hanoman 0.1.16 → 0.1.18

package/dist/server.js

@@ -5732,6 +5732,10 @@ var init_api = __esm({
       // SPEC-471 · ADR-0095 · tarik & triase issue GitHub (di belakang gate cookie, capability `support`).
       // hanoman TIDAK PERNAH menulis ke GitHub — tak ada path komentar/close di sini, dan itu disengaja.
       githubPull: (id) => `${API}/projects/${encodeURIComponent(id)}/github/pull`,
+      // SPEC-516 · ADR-0105 · changelog per project
+      changelog: (id) => `${API}/projects/${encodeURIComponent(id)}/changelog`,
+      changelogSources: (id) => `${API}/projects/${encodeURIComponent(id)}/changelog/sources`,
+      changelogItem: (id, cid) => `${API}/projects/${encodeURIComponent(id)}/changelog/${encodeURIComponent(cid)}`,
       githubIssues: (id) => `${API}/projects/${encodeURIComponent(id)}/github/issues`,
       githubIssuesAccept: `${API}/github-issues/accept`,
       githubIssueAccept: (id) => `${API}/github-issues/${encodeURIComponent(id)}/accept`,
@@ -7118,6 +7122,51 @@ var init_mcp = __esm({
   }
 });
 
+// ../shared/src/changelog.ts
+function dayString(d) {
+  const p = (n2) => String(n2).padStart(2, "0");
+  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}`;
+}
+function defaultRange(today) {
+  const from = new Date(today.getFullYear(), today.getMonth(), today.getDate() - (DEFAULT_RANGE_DAYS - 1));
+  return { from: dayString(from), to: dayString(today) };
+}
+var CHANGELOG_MODES, zChangelogMode, zDay, zChangelogRequest, zChangelogView, DEFAULT_RANGE_DAYS;
+var init_changelog = __esm({
+  "../shared/src/changelog.ts"() {
+    "use strict";
+    init_zod();
+    CHANGELOG_MODES = ["backlog", "commit", "version"];
+    zChangelogMode = external_exports.enum(CHANGELOG_MODES);
+    zDay = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "format tanggal harus YYYY-MM-DD");
+    zChangelogRequest = external_exports.discriminatedUnion("mode", [
+      external_exports.object({ mode: external_exports.literal("backlog"), from: zDay.optional(), to: zDay.optional() }),
+      external_exports.object({ mode: external_exports.literal("commit"), fromSha: external_exports.string().trim().min(4), toSha: external_exports.string().trim().min(4) }),
+      external_exports.object({ mode: external_exports.literal("version"), fromTag: external_exports.string().trim().min(1).optional(), toTag: external_exports.string().trim().min(1) })
+    ]).superRefine((v, ctx) => {
+      if (v.mode === "backlog" && v.from && v.to && v.from > v.to)
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["from"],
+          message: "rentang tanggal terbalik \u2014 `from` harus lebih awal atau sama dengan `to`"
+        });
+    });
+    zChangelogView = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      mode: zChangelogMode,
+      title: external_exports.string(),
+      params: external_exports.unknown(),
+      body: external_exports.string(),
+      generator: external_exports.enum(["agent", "fallback"]),
+      warning: external_exports.string().nullable(),
+      itemCount: external_exports.number().int(),
+      createdAt: external_exports.string()
+    });
+    DEFAULT_RANGE_DAYS = 30;
+  }
+});
+
 // ../shared/src/index.ts
 var init_src = __esm({
   "../shared/src/index.ts"() {
@@ -7142,6 +7191,7 @@ var init_src = __esm({
     init_webhook();
     init_mcp();
     init_auto_merge();
+    init_changelog();
   }
 });
 
@@ -9584,7 +9634,10 @@ var init_sync = __esm({
       // ini spec asal-hub mendapat createdAt lokal palsu di tiap client (kolom NOT NULL ber-default).
       // SPEC-447 · ADR-0093 · dependsOn ikut juga: tanpa itu client tak tahu urutannya dan akan
       // meluncurkan pekerjaan yang di hub terblokir. Bukan DATE_FIELDS — nilainya array string.
-      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "dependsOn", "createdAt", "startedAt", "updatedAt"],
+      // SPEC-516 · ADR-0105 · doneAt ikut menyeberang — cermin createdAt/startedAt. Tanpa ini spec
+      // asal-hub mendarat di tiap client dengan doneAt null tanpa satu pun error, dan changelog
+      // mode backlog di client itu selamanya kosong.
+      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "dependsOn", "createdAt", "startedAt", "doneAt", "updatedAt"],
       vps: ["name", "host", "port", "user", "health", "audit", "hardened", "lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["projectId", "specId", "oldStage", "newStage", "commitSha", "branch", "prUrl", "status", "deviceId", "author", "createdAt", "updatedAt"],
       // SPEC-268 · ADR-0066 · metadata tiket (lampiran biner tak disync). accessKeyHash wajib
@@ -9624,7 +9677,7 @@ var init_sync = __esm({
     };
     DATE_FIELDS = {
       project: ["updatedAt"],
-      spec: ["createdAt", "startedAt", "updatedAt"],
+      spec: ["createdAt", "startedAt", "doneAt", "updatedAt"],
       vps: ["lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["createdAt", "updatedAt"],
       ticket: ["createdAt", "updatedAt"],
@@ -9940,8 +9993,8 @@ async function telegramEngineContext() {
   };
 }
 function telegramReloadNeeded(before, after) {
-  const strip = ({ engine: _engine, ...rest }) => rest;
-  return JSON.stringify(strip(before)) !== JSON.stringify(strip(after));
+  const strip2 = ({ engine: _engine, ...rest }) => rest;
+  return JSON.stringify(strip2(before)) !== JSON.stringify(strip2(after));
 }
 var init_config3 = __esm({
   "src/services/telegram/config.ts"() {
@@ -11311,7 +11364,7 @@ var require_permessage_deflate = __commonJS({
     var Limiter = require_limiter();
     var { kStatusCode } = require_constants();
     var FastBuffer = Buffer[Symbol.species];
-    var TRAILER = Buffer.from([0, 0, 255, 255]);
+    var TRAILER2 = Buffer.from([0, 0, 255, 255]);
     var kPerMessageDeflate = Symbol("permessage-deflate");
     var kTotalLength = Symbol("total-length");
     var kCallback = Symbol("callback");
@@ -11586,7 +11639,7 @@ var require_permessage_deflate = __commonJS({
         }
         this._inflate[kCallback] = callback;
         this._inflate.write(data);
-        if (fin) this._inflate.write(TRAILER);
+        if (fin) this._inflate.write(TRAILER2);
         this._inflate.flush(() => {
           const err = this._inflate[kError];
           if (err) {
@@ -16697,7 +16750,7 @@ var require_Decoder = __commonJS({
   "../node_modules/.pnpm/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/lib/utils/Decoder.js"(exports, module) {
     "use strict";
     var RE_PLUS = /\+/g;
-    var HEX = [
+    var HEX2 = [
       0,
       0,
       0,
@@ -16838,7 +16891,7 @@ var require_Decoder = __commonJS({
       const len = str3.length;
       for (; i < len; ++i) {
         if (this.buffer !== void 0) {
-          if (!HEX[str3.charCodeAt(i)]) {
+          if (!HEX2[str3.charCodeAt(i)]) {
             res += "%" + this.buffer;
             this.buffer = void 0;
             --i;
@@ -17260,7 +17313,7 @@ var require_plugin = __commonJS({
 var require_generateId = __commonJS({
   "../node_modules/.pnpm/@fastify+multipart@8.3.1/node_modules/@fastify/multipart/lib/generateId.js"(exports, module) {
     "use strict";
-    var HEX = [
+    var HEX2 = [
       "00",
       "01",
       "02",
@@ -17520,13 +17573,13 @@ var require_generateId = __commonJS({
     ];
     var random = Math.random;
     function seed() {
-      return HEX[255 * random() | 0] + HEX[255 * random() | 0] + HEX[255 * random() | 0] + HEX[255 * random() | 0] + HEX[255 * random() | 0] + HEX[255 * random() | 0] + HEX[255 * random() | 0];
+      return HEX2[255 * random() | 0] + HEX2[255 * random() | 0] + HEX2[255 * random() | 0] + HEX2[255 * random() | 0] + HEX2[255 * random() | 0] + HEX2[255 * random() | 0] + HEX2[255 * random() | 0];
     }
     module.exports.generateId = function generateIdFn() {
       let num = 0;
       let str3 = seed();
       return function generateId() {
-        return num === 255 ? (str3 = seed()) + HEX[num = 0] : str3 + HEX[++num];
+        return num === 255 ? (str3 = seed()) + HEX2[num = 0] : str3 + HEX2[++num];
       };
     }();
   }
@@ -18359,7 +18412,7 @@ import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { dirname as dirname13 } from "node:path";
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync13 } from "node:fs";
 
 // src/web-dir.ts
 import { resolve } from "node:path";
@@ -21817,6 +21870,8 @@ async function recordDrift(vpsId, vpsName, drift, snapshotId) {
   });
 }
 async function recordCompletion(specId, title, projectId) {
+  await prisma.spec.updateMany({ where: { id: specId, doneAt: null }, data: { doneAt: /* @__PURE__ */ new Date() } }).catch(() => {
+  });
   const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
   await prisma.notification.create({
     data: { type: "done", key: `done:${specId}`, specId, sessionId: sessionId2, title, projectId }
@@ -27763,6 +27818,323 @@ async function lead_default(app2) {
   });
 }
 
+// src/routes/changelog.ts
+init_src();
+init_db();
+
+// src/services/changelog/collect.ts
+init_db();
+import { execFile as execFile10 } from "node:child_process";
+import { promisify as promisify9 } from "node:util";
+import { existsSync as existsSync12 } from "node:fs";
+
+// src/services/changelog/scrub.ts
+var MERGE = /^merge\s+(branch|pull request|remote-tracking branch|tag)\b/i;
+var CONVENTIONAL = /^(feat|fix|chore|docs|refactor|test|perf|build|ci|style|revert)(\([^)]*\))?!?:\s*/i;
+var PATH_LIKE = /(?:[\w.@-]+\/)+[\w.-]+\.\w{1,6}/g;
+var HEX = /\b(?=[0-9a-f]{7,40}\b)(?=[0-9a-f]*\d)(?=[0-9a-f]*[a-f])[0-9a-f]{7,40}\b/gi;
+var INTERNAL_REF = /\b(?:SPEC|ADR|PR|ISSUE)[-\s]?\d+\b/gi;
+var CAMEL = /\b[a-z]{2,}(?:[A-Z][a-z]{2,})+\b/g;
+var SNAKE = /\b[a-z][a-z0-9]*(?:_[a-z0-9]+)+\b/gi;
+var CALL = /\b[A-Za-z_][\w.]*\(\s*\)/g;
+var INLINE_CODE = /`[^`\n]*`/g;
+var FENCE = /^```[\s\S]*?^```$/gm;
+var TRAILER = /^[A-Za-z-]+:\s.*$/gm;
+var tidy = (s2) => s2.replace(/\(\s*\)/g, " ").replace(/[ \t]{2,}/g, " ").replace(/\s+([,.;:!?])/g, "$1").replace(/^[\s:;,·—–-]+/, "").replace(/[\s:;,·—–-]+$/, "").trim();
+function strip(s2) {
+  return s2.replace(INLINE_CODE, " ").replace(PATH_LIKE, " ").replace(CALL, " ").replace(HEX, " ").replace(INTERNAL_REF, " ").replace(CAMEL, " ").replace(SNAKE, " ");
+}
+function scrubSubject(s2) {
+  const one = (s2 ?? "").replace(/\s+/g, " ").trim();
+  if (!one || MERGE.test(one)) return "";
+  return tidy(strip(one.replace(CONVENTIONAL, "")));
+}
+function scrubBody(s2) {
+  const first = (s2 ?? "").replace(TRAILER, "").split(/\n\s*\n/)[0] ?? "";
+  return tidy(strip(first.replace(/\s+/g, " ").trim()));
+}
+function scrubOutput(md) {
+  const noFence = (md ?? "").replace(FENCE, "");
+  const lines2 = noFence.split("\n").map((line) => {
+    const m = /^(\s*(?:[-*+]|\d+\.)\s+|\s*#{1,6}\s+|\s*>\s*)?(.*)$/.exec(line);
+    const lead = m?.[1] ?? "";
+    const rest = m?.[2] ?? line;
+    const cleaned = tidy(strip(rest));
+    return cleaned ? `${lead}${cleaned}` : "";
+  });
+  return lines2.join("\n").replace(/\n{3,}/g, "\n\n").trim() + "\n";
+}
+
+// src/services/changelog/collect.ts
+var toItem = (label, detail) => {
+  const l = scrubSubject(label);
+  return l ? { label: l, detail: scrubBody(detail) } : null;
+};
+async function collectBacklog(projectId, from, to) {
+  const f = dayStart(from), t = dayEnd(to);
+  const rows = await prisma.spec.findMany({
+    where: { projectId, stage: "done" },
+    select: { title: true, objective: true, doneAt: true },
+    orderBy: [{ doneAt: "asc" }, { id: "asc" }]
+  });
+  const stampless = rows.filter((r) => r.doneAt === null).length;
+  const hit = rows.filter((r) => inDayRange(r.doneAt, f, t));
+  const items = hit.map((r) => toItem(r.title, r.objective ?? "")).filter((x) => x !== null);
+  if (items.length === 0)
+    return { ok: false, reason: `tak ada backlog yang selesai antara ${from} dan ${to}` };
+  const notes = [];
+  if (stampless > 0)
+    notes.push(`${stampless} item selesai tanpa stempel waktu (selesai sebelum stempel ini ada) dan tak ikut dihitung.`);
+  return { ok: true, input: { mode: "backlog", title: `${from} \u2013 ${to}`, items, notes } };
+}
+var exec8 = promisify9(execFile10);
+var GIT7 = { maxBuffer: 1 << 24, encoding: "utf8" };
+var US2 = "";
+var RS = "";
+var NO_REPO = "project ini belum ditautkan ke repo di mesin ini";
+var NO_TAG = "repo project ini belum punya tag rilis";
+var usable = (repoDir) => !!repoDir && existsSync12(repoDir);
+async function listTags(repoDir) {
+  if (!usable(repoDir)) return { tags: [], head: null, reason: NO_REPO };
+  try {
+    const { stdout } = await exec8("git", ["tag", "--list", "--sort=-creatordate"], { cwd: repoDir, ...GIT7 });
+    const tags = stdout.split("\n").map((s2) => s2.trim()).filter(Boolean);
+    const head = await exec8("git", ["rev-parse", "--short", "HEAD"], { cwd: repoDir, ...GIT7 }).then((r) => r.stdout.trim()).catch(() => null);
+    return { tags, head, reason: tags.length ? null : NO_TAG };
+  } catch {
+    return { tags: [], head: null, reason: NO_TAG };
+  }
+}
+async function previousTag(repoDir, tag2) {
+  return exec8("git", ["describe", "--tags", "--abbrev=0", "--end-of-options", `${tag2}^`], { cwd: repoDir, ...GIT7 }).then((r) => r.stdout.trim() || null).catch(() => null);
+}
+async function revExists(repoDir, rev) {
+  return exec8("git", ["rev-parse", "--verify", "--quiet", "--end-of-options", `${rev}^{commit}`], { cwd: repoDir, ...GIT7 }).then(() => true).catch(() => false);
+}
+async function logRange(repoDir, range) {
+  const { stdout } = await exec8(
+    "git",
+    ["log", "--no-merges", `--pretty=format:%s${US2}%b${RS}`, ...range],
+    { cwd: repoDir, ...GIT7 }
+  );
+  return stdout.split(RS).map((rec) => rec.replace(/^\n+/, "")).filter((rec) => rec.trim()).map((rec) => {
+    const [subject, body] = rec.split(US2);
+    return toItem(subject ?? "", body ?? "");
+  }).filter((x) => x !== null);
+}
+async function collectCommits(repoDir, fromSha, toSha) {
+  if (!usable(repoDir)) return { ok: false, reason: NO_REPO };
+  for (const rev of [fromSha, toSha])
+    if (!await revExists(repoDir, rev)) return { ok: false, reason: `revisi "${rev}" tak dikenal di repo project` };
+  try {
+    const items = await logRange(repoDir, ["--end-of-options", `${fromSha}..${toSha}`]);
+    if (!items.length) return { ok: false, reason: `tak ada perubahan antara "${fromSha}" dan "${toSha}"` };
+    const short = (s2) => s2.slice(0, 7);
+    return { ok: true, input: { mode: "commit", title: `${short(fromSha)} \u2192 ${short(toSha)}`, items, notes: [] } };
+  } catch (e) {
+    return { ok: false, reason: `git menolak rentang itu: ${e.message.split("\n")[0]}` };
+  }
+}
+async function collectVersions(repoDir, fromTag, toTag) {
+  const { tags, reason } = await listTags(repoDir);
+  if (reason) return { ok: false, reason };
+  if (!usable(repoDir)) return { ok: false, reason: NO_REPO };
+  if (!tags.includes(toTag)) return { ok: false, reason: `tag "${toTag}" tak ada di repo project` };
+  if (fromTag && !tags.includes(fromTag)) return { ok: false, reason: `tag "${fromTag}" tak ada di repo project` };
+  const prev = fromTag ?? await previousTag(repoDir, toTag);
+  try {
+    const items = await logRange(repoDir, ["--end-of-options", prev ? `${prev}..${toTag}` : toTag]);
+    if (!items.length) return { ok: false, reason: `tak ada perubahan yang masuk ke "${toTag}"` };
+    const title = fromTag ? `${fromTag} \u2192 ${toTag}` : toTag;
+    return { ok: true, input: { mode: "version", title, items, notes: [] } };
+  } catch (e) {
+    return { ok: false, reason: `git menolak rentang itu: ${e.message.split("\n")[0]}` };
+  }
+}
+
+// src/services/changelog/generate.ts
+init_src();
+init_db();
+init_settings2();
+
+// src/services/changelog/render.ts
+var MODE_LABEL = {
+  backlog: "backlog yang selesai dalam rentang tanggal",
+  commit: "riwayat perubahan repo dalam rentang yang dipilih",
+  version: "perubahan yang masuk ke versi/rilis itu"
+};
+var DETAIL_MAX = 240;
+var clip2 = (s2) => s2.length > DETAIL_MAX ? `${s2.slice(0, DETAIL_MAX - 1).trimEnd()}\u2026` : s2;
+function fallbackMarkdown(input) {
+  const lines2 = [`# Changelog \u2014 ${input.title}`, ""];
+  if (input.items.length === 0) {
+    lines2.push("_Tak ada perubahan yang bisa diringkas untuk rentang ini._", "");
+  } else {
+    lines2.push(`Ringkasan ${input.items.length} perubahan untuk pemakai.`, "");
+    for (const it of input.items) {
+      const d = clip2(it.detail.trim());
+      lines2.push(d ? `- **${it.label}** \u2014 ${d}` : `- **${it.label}**`);
+    }
+    lines2.push("");
+  }
+  if (input.notes.length) {
+    lines2.push("---", "");
+    for (const n2 of input.notes) lines2.push(`> ${n2}`);
+    lines2.push("");
+  }
+  return lines2.join("\n");
+}
+function changelogPrompt(input, budgetMs) {
+  const budget = Math.max(1, Math.round(budgetMs / 1e3));
+  const items = input.items.map((it, i) => `${i + 1}. ${it.label}${it.detail ? ` \u2014 ${it.detail}` : ""}`).join("\n");
+  return [
+    "Kamu menulis changelog untuk PEMAKAI sebuah produk, bukan untuk developer.",
+    "",
+    `Anggaran waktumu ${budget} detik. Jawab langsung \u2014 jangan membaca berkas, jangan memakai tool,`,
+    "jangan menyelidiki apa pun. Seluruh bahan sudah ada di bawah.",
+    "",
+    `Judul rentang: ${input.title}`,
+    `Bahan berasal dari ${MODE_LABEL[input.mode]}.`,
+    "",
+    "Bahan:",
+    items || "(tidak ada)",
+    "",
+    "Aturan:",
+    "- Bahasa Indonesia, gaya editorial: tenang, ringkas, kalimat penuh.",
+    "- Tulis apa yang berubah BAGI PEMAKAI, bukan apa yang disentuh di dalam kode.",
+    "- DILARANG menyebut nama berkas, nama fungsi, nama variabel, hash commit, nomor SPEC/ADR,",
+    "  nama branch, atau istilah internal apa pun.",
+    "- Gabungkan bahan yang bicara hal yang sama jadi satu butir. 3\u201310 butir; kurangi bila memang sedikit.",
+    "- Jangan mengarang perubahan yang tak ada di bahan.",
+    "",
+    "Bentuk keluaran \u2014 HANYA markdown ini, tanpa kalimat pembuka atau penutup di luarnya,",
+    "tanpa blok kode:",
+    "",
+    `# Changelog \u2014 ${input.title}`,
+    "",
+    "<satu paragraf pembuka, maksimal dua kalimat>",
+    "",
+    "- **<judul singkat perubahan>** \u2014 <satu kalimat manfaatnya bagi pemakai>"
+  ].join("\n");
+}
+
+// src/services/changelog/generate.ts
+var CHANGELOG_TIMEOUT_MS = 18e4;
+async function collect(projectId, req) {
+  if (req.mode === "backlog") {
+    const d = defaultRange(/* @__PURE__ */ new Date());
+    return collectBacklog(projectId, req.from ?? d.from, req.to ?? d.to);
+  }
+  const repoDir = await resolveRepoDir(projectId);
+  return req.mode === "commit" ? collectCommits(repoDir, req.fromSha, req.toSha) : collectVersions(repoDir, req.fromTag, req.toTag);
+}
+async function generateChangelog(projectId, req, deps = {}) {
+  const got = await collect(projectId, req);
+  if (!got.ok) return got;
+  const input = got.input;
+  const prompt = changelogPrompt(input, CHANGELOG_TIMEOUT_MS);
+  const { agent, model, effort } = await sessionAgentDefaults();
+  const run2 = deps.think ?? think;
+  let body = "";
+  let generator = "agent";
+  const warnings = [...input.notes];
+  try {
+    const raw = await run2(prompt, { agent, model, effort, timeoutMs: CHANGELOG_TIMEOUT_MS });
+    body = scrubOutput(raw ?? "");
+    if (!body.trim()) throw new Error("agen tak memulangkan teks apa pun");
+  } catch (e) {
+    generator = "fallback";
+    body = fallbackMarkdown(input);
+    warnings.push(`Narasi otomatis tak tersedia \u2014 ${e.message}. Yang tampil adalah draf ringkas.`);
+  }
+  const row = await prisma.changelog.create({
+    data: {
+      projectId,
+      mode: input.mode,
+      title: input.title,
+      params: req,
+      body,
+      generator,
+      itemCount: input.items.length,
+      warning: warnings.length ? warnings.join(" ") : null
+    }
+  });
+  return { ok: true, row };
+}
+
+// src/routes/changelog.ts
+var view6 = (c) => ({
+  id: c.id,
+  projectId: c.projectId,
+  mode: c.mode,
+  title: c.title,
+  params: c.params,
+  body: c.body,
+  generator: c.generator,
+  warning: c.warning,
+  itemCount: c.itemCount,
+  createdAt: c.createdAt.toISOString()
+});
+async function changelog_default(app2) {
+  app2.get("/projects/:id/changelog/sources", async (req, reply) => {
+    const { id } = req.params;
+    if (!await prisma.project.findUnique({ where: { id } })) return reply.code(404).send({ error: "not found" });
+    const { tags, head, reason } = await listTags(await resolveRepoDir(id));
+    const done = await prisma.spec.findMany({
+      where: { projectId: id, stage: "done", doneAt: { not: null } },
+      select: { doneAt: true },
+      orderBy: { doneAt: "asc" }
+    });
+    return {
+      hasRepo: reason === null || tags.length > 0,
+      tags,
+      head,
+      reason,
+      backlog: {
+        doneCount: done.length,
+        earliest: done[0]?.doneAt?.toISOString() ?? null,
+        latest: done[done.length - 1]?.doneAt?.toISOString() ?? null
+      },
+      defaultRange: defaultRange(/* @__PURE__ */ new Date())
+    };
+  });
+  app2.get("/projects/:id/changelog", async (req, reply) => {
+    const { id } = req.params;
+    if (!await prisma.project.findUnique({ where: { id } })) return reply.code(404).send({ error: "not found" });
+    const { page, limit } = req.query;
+    const rows = await prisma.changelog.findMany({ where: { projectId: id }, orderBy: { createdAt: "desc" } });
+    return paginate(rows.map(view6), page, limit);
+  });
+  app2.get("/projects/:id/changelog/:cid", async (req, reply) => {
+    const { id, cid } = req.params;
+    const row = await prisma.changelog.findFirst({ where: { id: cid, projectId: id } });
+    if (!row) return reply.code(404).send({ error: "not found" });
+    const fmt = downloadFormat(req.query);
+    if (fmt) return sendDocDownload(reply, fmt, {
+      content: row.body,
+      name: `${row.title}.md`,
+      prefix: `${id}-changelog`,
+      eyebrow: `hanoman \xB7 ${id} \xB7 changelog`,
+      path: row.title
+    });
+    return view6(row);
+  });
+  app2.post("/projects/:id/changelog", async (req, reply) => {
+    const { id } = req.params;
+    if (!await prisma.project.findUnique({ where: { id } })) return reply.code(404).send({ error: "not found" });
+    const parsed = zChangelogRequest.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const r = await generateChangelog(id, parsed.data);
+    if (!r.ok) return reply.code(422).send({ error: r.reason });
+    return reply.code(201).send(view6(r.row));
+  });
+  app2.delete("/projects/:id/changelog/:cid", async (req, reply) => {
+    const { id, cid } = req.params;
+    const { count } = await prisma.changelog.deleteMany({ where: { id: cid, projectId: id } });
+    return count ? reply.code(204).send() : reply.code(404).send({ error: "not found" });
+  });
+}
+
 // src/routes/custom-agents.ts
 init_src();
 init_db();
@@ -27893,7 +28265,7 @@ async function installCustomAgents() {
 
 // src/routes/custom-agents.ts
 var rowsOf = async () => await prisma.customAgent.findMany();
-var view6 = (r, projectId) => ({
+var view7 = (r, projectId) => ({
   id: r.id,
   projectId: r.projectId,
   name: r.name,
@@ -27938,7 +28310,7 @@ async function custom_agents_default(app2) {
     const byName = /* @__PURE__ */ new Map();
     for (const r of rows) if (r.projectId === null) byName.set(r.name, r);
     for (const r of rows) if (r.projectId !== null) byName.set(r.name, r);
-    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view6(r, projectId));
+    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view7(r, projectId));
   });
   app2.post("/custom-agents", async (req, reply) => {
     const parsed = zCreateCustomAgent.safeParse(req.body);
@@ -27985,7 +28357,7 @@ async function custom_agents_default(app2) {
     } });
     await loadCustomAgents();
     await notifySynced("customAgent", id);
-    return reply.code(201).send(view6(row));
+    return reply.code(201).send(view7(row));
   });
   app2.patch("/custom-agents/:id", async (req, reply) => {
     const { id } = req.params;
@@ -28032,7 +28404,7 @@ async function custom_agents_default(app2) {
     } });
     await loadCustomAgents();
     await notifySynced("customAgent", id);
-    return view6(row);
+    return view7(row);
   });
   app2.delete("/custom-agents/:id", async (req, reply) => {
     const { id } = req.params;
@@ -28105,7 +28477,7 @@ async function resolveGithubRepo(projectId) {
 
 // src/services/github-fetch.ts
 init_config2();
-import { execFile as execFile10 } from "node:child_process";
+import { execFile as execFile11 } from "node:child_process";
 var labelNames = (l) => (l ?? []).map((x) => typeof x === "string" ? x : x.name ?? "").filter(Boolean);
 var norm2 = (s2) => s2.toLowerCase() === "closed" ? "closed" : "open";
 function issueFromGh(raw) {
@@ -28146,7 +28518,7 @@ function issuesFromRest(raw) {
 var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
 var API2 = "https://api.github.com";
 var defaultRunGh = (args, env) => new Promise((resolve15, reject2) => {
-  execFile10(
+  execFile11(
     args[0],
     args.slice(1),
     { env, maxBuffer: 1 << 26, encoding: "utf8", timeout: 6e4 },
@@ -28373,7 +28745,7 @@ var STATUS = {
   unauthorized: 401,
   other: 502
 };
-var view7 = (i) => ({
+var view8 = (i) => ({
   id: i.id,
   projectId: i.projectId,
   repoSlug: i.repoSlug,
@@ -28408,7 +28780,7 @@ async function githubIssues(app2) {
       where: { projectId: id, ...status ? { status } : {} },
       orderBy: [{ number: "desc" }]
     });
-    return reply.send({ items: items.map(view7) });
+    return reply.send({ items: items.map(view8) });
   });
   app2.post("/github-issues/accept", async (req, reply) => {
     const parsed = zAcceptMany.safeParse(req.body ?? {});
@@ -29120,8 +29492,8 @@ init_db();
 // src/services/auth.ts
 init_db();
 import { randomBytes as randomBytes7, scrypt as scryptCb, timingSafeEqual as timingSafeEqual2, createHash as createHash7 } from "node:crypto";
-import { promisify as promisify9 } from "node:util";
-var scrypt = promisify9(scryptCb);
+import { promisify as promisify10 } from "node:util";
+var scrypt = promisify10(scryptCb);
 var COOKIE_NAME = "hn_session";
 var SESSION_TTL_MS = 7 * 24 * 3600 * 1e3;
 async function hashPassword(pw) {
@@ -29191,7 +29563,7 @@ function cookieOpts() {
 }
 
 // src/routes/auth.ts
-var view8 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
+var view9 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
 async function issue(reply, userId) {
   const token = await createSession2(userId);
   reply.setCookie(COOKIE_NAME, token, cookieOpts());
@@ -29209,7 +29581,7 @@ async function auth_default(app2) {
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
     await issue(reply, user.id);
-    return { user: view8(user) };
+    return { user: view9(user) };
   });
   app2.post("/auth/login", async (req, reply) => {
     if (loginThrottle(req.ip).blocked) return reply.code(429).send({ error: "too many attempts" });
@@ -29222,7 +29594,7 @@ async function auth_default(app2) {
     }
     clearLoginFails(req.ip);
     await issue(reply, user.id);
-    return { user: view8(user) };
+    return { user: view9(user) };
   });
   app2.post("/auth/logout", async (req, reply) => {
     const token = req.cookies?.[COOKIE_NAME];
@@ -29230,7 +29602,7 @@ async function auth_default(app2) {
     reply.clearCookie(COOKIE_NAME, { path: "/" });
     return reply.code(204).send();
   });
-  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view8));
+  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view9));
   app2.post("/auth/users", async (req, reply) => {
     const p = zSignup.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
@@ -29239,7 +29611,7 @@ async function auth_default(app2) {
     const user = await prisma.user.create({
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
-    return view8(user);
+    return view9(user);
   });
   app2.delete("/auth/users/:id", async (req, reply) => {
     if (await prisma.user.count() <= 1) return reply.code(400).send({ error: "tak bisa hapus user terakhir" });
@@ -29259,7 +29631,7 @@ async function auth_default(app2) {
     });
     await deleteUserSessions(user.id);
     await issue(reply, user.id);
-    return { user: view8(user) };
+    return { user: view9(user) };
   });
 }
 
@@ -29272,15 +29644,15 @@ async function agent_tokens_default(app2) {
   app2.post("/agent-tokens", async (req, reply) => {
     const p = zAgentTokenCreate.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
-    const { view: view9, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
-    return reply.code(201).send({ ...view9, token });
+    const { view: view10, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
+    return reply.code(201).send({ ...view10, token });
   });
   app2.patch("/agent-tokens/:id", async (req, reply) => {
     const p = zAgentTokenPatch.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
     const { id } = req.params;
-    const view9 = await patchAgentToken(id, p.data);
-    return view9 ? reply.send(view9) : reply.code(404).send({ error: "not found" });
+    const view10 = await patchAgentToken(id, p.data);
+    return view10 ? reply.send(view10) : reply.code(404).send({ error: "not found" });
   });
   app2.delete("/agent-tokens/:id", async (req, reply) => {
     const { id } = req.params;
@@ -29350,7 +29722,7 @@ function capabilityForRoute(method, path) {
   }
   if (top === "projects") {
     const sub = seg[2];
-    if (sub === "docs" || sub === "prds") return rw("docs");
+    if (sub === "docs" || sub === "prds" || sub === "changelog") return rw("docs");
     if (sub === "github") return rw("support");
     if (sub && IDE_SUBS.has(sub)) return rw("ide");
     return rw("projects");
@@ -29495,7 +29867,7 @@ var PUBLIC = /* @__PURE__ */ new Set([
   "GET /api/agent-integration.md"
 ]);
 function buildApp({ requireAuth = true, agentDocFile } = {}) {
-  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync12);
+  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync13);
   const app2 = Fastify({ logger: false, trustProxy: true });
   app2.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
     if (!body) return done(null, void 0);
@@ -29578,9 +29950,10 @@ function buildApp({ requireAuth = true, agentDocFile } = {}) {
     await api.register(githubIssues);
     await api.register(telegramRoutes);
     await api.register(webhooks_default);
+    await api.register(changelog_default);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
-    const dist = pickWebDir(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync12);
+    const dist = pickWebDir(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync13);
     if (dist) {
       app2.register(fastifyStatic, { root: dist });
       app2.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : reply.sendFile("index.html"));
@@ -30116,16 +30489,16 @@ function startWebhookEngine() {
 // src/services/auto-merge.ts
 init_src();
 init_db();
-import { execFile as execFile11 } from "node:child_process";
-import { promisify as promisify10 } from "node:util";
+import { execFile as execFile12 } from "node:child_process";
+import { promisify as promisify11 } from "node:util";
 var AUTO_MERGE_WINDOW_MS = 24 * 60 * 60 * 1e3;
 var AUTO_MERGE_GRACE_MS = 15 * 60 * 1e3;
 var TICK_MS4 = 6e4;
-var exec8 = promisify10(execFile11);
-var GIT7 = { timeout: 3e4, maxBuffer: 1 << 24, encoding: "utf8" };
+var exec9 = promisify11(execFile12);
+var GIT8 = { timeout: 3e4, maxBuffer: 1 << 24, encoding: "utf8" };
 var gitOut = async (cwd, args) => {
   try {
-    return (await exec8("git", args, { cwd, ...GIT7 })).stdout.trim();
+    return (await exec9("git", args, { cwd, ...GIT8 })).stdout.trim();
   } catch {
     return null;
   }