@davesheffer/hunch 1.10.7 → 1.10.8

package/dist/cli/index.js

@@ -4939,6 +4939,17 @@ program
                 console.log(`· ${f.id} — ${f.detail}`);
             console.log(`\nHeal: run \`hunch wiki --heal\` — regenerates only the stale pages (the wiki is a derived view; never edit it by hand).\n`);
         }
+        // Every drift kind heals here — see bug_drift_heal_asymmetry above. premise-stale
+        // shipped in the drift report without a section here, so a repo whose ONLY drift
+        // was a dead premise got "N findings" from `hunch drift` and a bare closing line
+        // from `hunch heal` — exactly the broken loop that bug is about.
+        const premiseStale = kind("premise-stale");
+        if (premiseStale.length) {
+            console.log(`${premiseStale.length} decision(s) rest on a premise that no longer holds (world≠graph):\n`);
+            for (const f of premiseStale)
+                console.log(`· ${f.id} — ${f.detail}`);
+            console.log(`\nHeal: this is a HUMAN call — the decision's authority is unchanged until you make it. Re-attest (update the premise's review_by/attested), supersede via /capture, or retire the decision. Keeping it for consistency is a valid answer.\n`);
+        }
         console.log(`Hunch never rewrites prose for you; this is a read-only reconciliation report.`);
     }
     finally {

package/dist/core/premises.js

@@ -20,6 +20,15 @@ function checkPath(claim, rel, wantExists, env) {
         : { claim, holds: true, reason: `"${rel}" still absent` };
 }
 function checkOne(p, env) {
+    // The clock is an INJECTED input, so it is an unevaluable case like any other.
+    // `Date.parse("nope")` is NaN, and `NaN > due` is false — which fell through to
+    // "attested until …", i.e. HOLDS. The module's hard rule ("cannot-evaluate is
+    // never holds") was enforced for a bad review_by but not for a bad now, and the
+    // unenforced half is the one a future caller can get wrong. Checked once, here,
+    // so it covers every check kind rather than only the dated one.
+    if (!Number.isFinite(Date.parse(env.now))) {
+        return { claim: p.claim, holds: false, reason: `unevaluable: caller supplied a non-ISO clock ("${env.now}")` };
+    }
     if (p.path_absent !== undefined)
         return checkPath(p.claim, p.path_absent, false, env);
     if (p.path_exists !== undefined)

package/dist/mcp/server.js

@@ -731,14 +731,19 @@ export function buildServerWithRootControl(initialRoot) {
                 related_files: z.array(z.string()).optional(),
                 related_components: z.array(z.string()).optional(),
                 topic: z.string().optional().describe("decision-grounding anchor — one topic per decision; enables doc≠graph drift detection for it. Omit to leave un-anchored."),
+                // FLAT, matching PremiseSchema exactly. A nested { check: {...} } shape is
+                // silently STRIPPED by Zod, leaving a claim-only premise — and a claim-only
+                // premise is "documented only (no check attached)", which ALWAYS HOLDS. An
+                // agent following a wrong schema would record a premise that can never fire:
+                // the exact fail-open this feature exists to prevent. Keep in lockstep with
+                // PremiseSchema in src/core/types.ts.
                 premises: z.array(z.object({
-                    claim: z.string().describe("the checkable reason this decision rests on, in plain words"),
-                    check: z.object({
-                        kind: z.enum(["path_absent", "path_exists", "review_by"]),
-                        path: z.string().optional().describe("repo-relative path for path_absent / path_exists"),
-                        review_by: z.string().optional().describe("ISO date this attestation expires (review_by)"),
-                    }).optional().describe("at most one deterministic check; omit for an unchecked note"),
-                })).optional().describe("the checkable reasons this decision rests on. A dead premise NEVER changes authority — it raises an escalation for the human. Omit on re-record to keep the incumbent's premises."),
+                    claim: z.string().min(1).describe("the human-readable reason this decision rests on"),
+                    path_absent: z.string().optional().describe("premise holds while this repo-relative path does NOT exist"),
+                    path_exists: z.string().optional().describe("premise holds while this repo-relative path exists"),
+                    review_by: z.string().optional().describe("dated attestation: premise holds until this ISO date, then needs re-attesting"),
+                    attested: z.string().optional().describe("ISO date a human last attested the claim (informational)"),
+                })).optional().describe("the checkable reasons this decision rests on — at most ONE check per premise (path_absent | path_exists | review_by). A dead premise NEVER changes authority; it raises an escalation for the human. Omit on re-record to keep the incumbent's premises."),
                 status: z.enum(["proposed", "accepted", "rejected", "superseded"]).optional(),
                 commit: z.string().optional(),
                 supersedes: z.string().optional().describe("id of a decision this one replaces — closes its valid-time window (invalidate, don't delete)"),

package/dist/store/hunchStore.js

@@ -571,7 +571,17 @@ export class HunchStore {
             if (m) {
                 if (m.dead)
                     w *= 0.6;
-                w *= m.provenance.includes("human_confirmed") ? 1 : m.provenance.includes("llm_draft") ? 0.85 : 0.75;
+                // agent_recorded sits BETWEEN human_confirmed and llm_draft. It is testimony —
+                // a human directed the capture but did not countersign it through /capture — so
+                // it must not carry human authority (strict/veto gates key on human_confirmed).
+                // But it is a deliberate, human-prompted write, and the unlabelled tier (0.75)
+                // is for extracted/inferred machine output. Without this it fell to 0.75 and
+                // ranked BELOW an llm_draft the model produced unprompted, which inverts what
+                // the authorship stamp is trying to express.
+                w *= m.provenance.includes("human_confirmed") ? 1
+                    : m.provenance.includes("agent_recorded") ? 0.9
+                        : m.provenance.includes("llm_draft") ? 0.85
+                            : 0.75;
                 if (m.at) {
                     const ageDays = Math.max(0, now - Date.parse(m.at)) / 86400000;
                     if (Number.isFinite(ageDays))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@davesheffer/hunch",
-  "version": "1.10.7",
+  "version": "1.10.8",
   "mcpName": "io.github.davesheffer/hunch",
   "license": "Apache-2.0",
   "author": "Dave Sheffer <dave.sheffer1@gmail.com>",

package/server.json

@@ -7,13 +7,13 @@
     "source": "github"
   },
   "websiteUrl": "https://hunch-pi.vercel.app",
-  "version": "1.10.7",
+  "version": "1.10.8",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@davesheffer/hunch",
-      "version": "1.10.7",
+      "version": "1.10.8",
       "runtimeHint": "npx",
       "packageArguments": [
         {