Framework 0.22.1

Fix live-query updates under result-cache pressure, keep project lookup indexed, and aggregate dashboard metrics without constructing full chart series. Add explicit bounded live-connection and password-hash admission settings while preserving defaults and password strength. Verified by 819 tests, Node 22 and 24 CI, packaged-release conformance, and CodeQL. The attached package is independently attested by the release workflow.

Clank 0.22.0

Twenty application features using the existing SQLite database and browser storage, with no additional services or package dependencies. Each feature was verified and merged independently in PRs #204–#223.

• Add private bookmarks and folders with safe URLs, favorites, search, conflict-checked editing, and atomic folder removal.
• Add personal activity timelines with trusted event recording, bounded retention, stable pagination, unread filters, and cursor-bounded clearing.
• Add shared feedback boards with explicit membership, unique votes, proposal editing, moderated status, and searchable controls.
• Add personal availability calendars with overlap-safe windows, conflict-checked edits, and bounded slot previews with booking buffers.
• Add saved dashboard layouts with owned defaults, widget visibility/order/width/collapse controls, responsive sizing, and preserved widget instances.
• Add personal labels with colors, bounded resource assignments, conflict-checked editing, and browser controls.
• Add owned ordered checklists with atomic completion, item editing, reordering, reset, and conflict-aware controls.
• Add personal reminders with local-time scheduling, due filters, snooze, completion, and version-fenced editing.
• Add recoverable device-local autosaved drafts with transactional revision checks, expiry, bounded JSON snapshots, and recovery controls.
• Add bounded local undo/redo history with named edits, explicit coalescing, atomic transactions, snapshot recovery, and controls.
• Add searchable command palettes with ranked accent-insensitive matching, keyboard navigation, focus restoration, and cancellable async execution.
• Add configurable keyboard shortcuts with conflict detection, optional local persistence, input-aware dispatch, scopes, and settings controls.
• Add resumable onboarding tours with highlighted targets, async preparation, retry, pause, skip, versioned progress, and cleanup.
• Add spreadsheet-safe CSV exports with explicit column selection, UTF-8 downloads, bounded construction, and cancellable streaming responses.
• Add an account-owned recycle bin with original-ID restoration, expiration sweeps, guarded permanent history deletion, and browser recovery controls.
• Add account-owned record history panels with paginated snapshots, structural comparisons, business-rule validation, and version-fenced restore controls.
• Add shared threaded comments with resource roles, safe edit/delete controls, reply limits, resolution, retry keys, and persistent permission revocation.
• Add account-owned saved views with validated filters, stable sorting, visible columns, optimistic revisions, default selection, and browser management controls.
• Add bounded local full-text search with accent folding, title-aware ranking, prefix completion, highlighted snippets, snapshot restore, and keyboard-accessible search controls.
• Add CSV import with strict bounded parsing, column mapping, typed validation, duplicate handling, preview controls, and idempotent host transaction keys.

Validation includes the complete release gate, browser workflows, TypeScript consumer checks, package conformance, and security checks.

Clank 0.21.0

• Add a persistent release error inbox with source-map frame locations, trace links, per-release counts, bounded retention, and recurrence tracking after resolution.
• Add opt-in SSE resume with bounded session/query-scoped JSON splices and full-snapshot fallback after cache misses, authorization changes, or invalid client bases.
• Add encrypted staged secret rotation to the platform and CLI, with bounded validation, conflict-checked activation/rollback, audit metadata, and running-consumer version inspection.
• Add disposable application resilience rehearsals for offline, lost-response, dependency, upload-interruption, and worker-restart faults with required recovery evidence and CLI gating.
• Add conservative API/MCP compatibility reports and a CI workbench gate for action removal, input/output schema changes, authentication, agent exposure, and required scopes.
• Add fixed-height virtualized lists and grids with keyed row retention, scroll anchoring, keyboard navigation, accessible positions, and explicit cleanup.
• Add a durable authenticated webhook outbox with signed deliveries, bounded attempt history, owner-scoped inspection, controlled replay, and per-attempt signing-key resolution.
• Add complete application-load budgets from cold-navigation HAR captures, with resource deltas, transitive asset accounting, and failing CI checks for incomplete evidence.
• Add opt-in SQLite query plans, bounded execution summaries, repeated-query and slow-query advice, and reviewable index candidates in local DevTools.

Full validation passed with 769 tests, packaged-release conformance, security checks, and browser verification.

Clank 0.20.0

• Enforce deterministic reactive-work and browser-module size budgets in CI, with timing diagnostics.
• Compare consecutive deployment activations using matched traffic windows, request latency, error rates, and activation duration, with explicit low-traffic and collection states.
• Add loopback-only DevTools for reactive dependency activity, computation lifetime, and opt-in backend query/cache diagnostics.
• Carry request trace context through backend operations, durable jobs, retries, and workflow steps; inspect bounded, metadata-only request/job timelines.
• Build validated synthetic fixture databases and seed isolated preview environments through the CLI and platform, preserving parent application data and recovery safety.
• Rehearse encrypted-backup recovery and database migrations on disposable copies, including application health checks, timing, table changes, and cleanup.
• Persist bounded agent tool activity with granted scopes, outcomes, timing, observed revisions, filters, and a local explorer.
• Queue browser mutations durably with account-bound transactional replay receipts, pending/retry states, expiry checks, and explicit conflict reconciliation.
• Add persistent user-owned notifications, read state, category preferences, accessible browser controls, and optional durable email delivery with stable provider idempotency keys.
• Ship approval-queue, customer-portal, and booking application recipes with authenticated UI/MCP contracts, ownership and transition rules, fixtures, migrations, and deployment configuration.
• Run generated-application contracts in independent Node test contexts and build composed applications before their tests, closing a verification gap in the CLI harness.

Clank 0.19.6

• Coalesce shared reactive dependency invalidation before effects run, eliminating duplicate executions and partially updated computed values from a single signal write.
• Dispose server-rendered component scopes after asynchronous output settles, releasing subscriptions and cleanup callbacks on success and failure.
• Revalidate unchanged static GET/HEAD responses with weak ETags and bodyless 304 responses, avoiding repeated file streams and asset transfers.
• Release unused HEAD response bodies and response readers after backpressured or early client disconnects, while preserving responses to rejected request bodies.
• Load managed-ingress custom domains in one query per routing snapshot and skip provider fleet reads on local-only installations, preserving immediate routing and fencing updates.
• Correct deployment-token setup guidance for workflows that prune inactive releases before publishing.

Validation: 710 tests and the complete package conformance, documentation, and security gates pass. Each fix was merged separately after the supported Node runtime and CodeQL checks passed. See PRs #177–#182 and the performance guide for regression evidence.

Clank 0.19.5

Clank 0.19.5 fixes recurring OAuth expiration for stateless MCP clients that replicate refresh credentials.

Adaptive rotation now retains a bounded AES-GCM predecessor chain and lets a lagging replica converge on the one current unspent successor without creating a token branch. Missing, corrupted, expired, or overlong adaptive handoffs fail without revoking a newer replica's grant. Strict mode continues to provide replay-driven family revocation.

See CHANGELOG.md for release details.

Clank 0.19.4

MCP OAuth refresh reliability

• Keeps MCP clients connected when they fail to persist a rotated refresh-token successor.
• Recovers access through the encrypted, single-successor handoff without branching refresh families or extending the successor expiry.
• Preserves family revocation when an adopted successor's predecessor is replayed.
• Adds agent.refreshTokenRotationMode: "strict" for applications that require immediate post-window revocation.

This patch resolves the recurring hourly invalid_token disconnect observed with remote MCP clients.

Clank 0.19.3

MCP OAuth refresh-token handoff hotfix. Concurrent and delayed refresh retries converge on one encrypted successor response, preserve replay revocation after the bounded window, and report the recovered access token's exact remaining lifetime.

Clank 0.19.1

Clank 0.19.1 fixes MCP Apps rendering in stateless hosts such as Codex.

• Model-visible tools now retain _meta.ui.resourceUri even when a host omits the per-request MCP Apps capability hint.
• Codex can associate a tool result such as dailyLog_getDay with its published ui://daily-log/daybook resource automatically.
• App-only tools remain hidden and uncallable unless MCP Apps support is negotiated.
• OAuth scopes, user isolation, server authorization, and resource security policy are unchanged.

Validated with 687 tests, 100% coverage, CodeQL, security and documentation audits, and packed deployment/migration/rollback conformance.

Clank 0.19.0

First-class MCP Apps

Clank 0.19.0 lets any typed backend query or mutation render an interactive, sandboxed view inside compatible MCP hosts. Define one immutable ui:// resource, bind it with agent.app, and Clank publishes the negotiated tool metadata and exact text/html;profile=mcp-app resource automatically.

The release includes a zero-dependency iframe client and HTML document builder, stable 2026-01-26 MCP Apps capability negotiation, app-only tool visibility, CSP and browser-permission declarations, deterministic UI contract revisions, a runnable example, and complete human/agent documentation.

Security boundaries remain explicit: views receive no OAuth credentials, all actions still pass through application authorization and MCP scopes, iframe messages are parent-bound and time-limited, and malformed or over-permissive declarations fail while the application boots.

Validation includes 687 tests with 100% line/branch/function coverage, packed-release deployment conformance, CodeQL, the full repository/history security audit, and MCPJam Apps conformance at 7/7 (100/100).