# Hacker Bob v1.3.1 Release Notes

## Highlights

`v1.3.1` moves normal HUNT/EXPLORE wave starts into the MCP runtime. The orchestrator now calls `bounty_start_next_wave` for standard wave assignment, using the returned plan and assignments instead of recomputing policy from `attack_surface.json`.

## Wave Runtime

- Added `bounty_start_next_wave({ target_domain, dry_run? })`.
- Added a pure planner for wave 1 and wave 2+ candidate ordering, open requeue coverage, lead-surface follow-up, max caps, dedupe, and stable `a1..aN` labels.
- Preserved `bounty_start_wave` for explicit/manual focused hunts.
- Kept dry runs side-effect free: no file writes, no handoff tokens, and no hunter-spawn action.
- Re-read ranked surfaces after promotion before starting a real wave.

## Deep Lead Ownership

- Made `bounty_start_next_wave` the single normal-path owner for automatic deep lead promotion.
- Left `bounty_promote_surface_leads` public for explicit operator use.
- Removed merge-side and prompt-side automatic promotion from the normal path.
- Updated deep HUNT -> CHAIN gating so promotable unpromoted lead debt points the orchestrator back to `bounty_start_next_wave`.

## Prompt And Manifest Updates

- Updated normal HUNT/EXPLORE guidance to consume the runtime-start result.
- Removed instructions for the orchestrator to compute standard assignments manually.
- Updated generated Claude and Codex artifacts, tool metadata, and prompt contract tests.
- Hardened the new tool schema to reject empty `target_domain` values and unknown top-level fields.

## README Refresh

- Reworked the README around user-facing setup, safety, installation, commands, workflow, requirements, troubleshooting, updates, and data handling.
- Removed the old "For AI Coding Agents" section and the instruction-style prose that told users' coding assistants how to interpret the repository URL.
- Tightened the tone across the README to be more professional and easier to scan before first use.

## Install

```bash
npx -y hacker-bob@1.3.1 install /path/to/your/project
# or, via the adapter wrappers
npx -y hacker-bob-cc@1.3.1 install /path/to/your/project
npx -y hacker-bob-codex@1.3.1 install /path/to/your/project
```

After installing, fully restart your host CLI (Claude Code or Codex) in that project.

## Verification

- `npm run check:syntax` passes.
- `npm run test:mcp` passes.
- `npm run test:prompts` passes.
- `npm test` passes.
- `npm run release:check` passes.
