@kitschpatrol/chagent 0.1.0 → 0.3.0

package/dist/bin/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as version, S as maxTimeoutMs, b as defaultModels, i as generateChangelog, l as agentNames, n as previewChangelog, r as reviewChangelog, s as writeChangelog, t as assertReviewTerminal, u as efforts, x as defaults, y as setLogger } from "../review-LYSADnul.js";
-import { n as assertAmendable, t as amendRelease } from "../lib-CXMRRbJf.js";
+import { C as version, S as maxTimeoutMinutes, b as defaultModels, i as generateChangelog, l as agentNames, n as previewChangelog, r as reviewChangelog, s as writeChangelog, t as assertReviewTerminal, u as efforts, x as defaults, y as setLogger } from "../review-ClBbl31P.js";
+import { n as assertAmendable, t as amendRelease } from "../lib-advgvAk1.js";
 import { t as createProgressLine } from "../progress-DQtRnH1N.js";
 import { createLogger } from "lognow";
 import path from "node:path";
@@ -122,15 +122,15 @@ try {
 		description: "Configuration file path",
 		type: "string"
 	}).option("timeout", {
-		defaultDescription: String(defaults.timeoutMs / 1e3),
-		description: "Agent timeout in seconds",
+		defaultDescription: String(defaults.timeout),
+		description: "Agent timeout in minutes",
 		type: "number"
 	}).option("verbose", {
 		default: false,
 		description: "Log commands, cache decisions, and session details to stderr",
 		type: "boolean"
 	}).check((args) => {
-		if (args.timeout !== void 0 && (!Number.isFinite(args.timeout) || args.timeout <= 0 || args.timeout * 1e3 > 2147483647)) throw new Error(`--timeout must be a positive number of seconds, up to ${Math.floor(maxTimeoutMs / 1e3)}.`);
+		if (args.timeout !== void 0 && (!Number.isFinite(args.timeout) || args.timeout <= 0 || args.timeout > 35791.39411666667)) throw new Error(`--timeout must be a positive number of minutes, up to ${Math.floor(maxTimeoutMinutes)}.`);
 		return true;
 	}), async (args) => {
 		if (!args.dryRun && args.interactive) assertReviewTerminal();
@@ -149,7 +149,7 @@ try {
 			},
 			rebuild: args.rebuild,
 			signal: controller.signal,
-			timeoutMs: args.timeout === void 0 ? void 0 : args.timeout * 1e3
+			timeout: args.timeout
 		}));
 		try {
 			if (args.dryRun) {

package/dist/lib/bumpp.d.ts

@@ -1,4 +1,4 @@
-import { u as GenerateOptions } from "../types-Cms1Tu5k.js";
+import { u as GenerateOptions } from "../types-COQP1I5w.js";
 import { VersionBumpOptions } from "bumpp";
 type ExecuteHook = Exclude<NonNullable<VersionBumpOptions['execute']>, string>;
 export type BumppHookOptions = Omit<GenerateOptions, 'cwd' | 'release'> & {

package/dist/lib/bumpp.js

@@ -1,4 +1,4 @@
-import { g as git, i as generateChangelog, m as localDate, r as reviewChangelog, s as writeChangelog, t as assertReviewTerminal } from "../review-LYSADnul.js";
+import { g as git, i as generateChangelog, m as localDate, r as reviewChangelog, s as writeChangelog, t as assertReviewTerminal } from "../review-ClBbl31P.js";
 import { t as createProgressLine } from "../progress-DQtRnH1N.js";
 
 // src/lib/bumpp.ts

package/dist/lib/index.d.ts

@@ -1,4 +1,4 @@
-import { _ as Config, a as ChangeSet, c as Evidence, d as GenerationRequest, f as GenerationResponse, g as RunSettings, h as ReleaseSummary, i as Change, l as FileEdit, m as ReleaseRequest, n as AgentName, o as ChangelogPlan, p as ReleaseContext, r as Category, s as Effort, t as AgentAdapter, u as GenerateOptions, v as defineConfig, y as loadConfig } from "../types-Cms1Tu5k.js";
+import { _ as Config, a as ChangeSet, c as Evidence, d as GenerationRequest, f as GenerationResponse, g as RunSettings, h as ReleaseSummary, i as Change, l as FileEdit, m as ReleaseRequest, n as AgentName, o as ChangelogPlan, p as ReleaseContext, r as Category, s as Effort, t as AgentAdapter, u as GenerateOptions, v as defineConfig, y as loadConfig } from "../types-COQP1I5w.js";
 import { ILogBasic, ILogLayer } from "lognow";
 /** Create an adapter for an installed CLI using its existing authentication. */
 export declare function createAgent(name: AgentName): AgentAdapter;

package/dist/lib/index.js

@@ -1,4 +1,4 @@
-import { a as defineConfig, c as createAgent, i as generateChangelog, n as previewChangelog, o as loadConfig, r as reviewChangelog, s as writeChangelog, y as setLogger } from "../review-LYSADnul.js";
-import { t as amendRelease } from "../lib-CXMRRbJf.js";
+import { a as defineConfig, c as createAgent, i as generateChangelog, n as previewChangelog, o as loadConfig, r as reviewChangelog, s as writeChangelog, y as setLogger } from "../review-ClBbl31P.js";
+import { t as amendRelease } from "../lib-advgvAk1.js";
 
 export { amendRelease, createAgent, defineConfig, generateChangelog, loadConfig, previewChangelog, reviewChangelog, setLogger, writeChangelog };

package/dist/{lib-CXMRRbJf.js → lib-advgvAk1.js}

@@ -1,4 +1,4 @@
-import { _ as isAncestor, d as LOCKFILE_PATH, f as inspectRepository, g as git, h as manifestAt, p as isVersionOnlyChange, s as writeChangelog, v as runCommand } from "./review-LYSADnul.js";
+import { _ as isAncestor, d as LOCKFILE_PATH, f as inspectRepository, g as git, h as manifestAt, p as isVersionOnlyChange, s as writeChangelog, v as runCommand } from "./review-ClBbl31P.js";
 import path from "node:path";
 import { realpath } from "node:fs/promises";
 

package/dist/{review-LYSADnul.js → review-ClBbl31P.js}

@@ -15,7 +15,7 @@ import { isCancel, select } from "@clack/prompts";
 
 // package.json
 var name = "@kitschpatrol/chagent";
-var version = "0.1.0";
+var version = "0.3.0";
 var engines = { "node": "^24.16.0 || >=26.3.0" };
 
 // src/lib/defaults.ts
@@ -25,14 +25,14 @@ const defaults = {
 	effort: "xhigh",
 	github: true,
 	maxInputChars: 8e4,
-	timeoutMs: 12e5
+	timeout: 20
 };
 const defaultModels = {
 	claude: "claude-opus-5-5",
 	codex: "gpt-6.1-sol"
 };
 /** Node.js timers fire immediately when given a longer delay. */
-const maxTimeoutMs = 2147483647;
+const maxTimeoutMinutes = 2147483647 / 6e4;
 
 // src/lib/log.ts
 /**
@@ -119,7 +119,8 @@ async function runCommand(command, args, options = {}) {
 			detached,
 			env: options.env ?? process.env,
 			stdio: options.inherit === true ? "inherit" : "pipe",
-			windowsHide: true
+			windowsHide: true,
+			windowsVerbatimArguments: options.windowsVerbatimArguments
 		});
 		const group = detached ? child.pid : void 0;
 		if (group !== void 0) trackGroup(group);
@@ -228,8 +229,11 @@ async function readBlobs(root, objects) {
 }
 
 // src/lib/repository.ts
-/** Matches package manager lockfile paths. */
-const LOCKFILE_PATH = /(?:^|\/)(?:pnpm-lock\.yaml|package-lock\.json|yarn\.lock|bun\.lockb?)$/v;
+/**
+* Matches package manager lockfile paths. Excludes npm-shrinkwrap.json, which
+* is published and constrains consumers.
+*/
+const LOCKFILE_PATH = /(?:^|\/)(?:pnpm-lock\.yaml|package-lock\.json|yarn\.lock|bun\.lockb?|deno\.lock|uv\.lock|poetry\.lock|pdm\.lock|Pipfile\.lock|Cargo\.lock|Gemfile\.lock|composer\.lock|go\.sum)$/v;
 const TAG_DECORATION = "tag: refs/tags/";
 const GITHUB_REMOTE = /github\.com[:\/]([^\/]+\/[^\/]+?)(?:\.git)?$/v;
 const manifestSchema$1 = z.object({
@@ -627,7 +631,11 @@ runtime compatibility, installation and distribution, documentation and examples
 dependencies, builds, tests, CI, and release tooling. Include meaningful maintenance
 even when it is the only change in a release. Group routine runtime dependency
 updates into a useful entry, and group development dependency/tooling refreshes
-instead of listing every version. Identify important packages or migrations when
+instead of listing every version. A dependency change is a change to a declared
+requirement, such as a version range in a manifest, workspace catalog, or
+override. Lockfiles only record resolved versions: omit refreshed resolutions and
+transitive updates that appear only in a lockfile, even when the same commit
+changes other files. Identify important packages or migrations when
 the evidence supports them. Classify dependency and tooling changes by their
 actual impact: fixing runtime compatibility for consumers is Fixed, while fixing
 compatibility of contributor tooling alone is Maintenance. Documentation
@@ -702,8 +710,9 @@ Before returning, check coverage across behavior/API, compatibility, dependencie
 documentation, build/test/CI, and distribution. Do not drop a change just because
 its commit is called chore, docs, build, or dependency updates. Return an empty
 changes array only when the evidence is entirely release-version bookkeeping,
-generated artifacts, formatting noise, or changes already covered by existing
-entries. Do not pad the result with unsupported changes.`;
+lockfile-only resolution changes, generated artifacts, formatting noise, or
+changes already covered by existing entries. Do not pad the result with
+unsupported changes.`;
 /** Invalidates cached drafts whenever the instructions change. */
 const instructionVersion = hash(instructions);
 
@@ -1055,7 +1064,8 @@ const configSchema = z.strictObject({
 	packages: z.array(z.string()).optional(),
 	/** Templates containing {version} and optionally {name}. */
 	tagPatterns: z.array(z.string().includes("{version}")).optional(),
-	timeoutMs: z.number().positive().max(maxTimeoutMs).optional()
+	/** Minutes each agent session may run. */
+	timeout: z.number().positive().max(maxTimeoutMinutes).optional()
 });
 const resolvedConfigSchema = configSchema.required({
 	agent: true,
@@ -1063,8 +1073,11 @@ const resolvedConfigSchema = configSchema.required({
 	effort: true,
 	github: true,
 	maxInputChars: true,
-	timeoutMs: true
-});
+	timeout: true
+}).transform(({ timeout, ...config }) => ({
+	...config,
+	timeoutMs: timeout * 6e4
+}));
 function invalidConfig(source, error) {
 	return new Error(`Invalid options in ${source}:\n${z.prettifyError(error)}`, { cause: error });
 }
@@ -1310,12 +1323,13 @@ const GENERATED_DIRECTORY = /^(?:build|changelog|coverage|dist)(?:\/|$)/iv;
 const GENERATED_ANYWHERE = /(?:^|\/)(?:changelog(?:\.md)?$|node_modules(?:\/|$))/iv;
 /**
 * Generated output lives at the top of a package, so `packages/build` and
-* `src/dist` remain source.
+* `src/dist` remain source. Lockfiles record resolved versions, not declared
+* dependency ranges.
 */
 function ignored(file, packages) {
 	const owner = packages.findLast(({ directory }) => file.startsWith(`${directory}/`));
 	const relative = owner === void 0 ? file : file.slice(owner.directory.length + 1);
-	return GENERATED_ANYWHERE.test(file) || GENERATED_DIRECTORY.test(relative);
+	return LOCKFILE_PATH.test(file) || GENERATED_ANYWHERE.test(file) || GENERATED_DIRECTORY.test(relative);
 }
 async function scopes(repository, pkg, ref) {
 	if (pkg.directory === ".") return ["."];
@@ -1344,11 +1358,7 @@ function manifestObjects(files, before, after) {
 	return files.flatMap((file) => isManifest(file) ? [`${before}:${file}`, `${after}:${file}`] : []);
 }
 function hasSourceChanges(files, commit, blobs) {
-	for (const file of files) {
-		if (LOCKFILE_PATH.test(file)) continue;
-		if (!isManifest(file) || !isVersionOnlyEdit(blobs.get(`${commit}^:${file}`), blobs.get(`${commit}:${file}`))) return true;
-	}
-	return files.length > 0 && files.every((file) => LOCKFILE_PATH.test(file));
+	return files.some((file) => !isManifest(file) || !isVersionOnlyEdit(blobs.get(`${commit}^:${file}`), blobs.get(`${commit}:${file}`)));
 }
 /** Read commits and their changed files from one process. */
 async function commitsInRange(root, range, paths) {
@@ -1827,7 +1837,7 @@ function releaseContext(options, pkg) {
 	return pkg.directory === options.releaseDirectory ? options.release : void 0;
 }
 /** Resolve a package's releases and prepare requests for those it still needs. */
-async function preparePackage(context, pkg, aggregateHistory = false, aggregateContent) {
+async function preparePackage(context, pkg, aggregateHistory = false, recordedAtRoot) {
 	const { repository } = context;
 	const file = await findChangelog(path.join(repository.root, pkg.directory));
 	const content = context.options.rebuild ? void 0 : file.content;
@@ -1854,7 +1864,7 @@ async function preparePackage(context, pkg, aggregateHistory = false, aggregateC
 			version: release.version
 		};
 		summaries.push(summary);
-		if (!shouldWrite && aggregateContent !== void 0 && missingPackageSummaries([summary], aggregateContent).length === 0) continue;
+		if (!shouldWrite && recordedAtRoot?.(summary) === true) continue;
 		const existingBody = (draftPromoted ? release === newest : release.version === "Unreleased") ? draft?.body : void 0;
 		const from = existingBody === void 0 ? void 0 : await incrementalBase(context, file.path, content, release);
 		const request = await prepareRelease(context, pkg, release, existingBody ?? "", mode, from);
@@ -2078,9 +2088,12 @@ async function generateWorkspace(context) {
 	const rootReleases = await resolveReleases(repository, repository.rootPackage, options, releaseContext(options, repository.rootPackage));
 	const shared = rootReleases.some((release) => release.version !== "Unreleased");
 	const rootFile = await findChangelog(repository.root);
-	const needsPackageHistory = !shared || missingReleases(rootReleases, options.rebuild ? void 0 : rootFile.content).some((release) => release.version !== "Unreleased");
+	const rootContent = options.rebuild ? void 0 : rootFile.content;
+	const rootMissing = shared ? new Set(missingReleases(rootReleases, rootContent).map((release) => release.version)) : void 0;
+	const needsPackageHistory = rootMissing === void 0 || rootMissing.values().some((version) => version !== "Unreleased");
+	const recordedAtRoot = (summary) => rootMissing === void 0 ? rootContent !== void 0 && missingPackageSummaries([summary], rootContent).length === 0 : !rootMissing.has(summary.version);
 	const packages = [];
-	for (const pkg of repository.packages) packages.push(await preparePackage(context, pkg, needsPackageHistory, shared || options.rebuild ? void 0 : rootFile.content));
+	for (const pkg of repository.packages) packages.push(await preparePackage(context, pkg, needsPackageHistory, recordedAtRoot));
 	const root = shared ? await preparePackage(context, repository.rootPackage) : void 0;
 	const independent = shared ? void 0 : await prepareIndependent(context, packages.flatMap((pkg) => pkg.summaries));
 	const requests = [...packages, ...root === void 0 ? [] : [root]].flatMap((pkg) => pkg.work.map((item) => item.request));
@@ -2231,21 +2244,23 @@ function changelogProblem(plan) {
 	}
 }
 async function openEditor(editor, file, cwd) {
-	const args = process.platform === "win32" ? [
+	const windows = process.platform === "win32";
+	const args = windows ? [
 		"/d",
 		"/s",
 		"/c",
-		`${editor} "${file}"`
+		`"${editor} "${file}""`
 	] : [
 		"-c",
 		`${editor} "$1"`,
 		"chagent-editor",
 		file
 	];
-	await runCommand(process.platform === "win32" ? "cmd.exe" : "sh", args, {
+	await runCommand(windows ? "cmd.exe" : "sh", args, {
 		cwd,
 		inherit: true,
-		timeoutMs: 864e5
+		timeoutMs: 864e5,
+		windowsVerbatimArguments: windows
 	});
 }
 /**
@@ -2307,4 +2322,4 @@ async function reviewChangelog(plan, options = {}) {
 	}
 }
 
-export { version as C, maxTimeoutMs as S, isAncestor as _, defineConfig as a, defaultModels as b, createAgent as c, LOCKFILE_PATH as d, inspectRepository as f, git as g, manifestAt as h, generateChangelog as i, agentNames as l, localDate as m, previewChangelog as n, loadConfig as o, isVersionOnlyChange as p, reviewChangelog as r, writeChangelog as s, assertReviewTerminal as t, efforts as u, runCommand as v, defaults as x, setLogger as y };
+export { version as C, maxTimeoutMinutes as S, isAncestor as _, defineConfig as a, defaultModels as b, createAgent as c, LOCKFILE_PATH as d, inspectRepository as f, git as g, manifestAt as h, generateChangelog as i, agentNames as l, localDate as m, previewChangelog as n, loadConfig as o, isVersionOnlyChange as p, reviewChangelog as r, writeChangelog as s, assertReviewTerminal as t, efforts as u, runCommand as v, defaults as x, setLogger as y };

package/dist/{types-Cms1Tu5k.d.ts → types-COQP1I5w.d.ts}

@@ -18,7 +18,7 @@ declare const configSchema: z.ZodObject<{
   model: z.ZodOptional<z.ZodString>;
   packages: z.ZodOptional<z.ZodArray<z.ZodString>>;
   tagPatterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
-  timeoutMs: z.ZodOptional<z.ZodNumber>;
+  timeout: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
 type Config = z.infer<typeof configSchema>;
 /** Define optional repository configuration with TypeScript completion. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitschpatrol/chagent",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Changelog agent. CLI tool and TypeScript library to generate and update changelogs with a little help from your LLMs.",
   "keywords": [
     "changelog",
@@ -90,7 +90,7 @@
     "clean-deep": "shx rm -f pnpm-lock.yaml && git clean -fdX",
     "fix": "pnpm build && ksc fix",
     "lint": "pnpm build && ksc lint",
-    "release": "bumpp --all --commit 'Release: %s' --execute 'node dist/bin/cli.js' && pnpm build && pnpm publish --otp $(op item get npm --otp) && brewpub --tap kitschpatrol/tap --description 'Generate and update changelogs from Git history with Codex or Claude'",
+    "release": "pnpm build && bumpp --all --commit 'Release: %s' --execute 'node dist/bin/cli.js' && pnpm build && pnpm publish --otp $(op item get npm --otp) && brewpub --tap kitschpatrol/tap --description 'Generate and update changelogs from Git history with Codex or Claude'",
     "test": "pnpm build && vitest run"
   }
 }

package/readme.md

@@ -15,6 +15,10 @@
 
 <!-- /short-description -->
 
+> [!WARNING]
+>
+> **This project is under development. It should not be considered suitable for general use until a 1.0 release.**
+
 ## Overview
 
 Run `chagent` in a Git repository to either create a changelog where none previously existed, or update an existing changelog to capture recent changes.
@@ -142,7 +146,7 @@ chagent
 | `--github`              | Enrich Git evidence using gh when available; disable with --no-github | `boolean`                                     | `true`                                        |
 | `--cache`               | Cache drafts and incremental state; disable with --no-cache           | `boolean`                                     | `true`                                        |
 | `--config`              | Configuration file path                                               | `string`                                      | auto-detected from repository root            |
-| `--timeout`             | Agent timeout in seconds                                              | `number`                                      | `1200`                                        |
+| `--timeout`             | Agent timeout in minutes                                              | `number`                                      | `20`                                          |
 | `--verbose`             | Log commands, cache decisions, and session details to stderr          | `boolean`                                     | `false`                                       |
 | `--help`<br>`-h`        | Show help                                                             | `boolean`                                     |                                               |
 | `--version`<br>`-v`     | Show version number                                                   | `boolean`                                     |                                               |
@@ -262,7 +266,7 @@ export default defineConfig({
   github: true,
   maxInputChars: 80_000,
   model: 'gpt-6.1-sol',
-  timeoutMs: 1_200_000,
+  timeout: 20,
 })
 ```
 
@@ -280,7 +284,7 @@ Chagent reads reachable version tags and commit history regardless of the projec
 
 GitHub enrichment uses release dates and commit-associated PR information. PR lookups batch unique commits across all requested releases and packages; each release receives only its associated PRs. **GitHub release-note bodies are never generation inputs.** Changelog files and generated build output are excluded from source evidence. Existing changelog prose is supplied only to preserve edits and avoid duplicate entries.
 
-The agent chooses which historical source files, public interfaces, documentation, and build configuration to inspect. It reads Git snapshots at the supplied release refs instead of treating current or uncommitted files as historical evidence. `maxInputChars` bounds the starting context supplied to agents; it does not restrict which repository files they can investigate. Requests prioritize release boundaries and existing human entries, then fit optional starting evidence into the remaining budget. An individual release's existing entries are never truncated. `timeoutMs` applies to each agent session. Lockfile maintenance retains its commit intent, while pure npm version-bump bookkeeping is excluded.
+The agent chooses which historical source files, public interfaces, documentation, and build configuration to inspect. It reads Git snapshots at the supplied release refs instead of treating current or uncommitted files as historical evidence. `maxInputChars` bounds the starting context supplied to agents; it does not restrict which repository files they can investigate. Requests prioritize release boundaries and existing human entries, then fit optional starting evidence into the remaining budget. An individual release's existing entries are never truncated. `timeout` sets the minutes each agent session may run. Dependency entries reflect declared version ranges; lockfile-only resolution changes and pure npm version-bump bookkeeping are excluded.
 
 Agents return structured changes with evidence references. Stray whitespace and list markers in descriptions are normalized. A response that still fails validation gets one correction request; a second failure stops the run before anything is written or cached. Application code owns the header, release boundaries, Markdown insertion, and Git writes. Agents run in the repository: Codex uses a read-only sandbox with approval requests disabled; Claude exposes read/search and Bash tools in [`dontAsk` mode](https://code.claude.com/docs/en/permissions), which allows read-only commands and denies actions requiring permission. Customizations are disabled for these invocations. Only chagent writes the reviewed changelog. Repository content is sent to the selected agent service using your existing account.