+- Extensions panel redesigned with system/market tabs and toggle switch
+- New-session page: replaced advanced modal with inline context bar chips; agents refresh on open with localized badges, ordered by most-recently-used
+- Overflow tooltip shown on truncated skill descriptions
+- Compression: idle and threshold switches are now separate controls
+- Extension install is now async with progress polling
+
+### Fixed
+- Ollama base URL corrected from `/api` to root domain
+- Extension WebSocket bridge included `hidden` field in verifier AGENT_KEYS
+- User message files render immediately in Web UI; local disk images proxied correctly
+- Sidebar visibility persisted across page reloads
+- Brand logo injected server-side to eliminate flash on load
+- Extension uninstall 404 resolved by normalizing slug field
+- Extension homepage link color variable corrected
+- `request_user_feedback` skill uses structured JSON example to avoid literal `\n` in output
+- `create_session` in extensions now broadcasts session update correctly
+
 ## [1.5.4] - 2026-08-01
 
 ### Added

data/lib/clacky/agent/message_compressor_helper.rb

@@ -23,6 +23,7 @@ module Clacky
           Clacky::Logger.info(
             "Idle compression skipped",
             enable_compression: @config.enable_compression,
+            enable_idle_compression: @config.enable_idle_compression,
             previous_total_tokens: @previous_total_tokens,
             history_size: @history.size,
             idle_threshold: IDLE_COMPRESSION_THRESHOLD,
@@ -129,8 +130,10 @@ module Clacky
         # (force: true) is still allowed as a safety net for long-running subagents.
         return nil if @is_subagent && !force
 
-        # Check if compression is enabled
+        # Check if compression is enabled (master switch)
         return nil unless @config.enable_compression
+        # Idle compression has its own sub-switch under the master
+        return nil if force && !@config.enable_idle_compression
 
         # Use the larger of: API-reported tokens from last response, or current
         # estimated history size. The estimate guards the case where a single

data/lib/clacky/agent/session_serializer.rb

@@ -224,6 +224,7 @@ module Clacky
             # (falling back to the current default if the model no longer exists).
             permission_mode: @config.permission_mode.to_s,
             enable_compression: @config.enable_compression,
+            enable_idle_compression: @config.enable_idle_compression,
             enable_prompt_caching: @config.enable_prompt_caching,
             max_tokens: @config.max_tokens,
             verbose: @config.verbose,

data/lib/clacky/agent.rb

@@ -53,7 +53,7 @@ module Clacky
     attr_accessor :channel_info
     attr_accessor :project_id
 
-    REASONING_EFFORTS = %w[low medium high xhigh].freeze
+    REASONING_EFFORTS = %w[low medium high xhigh max].freeze
 
     def permission_mode
       @config&.permission_mode&.to_s || ""

data/lib/clacky/agent_config.rb

@@ -159,7 +159,7 @@ module Clacky
     DEFAULT_MESSAGE_COUNT_THRESHOLD = 200
 
     attr_accessor :permission_mode, :max_tokens, :verbose,
-                  :enable_compression, :enable_prompt_caching,
+                  :enable_compression, :enable_idle_compression, :enable_prompt_caching,
                   :compression_threshold, :message_count_threshold,
                   :models, :current_model_index, :current_model_id,
                   :memory_update_enabled, :skill_evolution,
@@ -173,6 +173,7 @@ module Clacky
       @max_tokens = options[:max_tokens] || 16384
       @verbose = options[:verbose] || false
       @enable_compression = options[:enable_compression].nil? ? true : options[:enable_compression]
+      @enable_idle_compression = options[:enable_idle_compression].nil? ? true : options[:enable_idle_compression]
       # Enable prompt caching by default for cost savings
       @enable_prompt_caching = options[:enable_prompt_caching].nil? ? true : options[:enable_prompt_caching]
       # Token threshold that triggers proactive history compression. Local models
@@ -411,7 +412,7 @@ module Clacky
     # Settings keys that are persisted to config.yml.
     # These map directly to AgentConfig accessors.
     CONFIG_SETTINGS_KEYS = %w[
-      enable_compression enable_prompt_caching
+      enable_compression enable_idle_compression enable_prompt_caching
       compression_threshold message_count_threshold
       memory_update_enabled
       skill_evolution max_running_agents max_idle_agents
@@ -428,6 +429,7 @@ module Clacky
       end
       settings = {
         "enable_compression" => @enable_compression,
+        "enable_idle_compression" => @enable_idle_compression,
         "enable_prompt_caching" => @enable_prompt_caching,
         "compression_threshold" => @compression_threshold,
         "message_count_threshold" => @message_count_threshold,

data/lib/clacky/agent_profile.rb

@@ -53,8 +53,11 @@ module Clacky
 
     # List all available agent profiles across user + extension layers.
     # Precedence on id collision: user override → extension unit.
+    # @param recency [Hash<String, Integer>] agent id => epoch of last use,
+    #   used to order third-party extension agents by most-recently-used
+    #   instead of their static `order` field.
     # @return [Array<Hash>] each: { id:, title:, title_zh:, description:, description_zh:, source:, order:, layer:, author:, avatar: }
-    def self.all
+    def self.all(recency: {})
       out = {}
 
       add = lambda do |id, title, title_zh, description, description_zh, source, order, layer, author, avatar|
@@ -76,6 +79,7 @@ module Clacky
       ext_result = ExtensionLoader.last_result || ExtensionLoader.load_all
       ext_result&.agents&.each do |unit|
         spec = unit.spec || {}
+        next if spec["hidden"]
         title = spec["title"].to_s
         title = unit.id if title.empty?
         avatar = spec["avatar_abs"].to_s.empty? ? nil : "/agent_avatar/#{unit.id}"
@@ -102,8 +106,26 @@ module Clacky
         )
       end
 
-      source_rank = { "user" => 0, "extension" => 1 }
-      out.values.sort_by { |a| [source_rank[a[:source]] || 9, a[:order] || 999, a[:id]] }
+      # Builtin agents always come first, then user overrides, then third-party
+      # extension agents — so the "start new session" grid keeps the official
+      # agents grouped ahead of anything the user installed from the market.
+      # Within the third-party group, agents are ordered by most-recently-used
+      # first (via `recency`), falling back to their static `order` field for
+      # agents that have never been used yet.
+      layer_rank = lambda do |a|
+        next 0 if a[:layer] == "builtin"
+        next 1 if a[:source] == "user"
+
+        2
+      end
+      out.values.sort_by do |a|
+        rank = layer_rank.call(a)
+        if rank == 2
+          [rank, -(recency[a[:id]] || 0), a[:order] || 999, a[:id]]
+        else
+          [rank, a[:order] || 999, a[:id]]
+        end
+      end
     end
 
     private_class_method def self.read_profile_yml(path)

data/lib/clacky/default_extensions/ext-studio/ext.yml

@@ -19,8 +19,8 @@ contributes:
     - id: ext-developer
       title: Extension Developer
       title_zh: 扩展开发
-      description: AI expert that helps you build, debug, and publish extensions
-      description_zh: 帮你开发、调试、发布扩展的 AI 专家
+      description: AI expert that helps you build custom AI agent workflows
+      description_zh: 帮你开发自定义 AI Agent 工作流的专家
       order: 5
       prompt: agents/ext-developer/system_prompt.md
       avatar: agents/ext-developer/avatar.png

data/lib/clacky/default_extensions/ext-studio/panels/studio/view.js

@@ -146,7 +146,7 @@
       "extlist.newExt.label": "Create a new extension",
       "extlist.newExt.hint": "Opens an AI session that scaffolds and builds it for you.",
       "extlist.newExt.btn": "Create New Extension",
-      "extlist.newExt.seed": "I want to build a new OpenClacky extension. Help me get started: ask me what the extension should do, then scaffold it and build it out step by step.",
+      "extlist.newExt.seed": "I want to build a new extension. Help me get started: ask me what the extension should do, then scaffold it and build it out step by step.",
       "unit.panel": "panel",
       "unit.panels": "panels",
       "unit.agent": "agent",
@@ -331,7 +331,7 @@
       "extlist.newExt.label": "新建扩展",
       "extlist.newExt.hint": "打开一个 AI 会话，帮你生成并开发它。",
       "extlist.newExt.btn": "新建扩展",
-      "extlist.newExt.seed": "我想开发一个新的 OpenClacky 扩展。请引导我开始：先问清楚这个扩展要做什么，然后帮我搭好骨架并一步步开发出来。",
+      "extlist.newExt.seed": "我想开发一个新的扩展。请引导我开始：先问清楚这个扩展要做什么，然后帮我搭好骨架并一步步开发出来。",
       "unit.panel": "个面板",
       "unit.panels": "个面板",
       "unit.agent": "个 Agent",
@@ -1567,28 +1567,29 @@
       return box;
     }
 
-    function rebuild() {
+    function rebuild(headerActions) {
       if (!container) return;
       container.innerHTML = "";
 
-      const newBox = el("div", { class: "studio-skill-promo" });
-      newBox.appendChild(el("p", { class: "studio-skill-promo-text", text: t("extlist.newExt.label") }));
-      newBox.appendChild(el("p", { class: "studio-skill-hint", text: t("extlist.newExt.hint") }));
-      const newBar = el("div", { class: "studio-actions" });
-      newBar.appendChild(el("button", { class: "studio-btn studio-btn-primary", text: t("extlist.newExt.btn"), onclick: () => createExtension(t("extlist.newExt.seed")) }));
-      newBox.appendChild(newBar);
-      container.appendChild(newBox);
+      if (headerActions) {
+        headerActions.innerHTML = "";
+        headerActions.appendChild(el("button", {
+          class: "studio-btn studio-btn-primary",
+          text: t("extlist.newExt.btn"),
+          onclick: () => createExtension(t("extlist.newExt.seed")),
+        }));
+      }
 
       container.appendChild(section("extlist.section.cloud", "extlist.section.cloudHint", cloud, cloudCard, "extlist.cloud.empty"));
       container.appendChild(section("extlist.section.local", "extlist.section.localHint", store.extensions, localCard, "extlist.local.empty"));
     }
 
     return {
-      async attach(root) {
+      async attach(root, headerActions) {
         container = el("div", { class: "studio-panel" });
         root.appendChild(container);
         container.innerHTML = _skeletonHtml();
-        try { await reload(); rebuild(); }
+        try { await reload(); rebuild(headerActions); }
         catch (e) { container.innerHTML = ""; container.appendChild(el("p", { class: "studio-empty", text: t("err.generic", { msg: e.message }) })); }
       },
     };
@@ -1723,24 +1724,27 @@
       return box;
     }
 
-    function rebuild() {
+    function rebuild(headerActions) {
       if (!container) return;
       container.innerHTML = "";
 
-      if (locked) {
-        const promo = el("div", { class: "studio-skill-promo" });
-        promo.appendChild(el("p", { class: "studio-skill-promo-text", text: t("skills.promo.text") }));
-        promo.appendChild(el("p", { class: "studio-empty", text: t("skills.locked") }));
-        container.appendChild(promo);
+      if (headerActions) {
+        headerActions.innerHTML = "";
+        const newBtn = el("button", {
+          class: "studio-btn studio-btn-primary",
+          text: t("skills.newSkill.btn"),
+          onclick: () => createSkill(null),
+        });
+        newBtn.disabled = locked;
+        newBtn.title = locked ? t("skills.locked") : "";
+        headerActions.appendChild(newBtn);
       }
 
-      const newBox = el("div", { class: "studio-skill-promo" });
-      newBox.appendChild(el("p", { class: "studio-skill-promo-text", text: t("skills.newSkill.btn") }));
-      newBox.appendChild(el("p", { class: "studio-skill-hint", text: t("skills.newSkill.label") }));
-      const newBar = el("div", { class: "studio-actions" });
-      newBar.appendChild(el("button", { class: "studio-btn studio-btn-primary", text: t("skills.newSkill.btn"), onclick: () => createSkill(null) }));
-      newBox.appendChild(newBar);
-      container.appendChild(newBox);
+      if (locked) {
+        const lockHint = el("p", { class: "studio-empty", text: t("skills.locked") });
+        lockHint.style.marginBottom = "12px";
+        container.appendChild(lockHint);
+      }
 
       const cloudEmptyKey = locked ? "skills.cloud.locked" : "skills.cloud.empty";
       container.appendChild(section("skills.section.cloud", "skills.section.cloudHint", cloud, cloudCard, cloudEmptyKey));
@@ -1748,11 +1752,11 @@
     }
 
     return {
-      async attach(root) {
+      async attach(root, headerActions) {
         container = el("div", { class: "studio-panel" });
         root.appendChild(container);
         container.innerHTML = _skeletonHtml();
-        try { await reload(); rebuild(); }
+        try { await reload(); rebuild(headerActions); }
         catch (e) { container.innerHTML = ""; container.appendChild(el("p", { class: "studio-empty", text: t("err.generic", { msg: e.message }) })); }
       },
     };
@@ -1768,6 +1772,8 @@
 
     const header = el("div", { class: "studio-page-head" });
     header.appendChild(el("h2", { class: "studio-page-title", text: t("ws.title") }));
+    const headerActions = el("div", { class: "studio-page-head-actions" });
+    header.appendChild(headerActions);
     page.appendChild(header);
 
     const tabsBar = el("div", { class: "studio-tabs" });
@@ -1785,8 +1791,9 @@
       active = id;
       Array.from(tabsBar.children).forEach((b) => b.classList.toggle("studio-tab-active", b.dataset.tab === id));
       body.innerHTML = "";
+      headerActions.innerHTML = "";
       const tab = tabs.find((t2) => t2.id === id);
-      if (tab) tab.build(body);
+      if (tab) tab.build(body, headerActions);
     }
 
     tabs.forEach((tab) => {
@@ -1799,12 +1806,12 @@
     select("extensions");
   }
 
-  function buildExtensionsTab(root) {
-    createExtensionsPanel().attach(root);
+  function buildExtensionsTab(root, headerActions) {
+    createExtensionsPanel().attach(root, headerActions);
   }
 
-  function buildSkillsTab(root) {
-    createSkillsPanel().attach(root);
+  function buildSkillsTab(root, headerActions) {
+    createSkillsPanel().attach(root, headerActions);
   }
 
   function navRow(labelKey, onClick) {
@@ -1904,8 +1911,10 @@
     .studio-published-row { display: flex; align-items: center; justify-content: space-between; gap: 8px; padding: 8px 0; font-size: 12px; border-bottom: 1px solid var(--color-border-primary); }
     .studio-published-name { display: flex; align-items: center; gap: 6px; color: var(--color-text-primary); }
     .studio-page { width: 100%; }
-    .studio-page-head { margin-bottom: 20px; }
+    .studio-page-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 20px; }
+    .studio-page-head-actions { display: flex; align-items: center; gap: 8px; flex-shrink: 0; }
     .studio-page-title { margin: 0; font-size: 22px; font-weight: 600; color: var(--color-text-primary); }
+    .studio-btn-sm { padding: 5px 12px; font-size: 12px; }
     .studio-tabs { display: flex; gap: 4px; border-bottom: 1px solid var(--color-border-primary); margin-bottom: 24px; }
     .studio-tab { padding: 8px 16px; border: none; background: transparent; color: var(--color-text-tertiary); cursor: pointer; font-size: 14px; font-weight: 500; border-bottom: 2px solid transparent; margin-bottom: -1px; }
     .studio-tab:hover { color: var(--color-text-primary); }

data/lib/clacky/default_extensions/ext-studio/skills/ext-develop/SKILL.md

@@ -24,7 +24,7 @@ Seven `contributes:` types (use one, several, or all):
 - `panels`   — WebUI panels (a `view.js`, no build step, no React, no iframe)
 - `api`      — one backend file `api/handler.rb`, mounted at `/api/ext/<id>/`
 - `skills`   — a `SKILL.md` under `skills/<id>/` (prompt-only capability)
-- `agents`   — a `system_prompt.md`; can reference `panels: [id]` and `skills: [id]`
+- `agents`   — a `system_prompt.md`; can reference `panels: [id]` and `skills: [id]`; `hidden: true` hides from the new-session picker
 - `channels` — an IM adapter
 - `patches`  — monkey-patch a real class (advanced, supply-chain risk)
 - `hooks`    — lifecycle hooks like `before_tool_use` (advanced)
@@ -92,10 +92,12 @@ exactly three capabilities:
 
 ```js
 Clacky.ext.ui.mount(slot, spec, opts)     // inject UI into a named slot
-Clacky.ext.subscribe(event, handler)      // observe host store events (read-only)
+Clacky.ext.subscribe(event, handler)      // observe store events + live session events (read-only)
 Clacky.ext.api.register(name, fn)         // expose a named data source; api.resolve(name)
 ```
 
+**`subscribe(event, handler)`** - two event families: (1) host **store** events (`skills:changed`, `tasks:changed`, `profile:changed`, …) and (2) **live session events** mirrored from the WebSocket stream — conversation (`session:assistant-message`, `session:tool-call`, `session:tool-result`), status/errors (`session:error`, `session:warning`, `session:update`), lifecycle (`session:renamed`, `session:deleted`, …). Payload is `{ sessionId, ...wsFields }`. Full list in the "Core Events" section of the extend-webui docs. Handlers are read-only.
+
 **`ui.mount(slot, spec, opts)`** — `spec` is either `(container, ctx, runtime) => …` or
 `{ create?, render }`. The render function:
 - gets a host-owned `container` DOM element — append into it, **or** return a Node / HTML

data/lib/clacky/default_extensions/git/ext.yml

@@ -1,6 +1,9 @@
 id: git
 name: Git
+display_name: Git
+display_name_zh: Git
 description: Changes panel — a friendly view of what the AI changed in the working tree
+description_zh: 变更面板 — 直观查看 AI 在工作区的每一处修改
 version: "0.1.0"
 author: OpenClacky
 homepage: https://www.openclacky.com

data/lib/clacky/default_extensions/meeting/ext.yml

@@ -1,6 +1,9 @@
 id: meeting
 name: Meeting
+display_name: Meeting
+display_name_zh: 会议
 description: Real-time meeting transcription and AI assistant
+description_zh: 实时会议转录与 AI 助手
 version: "0.1.0"
 author: OpenClacky
 homepage: https://www.openclacky.com

data/lib/clacky/default_extensions/time_machine/ext.yml

@@ -1,6 +1,9 @@
 id: time_machine
 name: Time Machine
+display_name: Time Machine
+display_name_zh: 时间机器
 description: Vertical timeline of session tasks with per-task diff and one-click restore
+description_zh: 会话任务时间轴，支持按任务查看差异并一键还原
 version: "0.1.0"
 author: OpenClacky
 homepage: https://www.openclacky.com
@@ -9,3 +12,4 @@ contributes:
   panels:
     - id: time_machine
       view: panels/time_machine/view.js
+      attach: ["*"]

data/lib/clacky/default_skills/new/SKILL.md

@@ -17,20 +17,25 @@ When user wants to create a new Rails project:
 ## Process Steps
 
 ### 0. Ask Project Type and Requirement
-Before doing anything, use `request_user_feedback` to ask the user two things:
-
-```
-project_type: "demo" or "production"
-requirement: one-sentence description of what they want to build
+Before doing anything, call `request_user_feedback` with a structured prompt. Use the following as a guide:
+
+zh:
+```json
+{
+  "question": "请选择项目类型，并用一句话描述你想做什么：",
+  "context": "开始新项目前需要知道项目类型和需求，请先完成填写。",
+  "options": ["⚡ Demo — 无数据库，AI 自由发挥，快速原型", "🏗️ Production — 真实应用，可部署，完整 Rails 配置"]
+}
 ```
 
-Card content:
-- Title: "🚀 New Project"
-- Two options for project type:
-  - **⚡ Demo** — no database, AI builds freely, quick prototype
-  - **🏗️ Production** — real app, ready to deploy, full Rails setup
-- One text input: "Describe your project in one sentence"
-- Confirm button: "Let's go!"
+en:
+```json
+{
+  "question": "Choose a project type and describe what you want to build in one sentence:",
+  "context": "Tell us what kind of project to create so we can get started.",
+  "options": ["⚡ Demo — no database, AI builds freely, quick prototype", "🏗️ Production — real app, ready to deploy, full Rails setup"]
+}
+```
 
 **Based on user's choice:**
 - If **Demo**: do NOT follow the Rails setup steps below. Instead, freely build a simple HTML/CSS/JS (or React) prototype directly in the working directory based on their requirement. Use your creativity.

data/lib/clacky/extension/api_extension.rb

@@ -277,6 +277,8 @@ module Clacky
 
       submit_task(session_id, prompt, display_message: display_message) if prompt && !prompt.strip.empty?
 
+      @http_server.send(:broadcast_session_update, session_id)
+
       session_id
     end
 

data/lib/clacky/extension/loader.rb

@@ -422,6 +422,7 @@ module Clacky
                    "description"    => spec["description"].to_s,
                    "description_zh" => spec["description_zh"].to_s,
                    "order"          => spec["order"],
+                   "hidden"         => !!spec["hidden"],
                    "author"         => container[:author],
                    "homepage"       => container[:homepage],
                    "license"        => container[:license],

data/lib/clacky/extension/packager.rb

@@ -18,6 +18,14 @@ module Clacky
     MANIFEST     = "ext.yml"
     MAX_ZIP_SIZE = 50 * 1024 * 1024
 
+    # Network timeouts for the download step. `read_timeout` is an *idle*
+    # timeout (resets on every chunk received), so a stalled connection with
+    # no new bytes flowing for this long is treated as dead — not a "download
+    # still going, just slow" situation, which large files on a slow link
+    # would otherwise trigger.
+    OPEN_TIMEOUT = 15   # seconds to establish the connection
+    READ_TIMEOUT = 60   # seconds of silence before giving up mid-download
+
     # Platform metadata that leaks in from the developer's OS; never ship it.
     SYSTEM_METADATA = [".DS_Store", "__MACOSX", "Thumbs.db", "desktop.ini"].freeze
 
@@ -56,12 +64,19 @@ module Clacky
       # local zip path or an http(s) URL. Validates the archive (single top
       # container with an ext.yml, no path traversal), extracts it, then runs
       # verify on the resolved installed layer.
-      def install(source, installed_dir: Clacky::ExtensionLoader::INSTALLED_DIR, force: false)
+      # on_progress is an optional callable that receives a stage hash, e.g.:
+      #   { stage: "downloading", progress: 45 }
+      #   { stage: "extracting" }
+      #   { stage: "verifying" }
+      # Caller can use this for progress reporting without coupling to internals.
+      def install(source, installed_dir: Clacky::ExtensionLoader::INSTALLED_DIR, force: false, on_progress: nil)
         Dir.mktmpdir("clacky-ext-install") do |tmp|
-          zip_path = local_zip_for(source, tmp)
+          on_progress&.call({ stage: "downloading", progress: 0 })
+          zip_path = local_zip_for(source, tmp, on_progress: on_progress)
+
+          on_progress&.call({ stage: "extracting" })
           extract_root = File.join(tmp, "unpacked")
           FileUtils.mkdir_p(extract_root)
-
           extract_zip(zip_path, extract_root)
 
           ext_id, container_src = locate_container(extract_root)
@@ -74,6 +89,7 @@ module Clacky
           FileUtils.mkdir_p(target)
           FileUtils.cp_r(Dir.glob("#{container_src}/*"), target)
 
+          on_progress&.call({ stage: "verifying" })
           Clacky::ExtensionLoader.invalidate_cache!
           units = verify_installed(ext_id, installed_dir)
 
@@ -149,11 +165,11 @@ module Clacky
         rel.split(File::SEPARATOR).any? { |seg| SYSTEM_METADATA.include?(seg) }
       end
 
-      private def local_zip_for(source, tmp)
+      private def local_zip_for(source, tmp, on_progress: nil)
         src = source.to_s
         if src.match?(%r{\Ahttps?://})
           dest = File.join(tmp, "download.zip")
-          download(src, dest)
+          download(src, dest, on_progress: on_progress)
           dest
         else
           path = File.expand_path(src)
@@ -162,19 +178,48 @@ module Clacky
         end
       end
 
-      private def download(url, dest)
-        total = 0
-        URI.open(url, "rb") do |io| # rubocop:disable Security/Open
-          File.open(dest, "wb") do |out|
-            while (chunk = io.read(64 * 1024))
-              total += chunk.bytesize
-              raise Error, "download exceeds #{MAX_ZIP_SIZE} bytes" if total > MAX_ZIP_SIZE
-              out.write(chunk)
-            end
-          end
+      # Download url → dest file.
+      # IMPORTANT: OpenURI's block form (`URI.open(url) { |io| ... }`) buffers
+      # the *entire* response into a StringIO/Tempfile via Net::HTTP's
+      # read_body before ever yielding `io` — so reading `io` in chunks after
+      # the fact reports progress only after the download has already
+      # finished. To get progress callbacks that fire while bytes are still
+      # arriving on the socket, we hook OpenURI's own `progress_proc` /
+      # `content_length_proc`, which run inside read_body as each chunk lands.
+      # Respects whatever proxy env vars the user has configured (some CDN
+      # domains are only reachable at usable speed through a proxy).
+      private def download(url, dest, on_progress: nil)
+        content_length = nil
+
+        content_length_proc = lambda do |len|
+          content_length = len if len&.positive?
+        end
+
+        progress_proc = lambda do |size|
+          raise Error, "download exceeds #{MAX_ZIP_SIZE} bytes" if size > MAX_ZIP_SIZE
+          next unless on_progress
+
+          pct = if content_length&.positive?
+                  [(size * 100 / content_length).floor, 99].min
+                else
+                  (90 - 90 * Math.exp(-size.to_f / (1024 * 1024))).floor
+                end
+          on_progress.call({ stage: "downloading", progress: pct })
+        end
+
+        URI.open(
+          url, "rb",
+          open_timeout: OPEN_TIMEOUT,
+          read_timeout: READ_TIMEOUT,
+          content_length_proc: content_length_proc,
+          progress_proc: progress_proc
+        ) do |io| # rubocop:disable Security/Open
+          File.open(dest, "wb") { |out| out.write(io.read) }
         end
       rescue OpenURI::HTTPError, SocketError => e
         raise Error, "failed to download #{url}: #{e.message}"
+      rescue Net::OpenTimeout, Net::ReadTimeout => e
+        raise Error, "download timed out: #{e.message}"
       end
 
       private def extract_zip(zip_path, dest_root)

data/lib/clacky/extension/verifier.rb

@@ -22,7 +22,7 @@ module Clacky
     PANEL_KEYS   = %w[id title title_zh description description_zh view order attach entry_points].freeze
     API_KEYS     = %w[id handler].freeze
     SKILL_KEYS   = %w[id dir protected].freeze
-    AGENT_KEYS   = %w[id title title_zh description description_zh order prompt panels skills avatar].freeze
+    AGENT_KEYS   = %w[id title title_zh description description_zh order prompt panels skills avatar hidden].freeze
     CHANNEL_KEYS = %w[id platform adapter].freeze
     PATCH_KEYS   = %w[target file fingerprint on_mismatch].freeze
     HOOK_KEYS    = %w[event file].freeze

data/lib/clacky/message_format/anthropic.rb

@@ -114,7 +114,7 @@ module Clacky
       private_class_method def self.normalized_effort(effort)
         return nil if effort.nil? || effort.to_s.empty?
         s = effort.to_s
-        %w[low medium high].include?(s) ? s : nil
+        %w[low medium high xhigh max].include?(s) ? s : nil
       end
 
       # Merge consecutive tool_result user messages into a single user message.

data/lib/clacky/message_format/bedrock.rb

@@ -91,7 +91,7 @@ module Clacky
 
       private_class_method def self.additional_fields_for_effort(effort)
         return nil if effort.nil? || effort.to_s.empty?
-        return nil unless %w[low medium high].include?(effort.to_s)
+        return nil unless %w[low medium high xhigh max].include?(effort.to_s)
         {
           thinking: { type: "adaptive" },
           output_config: { effort: effort.to_s }

data/lib/clacky/message_format/open_ai.rb

@@ -279,6 +279,14 @@ module Clacky
           elsif !effort_str.empty?
             body[:thinking] = { type: "adaptive" }
           end
+        elsif model.to_s.match?(/deepseek/i)
+          # DeepSeek V4 reasoning_effort only accepts low/high/max.
+          # xhigh is not recognized — map it to max.
+          effort = case effort_str
+                   when "xhigh" then "max"
+                   else effort_str
+                   end
+          body[:reasoning_effort] = effort unless effort.empty?
         elsif reasoning_effort && !effort_str.empty?
           body[:reasoning_effort] = effort_str
         end