@hone-ai/cli 1.24.0 → 1.25.0

package/hone-cli.js

@@ -2377,16 +2377,32 @@ program
         console.log('    Migrate any REPO-SPECIFIC edits then `rm -rf .github/agents/`');
       }
 
+      // HC-COMM-010 P3: in editor-mode repos, EDITOR-side agents sync as thin
+      // stubs — their instructions are composed server-side and delivered
+      // ephemerally at runtime, so the full prompt never persists to disk.
+      // Server-mode repos are UNTOUCHED (full sync — daily editor-chat use of
+      // these agents is a feature, not a leak to close).
+      const { isEditorStubbedAgent, editorStubContent } = require('./lib/editor-stub');
+      const { readExecutionMode } = require('./lib/pipeline-config');
+      const syncExecutionMode = readExecutionMode(process.cwd());
+
       let synced = 0;
       for (const agent of agents) {
         try {
-          const r = await client.get(`/prompts/${agent}`, {
-            responseType: 'text',
-            headers: { Accept: 'text/markdown' },
-          });
+          let content;
+          if (isEditorStubbedAgent(agent, syncExecutionMode)) {
+            content = editorStubContent(agent);
+            console.log(`  → ${agent}: editor mode — syncing runtime stub (full prompt served ephemerally)`);
+          } else {
+            const r = await client.get(`/prompts/${agent}`, {
+              responseType: 'text',
+              headers: { Accept: 'text/markdown' },
+            });
+            content = r.data;
+          }
           const dest = path.join(agentsDir, `${agent}.agent.md`);
           const rel = `.claude/agents/${agent}.agent.md`;
-          const result = safeWrite(dest, rel, r.data);
+          const result = safeWrite(dest, rel, content);
           if (result !== 'skipped') {
             console.log(`  ✓ ${rel}`);
             synced++;
@@ -5518,6 +5534,7 @@ program
   .option('--branch <name>', 'Git branch (default: current)')
   .option('--status', 'Show status of the latest workflow run for this story')
   .option('--kill', 'Kill the latest workflow run for this story')
+  .option('--axes <axes>', 'Comma-separated classifier axes for this run (e.g. shared-chokepoint) — composition input (HC-COMM-010 C0)')
   .option('--approve <step>', 'Approve a paused gate (e.g., --approve step_0)')
   .option('--format <fmt>', 'Output format: pretty or json', 'pretty')
   .option('--poll-interval <s>', 'Poll interval in seconds', '5')
@@ -5898,6 +5915,28 @@ program
       orchestrateConfig.execution_mode = 'server';
     }
 
+    // HC-COMM-010 C0: composition transports — INERT until C1 reads them.
+    // Overlays: .hone-local/ is adopter disk the server can never read
+    // (the cross-validation finding), so raw texts travel in run config —
+    // the codebaseFiles pattern, size/count-capped, degrade-to-empty.
+    // Axes: explicit --axes flag for now; automated wiring from classify
+    // runs is future work (documented in the sprint plan).
+    try {
+      const { readRuleOverlays } = require('./lib/overlay-transport');
+      const ov = readRuleOverlays(process.cwd());
+      if (ov.overlays.length > 0) {
+        orchestrateConfig.rule_overlays = ov.overlays;
+        console.log(`  → bundled ${ov.overlays.length} rule overlay(s) for server-side composition`);
+      }
+      for (const skip of ov.skipped) console.warn(`  ⚠ overlay skipped: ${skip}`);
+    } catch (e) {
+      console.warn(`  ⚠ overlay read failed (non-fatal): ${(e && e.message || String(e)).split('\n')[0]}`);
+    }
+    if (opts.axes) {
+      const axes = String(opts.axes).split(',').map(a => a.trim().toLowerCase()).filter(Boolean);
+      if (axes.length > 0) orchestrateConfig.classifier_axes = axes;
+    }
+
     // HC-019n-followup-28: resolve the E2E spec-generation mode (step_3b /
     // Playwright). Precedence mirrors ci.gate: per-run flag > .pipeline-config.yml
     // `e2e.spec_generation` > default `auto`. `auto` = the orchestrator runs

package/lib/editor-stub.js

@@ -0,0 +1,44 @@
+'use strict';
+/**
+ * editor-stub.js — HC-COMM-010 P3: thin-stub content for editor-side agents.
+ *
+ * When a repo opts into `execution.mode: editor`, the agents of the server's
+ * EDITOR_SIDE_STEPS are DELIVERED AT RUNTIME (ephemeral, via
+ * `hone step-instruction` / the hone_step_instruction MCP tool) — so `hone
+ * sync` ships a stub instead of persisting the full prompt to disk. This
+ * closes the dominant prompt-exposure leak for editor-mode repos (memo §5 /
+ * analysis G1) WITHOUT touching server-mode repos, whose adopters use the
+ * full synced prompts for daily editor-chat work.
+ *
+ * EDITOR_STUBBED_AGENTS must stay equal to the agents of the server's
+ * EDITOR_SIDE_STEPS (orchestrator.js) — pinned by a regression test that
+ * derives the truth from workflow-dag, since the two packages share no lib.
+ */
+
+const EDITOR_STUBBED_AGENTS = Object.freeze(['code-builder']);
+
+function isEditorStubbedAgent(agent, executionMode) {
+  return executionMode === 'editor' && EDITOR_STUBBED_AGENTS.includes(agent);
+}
+
+function editorStubContent(agent) {
+  return [
+    `# ${agent} — served at runtime by Hone (editor mode)`,
+    '',
+    'This repo runs with `execution.mode: editor`, so this agent\'s pipeline',
+    'instruction is COMPOSED SERVER-SIDE and delivered ephemerally at',
+    'invocation time — it is not stored on disk.',
+    '',
+    'To execute a parked step:',
+    '  1. `hone step-instruction <runId>`   (or the hone_step_instruction MCP tool)',
+    '  2. run the returned instruction in your editor',
+    '  3. `hone submit-step <runId> <stepKey> --file <output>`',
+    '',
+    'Output is judged by real verification (check-patch / verify-patch),',
+    'never taken on trust. Switch `execution.mode` back to `server` and',
+    're-run `hone sync` to restore the full local prompt.',
+    '',
+  ].join('\n');
+}
+
+module.exports = { EDITOR_STUBBED_AGENTS, isEditorStubbedAgent, editorStubContent };

package/lib/overlay-transport.js

@@ -0,0 +1,40 @@
+'use strict';
+/**
+ * overlay-transport.js — HC-COMM-010 C0: read adopter rule-overlays for
+ * transport to the server at run creation.
+ *
+ * `.hone-local/rule-overlays/*.md` lives on ADOPTER DISK — the server can
+ * never read it (the cross-validation finding that refuted "merge overlays
+ * server-side" as originally sketched). So the CLI bundles the raw overlay
+ * texts into orchestrateConfig, exactly the codebaseFiles/§12-A3 transport
+ * pattern. Parsing (front-matter, insertion targets) happens SERVER-side in
+ * C1 via the mergeOverlays machinery — this reader stays deliberately dumb:
+ * raw {name, content} pairs, size/count-capped, degrade-to-empty on every
+ * failure path.
+ */
+const fs = require('node:fs');
+const path = require('node:path');
+
+const DEFAULT_MAX_FILES = 10;
+const DEFAULT_MAX_TOTAL_BYTES = 50_000; // mirrors the codebaseFiles budget
+
+function readRuleOverlays(repoRoot, { maxFiles = DEFAULT_MAX_FILES, maxTotalBytes = DEFAULT_MAX_TOTAL_BYTES } = {}) {
+  const result = { overlays: [], skipped: [] };
+  if (!repoRoot || typeof repoRoot !== 'string') return result;
+  const dir = path.join(repoRoot, '.hone-local', 'rule-overlays');
+  let names;
+  try { names = fs.readdirSync(dir).filter(n => n.endsWith('.md')).sort(); } catch { return result; }
+  let total = 0;
+  for (const name of names) {
+    if (result.overlays.length >= maxFiles) { result.skipped.push(`${name} (file cap ${maxFiles})`); continue; }
+    let content;
+    try { content = fs.readFileSync(path.join(dir, name), 'utf8'); } catch { result.skipped.push(`${name} (unreadable)`); continue; }
+    const bytes = Buffer.byteLength(content, 'utf8');
+    if (total + bytes > maxTotalBytes) { result.skipped.push(`${name} (byte budget ${maxTotalBytes})`); continue; }
+    total += bytes;
+    result.overlays.push({ name, content });
+  }
+  return result;
+}
+
+module.exports = { readRuleOverlays, DEFAULT_MAX_FILES, DEFAULT_MAX_TOTAL_BYTES };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hone-ai/cli",
-  "version": "1.24.0",
+  "version": "1.25.0",
   "description": "Hone AI — Enterprise SDLC Pipeline CLI",
   "main": "hone-cli.js",
   "bin": {