@synmux/claude-commit 1.0.3 → 1.1.0

package/CHANGELOG.md

@@ -0,0 +1,238 @@
+# Changelog
+
+All notable changes to `claude-commit` are recorded here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project
+adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+Each version also has a [GitHub release](https://github.com/synmux/claude-commit/releases)
+carrying the same notes at greater length.
+
+## [1.1.0] - 2026-09-13
+
+### [1.1.0] - Changed
+
+- **Runs on Node, not Bun.** `cco` now requires Node.js 22.18 or later
+  (24 LTS recommended) and no longer needs Bun at all. The package ships a
+  bundled `dist/` built with esbuild plus type declarations for the library
+  entry; the executable is `bin/cco.js`, which runs the TypeScript sources
+  directly from a checkout via Node's native type stripping.
+- **The interactive picker is built on Clack** (`@clack/core` +
+  `@clack/prompts`) instead of OpenTUI. It looks a little different - a
+  title, a hint line, and every candidate shown as its subject plus a
+  one-line body preview - and gains `j`/`k` navigation with wrapping and
+  `Ctrl-C` to cancel alongside the existing arrow keys, `Enter`, `e` and
+  `q`/`Esc`. The list windows itself to the terminal height. It still draws
+  on stderr only.
+- Path patterns (`lowPriorityPaths`, `ignore`) are matched by `picomatch`
+  instead of `Bun.Glob`. Every well-formed pattern behaves exactly as
+  before. Two ill-formed cases differ: an unbalanced `{` now matches
+  nothing (it used to match its first alternative), and an unterminated `[`
+  now matches its literal text (it used to match nothing).
+- Development moved to pnpm (`pnpm-lock.yaml`, `pnpm-workspace.yaml`),
+  vitest (`pnpm test`) and esbuild (`pnpm run build`). The repository's own
+  `lowPriorityPaths` deprioritise `pnpm-lock.yaml` instead of `bun.lock`.
+- The npm publish workflow now runs `ci.yml` (lint, typecheck, build, test)
+  as a reusable workflow against the tagged commit and only publishes once
+  it succeeds. It no longer carries its own test step, which had been
+  calling a `typecheck` script that no longer exists.
+
+### [1.1.0] - Removed
+
+- The `@opentui/core` and `@types/bun` dependencies, `bun.lock`, and the Bun
+  pin in `mise.toml` (now Node 24.20.0).
+
+## [1.0.4] - 2026-09-11
+
+### [1.0.4] - Added
+
+- **Filenames-only mode.** Set `"filenamesOnly": true` in your config, or
+  pass `-f` / `--filenames-only`, to skip the summariser and send only
+  filenames to the final model. This reduces model work at the cost of
+  broader, less useful messages; the default remains `false`.
+- Filename lists retain `ignore` filtering and `lowPriorityPaths` weighting,
+  including both paths of renames and copies. Formatting, templates, custom
+  instructions and interactive options still apply; the model is instructed
+  to avoid inventing specific edits or motivations from filenames alone.
+- Verbose output identifies when the summariser was skipped. In this mode,
+  library results contain an empty `summaries` array and `chunkCount: 0`,
+  and the summary model is never called or preloaded.
+
+## [1.0.3] - 2026-09-11
+
+### Added
+
+- **Ollama models.** Any model can run on a local or self-hosted
+  [Ollama](https://ollama.com) server by prefixing its name with `ollama:`;
+  everything after the prefix is the Ollama model name verbatim, tag
+  included. The two pipeline stages resolve independently, so the diff can be
+  summarised locally and free while the final message still goes to Claude.
+  `cco` uses the native `/api/chat` endpoint rather than either compatibility
+  layer, because only the native API can set a context length.
+- **`ollama.context`**, defaulting to `"auto"`. Ollama truncates an oversized
+  prompt silently - HTTP 200, oldest content dropped, nothing in the response
+  to say so - so `cco` never lets the window stay implicit: it preloads the
+  model with no window set, reads the server's own VRAM-based choice back from
+  `/api/ps`, pins that number on every request, sizes chunks against it, and
+  checks the returned token counts to catch a truncation that happened anyway.
+  A number pins the window instead.
+- **`ollama.host`** (defaults to `$OLLAMA_HOST`, then `http://localhost:11434`)
+  and **`ollama.keepAlive`**, plus the `--ollama-host` and `--ollama-context`
+  flags.
+- **`lowPriorityPaths`.** Gitignore-style patterns for churn-heavy paths whose
+  changes are summarised separately, so they cannot crowd out the code in the
+  final message. The content is still read and still costs the same; only its
+  weight changes. `--no-low-priority-paths` disables it for one run.
+- **`ignore`.** The same pattern syntax, but matching file sections are removed
+  from the diff before anything else looks at it - before the low-priority
+  partition, before chunking, before any model call. The files are still
+  committed; `ignore` governs what the model reads, never what git stages. When
+  a pattern matches everything, `cco` stops with an error naming the directive
+  rather than inventing a message about changes you told it not to read.
+  `--no-ignore` disables it for one run.
+
+### Changed
+
+- The default spinner is now `material`.
+- `@opentui/core` bumped to 0.5.7, alongside SDK and skill dependency bumps.
+- CI workflows bump `checkout`, `setup-node` and `claude-code-action`.
+
+## [1.0.2] - 2026-07-27
+
+### [1.0.2] - Changed
+
+- The default spinner is now `dwarfFortress` instead of `bouncingBall`.
+
+## [1.0.1] - 2026-07-27
+
+### [1.0.1] - Added
+
+- **A configurable spinner.** The `spinner` config key accepts any name from
+  the [cli-spinners](https://github.com/sindresorhus/cli-spinners) set bundled
+  with [ora](https://github.com/sindresorhus/ora). Unknown names fall back to
+  the default rather than throwing, because a cosmetic option must never be
+  able to break a commit.
+
+### [1.0.1] - Changed
+
+- The progress spinner is an ora instance rather than a hand-rolled frame
+  timer. Enablement is still decided solely by the existing TTY and
+  `--no-spinner` checks - ora's own CI auto-detection is bypassed - and a final
+  success or failure line still prints when the animation is disabled.
+
+## [1.0.0] - 2026-07-24
+
+### [1.0.0] - Added
+
+- **`--skip-armored`** and the matching `skipArmored` config key, replacing
+  each run of armoured or encoded lines with a short marker. Runs of one or two
+  lines survive, because a lone URL or hash is content. Ciphertext is
+  unreadable to the model and re-encrypts nondeterministically on every
+  `chezmoi re-add`, so this is the recommended mode for repos holding encrypted
+  files.
+
+### [1.0.0] - Fixed
+
+- **Chunks are sized by real token density.** `Prompt is too long` returned,
+  and the isolation fix in 0.1.3 turned out to have treated a symptom. Armoured
+  and base64 content tokenises at roughly 1.14 chars per token on current
+  Claude models, while chunk budgets assumed the configured `charsPerToken` of
+  3.5: a 1,247,318-character diff was estimated at ~356k tokens and really
+  counted ~1.19M. Long unbroken runs are now priced at their own, much denser
+  ratio. A third-party "real tokeniser" would not fix this class of bug -
+  tiktoken-style vocabularies compress base64 about three times better than
+  Claude's actual tokeniser, so they underestimate the same way.
+- **The summary stage is a work queue.** If the backend rejects a chunk anyway
+  (its rejection is free, unbilled, and the only authoritative count), the
+  budget is halved, that chunk is re-split, and processing continues in place.
+
+### [1.0.0] - Changed
+
+- The 0.1.3 documentation blaming these failures on MCP/skill leakage is
+  corrected. That isolation stays as hygiene and cost control, but density was
+  the bug.
+
+## [0.1.4] - 2026-07-23
+
+### [0.1.4] - Fixed
+
+- `cco --version` reported a hardcoded string rather than the installed package
+  version.
+
+## [0.1.3] - 2026-07-23
+
+### [0.1.3] - Fixed
+
+- **Requests no longer inherit your global Claude Code context.** Runs failed
+  reporting ~1,149k tokens against a conversation of only ~301k; the missing
+  ~848k were MCP tool definitions and skills pulled from the user's global
+  configuration into what should be an isolated prompt-in, text-out request.
+  The Agent SDK gates each context source separately, and `settingSources: []`
+  disables only settings files and `CLAUDE.md` - MCP servers and plugins load
+  regardless, and the CLI performs skill discovery even when the `skills`
+  option is omitted. Every switch is now set explicitly in one tested
+  `buildQueryOptions()`.
+- **The chunk budget is clamped to the summary model's context window.**
+  `maxChunkTokens` was converted straight into a character budget regardless of
+  the configured model, so on any 200k-context model a single chunk could
+  exceed the whole window. It is now a cap rather than a promise, clamped to
+  the model's window minus a 32k reserve.
+
+### [0.1.3] - Added
+
+- npm publishing on version tags via CI.
+
+## [0.1.2] - 2026-07-09
+
+### [0.1.2] - Changed
+
+- **Both pipeline stages default to `sonnet`.** The final stage's input is a
+  handful of summaries and its output is the entire point of the tool, so a
+  strong model there costs almost nothing and writes a visibly better message.
+
+### [0.1.2] - Added
+
+- MIT licence.
+
+## [0.1.1] - 2026-07-02
+
+### [0.1.1] - Changed
+
+- Minor tweaks.
+
+## [0.1.0] - 2026-07-02
+
+The first release, published as `@synmux/claude-commit` and providing the `cco`
+and `claude-commit` binaries.
+
+### [0.1.0] - Added
+
+- **The two-stage pipeline.** The diff is split into chunks that fit the
+  context window, each chunk is summarised, and the summaries are handed back
+  to a model to write the final message. Diffs too large for a single context
+  window simply produce more chunks.
+- **Message formatting.** Conventional Commits (`-c`), gitmoji (`-g`),
+  multi-line subject and body (`-m`), a first-line template (`-t`), and
+  free-form extra instructions (`-p`).
+- **Interactive mode.** `cco -i` lists candidate messages in a TUI, generated
+  at a higher temperature for variety, with the scrollable diff alongside.
+- **Layered configuration.** Built-in defaults, a global user config, a
+  `claude-commit` key in the repo's `package.json`, the nearest dotted config
+  file, then CLI flags.
+- **Structured output.** The final message is requested as JSON against a
+  `{ messages: string[] }` schema rather than parsed out of free-form text,
+  degrading to a temperature-free request and then to delimiter parsing.
+- **`allowApiKey`, defaulting to false.** An exported `ANTHROPIC_API_KEY` would
+  otherwise silently switch every generation from subscription auth to
+  pay-as-you-go billing, because the SDK subprocess inherits `process.env`.
+  Those credentials are stripped unless you opt in.
+
+[1.0.4]: https://github.com/synmux/claude-commit/compare/1.0.3...1.0.4
+[1.0.3]: https://github.com/synmux/claude-commit/compare/1.0.2...1.0.3
+[1.0.2]: https://github.com/synmux/claude-commit/compare/1.0.1...1.0.2
+[1.0.1]: https://github.com/synmux/claude-commit/compare/1.0.0...1.0.1
+[1.0.0]: https://github.com/synmux/claude-commit/compare/0.1.4...1.0.0
+[0.1.4]: https://github.com/synmux/claude-commit/compare/0.1.3...0.1.4
+[0.1.3]: https://github.com/synmux/claude-commit/compare/0.1.2...0.1.3
+[0.1.2]: https://github.com/synmux/claude-commit/compare/0.1.1...0.1.2
+[0.1.1]: https://github.com/synmux/claude-commit/compare/0.1.0...0.1.1
+[0.1.0]: https://github.com/synmux/claude-commit/releases/tag/0.1.0

package/README.md

@@ -39,19 +39,29 @@ Either stage can run on a local [Ollama](#ollama-models) model instead; by
 default both go through the
 [Claude Agent SDK](https://code.claude.com/docs/en/agent-sdk/overview).
 
+For less model work at the cost of less useful messages, enable
+[`filenamesOnly`](#filenames-only-mode) to skip summarisation entirely.
+
 ## Install
 
-Requires [Bun](https://bun.sh).
+Requires [Node.js](https://nodejs.org) 22.18 or later (24 LTS recommended).
+
+```sh
+npm install -g @synmux/claude-commit   # `cco` and `claude-commit` on your PATH
+```
+
+From a checkout, [pnpm](https://pnpm.io) is the package manager (the
+`packageManager` field pins the version, so `corepack enable` is enough):
 
 ```sh
-bun install
-bun link            # makes `cco` and `claude-commit` available on your PATH
+pnpm install
+pnpm link --global  # makes `cco` and `claude-commit` available on your PATH
 ```
 
 Or run it directly without linking:
 
 ```sh
-bun run bin/cco.ts --help
+node bin/cco.js --help
 ```
 
 ## Authentication
@@ -85,28 +95,29 @@ and asks for confirmation before committing. Pass `-y` to skip the prompt, or
 
 ### Options
 
-| Flag                                     | Description                                                                             |
-| ---------------------------------------- | --------------------------------------------------------------------------------------- |
-| `-i, --interactive` / `--no-interactive` | Choose between several options in an interactive TUI, or skip it when enabled in config |
-| `-n, --count <n>`                        | Number of options to generate in interactive mode (default 3)                           |
-| `-a, --all`                              | Stage all changes (`git add -A`) before committing                                      |
-| `-c, --conventional`                     | Format as a [Conventional Commit](https://www.conventionalcommits.org)                  |
-| `-g, --gitmoji`                          | Prefix the subject with a [gitmoji](https://gitmoji.dev)                                |
-| `-m, --multiline` / `--no-multiline`     | Write a multi-line commit (subject + body), or force a single line                      |
-| `-t, --template <tpl>`                   | Template for the first line, e.g. `"[PROJ-1] {message}"`                                |
-| `-p, --prompt <text>`                    | Extra instructions appended to the prompt                                               |
-| `--model-summary <model>`                | Model used to summarize the diff (default `sonnet`)                                     |
-| `--model-final <model>`                  | Model used to write the message (default `sonnet`)                                      |
-| `--skip-armored`                         | Omit armored/encoded lines (age/gpg armor, base64 blobs) from the summarized diff       |
-| `--no-low-priority-paths`                | Ignore `lowPriorityPaths` for this run, so every change weighs the same                 |
-| `--no-ignore`                            | Disregard `ignore` for this run, so every staged change is read                         |
-| `--ollama-host <url>`                    | Base URL of the Ollama server for `ollama:` models                                      |
-| `--ollama-context <tokens>`              | Context window requested from Ollama models                                             |
-| `-d, --dry-run`                          | Print the message to stdout without committing                                          |
-| `-y, --yes`                              | Commit without asking for confirmation                                                  |
-| `--no-spinner`                           | Disable the progress spinner                                                            |
-| `--config <path>`                        | Path to a config file                                                                   |
-| `-v, --verbose`                          | Print summaries, cost and debug output                                                  |
+| Flag                                     | Description                                                                                |
+| ---------------------------------------- | ------------------------------------------------------------------------------------------ |
+| `-i, --interactive` / `--no-interactive` | Choose between several options in an interactive picker, or skip it when enabled in config |
+| `-n, --count <n>`                        | Number of options to generate in interactive mode (default 3)                              |
+| `-a, --all`                              | Stage all changes (`git add -A`) before committing                                         |
+| `-c, --conventional`                     | Format as a [Conventional Commit](https://www.conventionalcommits.org)                     |
+| `-g, --gitmoji`                          | Prefix the subject with a [gitmoji](https://gitmoji.dev)                                   |
+| `-m, --multiline` / `--no-multiline`     | Write a multi-line commit (subject + body), or force a single line                         |
+| `-t, --template <tpl>`                   | Template for the first line, e.g. `"[PROJ-1] {message}"`                                   |
+| `-p, --prompt <text>`                    | Extra instructions appended to the prompt                                                  |
+| `-f, --filenames-only`                   | Skip summarisation and send only filenames to the final model                              |
+| `--model-summary <model>`                | Model used to summarize the diff (default `sonnet`)                                        |
+| `--model-final <model>`                  | Model used to write the message (default `sonnet`)                                         |
+| `--skip-armored`                         | Omit armored/encoded lines (age/gpg armor, base64 blobs) from the summarized diff          |
+| `--no-low-priority-paths`                | Ignore `lowPriorityPaths` for this run, so every change weighs the same                    |
+| `--no-ignore`                            | Disregard `ignore` for this run, so every staged change is read                            |
+| `--ollama-host <url>`                    | Base URL of the Ollama server for `ollama:` models                                         |
+| `--ollama-context <tokens>`              | Context window requested from Ollama models                                                |
+| `-d, --dry-run`                          | Print the message to stdout without committing                                             |
+| `-y, --yes`                              | Commit without asking for confirmation                                                     |
+| `--no-spinner`                           | Disable the progress spinner                                                               |
+| `--config <path>`                        | Path to a config file                                                                      |
+| `-v, --verbose`                          | Print summaries, cost and debug output                                                     |
 
 ### Examples
 
@@ -115,20 +126,48 @@ cco                      # generate, confirm, and commit staged changes
 cco -a -c                # stage everything and write a Conventional Commit
 cco -c -g -m             # conventional + gitmoji + a body
 cco -i -n 5              # pick from 5 options interactively
-cco --dry-run | cat      # print a message without committing (TUI-free, pipe-safe)
+cco -f --dry-run         # generate from filenames only, without committing
+cco --dry-run | cat      # print a message without committing (no picker, pipe-safe)
 git commit -F <(cco -d)  # use the message with your own git invocation
 ```
 
 In a pipe (no TTY) there is no spinner and no confirmation prompt - `cco` just
 generates and commits (or prints, with `--dry-run`).
 
+## Filenames-only mode
+
+Set `"filenamesOnly": true` in any config layer, or pass `-f` /
+`--filenames-only`, to send only the list of filenames touched by staged
+changes to `models.final`. The default is `false`.
+
+```json
+{ "filenamesOnly": true }
+```
+
+The summariser is skipped entirely: no diff chunks, summary calls, or
+summary-model preload. The final model receives no file contents or diff
+hunks, so expect broader, less useful messages. It is instructed to describe
+the affected areas without inventing specific edits or reasons for them.
+Normal formatting, custom instructions and interactive options still apply.
+
+`ignore` still removes matching file sections, and `lowPriorityPaths` still
+groups and weights the remaining filenames. Renames and copies include both
+paths; additions, deletions, binary files and mode changes are included.
+If every staged file is ignored, generation still stops with an error.
+
+`models.summary`, `maxChunkTokens`, `charsPerToken` and `skipArmored` have no
+effect in this mode. `--verbose` reports that the summariser was skipped;
+library results have an empty `summaries` array and `chunkCount: 0`.
+
 ## Interactive mode
 
-`cco -i` opens a TUI listing several candidate messages to choose from. The
-options are generated with a higher temperature (`interactiveTemperature`) for
-more variety. Use the arrow keys to move between options, `Enter` to commit the
-highlighted option, `e` to edit it in your `$EDITOR` first, and `q`/`Esc` to
-cancel.
+`cco -i` opens a picker (built on [Clack](https://github.com/bombshell-dev/clack))
+listing several candidate messages, each with its subject and a one-line body
+preview. The options are generated with a higher temperature
+(`interactiveTemperature`) for more variety. Use the arrow keys (or `j`/`k`) to
+move between options, `Enter` to commit the highlighted option, `e` to edit it
+in your `$EDITOR` first, and `q`/`Esc`/`Ctrl-C` to cancel. The picker draws on
+stderr, so stdout stays clean.
 
 To make interactive mode the default without typing `-i` every time, set
 `"interactive": true` in your config (see below); opt out of a single run with
@@ -172,6 +211,7 @@ keys are valid at every level:
   },
   "maxChunkTokens": 600000,
   "charsPerToken": 3.5,
+  "filenamesOnly": false,
   "skipArmored": false,
   "lowPriorityPaths": [],
   "ignore": [],
@@ -226,7 +266,12 @@ those paths:
 
 ```json
 {
-  "lowPriorityPaths": [".agents/skills/*-skilld", "bun.lock", "!bun.lock.keep"]
+  "lowPriorityPaths": [
+    ".agents/skills/*-skilld",
+    "pnpm-lock.yaml",
+    "generated/**",
+    "!generated/schema.ts"
+  ]
 }
 ```
 
@@ -244,9 +289,9 @@ usually be copied in:
 - A pattern with a `/` in it is anchored at the repository root and matches a
   path or any directory above it - `.agents/skills/*-skilld` covers every file
   inside each matching directory.
-- A pattern without a `/` matches any path segment at any depth - `bun.lock`
-  matches `packages/app/bun.lock`; `*-skilld` matches everything inside any
-  `*-skilld` directory.
+- A pattern without a `/` matches any path segment at any depth -
+  `pnpm-lock.yaml` matches `packages/app/pnpm-lock.yaml`; `*-skilld` matches
+  everything inside any `*-skilld` directory.
 - `*` matches dotfiles and does not cross `/`; `**` does; `{a,b}` expands. A
   leading `/` or `./` anchors, a trailing `/` is ignored. The anchoring
   decision looks at the whole pattern, so a `/` inside a brace group anchors
@@ -399,10 +444,19 @@ Where the number comes from is `ollama.context`:
 ## Development
 
 ```sh
-bun test          # run the test suite
-bun run typecheck # tsc --noEmit
+pnpm test           # run the test suite (vitest)
+pnpm run typecheck  # tsc --noEmit
+pnpm run build      # bundle bin/ and index.ts into dist/ (only needed to publish)
 ```
 
+The sources run directly on Node's native type stripping, so there is no build
+step during development: `node bin/cco.js` picks up `dist/` when it exists and
+falls back to the TypeScript entry otherwise.
+
+What changed between versions is in [CHANGELOG.md](CHANGELOG.md), and at
+greater length on the
+[releases page](https://github.com/synmux/claude-commit/releases).
+
 ## Did you vibe this?
 
 I distinguish vibe coding and AI-assisted development by

package/bin/cco.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+/**
+ * Launcher for `cco` / `claude-commit`.
+ *
+ * The published package ships a bundled `dist/bin/cco.js` (Node refuses to
+ * strip types from files under `node_modules`); a development checkout runs
+ * the TypeScript entry directly through Node's native type stripping. Build
+ * output wins when present, so `pnpm run build` is only ever needed for
+ * publishing.
+ */
+import { existsSync } from "node:fs";
+
+const bundled = new URL("../dist/bin/cco.js", import.meta.url);
+const source = new URL("./cco.ts", import.meta.url);
+
+await import(existsSync(bundled) ? bundled.href : source.href);

package/bin/cco.ts

@@ -1,9 +1,8 @@
-#!/usr/bin/env bun
 /**
  * Executable entry point for `cco` / `claude-commit`.
  */
-import { run } from "../src/cli";
-import { color } from "../src/ui/colors";
+import { run } from "../src/cli.ts";
+import { color } from "../src/ui/colors.ts";
 
 run(process.argv.slice(2))
   .then((code) => {
@@ -11,8 +10,6 @@ run(process.argv.slice(2))
   })
   .catch((err) => {
     // Unexpected (non-ClaudeCommitError) failures: print a stack for debugging.
-    process.stderr.write(
-      `${color("31", "unexpected error:")} ${err?.stack ?? err}\n`,
-    );
+    process.stderr.write(`${color("31", "unexpected error:")} ${err?.stack ?? err}\n`);
     process.exitCode = 1;
   });