@davesheffer/hunch 0.28.0 → 0.30.0

package/dist/cli/index.js

@@ -29,7 +29,8 @@ import { syncCommit, recordFailure, captureTestRun } from "../synthesis/synthesi
 import { parseTestReport } from "../extractors/testreport.js";
 import { selectProvider } from "../synthesis/provider.js";
 import { isGitRepo, headSha, logSince, lastChangeDate, stagedFiles, commitFiles, asOfDate, stagedDiff, commitDiff, rangeFiles, rangeDiff, rangeSubjects, revExists, commitAndPushHunch, gitUntrackCached } from "../extractors/git.js";
-import { runbookId } from "../core/ids.js";
+import { runbookId, decisionId } from "../core/ids.js";
+import { extractInlineIntent } from "../extractors/comments.js";
 import { renderText, renderMarkdown, reportFailsStrict } from "../core/checkreport.js";
 import { partitionReview, READY_MIN_GROUNDED } from "../core/reviewqueue.js";
 import { installPostCommitHook, installPreCommitHook } from "../integrations/hooks.js";
@@ -46,6 +47,7 @@ import { blockingInScope, vetoInScope, proposedEditLines } from "../core/hookpol
 import { loadGoldenSet, evaluateGraphLift } from "../eval/harness.js";
 import { computeDrift } from "../core/drift.js";
 import { compareCandidates } from "../core/compare.js";
+import { checkConformance } from "../core/conformance.js";
 import { draftTripwires, knownRepoDeps } from "../synthesis/tripwires.js";
 import { constraintId } from "../core/ids.js";
 import { readManifest, writeManifest, SCHEMA_VERSION } from "../core/migrate.js";
@@ -536,6 +538,98 @@ program
     console.log(dim("  advisory, deterministic draft — refine the steps/gotchas; surfaced via `hunch query` and MCP."));
     store.close();
 });
+// ---- capture-comments (inline intent → graph; addendum #2) ----------------
+program
+    .command("capture-comments")
+    .description("Capture inline intent comments into the graph: `hunch-why:` → a decision, `hunch-rule:` → a file-scoped constraint. Deterministic + idempotent.")
+    .option("--private", "write captured records into the private overlay (HUNCH_PRIVATE_DIR)")
+    .action((opts) => {
+    const { store, root } = storeFor();
+    if (opts.private && !store.hasPrivate) {
+        store.close();
+        return fail("--private needs HUNCH_PRIVATE_DIR set to a private store");
+    }
+    const intents = extractInlineIntent(root);
+    const now = new Date().toISOString();
+    let dec = 0, con = 0;
+    for (const it of intents) {
+        const ev = [`${it.file}:${it.line}`];
+        if (it.kind === "why") {
+            const id = decisionId(`inline:${it.file}:${it.text}`);
+            const prev = store.recs("decisions").find((d) => d.id === id); // preserve window for idempotent re-capture
+            const rec = {
+                id, title: it.text, status: "accepted",
+                context: `Captured from an inline hunch-why comment (${it.file}:${it.line}).`,
+                decision: it.text, consequences: [], alternatives_rejected: [], rejected_tripwires: [],
+                related_components: [], related_files: [it.file], supersedes: null, superseded_by: null,
+                caused_by_bug: null, commit: null, valid_from: prev?.valid_from ?? now, valid_to: null,
+                retired: { symbols: [], deps: [] },
+                provenance: { source: "human_confirmed", confidence: 0.9, evidence: ev }, date: prev?.date ?? now,
+            };
+            if (opts.private)
+                store.putPrivate("decisions", rec);
+            else
+                store.json.put("decisions", rec);
+            dec++;
+        }
+        else {
+            const id = constraintId(`inline:${it.file}:${it.text}`);
+            const prev = store.recs("constraints").find((c) => c.id === id);
+            const rec = {
+                id, type: "correctness", statement: it.text, scope: [it.file],
+                // Advisory by default — an inline rule never auto-blocks a build; raise severity
+                // deliberately if you want enforcement. Keeps day-one zero false-positive rage.
+                severity: "warning", enforcement: "advisory_v1",
+                rationale: `Captured from an inline hunch-rule comment (${it.file}:${it.line}).`,
+                source_decision: null, violations: [], status: "active",
+                valid_from: prev?.valid_from ?? now, valid_to: null,
+                provenance: { source: "human_confirmed", confidence: 0.9, evidence: ev },
+            };
+            if (opts.private)
+                store.putPrivate("constraints", rec);
+            else
+                store.json.put("constraints", rec);
+            con++;
+        }
+    }
+    store.reindex();
+    if (!intents.length)
+        console.log("No `hunch-why:` / `hunch-rule:` comments found.");
+    else
+        console.log(`✓ captured ${dec} decision(s) + ${con} constraint(s) from inline comments${opts.private ? " [private overlay]" : ""}`);
+    store.close();
+});
+// ---- conform (intent-conformance: does code still satisfy the recorded why) ----
+program
+    .command("conform")
+    .description("Intent-conformance: prove the code still SATISFIES each in-force decision's recorded intent (deterministic, over the graph). Surfaces where code drifted from the why — even with no diff in scope.")
+    .option("--strict", "exit non-zero if any intent is violated")
+    .action((opts) => {
+    const { store } = storeFor();
+    store.reindex();
+    const results = checkConformance(store);
+    if (!results.length) {
+        console.log("No conformance predicates recorded yet.");
+        console.log(dim("  Add a `conformance` predicate to a decision (e.g. { assert: \"calls\", subject: \"pay\", object: \"verifySession\" }) to prove the code honors its intent."));
+        store.close();
+        return;
+    }
+    const violations = results.filter((r) => !r.satisfied);
+    console.log(`Intent-conformance: ${results.length - violations.length}/${results.length} satisfied\n`);
+    for (const r of results) {
+        console.log(`  ${r.satisfied ? "✅" : "⛔"} ${r.decision} — "${r.title}"`);
+        console.log(`     ${r.assert} ${r.subject}${r.object ? ` → ${r.object}` : ""}: ${r.detail}`);
+    }
+    if (violations.length) {
+        console.log(`\n⛔ ${violations.length} intent(s) the code no longer satisfies.`);
+        if (opts.strict)
+            process.exitCode = 1;
+    }
+    else {
+        console.log(`\n✅ the code satisfies every recorded intent.`);
+    }
+    store.close();
+});
 // ---- compare (rank N candidate solutions by architectural fit) ------------
 program
     .command("compare")

package/dist/core/conformance.js

@@ -0,0 +1,57 @@
+function resolveSymbol(store, ref) {
+    const syms = store.recs("symbols");
+    if (ref.startsWith("sym_"))
+        return syms.find((s) => s.id === ref) ?? null;
+    if (ref.includes(":")) {
+        const [f, n] = ref.split(":");
+        return syms.find((s) => s.name === n && (s.file === f || s.file.endsWith("/" + (f ?? "")))) ?? null;
+    }
+    return syms.find((s) => s.name === ref) ?? null;
+}
+function reaches(store, id, transitive) {
+    const set = new Set();
+    for (const d of store.getDependencies(id, transitive ? 6 : 1)) {
+        if (transitive || d.depth === 1)
+            set.add(d.id);
+    }
+    return set;
+}
+function evalPredicate(store, d, p) {
+    const base = { decision: d.id, title: d.title, assert: p.assert, subject: p.subject, object: p.object };
+    const subj = resolveSymbol(store, p.subject);
+    if (p.assert === "exists") {
+        return { ...base, satisfied: !!subj, detail: subj ? `${p.subject} exists (${subj.file})` : `${p.subject} no longer exists in the graph` };
+    }
+    if (!subj)
+        return { ...base, satisfied: false, detail: `subject "${p.subject}" not found in the graph — intent's subject is gone` };
+    const wantReach = p.assert === "calls" || p.assert === "imports";
+    const obj = p.object ? resolveSymbol(store, p.object) : null;
+    if (!obj) {
+        // a required target gone ⇒ the link can't hold (violated); a forbidden one trivially holds.
+        return { ...base, satisfied: !wantReach, detail: `target "${p.object ?? ""}" not found in the graph` };
+    }
+    const linked = reaches(store, subj.id, p.transitive).has(obj.id);
+    const satisfied = wantReach ? linked : !linked;
+    const via = p.transitive ? " (transitively)" : "";
+    const detail = satisfied
+        ? wantReach
+            ? `${subj.name} →${via} ${obj.name} ✓`
+            : `${subj.name} does not reach ${obj.name} ✓`
+        : wantReach
+            ? `${subj.name} no longer reaches${via} ${obj.name} — intent VIOLATED`
+            : `${subj.name} now reaches${via} ${obj.name} — intent VIOLATED`;
+    return { ...base, satisfied, detail };
+}
+/** Check every in-force decision's conformance predicates against the CURRENT graph.
+ *  `.satisfied === false` means the code drifted from the recorded intent. Deterministic. */
+export function checkConformance(store) {
+    const out = [];
+    for (const d of store.recs("decisions")) {
+        if (d.status === "superseded" || d.superseded_by)
+            continue; // in-force decisions only
+        for (const p of d.conformance ?? [])
+            out.push(evalPredicate(store, d, p));
+    }
+    return out;
+}
+//# sourceMappingURL=conformance.js.map

package/dist/core/types.js

@@ -94,6 +94,18 @@ export const RejectedTripwireSchema = z.object({
     provenance: ProvenanceSchema,
 });
 /** ADR-style decision record, auto-drafted and human-confirmable. */
+/** Intent-conformance predicate (the "inversion": prove the code still SATISFIES a
+ *  decision's intent, not just that a diff didn't touch a guarded file). Each predicate
+ *  compiles a decision's intent into a DETERMINISTIC check over the symbol/dependency
+ *  graph Hunch already builds — no model. "pay must verify the session" becomes
+ *  { assert: "calls", subject: "pay", object: "verifySession" }; if pay stops calling
+ *  verifySession the intent is VIOLATED even with no diff in scope. */
+export const ConformancePredicateSchema = z.object({
+    assert: z.enum(["calls", "not-calls", "imports", "not-imports", "exists"]),
+    subject: z.string().describe("symbol name / id / file:name the intent is about"),
+    object: z.string().optional().describe("required (calls/imports) or forbidden (not-*) target"),
+    transitive: z.boolean().default(false).describe("allow an indirect path over the dependency graph"),
+});
 export const DecisionSchema = z.object({
     id: z.string().describe("dec_*"),
     title: z.string(),
@@ -117,6 +129,7 @@ export const DecisionSchema = z.object({
     valid_from: z.string().optional().describe("ISO instant the decision took effect (commit date)"),
     valid_to: z.string().nullable().default(null).describe("ISO instant it was superseded (null = in force)"),
     retired: RetiredSignalSchema.default({ symbols: [], deps: [] }),
+    conformance: z.array(ConformancePredicateSchema).optional().describe("deterministic intent-conformance checks over the graph"),
     provenance: ProvenanceSchema,
     date: z.string(),
 });

package/dist/extractors/comments.js

@@ -0,0 +1,75 @@
+/**
+ * Inline intent capture (roadmap addendum #2). A developer marks intent right where
+ * it lives in the code — `hunch-why: <reason>` (in a comment → a Decision) or
+ * `hunch-rule: <invariant>` (→ a file-scoped Constraint) — and Hunch lifts it into
+ * the graph, deterministically. The third capture source alongside commit synthesis and
+ * correction capture. The tag must follow a comment marker (the slash pair, #, *, --,
+ * <!--, ;) so a matching STRING literal in code isn't mistaken for intent. (Line-based,
+ * so a tagged line that is itself a string literal can still false-positive — advisory.)
+ */
+import { readFileSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+import { trackedFiles } from "./git.js";
+import { toPosixTarget } from "../core/paths.js";
+const EXTS = [
+    ".ts", ".tsx", ".mts", ".cts", ".js", ".jsx", ".mjs", ".cjs",
+    ".py", ".go", ".rb", ".java", ".rs", ".php", ".cs", ".kt", ".swift", ".scala",
+    ".c", ".h", ".cc", ".cpp", ".hpp", ".sql", ".sh",
+];
+const SKIP = new Set(["node_modules", ".git", ".hunch", ".hunch-private", "dist", "build", "out", "vendor", ".next"]);
+const TAG = /(?:\/\/|#|\*|--|<!--|;)\s*hunch-(why|rule)\s*:\s*(.+?)\s*(?:\*\/|-->|$)/i;
+/** Tracked source files (git ls-files); falls back to a bounded walk outside git. */
+function sourceFiles(root) {
+    const tracked = trackedFiles(root, EXTS);
+    if (tracked.length)
+        return tracked;
+    const out = [];
+    const walk = (dir, rel, depth) => {
+        if (depth > 8)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (e.name.startsWith("."))
+                continue;
+            const r = rel ? `${rel}/${e.name}` : e.name;
+            if (e.isDirectory()) {
+                if (!SKIP.has(e.name))
+                    walk(join(dir, e.name), r, depth + 1);
+            }
+            else if (EXTS.some((x) => e.name.endsWith(x))) {
+                out.push(r);
+            }
+        }
+    };
+    walk(root, "", 0);
+    return out;
+}
+export function extractInlineIntent(root) {
+    const out = [];
+    for (const rel of sourceFiles(root)) {
+        let content;
+        try {
+            content = readFileSync(join(root, rel), "utf8");
+        }
+        catch {
+            continue;
+        }
+        if (!content.includes("hunch-"))
+            continue; // cheap skip before the per-line scan
+        const file = toPosixTarget(rel);
+        const lines = content.split("\n");
+        for (let i = 0; i < lines.length; i++) {
+            const m = TAG.exec(lines[i]);
+            if (m)
+                out.push({ kind: m[1].toLowerCase(), text: m[2].trim(), file, line: i + 1 });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=comments.js.map

package/dist/integrations/claudemd.js

@@ -34,6 +34,7 @@ export function renderHunchSection(store) {
     lines.push("- `hunch_query(query)` — free-text search across all of Hunch.");
     lines.push("- `hunch_runbook(task)` — the proven steps for a recurring task (e.g. \"add an MCP tool\", \"cut a release\").");
     lines.push("- `hunch_compare(candidates)` — rank N candidate branches/commits by architectural fit (fewest invariant hits).");
+    lines.push("- `hunch_conformance()` — does the code still SATISFY recorded intent? (e.g. `pay` still reaches `verifySession`). Run before a refactor.");
     lines.push("- `hunch_record_decision(...)` — write back a decision after a non-trivial choice.");
     if (constraints.length) {
         lines.push("");

package/dist/mcp/server.js

@@ -17,6 +17,7 @@ import { buildCorrectionConstraint } from "../core/correction.js";
 import { revParse, asOfDate, revExists, lastChangeDate, rangeFiles, rangeDiff, commitFiles, commitDiff, stagedFiles, stagedDiff, commitAndPushHunch } from "../extractors/git.js";
 import { formatContext } from "../core/format.js";
 import { compareCandidates } from "../core/compare.js";
+import { checkConformance } from "../core/conformance.js";
 import { renderMarkdown, verdict } from "../core/checkreport.js";
 import { HUNCH_VERSION } from "../core/version.js";
 const ok = (text) => ({ content: [{ type: "text", text }] });
@@ -435,6 +436,20 @@ export function buildServer(root) {
             return err(`Failed to compare candidates: ${e.message}`);
         }
     });
+    // -- hunch_conformance ----------------------------------------------------
+    server.registerTool("hunch_conformance", {
+        title: "Does the code still satisfy the recorded intent?",
+        description: "Intent-conformance (the inversion of a normal guard): for every in-force decision carrying a conformance predicate, deterministically verify the CODE still satisfies its intent over the dependency graph — e.g. 'pay still reaches verifySession'. Returns the violations: intent the code has silently drifted away from, with NO diff required. Run before a refactor or merge to catch intent erosion a diff-only check can't see.",
+        inputSchema: {},
+    }, async () => {
+        const results = checkConformance(store);
+        if (!results.length)
+            return ok("No conformance predicates recorded. Add a `conformance` predicate to a decision (e.g. {assert:'calls', subject:'pay', object:'verifySession'}) to prove the code honors its intent.");
+        const violations = results.filter((r) => !r.satisfied);
+        const lines = results.map((r) => `${r.satisfied ? "✅" : "⛔"} ${r.decision} "${r.title}" — ${r.assert} ${r.subject}${r.object ? ` → ${r.object}` : ""}: ${r.detail}`);
+        const head = violations.length ? `⛔ ${violations.length} intent(s) the code no longer satisfies` : "✅ the code satisfies every recorded intent";
+        return ok(`Intent-conformance (${results.length - violations.length}/${results.length} satisfied):\n\n${lines.join("\n")}\n\n${head}`);
+    });
     return server;
 }
 function provLine(record) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@davesheffer/hunch",
-  "version": "0.28.0",
+  "version": "0.30.0",
   "license": "Apache-2.0",
   "author": "Dave Sheffer <dave.sheffer1@gmail.com>",
   "description": "Hunch — an Engineering Memory OS: a persistent, git-native reasoning graph over a codebase, exposed to Claude Code via MCP.",