@tractorscorch/clank 1.5.7 → 1.5.9

package/CHANGELOG.md

@@ -6,6 +6,29 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ---
 
+## [1.5.9] — 2026-03-23
+
+### Changed
+- **Workspace defaults to current directory** — the agent's workspace is now the directory you run `clank` from, not a hidden `%APPDATA%/Clank/workspace` folder. This means the agent works with your actual project files out of the box
+- **Full file system access** — the path guard no longer blocks reads/writes outside the workspace. Clank is a dev tool and needs to access the full system. Added security notice to README recommending dedicated hardware
+
+### Fixed
+- **Telegram `/new` and `/reset` were no-ops** — these commands returned a "session started" message but never actually reset the session. The model kept its full conversation history. Now properly clears session store, context engine, and destroys the old engine instance
+- **Security notice added to README** — recommends running Clank on dedicated hardware since it gives agents full system access
+
+---
+
+## [1.5.8] — 2026-03-23
+
+### Added
+- **Collapsible thinking blocks** — model thinking/reasoning is now displayed in a separate clickable block above the response instead of being streamed into the message text. Click the "Thought" toggle to expand/collapse. Shows "Thinking..." while streaming, "Thought" when complete
+
+### Fixed
+- **Thinking events were disconnected** — the full thinking pipeline (provider → agent → gateway → frontend) was broken at 3 points: provider yielded thinking as text for local models, agent only emitted a one-shot start event without content, and gateway didn't forward thinking events to clients. All 3 fixed
+- **Empty responses from thinking-only models** — when a model puts all output in `reasoning_content` with empty `content` (Qwen3.5), the thinking text is now used as the response instead of showing a blank message
+
+---
+
 ## [1.5.7] — 2026-03-23
 
 ### Fixed

package/README.md

@@ -9,7 +9,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/ItsTrag1c/Clank/releases/latest"><img src="https://img.shields.io/badge/version-1.5.7-blue.svg" alt="Version" /></a>
+  <a href="https://github.com/ItsTrag1c/Clank/releases/latest"><img src="https://img.shields.io/badge/version-1.5.9-blue.svg" alt="Version" /></a>
   <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="License" /></a>
   <a href="https://www.npmjs.com/package/@tractorscorch/clank"><img src="https://img.shields.io/npm/v/@tractorscorch/clank.svg" alt="npm" /></a>
   <a href="https://github.com/ItsTrag1c/Clank/stargazers"><img src="https://img.shields.io/github/stars/ItsTrag1c/Clank.svg" alt="Stars" /></a>
@@ -75,7 +75,13 @@ That's it. Setup auto-detects your local models, configures the gateway, and get
 | Platform | Download |
 |----------|----------|
 | **npm** (all platforms) | `npm install -g @tractorscorch/clank` |
-| **macOS** (Apple Silicon) | [Clank_1.5.7_macos](https://github.com/ItsTrag1c/Clank/releases/latest/download/Clank_1.5.7_macos) |
+| **macOS** (Apple Silicon) | [Clank_1.5.9_macos](https://github.com/ItsTrag1c/Clank/releases/latest/download/Clank_1.5.9_macos) |
+
+## Security Notice
+
+Clank is a **developer tool** that gives AI agents full access to your file system, shell, and connected services. The agent can read, write, and execute on your behalf.
+
+**We strongly recommend running Clank on dedicated hardware** (a dev machine, VM, or container) rather than on a system with sensitive personal files, credentials, or accounts you don't want the agent to access. Treat it like giving someone SSH access to your box.
 
 ## Features
 

package/dist/index.js

@@ -934,6 +934,7 @@ var init_agent = __esm({
               denylist: this.identity.tools?.deny
             });
             let iterationText = "";
+            let thinkingText = "";
             const toolCalls = [];
             let promptTokens = 0;
             let outputTokens = 0;
@@ -942,6 +943,7 @@ var init_agent = __esm({
             for (let attempt = 0; attempt < 2; attempt++) {
               if (attempt > 0) {
                 iterationText = "";
+                thinkingText = "";
                 toolCalls.length = 0;
                 promptTokens = 0;
                 outputTokens = 0;
@@ -960,7 +962,8 @@ var init_agent = __esm({
                       this.emit("token", { content: event.content });
                       break;
                     case "thinking":
-                      this.emit("thinking-start");
+                      thinkingText += event.content;
+                      this.emit("thinking", { content: event.content });
                       break;
                     case "tool_call":
                       toolCalls.push({
@@ -1005,6 +1008,10 @@ var init_agent = __esm({
               contextPercent: Math.round(this.contextEngine.utilizationPercent())
             });
             if (toolCalls.length === 0) {
+              if (!iterationText && thinkingText) {
+                iterationText = thinkingText;
+                this.emit("token", { content: iterationText });
+              }
               fullResponse = iterationText;
               this.contextEngine.ingest({ role: "assistant", content: iterationText });
               this.emit("response-end", { text: iterationText });
@@ -1037,6 +1044,7 @@ var init_agent = __esm({
               this.emit("tool-start", { id: tc.id, name: tc.name, arguments: tc.arguments });
               const toolCtx = {
                 projectRoot: this.identity.workspace,
+                allowExternal: true,
                 autoApprove: this.autoApprove,
                 agentId: this.identity.id,
                 signal
@@ -2092,7 +2100,7 @@ function defaultConfig() {
     agents: {
       defaults: {
         model: { primary: "ollama/qwen3.5" },
-        workspace: join6(getConfigDir(), "workspace"),
+        workspace: process.cwd(),
         toolTier: "auto",
         temperature: 0.7
       },
@@ -3112,11 +3120,7 @@ var init_openai = __esm({
                 }
                 if (choice?.delta?.reasoning_content) {
                   hasContent = true;
-                  if (this.isLocal) {
-                    yield { type: "text", content: choice.delta.reasoning_content };
-                  } else {
-                    yield { type: "thinking", content: choice.delta.reasoning_content };
-                  }
+                  yield { type: "thinking", content: choice.delta.reasoning_content };
                 }
                 if (choice?.delta?.content) {
                   hasContent = true;
@@ -5694,9 +5698,15 @@ You can read this file with the read_file tool.`
             return "Use /new to start a fresh session, or /reset to clear the current one.";
           }
           case "new":
-            return "New session started. Send a message to begin.";
           case "reset":
-            return "Session reset. History cleared.";
+            if (this.gateway) {
+              await this.gateway.resetSession({
+                channel: "telegram",
+                peerId: chatId,
+                peerKind: isGroup ? "group" : "dm"
+              });
+            }
+            return command === "new" ? "New session started. Send a message to begin." : "Session reset. History cleared.";
           case "model": {
             const model = this.config?.agents?.defaults?.model?.primary || "unknown";
             return `Current model: \`${model}\``;
@@ -6131,6 +6141,20 @@ var init_server = __esm({
           }
         }
       }
+      /**
+       * Reset a session — clear its history and context.
+       * Used by channel adapters (Telegram /new, /reset commands).
+       */
+      async resetSession(context) {
+        const sessionKey = deriveSessionKey(context);
+        await this.sessionStore.reset(sessionKey);
+        const engine = this.engines.get(sessionKey);
+        if (engine) {
+          engine.getContextEngine().clear();
+          engine.destroy();
+          this.engines.delete(sessionKey);
+        }
+      }
       /**
        * Handle an inbound message from any channel adapter.
        * This is the main entry point for all non-WebSocket messages.
@@ -6242,7 +6266,7 @@ var init_server = __esm({
           res.writeHead(200, { "Content-Type": "application/json" });
           res.end(JSON.stringify({
             status: "ok",
-            version: "1.5.7",
+            version: "1.5.9",
             uptime: process.uptime(),
             clients: this.clients.size,
             agents: this.engines.size
@@ -6354,7 +6378,7 @@ var init_server = __esm({
         const hello = {
           type: "hello",
           protocol: PROTOCOL_VERSION,
-          version: "1.5.7",
+          version: "1.5.9",
           agents: this.config.agents.list.map((a) => ({
             id: a.id,
             name: a.name || a.id,
@@ -6619,6 +6643,7 @@ var init_server = __esm({
       wireEngineEvents(engine, client) {
         const eventMap = {
           "token": "token",
+          "thinking": "thinking",
           "response-start": "response-start",
           "response-end": "response-end",
           "tool-start": "tool-start",
@@ -7749,7 +7774,7 @@ async function runTui(opts) {
   ws.on("open", () => {
     ws.send(JSON.stringify({
       type: "connect",
-      params: { auth: { token }, mode: "tui", version: "1.5.7" }
+      params: { auth: { token }, mode: "tui", version: "1.5.9" }
     }));
   });
   ws.on("message", (data) => {
@@ -8178,7 +8203,7 @@ import { fileURLToPath as fileURLToPath5 } from "url";
 import { dirname as dirname5, join as join19 } from "path";
 var __filename3 = fileURLToPath5(import.meta.url);
 var __dirname3 = dirname5(__filename3);
-var version = "1.5.7";
+var version = "1.5.9";
 try {
   const pkg = JSON.parse(readFileSync(join19(__dirname3, "..", "package.json"), "utf-8"));
   version = pkg.version;