@davesheffer/hunch 0.17.0 → 0.17.1

package/dist/cli/index.js

@@ -64,6 +64,7 @@ program
     .option("--no-providers", "skip scaffolding non-Claude assistant configs (Cursor / VS Code / Codex / AGENTS.md)")
     .option("--no-agent-hooks", "skip installing the Claude Code agent hooks (.claude/settings.json)")
     .option("--firmness <level>", "agent-hook firmness: off | advisory | firm | strict")
+    .option("--private-sync", "post-commit synthesis writes captured decisions into the private overlay (HUNCH_PRIVATE_DIR), never the public repo")
     .action((opts) => {
     // Validate --firmness up front, before any side effects (indexing, git hooks,
     // .mcp.json) or opening the store — a bad value must not leave a half-init.
@@ -92,8 +93,8 @@ program
             console.log(`  ⚠ ${res.skipped} file(s) could not be parsed (skipped)`);
     }
     if (isGitRepo(root)) {
-        const h = installPostCommitHook(root, inv.shell);
-        console.log(`  ✓ post-commit hook ${h.action} (learning loop)`);
+        const h = installPostCommitHook(root, inv.shell, { private: opts.privateSync });
+        console.log(`  ✓ post-commit hook ${h.action} (learning loop)${opts.privateSync ? " — syncs to the private overlay" : ""}`);
         const m = installMergeDriver(root, inv.shell);
         console.log(`  ✓ team merge driver ${m.action}`);
         // Auto-install the pre-commit guard by default (advisory: flags invariants
@@ -223,12 +224,17 @@ program
     .option("--from-hook", "invoked by the git hook")
     .option("--quiet", "minimal output")
     .option("--force", "re-synthesize even if a decision already exists for the commit")
+    .option("--private", "write the synthesized decision into the private overlay (HUNCH_PRIVATE_DIR), not the public repo — for a repo whose memory is kept private")
     .action(async (sha, opts) => {
     const { store, root } = storeFor();
     if (!isGitRepo(root))
         return opts.quiet ? undefined : fail("sync needs a git repo");
+    if (opts.private && !store.hasPrivate) {
+        store.close();
+        return opts.quiet ? undefined : fail("--private needs HUNCH_PRIVATE_DIR set to a private store");
+    }
     store.json.ensureDirs();
-    const r = await syncCommit(store, root, sha ?? headSha(root), { force: opts.force });
+    const r = await syncCommit(store, root, sha ?? headSha(root), { force: opts.force, private: opts.private });
     if (r.status === "written") {
         store.reindex();
         // Don't rewrite CLAUDE.md from the hook — it would dirty the working tree

package/dist/integrations/hooks.js

@@ -9,17 +9,21 @@ import { join, isAbsolute } from "node:path";
 import { hooksDir } from "../extractors/git.js";
 const MARK = "# >>> hunch post-commit >>>";
 const ENDMARK = "# <<< hunch post-commit <<<";
-function block(invocation) {
+function block(invocation, opts = {}) {
+    // --private routes the auto-synthesized decision into the HUNCH_PRIVATE_DIR overlay
+    // instead of the public repo. The hook script is local (.git/hooks/), never committed,
+    // so a repo whose memory is kept private leaves no trace of this in the public tree.
+    const priv = opts.private ? " --private" : "";
     return [
         MARK,
         'if [ -z "$HUNCH_SYNC" ]; then',
         "  export HUNCH_SYNC=1",
-        `  ( ${invocation} sync --from-hook --quiet >/dev/null 2>&1 || true ) &`,
+        `  ( ${invocation} sync --from-hook --quiet${priv} >/dev/null 2>&1 || true ) &`,
         "fi",
         ENDMARK,
     ].join("\n");
 }
-export function installPostCommitHook(root, invocation) {
+export function installPostCommitHook(root, invocation, opts = {}) {
     const dir = hooksDir(root);
     // `git rev-parse --git-path hooks` returns a path relative to the repo in a
     // normal checkout, but an ABSOLUTE one inside a linked worktree (the shared
@@ -28,7 +32,7 @@ export function installPostCommitHook(root, invocation) {
     const abs = isAbsolute(dir) ? dir : join(root, dir);
     mkdirSync(abs, { recursive: true });
     const hookPath = join(abs, "post-commit");
-    const blk = block(invocation);
+    const blk = block(invocation, opts);
     if (!existsSync(hookPath)) {
         writeFileSync(hookPath, `#!/bin/sh\n${blk}\n`);
         chmodSync(hookPath, 0o755);

package/dist/synthesis/synthesize.js

@@ -119,7 +119,12 @@ export async function syncCommit(store, root, sha, opts = {}) {
         },
         date: meta.date, // the commit date
     };
-    store.json.put("decisions", decision);
+    // Route to the PRIVATE overlay when asked (post-commit sync in a repo whose memory
+    // is kept private) — keeps auto-captured decisions out of the public repo entirely.
+    if (opts.private)
+        store.putPrivate("decisions", decision);
+    else
+        store.json.put("decisions", decision);
     return { status: "written", decision, provider: provider.name };
 }
 /** Capture a Bug from a test failure. Suspects are ranked churn×recency×fan-in. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@davesheffer/hunch",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "license": "Apache-2.0",
   "author": "Dave Sheffer <dave.sheffer1@gmail.com>",
   "description": "Hunch — an Engineering Memory OS: a persistent, git-native reasoning graph over a codebase, exposed to Claude Code via MCP.",