@hone-ai/cli 1.20.0 → 1.22.0

package/hone-cli.js

@@ -2032,8 +2032,18 @@ byoKeyCmd
         const { data: plan } = await client.get('/orgs/me/plan');
         if (plan.mode === 'trial') {
           console.log(`Trial:              active — ${plan.trial.daysLeft}d left, $${Number(plan.trial.creditRemaining).toFixed(2)} credit`);
+          if (plan.trial.creditWarning) {
+            console.log(plan.billingEnabled
+              ? `Heads up:           over half your trial credit is used. To continue after the trial you'll need your own key (set ✓) AND a subscription (\`hone upgrade\`).`
+              : `Heads up:           over half your trial credit is used. Your own key covers you after the trial.`);
+          }
         } else if (plan.mode === 'expired') {
-          console.log('Trial:              ended (set a key or upgrade)');
+          // §11-F14: with the paywall live, BOTH a key AND a subscription are
+          // needed (an "or" would imply either alone suffices). Billing-off
+          // servers keep the legacy message — a key alone still works there.
+          console.log(plan.billingEnabled
+            ? 'Trial:              ended — needs `hone byo-key set` AND `hone upgrade`'
+            : 'Trial:              ended (set a key to continue)');
         }
       } catch { /* trial line is a nicety — never block byo-key status */ }
       console.log('Tip: run `hone byo-key check` to verify the key still authenticates with Anthropic.');
@@ -2083,9 +2093,26 @@ trialCmd
       if (t.status === 'active') {
         console.log(`Days left:       ${t.daysLeft}`);
         console.log(`Credit:          $${Number(t.creditUsdUsed || 0).toFixed(2)} used / $${Number(t.creditUsdCap).toFixed(2)} cap ($${Number(t.creditRemaining).toFixed(2)} left)`);
+        if (t.creditWarning) {
+          // Owner decision: proactive heads-up at half the trial credit so the
+          // post-trial requirement (key AND subscription when billing is on)
+          // never lands as a surprise.
+          console.log(data.billingEnabled
+            ? 'Heads up:        over half your trial credit is used. After the trial you need `hone byo-key set` AND `hone upgrade` to keep running.'
+            : 'Heads up:        over half your trial credit is used. Set your own key (`hone byo-key set`) to keep running after the trial.');
+        }
+      }
+      if (data.subscription && data.billingEnabled) {
+        console.log(`Subscription:    ${data.subscription.status}${data.subscription.entitled ? ' (entitled)' : ''}`);
+        if (data.subscription.graceUntil) {
+          console.log(`Grace until:     ${String(data.subscription.graceUntil).split('T')[0]} — payment failing, fix via \`hone billing portal\``);
+        }
       }
       if (data.mode === 'expired') {
-        console.log('Trial ended — set your own key (`hone byo-key set`) or upgrade to continue.');
+        // §11-F14: AND, not or — with the paywall live both are required.
+        console.log(data.billingEnabled
+          ? 'Trial ended — run `hone byo-key set` AND `hone upgrade` to continue.'
+          : 'Trial ended — set your own key (`hone byo-key set`) to continue.');
       }
     } catch (e) { _handleByoKeyError(e); }
   });
@@ -2102,6 +2129,86 @@ trialCmd
     } catch (e) { _handleByoKeyError(e); }
   });
 
+// ── UPGRADE + BILLING commands (HC-COMM-015 / A4 / 015f) ─────────────────────
+// The subscription pays for Hone (orchestration/prompts/skills); LLM usage
+// stays on your own Anthropic key (`hone byo-key set`). Checkout happens on a
+// Stripe-hosted page — the CLI only prints the URL, no card data ever touches
+// Hone or this terminal.
+function _handleBillingError(e) {
+  const status = e.response?.status;
+  const msg = e.response?.data?.error;
+  if (status === 401) {
+    console.error('Not authenticated. Run: hone init --token <token>');
+  } else if (status === 409) {
+    console.error(msg || 'Conflict — check `hone billing status`.');
+  } else if (status === 503) {
+    console.error(msg === 'Billing not configured'
+      ? "Billing isn't enabled on this server (self-hosted / not yet configured)."
+      : `Server unavailable: ${msg || e.message}`);
+  } else if (status === 429) {
+    console.error('Rate limited — try again shortly.');
+  } else {
+    console.error(`Failed: ${msg || e.message}`);
+  }
+  process.exit(1);
+}
+
+program
+  .command('upgrade')
+  .description('Subscribe to Hone (opens a Stripe-hosted checkout URL)')
+  .action(async () => {
+    const config = getConfig();
+    const client = api(config);
+    try {
+      const { data } = await client.post('/orgs/me/billing/checkout');
+      console.log('Complete your subscription in the browser:');
+      console.log(`  ${data.url}`);
+      console.log('Then run `hone billing status` to confirm.');
+    } catch (e) { _handleBillingError(e); }
+  });
+
+const billingCmd = program
+  .command('billing')
+  .description("View or manage your org's Hone subscription");
+
+billingCmd
+  .command('status')
+  .description('Show subscription status, period end, and grace state')
+  .option('--format <fmt>', 'Output format: pretty | json', 'pretty')
+  .action(async (opts) => {
+    const config = getConfig();
+    const client = api(config);
+    try {
+      const { data } = await client.get('/orgs/me/plan');
+      if (opts.format === 'json') { console.log(JSON.stringify(data, null, 2)); return; }
+      const s = data.subscription || {};
+      console.log(`Plan mode:       ${data.mode}`);
+      if (!data.billingEnabled) {
+        console.log('Billing:         not enabled on this server');
+        return;
+      }
+      console.log(`Subscription:    ${s.status}${s.entitled ? ' (entitled)' : ''}`);
+      if (s.currentPeriodEnd) console.log(`Period ends:     ${String(s.currentPeriodEnd).split('T')[0]}`);
+      if (s.graceUntil) console.log(`Grace until:     ${String(s.graceUntil).split('T')[0]} — payment failing, fix via \`hone billing portal\``);
+      if (s.status === 'none' || s.status === 'canceled') {
+        console.log('Subscribe with:  hone upgrade');
+      }
+    } catch (e) { _handleBillingError(e); }
+  });
+
+billingCmd
+  .command('portal')
+  .description('Open the Stripe billing portal (update card, cancel, invoices)')
+  .action(async () => {
+    const config = getConfig();
+    const client = api(config);
+    try {
+      const { data } = await client.post('/orgs/me/billing/portal');
+      console.log('Manage your subscription in the browser:');
+      console.log(`  ${data.url}`);
+    } catch (e) { _handleBillingError(e); }
+  });
+
 // ── ADMIN-USAGE command ──────────────────────────────────────────────────────
 program
   .command('admin-usage')

package/lib/story-classifier.js

@@ -48,6 +48,11 @@ const ARCHITECT_AXES = Object.freeze({
   EXTERNAL_COORDINATION:   'external-coordination',
   CROSS_REPO_DEPENDENCY:   'cross-repo-dependency',
   SECURITY_IMPLICATIONS:   'security-implications',
+  // HC-DH-001: the story gates/wraps/re-bills/re-routes a function shared by
+  // 2+ consumers (billing, auth, quota, dispatch, refusal). Origin: a billing
+  // story with single-module surface + one obvious design engaged NO axis —
+  // exactly where an independent architect caught a money leak.
+  SHARED_CHOKEPOINT:       'shared-chokepoint',
 });
 
 // Estimate ordering for threshold comparisons
@@ -97,6 +102,11 @@ function shouldEngageArchitect(input) {
   if (input.has_security_implications === true) {
     axes.push(ARCHITECT_AXES.SECURITY_IMPLICATIONS);
   }
+  // Shared chokepoint → architect for whole-repo call-site + invariant review
+  // (HC-DH-001). Missing/false input = today's behavior — additive-only.
+  if (input.touches_shared_chokepoint === true) {
+    axes.push(ARCHITECT_AXES.SHARED_CHOKEPOINT);
+  }
   return { engage: axes.length > 0, axes };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hone-ai/cli",
-  "version": "1.20.0",
+  "version": "1.22.0",
   "description": "Hone AI — Enterprise SDLC Pipeline CLI",
   "main": "hone-cli.js",
   "bin": {