Add product changelog commands

[ashtom]

https://entire.io/gh/entireio/cli/trails/1319

This draft pull request was opened by Entire after CI was requested for the linked trail. Feel free to edit the title or body — the link above is what keeps the trail and PR connected.

---

Note

Low Risk
Read-only outbound HTTP to a fixed origin with URL validation and no auth or local repo state; main operational risk is search fetching many posts when there are no matches.

Overview
Adds a public, repo-independent entire changelog command (plus changelog search) that fetches Entire product updates from entire.io over HTTPS—no login, git repo, or .entire setup required.

The CLI wires it like other standalone utilities: exempt from the .entire directory guard, skips checkpoint-policy warnings and post-run telemetry hooks, and appears under Additional Commands in help. Output supports --limit and --json; human mode optionally renders Markdown via mdrender. A new changelog package implements index/post parsing (goldmark + YAML frontmatter), bounded concurrent post fetches, and strict same-origin URL/redirect allowlisting with size and content-type checks.

Agent-help classifies changelog and changelog search as read-only but unlisted. Docs land in docs/changelog-command.md and CLAUDE.md; tests cover the client, command flags, and repo-independent execution.

^{Reviewed by Cursor Bugbot for commit 336a12d. Configure here.}

[Copilot]

🔵 Needs a closer look

The network-fetching command and multiple CLI integrations warrant final human review.

Pull request overview

Adds a repository-independent entire changelog command with search, JSON output, Markdown rendering, and secure HTTP fetching.

Changes:

• Adds changelog parsing, filtering, fetching, and concurrency controls.
• Integrates CLI lifecycle exemptions and agent-help classification.
• Adds documentation, fixtures, tests, and the Goldmark dependency.

File summaries

File	Description
go.mod	Adds Goldmark as a direct dependency.
docs/changelog-command.md	Documents changelog usage and behavior.
cmd/entire/cli/root.go	Registers and isolates the command.
cmd/entire/cli/root_test.go	Updates command grouping tests.
cmd/entire/cli/entiredir_guard_test.go	Covers repository-independent execution.
cmd/entire/cli/checkpoint_policy_warning.go	Skips checkpoint policy warnings.
cmd/entire/cli/changelog/testdata/post.md	Provides a post parser fixture.
cmd/entire/cli/changelog/testdata/index.md	Provides an index parser fixture.
cmd/entire/cli/changelog/parse.go	Parses indexes and Markdown frontmatter.
cmd/entire/cli/changelog/client.go	Implements secure HTTP retrieval and search.
cmd/entire/cli/changelog/client_test.go	Tests client behavior and HTTP safety.
cmd/entire/cli/changelog.go	Implements CLI commands, flags, and output.
cmd/entire/cli/changelog_test.go	Tests command integration and independence.
cmd/entire/cli/agent_help_cmd.go	Classifies changelog commands.
CLAUDE.md	Documents the new command surface.

Review details

• Files reviewed: 15/15 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.