@hifullmoon/aicommit 2.2.2 → 2.2.3

package/CHANGELOG.md

@@ -4,6 +4,14 @@ This file lists notable user-facing changes. Internal refactors, test-only chang
 
 ## [Unreleased]
 
+## [2.2.3] - 2026-09-01
+
+### Fixed
+
+- Prevented accepted provider requests from being replayed after response-body interruptions, avoiding duplicate generations and potential duplicate billing.
+- Honored provider retry timing safely by failing clearly when `Retry-After` exceeds the configured maximum delay instead of retrying too early.
+- Stopped setup from replacing valid JSON configurations with unsupported schemas or invalid structures.
+
 ## [2.2.2] - 2026-08-31
 
 ### Added
@@ -170,7 +178,8 @@ This file lists notable user-facing changes. Internal refactors, test-only chang
 - Added file-level split planning and execution with Git-state concurrency checks.
 - Added provider presets and user/project configuration boundaries.
 
-[Unreleased]: https://github.com/hi-fullmoon/AICommit/compare/v2.2.2...HEAD
+[Unreleased]: https://github.com/hi-fullmoon/AICommit/compare/v2.2.3...HEAD
+[2.2.3]: https://github.com/hi-fullmoon/AICommit/releases/tag/v2.2.3
 [2.2.2]: https://github.com/hi-fullmoon/AICommit/releases/tag/v2.2.2
 [2.2.1]: https://github.com/hi-fullmoon/AICommit/releases/tag/v2.2.1
 [2.2.0]: https://github.com/hi-fullmoon/AICommit/releases/tag/v2.2.0

package/docs/distribution.md

@@ -26,7 +26,7 @@ The release workflow uses npm Trusted Publishing without a long-lived `NPM_TOKEN
 ```bash
 workdir=$(mktemp -d)
 cd "$workdir"
-npm install --package-lock-only @hifullmoon/aicommit@2.2.2
+npm install --package-lock-only @hifullmoon/aicommit@2.2.3
 npm audit signatures
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hifullmoon/aicommit",
-  "version": "2.2.2",
+  "version": "2.2.3",
   "description": "Safe, local-first AI commit message generator for Git workflows",
   "type": "module",
   "bin": {

package/src/api.js

@@ -136,18 +136,24 @@ async function fetchWithRetry(apiUrl, init, timeout, configuredPolicy, consume)
       } catch (err) {
         const wrappedTimeout = timeoutError(err, timeout);
         if (wrappedTimeout) throw wrappedTimeout;
-        if (!networkFailure(err) || attempt >= policy.maxAttempts) throw err;
-        const delay = Math.min(policy.baseDelayMs * 2 ** (attempt - 1), policy.maxDelayMs);
-        await policy.sleep(delay);
-        continue;
+        // Once the provider has accepted a generation request, replaying it is
+        // unsafe: the first request may already have completed and been billed
+        // even though its response body was interrupted locally.
+        throw err;
       }
     }
     if (RETRYABLE_STATUS.has(response.status) && attempt < policy.maxAttempts) {
       const requestedDelay = retryAfterMs(response.headers.get('retry-after'), policy.now);
-      const delay = Math.min(
-        requestedDelay ?? policy.baseDelayMs * 2 ** (attempt - 1),
-        policy.maxDelayMs,
-      );
+      if (requestedDelay !== null && requestedDelay > policy.maxDelayMs) {
+        await response.body?.cancel().catch(() => {});
+        throw new Error(
+          `HTTP ${response.status}: provider requested a retry after ${Math.ceil(
+            requestedDelay / 1000,
+          )}s, exceeding the configured retry.maxDelayMs limit.`,
+        );
+      }
+      const delay =
+        requestedDelay ?? Math.min(policy.baseDelayMs * 2 ** (attempt - 1), policy.maxDelayMs);
       await response.body?.cancel().catch(() => {});
       await policy.sleep(delay);
       continue;

package/src/setup.js

@@ -74,9 +74,9 @@ export function mergeSetupConfig(existing, { providerName, entry, language }) {
 
 async function readExistingConfig(path) {
   if (!(await fileExists(path))) return {};
+  let parsed;
   try {
-    const parsed = JSON.parse(await readFile(path, 'utf-8'));
-    return validateUserConfig(parsed);
+    parsed = JSON.parse(await readFile(path, 'utf-8'));
   } catch (err) {
     const backup = `${path}.invalid-${Date.now()}.bak`;
     await copyFile(path, backup);
@@ -84,6 +84,16 @@ async function readExistingConfig(path) {
     console.log(chalk.dim(`    The original file was preserved at ${backup}.`));
     return {};
   }
+
+  try {
+    return validateUserConfig(parsed);
+  } catch (err) {
+    throw new Error(
+      `Existing config ${path} is valid JSON but has an unsupported structure: ${err.message} ` +
+        'Fix it or move it aside before running setup.',
+      { cause: err },
+    );
+  }
 }
 
 async function writeConfigAtomic(path, value) {