@davesheffer/hunch 0.21.0 → 0.21.1

package/dist/core/types.js

@@ -79,7 +79,7 @@ export const RetiredSignalSchema = z.object({
  *  existed in code, so its prose is turned into a testable set/regex. Carries its
  *  OWN provenance, separate from the decision's: an LLM may DRAFT a tripwire
  *  (advisory only); only a `human_confirmed` tripwire may BLOCK a commit — for every
- *  tier. One predictable rule (dec_a466655539). See docs/veto.md. */
+ *  tier. One predictable rule (dec_a466655539). */
 export const RejectedTripwireSchema = z.object({
     alternative: z.string().describe("the rejected approach's human text — printed verbatim in the receipt"),
     scope: z.array(z.string()).default([]).describe("glob(s) it applies to, e.g. vscode-extension/**"),

package/dist/mcp/server.js

@@ -288,9 +288,13 @@ export function buildServer(root) {
             else
                 store.json.put("decisions", rec);
             // Invalidate, don't delete: closing the superseded decision's valid-time window
-            // (+ a supersedes edge) preserves the why-it-changed trail. Supersede operates on
-            // the public store, so skip it for a private record (a v1 limitation, not a leak).
-            const superseded = decision.supersedes && !decision.private ? store.supersede(decision.supersedes, rec) : null;
+            // (+ a supersedes edge) preserves the why-it-changed trail. Route the close to the
+            // same store the new record landed in — a private decision supersedes within the
+            // private overlay; a public one in the committed store. A private write never
+            // mutates the public store.
+            const superseded = decision.supersedes
+                ? (decision.private ? store.supersedePrivate(decision.supersedes, rec) : store.supersede(decision.supersedes, rec))
+                : null;
             store.reindex();
             // Auto-flush the private repo when configured (hunch private --auto-commit), so a
             // record made via MCP between public commits is committed+pushed immediately.

package/dist/store/hunchStore.js

@@ -615,7 +615,22 @@ export class HunchStore {
      *  and write a `supersedes` edge. Returns the updated old decision, or null if it
      *  doesn't exist. All writes are atomic via json.put (con_902759b3dc). */
     supersede(oldId, by) {
-        const old = this.json.get("decisions", oldId);
+        return this.supersedeIn(this.json, oldId, by);
+    }
+    /** Private-overlay counterpart of `supersede`: close + link the old decision inside
+     *  the HUNCH_PRIVATE_DIR store, so a PRIVATE decision can supersede another private
+     *  one (the MCP record path is private→private). A private write never mutates the
+     *  committed public store. Returns null if no private store is configured or the old
+     *  record isn't in it. */
+    supersedePrivate(oldId, by) {
+        if (!this.privateJson)
+            return null;
+        this.privateJson.ensureDirs();
+        return this.supersedeIn(this.privateJson, oldId, by);
+    }
+    /** Shared body for supersede / supersedePrivate against a specific store. */
+    supersedeIn(json, oldId, by) {
+        const old = json.get("decisions", oldId);
         if (!old || old.id === by.id)
             return null;
         const closed = {
@@ -624,7 +639,7 @@ export class HunchStore {
             superseded_by: by.id,
             valid_to: old.valid_to ?? by.valid_from ?? null,
         };
-        this.json.put("decisions", closed);
+        json.put("decisions", closed);
         const edge = {
             id: edgeId(by.id, oldId, "supersedes"),
             from: by.id,
@@ -634,7 +649,7 @@ export class HunchStore {
             strength: 1,
             provenance: { source: "derived", confidence: 1, evidence: [by.id, oldId] },
         };
-        this.json.put("edges", edge);
+        json.put("edges", edge);
         return closed;
     }
     /** Regression Guard: detect a change RE-INTRODUCING something an in-force
@@ -690,7 +705,7 @@ export class HunchStore {
      *  never did. Precision-first ladder (dep > symbol > pattern); the semantic tier is
      *  advisory and lives elsewhere. A hit `blocks` only when isVetoBlocker passes (a
      *  human-confirmed tripwire on an in-force, non-stale decision — dec_a466655539).
-     *  Read-only; shared by buildCheckReport. See docs/veto.md. */
+     *  Read-only; shared by buildCheckReport. */
     vetoHits(an, files, staleDecisions = new Set()) {
         const addedDeps = new Set(an.addedDeps);
         const out = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@davesheffer/hunch",
-  "version": "0.21.0",
+  "version": "0.21.1",
   "license": "Apache-2.0",
   "author": "Dave Sheffer <dave.sheffer1@gmail.com>",
   "description": "Hunch — an Engineering Memory OS: a persistent, git-native reasoning graph over a codebase, exposed to Claude Code via MCP.",