@hone-ai/cli 1.21.0 → 1.23.0

package/hone-cli.js

@@ -5417,6 +5417,44 @@ program
   });
 
 // ── HC-041: Run Story (Orchestrator) ─────────────────────────────────────────
+program
+  .command('workflows')
+  .description("List your org's recent workflow runs (HC-E5-MCP)")
+  .option('--status <status>', 'Filter: queued|running|paused|completed|failed|stalled|killed')
+  .option('--limit <n>', 'Max runs to return (1-100, default 20)')
+  .option('--format <fmt>', 'Output format: pretty | json', 'pretty')
+  .action(async (opts) => {
+    const config = getConfig();
+    const client = api(config);
+    try {
+      const params = new URLSearchParams();
+      if (opts.status) params.set('status', opts.status);
+      if (opts.limit) params.set('limit', opts.limit);
+      const qs = params.toString();
+      const { data } = await client.get(`/orchestrate${qs ? `?${qs}` : ''}`);
+      if (opts.format === 'json') { console.log(JSON.stringify(data, null, 2)); return; }
+      if (!data.runs.length) { console.log('No workflow runs found.'); return; }
+      const age = (ts) => {
+        const m = Math.floor((Date.now() - new Date(ts).getTime()) / 60000);
+        return m < 60 ? `${m}m` : m < 1440 ? `${Math.floor(m / 60)}h` : `${Math.floor(m / 1440)}d`;
+      };
+      console.log('RUN ID    STORY                 STATUS     STEP       AGE');
+      for (const r of data.runs) {
+        console.log([
+          String(r.id).slice(0, 8).padEnd(9),
+          String(r.story_id || '-').slice(0, 21).padEnd(22),
+          String(r.status).padEnd(10),
+          String(r.current_step || '-').padEnd(10),
+          age(r.created_at),
+        ].join(' ') + (r.error_message ? `  ⚠ ${String(r.error_message).slice(0, 40)}` : ''));
+      }
+      console.log(`\n${data.count} run(s). Inspect: hone show step <runId> <step> · Kill: hone run-story <runId> --kill`);
+    } catch (e) {
+      console.error(`Failed: ${e.response?.data?.error || e.message}`);
+      process.exit(1);
+    }
+  });
+
 program
   .command('run-story <storyId>')
   .description('Run the SDLC pipeline for a story via the orchestrator')

package/lib/mcp-tools.js

@@ -97,6 +97,40 @@ async function runStory({ storyId, mode = 'batch', cwd } = {}) {
   };
 }
 
+// hone_list_workflows — list the org's recent runs (readOnly). GET /orchestrate
+// via `hone workflows` (HC-E5-MCP). Summary rows only — the server never sends
+// config/bundled source on the list wire (memo D1).
+async function listWorkflows({ status, limit, cwd } = {}) {
+  const args = ['workflows', '--format', 'json'];
+  if (status) args.push('--status', String(status));
+  if (limit) args.push('--limit', String(limit));
+  const r = await runHone(args, { cwd });
+  if (r.error) return { isError: true, detail: r.error };
+  const data = parseLastJson(r.stdout);
+  return {
+    isError: !data,
+    runs: data ? data.runs : null,
+    count: data ? data.count : 0,
+    exitCode: r.exitCode,
+    detail: data ? `${data.count} run(s)` : (r.stderr || 'could not parse workflows JSON').slice(0, 500),
+  };
+}
+
+// hone_kill_workflow — kill ONE run by explicit id (DESTRUCTIVE, irreversible).
+// runId is schema-required: an agent must never guess a target for a kill —
+// explicit id or nothing (memo D3 refutation). Server 409s non-killable states.
+async function killWorkflow({ runId, cwd } = {}) {
+  if (!runId) return { isError: true, detail: 'runId is required' };
+  const r = await runHone(['run-story', String(runId), '--kill'], { cwd });
+  if (r.error) return { isError: true, detail: r.error };
+  return {
+    isError: !r.ok,
+    killed: r.ok,
+    exitCode: r.exitCode,
+    detail: (r.stdout || r.stderr || '').trim().slice(0, 500) || (r.ok ? 'killed' : 'kill failed'),
+  };
+}
+
 // hone_status — read run status (readOnly). GET /orchestrate/:id.
 async function status({ runId, cwd } = {}) {
   if (!runId) return { isError: true, detail: 'runId is required' };
@@ -295,6 +329,20 @@ const TOOLS = [
     inputSchema: { type: 'object', properties: { skillsOnly: { type: 'boolean', default: false }, agentsOnly: { type: 'boolean', default: false } } },
     handler: sync,
   },
+  {
+    name: 'hone_list_workflows',
+    description: "List your org's recent Hone workflow runs (id, story, status, step, age). Read-only; optional status filter and limit (1-100).",
+    readOnly: true,
+    inputSchema: { type: 'object', properties: { status: { type: 'string', enum: ['queued', 'running', 'paused', 'completed', 'failed', 'stalled', 'killed'] }, limit: { type: 'number' } } },
+    handler: listWorkflows,
+  },
+  {
+    name: 'hone_kill_workflow',
+    description: 'KILL a Hone workflow run by explicit run id. DESTRUCTIVE and irreversible: the run stops and cannot be resumed. Requires the exact runId — list first if unsure.',
+    readOnly: false,
+    inputSchema: { type: 'object', properties: { runId: { type: 'string' } }, required: ['runId'] },
+    handler: killWorkflow,
+  },
   {
     name: 'hone_doctor',
     description: 'Self-check the Hone setup (read-only): is a token configured, and is the `hone` CLI installed + reachable? Run this first if other tools fail.',
@@ -305,6 +353,8 @@ const TOOLS = [
 ];
 
 module.exports = {
+  listWorkflows,
+  killWorkflow,
   runStory, status, verifyPatch, checkPatch, showStep, approve, emitPr, verifyPr, agentEval, derive, sync, doctor,
   runHone, parseRunStarted, parseLastJson, honeBin, readHoneConfig, TOOLS,
 };

package/lib/story-classifier.js

@@ -48,6 +48,11 @@ const ARCHITECT_AXES = Object.freeze({
   EXTERNAL_COORDINATION:   'external-coordination',
   CROSS_REPO_DEPENDENCY:   'cross-repo-dependency',
   SECURITY_IMPLICATIONS:   'security-implications',
+  // HC-DH-001: the story gates/wraps/re-bills/re-routes a function shared by
+  // 2+ consumers (billing, auth, quota, dispatch, refusal). Origin: a billing
+  // story with single-module surface + one obvious design engaged NO axis —
+  // exactly where an independent architect caught a money leak.
+  SHARED_CHOKEPOINT:       'shared-chokepoint',
 });
 
 // Estimate ordering for threshold comparisons
@@ -97,6 +102,11 @@ function shouldEngageArchitect(input) {
   if (input.has_security_implications === true) {
     axes.push(ARCHITECT_AXES.SECURITY_IMPLICATIONS);
   }
+  // Shared chokepoint → architect for whole-repo call-site + invariant review
+  // (HC-DH-001). Missing/false input = today's behavior — additive-only.
+  if (input.touches_shared_chokepoint === true) {
+    axes.push(ARCHITECT_AXES.SHARED_CHOKEPOINT);
+  }
   return { engage: axes.length > 0, axes };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hone-ai/cli",
-  "version": "1.21.0",
+  "version": "1.23.0",
   "description": "Hone AI — Enterprise SDLC Pipeline CLI",
   "main": "hone-cli.js",
   "bin": {