great-cto 1.0.103 → 1.0.105

package/dist/bootstrap.js

@@ -24,10 +24,16 @@ export function bootstrap(dir, detection, archetype, compliance) {
 ## Project
 
 primary: ${archetype}
+archetype: ${archetype}
+project_size: medium
 stack: ${stackLine}
 languages: ${detection.languages.join(", ") || "to be defined"}
 package-manager: ${detection.packageManager ?? "none"}
 
+> \`archetype:\` drives tier/gate selection (see references/security-tiers.md).
+> \`project_size:\` is one of nano | small | medium | large | enterprise — agents
+> scale gate depth accordingly. Edit either if auto-detection got it wrong.
+
 ## Phase
 
 phase: implementation
@@ -38,13 +44,18 @@ phase: implementation
 
 ## Team
 
-size: ${teamSize}
+team-size: ${teamSize}
 mode: solo
 approval-level: ${approvalLevel}
 
+> \`team-size:\` is read at root level (not nested) by /rfc and other commands.
+
 ## Compliance
 
-frameworks: [${complianceLine}]
+compliance: [${complianceLine}]
+
+> \`compliance:\` list drives which checklists security-officer runs.
+> See ARCHETYPES.md "Parameter Values" for supported keys.
 
 ## Goals
 

package/dist/main.js

@@ -175,6 +175,45 @@ async function runInit(args) {
     if (enableResult.alreadyEnabled) {
         log(`  ${dim("already enabled in")} ${enableResult.settingsPath}`);
     }
+    // ── 4b. one-shot legacy cleanup ──────────────────────────
+    // Versions < 1.0.104 copied commands to ~/.claude/commands/ without a
+    // `great_cto-managed` marker; the SessionStart hook in 1.0.104+ can't
+    // safely delete them. If this looks like an upgrade from an older version,
+    // remove any unmarked copies of commands we used to ship so the new loop
+    // can drop its marker-tagged versions.
+    if (existing.length > 0) {
+        try {
+            const { existsSync, readFileSync, unlinkSync } = await import("node:fs");
+            const { homedir } = await import("node:os");
+            const { join } = await import("node:path");
+            const legacy = [
+                "triage", "gates", "dora", "investigate", "threat-model", "sbom",
+                "security-incident", "update", "status", "capture", "revisit",
+                "board-report", "burn", "cost", "poc", "promote", "sec",
+            ];
+            const cmdDir = join(homedir(), ".claude", "commands");
+            let cleaned = 0;
+            for (const name of legacy) {
+                const f = join(cmdDir, `${name}.md`);
+                if (!existsSync(f))
+                    continue;
+                const head = readFileSync(f, "utf-8").slice(0, 4096);
+                // Only delete files that look like OUR old commands (contain great_cto
+                // references) AND lack the 1.0.104+ marker. Hand-written user files
+                // won't match the great_cto reference test.
+                const looksOurs = /great_cto|\.great_cto|Great CTO/.test(head);
+                const hasMarker = /great_cto-managed/.test(head);
+                if (looksOurs && !hasMarker) {
+                    unlinkSync(f);
+                    cleaned++;
+                }
+            }
+            if (cleaned > 0) {
+                log(`  ${dim(`cleaned ${cleaned} legacy command file(s) from ~/.claude/commands (pre-1.0.104 unmarked)`)}`);
+            }
+        }
+        catch { /* best-effort — don't block install */ }
+    }
     // ── 5. bootstrap ─────────────────────────────────────────
     step(5, 5, "bootstrapping .great_cto/PROJECT.md");
     const bs = bootstrap(args.dir, detection, archetype, compliance);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "1.0.103",
+  "version": "1.0.105",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",