great-cto 2.90.0 → 2.92.0

package/board/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "great_cto",
   "id": "great_cto",
   "description": "Engineering process for solo founders and teams up to 50 engineers. Agents do architecture, code review, QA, and security. You make two decisions per feature.",
-  "version": "2.90.0",
+  "version": "2.92.0",
   "author": {
     "name": "Great CTO",
     "url": "https://github.com/avelikiy/great_cto"
@@ -62,7 +62,7 @@
           },
           {
             "type": "command",
-            "command": "export PATH=\"/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\"; PLUGIN_DIR=$(ls -d ~/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||'); if [ -z \"$PLUGIN_DIR\" ]; then echo 'GREAT_CTO: plugin dir not found \u2014 run /update'; else mkdir -p ~/.claude/commands ~/.claude/agents ~/.great_cto .great_cto; for STALE in triage gates dora investigate threat-model sbom security-incident update status capture revisit board-report; do STALE_F=~/.claude/commands/${STALE}.md; [ -f \"$STALE_F\" ] && grep -q 'great_cto-managed' \"$STALE_F\" 2>/dev/null && rm -f \"$STALE_F\" 2>/dev/null; done; for CMD in start audit inbox board digest review recall ownership oncall rfc release doctor burn cost sec poc promote crystallize migrate resume save learn agent-review agent-retire help voice-compliance aedt-bias-audit api-contract-review discover gen-evals prd prompt-evolve skillify spec ccr exception trace coding-audit gov-metrics upl-check procurement-review close-review msp-review tax-review; do if cp \"${PLUGIN_DIR}/commands/${CMD}.md\" ~/.claude/commands/${CMD}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/commands/${CMD}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/commands/${CMD}.md; fi; done; for STALE_AGENT in tech-lead; do STALE_AF=~/.claude/agents/great_cto-${STALE_AGENT}.md; [ -f \"$STALE_AF\" ] && grep -q 'great_cto-managed' \"$STALE_AF\" 2>/dev/null && rm -f \"$STALE_AF\" 2>/dev/null; done; for AGENT in product-owner architect senior-dev code-reviewer qa-engineer e2e-test-engineer security-officer devops l3-support project-auditor ai-prompt-architect ai-eval-engineer ai-security-reviewer web-store-reviewer pci-reviewer oracle-reviewer firmware-reviewer regulated-reviewer performance-engineer db-migration-reviewer pm mobile-store-reviewer library-reviewer infra-reviewer cli-reviewer game-reviewer data-platform-reviewer devtools-reviewer enterprise-saas-reviewer mlops-reviewer streaming-reviewer marketplace-reviewer cms-reviewer continuous-learner edtech-reviewer gov-reviewer insurance-reviewer voice-ai-reviewer hr-ai-reviewer api-platform-reviewer gdpr-reviewer us-privacy-reviewer dpdpa-reviewer adtech-privacy-reviewer cmmc-reviewer us-ai-reviewer legal-reviewer rcm-reviewer procurement-reviewer accounting-reviewer msp-reviewer tax-reviewer coordinator; do if cp \"${PLUGIN_DIR}/agents/${AGENT}.md\" ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/agents/great_cto-${AGENT}.md; fi; done; cp \"${PLUGIN_DIR}/skills/great_cto/ARCHETYPES.md\" .great_cto/ARCHETYPES.md 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/SKILL.md\" .great_cto/SKILL.md 2>/dev/null || true; { printf \"export PATH=/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\\nexport ARCHETYPES_MD=.great_cto/ARCHETYPES.md\\n\"; } > .great_cto/env.sh; fi; if [ ! -d ~/.great_cto/catalog ]; then git clone --depth=1 https://github.com/davila7/claude-code-templates.git ~/.great_cto/catalog 2>/dev/null & fi; if [ ! -d ~/.great_cto/anthropic-skills ]; then git clone --depth=1 https://github.com/anthropics/skills.git ~/.great_cto/anthropic-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/anthropic-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/anthropic-skills/.git 2>/dev/null || echo 0))) -gt 604800 ]; then (cd ~/.great_cto/anthropic-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -d ~/.great_cto/personal-skills ]; then git clone --depth=1 https://github.com/avelikiy/ai-agent-skills.git ~/.great_cto/personal-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/personal-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/personal-skills/.git 2>/dev/null || echo 0))) -gt 86400 ]; then (cd ~/.great_cto/personal-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -f ~/.great_cto/skills-registry.json ] || [ $(($(date +%s) - $(stat -f %m ~/.great_cto/skills-registry.json 2>/dev/null || stat -c %Y ~/.great_cto/skills-registry.json 2>/dev/null || echo 0))) -gt 86400 ]; then [ -x \"${PLUGIN_DIR}/scripts/skill-discover.sh\" ] && bash \"${PLUGIN_DIR}/scripts/skill-discover.sh\" >/dev/null 2>&1 & fi; [ -x \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" ] && bash \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" 2>/dev/null || true; bash \"${PLUGIN_DIR}/scripts/apply-model-override.sh\" 2>/dev/null || true; bd prime 2>/dev/null || true; echo '=== PREFERENCES ==='; cat ~/.great_cto/preferences.md 2>/dev/null || true; echo '=== PROJECT ==='; cat .great_cto/PROJECT.md 2>/dev/null || echo 'GREAT_CTO: No PROJECT.md \u2014 run /start'; PHASE=$(grep '^phase:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' || echo implementation); echo '=== PHASE ==='; echo \"$PHASE\"; { [ \"$PHASE\" != review ] && [ \"$PHASE\" != release ]; } && { echo '=== BRAIN ==='; head -30 .great_cto/brain.md 2>/dev/null; } || true; [ \"$PHASE\" = implementation ] && { echo '=== CODEBASE ==='; head -20 .great_cto/CODEBASE.md 2>/dev/null; } || true; echo '=== LOCAL ==='; cat .great_cto/local.md 2>/dev/null || true; [ \"$PHASE\" != planning ] && { echo '=== HANDOFF ==='; cat .great_cto/HANDOFF.md 2>/dev/null || echo 'No handoff state \u2014 fresh session'; } || true; [ \"$PHASE\" = review ] && { echo '=== LATEST QA ==='; ls docs/qa-reports/QA-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; echo '=== LATEST CSO ==='; ls docs/security/CSO-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; } || true; [ \"$PHASE\" = release ] && { echo '=== PERF BASELINE ==='; tail -10 .great_cto/perf-baseline.log 2>/dev/null; } || true; echo '=== STATUS ==='; OPEN_GATES=$(bd list --label gate --status open 2>/dev/null | wc -l | tr -d ' '); OPEN_TASKS=$(bd list --status open 2>/dev/null | wc -l | tr -d ' '); BRANCH=$(git branch --show-current 2>/dev/null || echo '?'); LAST_AGENT=$(ls -t .great_cto/verdicts/*.log 2>/dev/null | head -1 | xargs tail -1 2>/dev/null | awk '{print $2}' || echo 'none'); printf 'branch=%s | gates=%s | tasks=%s | last_agent=%s\\n' \"$BRANCH\" \"${OPEN_GATES:-0}\" \"${OPEN_TASKS:-0}\" \"${LAST_AGENT:-none}\"; [ \"${OPEN_GATES:-0}\" -gt 0 ] && echo '\u2192 run /inbox to see pending decisions' || true; P0_OPEN=$(bd list --status open 2>/dev/null | grep -c 'P0'); P0_OPEN=${P0_OPEN:-0}; if [ \"$P0_OPEN\" -gt 0 ]; then echo ''; printf '\\033[41;97m \ud83d\udea8 P0 OPEN: %s \u2014 run /inbox NOW \\033[0m\\n' \"$P0_OPEN\"; bd list --status open 2>/dev/null | grep 'P0' | head -3 | sed 's/^/    /'; fi; NOW_EPOCH=$(date +%s); LAST_AUDIT_FILE=$(find docs/audit -maxdepth 1 -name 'AUDIT-*.md' 2>/dev/null | sort | tail -1); if [ -n \"$LAST_AUDIT_FILE\" ]; then AUD_M=$(stat -f %m \"$LAST_AUDIT_FILE\" 2>/dev/null || stat -c %Y \"$LAST_AUDIT_FILE\" 2>/dev/null || echo $NOW_EPOCH); AUD_AGE=$(( (NOW_EPOCH - AUD_M) / 86400 )); [ \"$AUD_AGE\" -gt 30 ] && echo \"\u26a0 audit $AUD_AGE days old \u2014 run /audit\"; else echo '\u26a0 no audit artefact \u2014 run /audit or /doctor'; fi; if [ -f .great_cto/digest-latest.md ]; then DIG_M=$(stat -f %m .great_cto/digest-latest.md 2>/dev/null || stat -c %Y .great_cto/digest-latest.md 2>/dev/null || echo $NOW_EPOCH); DIG_AGE=$(( (NOW_EPOCH - DIG_M) / 86400 )); [ \"$DIG_AGE\" -gt 8 ] && echo \"\u26a0 digest $DIG_AGE days old \u2014 run /digest 7\"; fi; [ \"$PHASE\" != implementation ] && cat .great_cto/digest-latest.md 2>/dev/null | head -5 || true; [ -f \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" ] && node \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" 2>/dev/null; [ -n \"$PLUGIN_DIR\" ] && [ -f .great_cto/PROJECT.md ] && [ ! -f .great_cto/CODEBASE.md ] && node \"${PLUGIN_DIR}/scripts/first-run-codebase.mjs\" >/dev/null 2>&1 & node \"${PLUGIN_DIR}/scripts/hooks/quota-check.mjs\" 2>/dev/null || true; echo '=== PATTERNS ==='; GP_DIR=\"$HOME/.great_cto/global-patterns\"; ARCH=$(grep '^primary:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' | head -1); if [ -d \"$GP_DIR\" ] && ls \"$GP_DIR\"/GP-*.md >/dev/null 2>&1; then ACTIVE_COUNT=$(grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | wc -l | tr -d ' '); echo \"Active patterns: ${ACTIVE_COUNT:-0}\"; if [ -n \"$ARCH\" ] && [ \"${ACTIVE_COUNT:-0}\" -gt 0 ]; then grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | xargs grep -lE \"applies_to:.*$ARCH\" 2>/dev/null | sort -V | tail -5 | while read f; do SLUG=$(basename \"$f\" .md); SYMPT=$(grep -m1 '^symptom:' \"$f\" 2>/dev/null | sed 's/symptom: //'); DETECT=$(grep -A 2 '^detection_order:' \"$f\" 2>/dev/null | grep '^  - ' | head -1 | sed 's/^  - //'); HITS=$(grep -m1 '^hits:' \"$f\" 2>/dev/null | awk '{print $2}'); printf '  %s (hits=%s): %s\\n  \\u2192 Check first: %s\\n' \"$SLUG\" \"${HITS:-0}\" \"$SYMPT\" \"$DETECT\"; done || echo \"  no patterns match archetype=$ARCH yet \u2014 /crystallize builds the library\"; fi; else echo 'no global patterns yet \u2014 run /crystallize after first incident'; fi; [ -x \"${PLUGIN_DIR}/scripts/check-update.sh\" ] && bash \"${PLUGIN_DIR}/scripts/check-update.sh\" \"${PLUGIN_DIR}/.claude-plugin/plugin.json\" 2>/dev/null || true ; # great_cto-cache-cleanup v2.5.8: keep only 3 most recent cached versions to prevent disk bloat. ls -d \"$HOME\"/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | awk -v k=3 '{a[NR]=$0} END {for (i=1; i<=NR-k; i++) print a[i]}' | xargs -I{} rm -rf {} 2>/dev/null || true",
+            "command": "export PATH=\"/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\"; PLUGIN_DIR=$(ls -d ~/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||'); if [ -z \"$PLUGIN_DIR\" ]; then echo 'GREAT_CTO: plugin dir not found \u2014 run /update'; else mkdir -p ~/.claude/commands ~/.claude/agents ~/.great_cto .great_cto; for STALE in triage gates dora investigate threat-model sbom security-incident update status capture revisit board-report; do STALE_F=~/.claude/commands/${STALE}.md; [ -f \"$STALE_F\" ] && grep -q 'great_cto-managed' \"$STALE_F\" 2>/dev/null && rm -f \"$STALE_F\" 2>/dev/null; done; for CMD in start audit inbox board digest review recall ownership oncall rfc release doctor burn cost sec poc promote crystallize migrate resume save learn agent-review agent-retire help voice-compliance aedt-bias-audit api-contract-review discover gen-evals prd prompt-evolve skillify spec ccr exception trace coding-audit gov-metrics upl-check procurement-review close-review msp-review tax-review; do if cp \"${PLUGIN_DIR}/commands/${CMD}.md\" ~/.claude/commands/${CMD}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/commands/${CMD}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/commands/${CMD}.md; fi; done; for STALE_AGENT in tech-lead; do STALE_AF=~/.claude/agents/great_cto-${STALE_AGENT}.md; [ -f \"$STALE_AF\" ] && grep -q 'great_cto-managed' \"$STALE_AF\" 2>/dev/null && rm -f \"$STALE_AF\" 2>/dev/null; done; for AGENT in product-owner architect senior-dev code-reviewer qa-engineer e2e-test-engineer security-officer devops l3-support project-auditor ai-prompt-architect ai-eval-engineer ai-security-reviewer web-store-reviewer pci-reviewer oracle-reviewer firmware-reviewer regulated-reviewer healthcare-reviewer performance-engineer db-migration-reviewer pm mobile-store-reviewer library-reviewer infra-reviewer cli-reviewer mcp-server-reviewer game-reviewer data-platform-reviewer devtools-reviewer enterprise-saas-reviewer mlops-reviewer streaming-reviewer marketplace-reviewer cms-reviewer continuous-learner edtech-reviewer gov-reviewer insurance-reviewer voice-ai-reviewer hr-ai-reviewer api-platform-reviewer gdpr-reviewer us-privacy-reviewer dpdpa-reviewer adtech-privacy-reviewer cmmc-reviewer us-ai-reviewer legal-reviewer rcm-reviewer procurement-reviewer accounting-reviewer msp-reviewer tax-reviewer coordinator; do if cp \"${PLUGIN_DIR}/agents/${AGENT}.md\" ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/agents/great_cto-${AGENT}.md; fi; done; cp \"${PLUGIN_DIR}/skills/great_cto/ARCHETYPES.md\" .great_cto/ARCHETYPES.md 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/SKILL.md\" .great_cto/SKILL.md 2>/dev/null || true; { printf \"export PATH=/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\\nexport ARCHETYPES_MD=.great_cto/ARCHETYPES.md\\n\"; } > .great_cto/env.sh; fi; if [ ! -d ~/.great_cto/catalog ]; then git clone --depth=1 https://github.com/davila7/claude-code-templates.git ~/.great_cto/catalog 2>/dev/null & fi; if [ ! -d ~/.great_cto/anthropic-skills ]; then git clone --depth=1 https://github.com/anthropics/skills.git ~/.great_cto/anthropic-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/anthropic-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/anthropic-skills/.git 2>/dev/null || echo 0))) -gt 604800 ]; then (cd ~/.great_cto/anthropic-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -d ~/.great_cto/personal-skills ]; then git clone --depth=1 https://github.com/avelikiy/ai-agent-skills.git ~/.great_cto/personal-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/personal-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/personal-skills/.git 2>/dev/null || echo 0))) -gt 86400 ]; then (cd ~/.great_cto/personal-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -f ~/.great_cto/skills-registry.json ] || [ $(($(date +%s) - $(stat -f %m ~/.great_cto/skills-registry.json 2>/dev/null || stat -c %Y ~/.great_cto/skills-registry.json 2>/dev/null || echo 0))) -gt 86400 ]; then [ -x \"${PLUGIN_DIR}/scripts/skill-discover.sh\" ] && bash \"${PLUGIN_DIR}/scripts/skill-discover.sh\" >/dev/null 2>&1 & fi; [ -x \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" ] && bash \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" 2>/dev/null || true; bash \"${PLUGIN_DIR}/scripts/apply-model-override.sh\" 2>/dev/null || true; bd prime 2>/dev/null || true; echo '=== PREFERENCES ==='; cat ~/.great_cto/preferences.md 2>/dev/null || true; echo '=== PROJECT ==='; cat .great_cto/PROJECT.md 2>/dev/null || echo 'GREAT_CTO: No PROJECT.md \u2014 run /start'; PHASE=$(grep '^phase:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' || echo implementation); echo '=== PHASE ==='; echo \"$PHASE\"; { [ \"$PHASE\" != review ] && [ \"$PHASE\" != release ]; } && { echo '=== BRAIN ==='; head -30 .great_cto/brain.md 2>/dev/null; } || true; [ \"$PHASE\" = implementation ] && { echo '=== CODEBASE ==='; head -20 .great_cto/CODEBASE.md 2>/dev/null; } || true; echo '=== LOCAL ==='; cat .great_cto/local.md 2>/dev/null || true; [ \"$PHASE\" != planning ] && { echo '=== HANDOFF ==='; cat .great_cto/HANDOFF.md 2>/dev/null || echo 'No handoff state \u2014 fresh session'; } || true; [ \"$PHASE\" = review ] && { echo '=== LATEST QA ==='; ls docs/qa-reports/QA-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; echo '=== LATEST CSO ==='; ls docs/security/CSO-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; } || true; [ \"$PHASE\" = release ] && { echo '=== PERF BASELINE ==='; tail -10 .great_cto/perf-baseline.log 2>/dev/null; } || true; echo '=== STATUS ==='; OPEN_GATES=$(bd list --label gate --status open 2>/dev/null | wc -l | tr -d ' '); OPEN_TASKS=$(bd list --status open 2>/dev/null | wc -l | tr -d ' '); BRANCH=$(git branch --show-current 2>/dev/null || echo '?'); LAST_AGENT=$(ls -t .great_cto/verdicts/*.log 2>/dev/null | head -1 | xargs tail -1 2>/dev/null | awk '{print $2}' || echo 'none'); printf 'branch=%s | gates=%s | tasks=%s | last_agent=%s\\n' \"$BRANCH\" \"${OPEN_GATES:-0}\" \"${OPEN_TASKS:-0}\" \"${LAST_AGENT:-none}\"; [ \"${OPEN_GATES:-0}\" -gt 0 ] && echo '\u2192 run /inbox to see pending decisions' || true; P0_OPEN=$(bd list --status open 2>/dev/null | grep -c 'P0'); P0_OPEN=${P0_OPEN:-0}; if [ \"$P0_OPEN\" -gt 0 ]; then echo ''; printf '\\033[41;97m \ud83d\udea8 P0 OPEN: %s \u2014 run /inbox NOW \\033[0m\\n' \"$P0_OPEN\"; bd list --status open 2>/dev/null | grep 'P0' | head -3 | sed 's/^/    /'; fi; NOW_EPOCH=$(date +%s); LAST_AUDIT_FILE=$(find docs/audit -maxdepth 1 -name 'AUDIT-*.md' 2>/dev/null | sort | tail -1); if [ -n \"$LAST_AUDIT_FILE\" ]; then AUD_M=$(stat -f %m \"$LAST_AUDIT_FILE\" 2>/dev/null || stat -c %Y \"$LAST_AUDIT_FILE\" 2>/dev/null || echo $NOW_EPOCH); AUD_AGE=$(( (NOW_EPOCH - AUD_M) / 86400 )); [ \"$AUD_AGE\" -gt 30 ] && echo \"\u26a0 audit $AUD_AGE days old \u2014 run /audit\"; else echo '\u26a0 no audit artefact \u2014 run /audit or /doctor'; fi; if [ -f .great_cto/digest-latest.md ]; then DIG_M=$(stat -f %m .great_cto/digest-latest.md 2>/dev/null || stat -c %Y .great_cto/digest-latest.md 2>/dev/null || echo $NOW_EPOCH); DIG_AGE=$(( (NOW_EPOCH - DIG_M) / 86400 )); [ \"$DIG_AGE\" -gt 8 ] && echo \"\u26a0 digest $DIG_AGE days old \u2014 run /digest 7\"; fi; [ \"$PHASE\" != implementation ] && cat .great_cto/digest-latest.md 2>/dev/null | head -5 || true; [ -f \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" ] && node \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" 2>/dev/null; [ -n \"$PLUGIN_DIR\" ] && [ -f .great_cto/PROJECT.md ] && [ ! -f .great_cto/CODEBASE.md ] && node \"${PLUGIN_DIR}/scripts/first-run-codebase.mjs\" >/dev/null 2>&1 & node \"${PLUGIN_DIR}/scripts/hooks/quota-check.mjs\" 2>/dev/null || true; echo '=== PATTERNS ==='; GP_DIR=\"$HOME/.great_cto/global-patterns\"; ARCH=$(grep '^primary:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' | head -1); if [ -d \"$GP_DIR\" ] && ls \"$GP_DIR\"/GP-*.md >/dev/null 2>&1; then ACTIVE_COUNT=$(grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | wc -l | tr -d ' '); echo \"Active patterns: ${ACTIVE_COUNT:-0}\"; if [ -n \"$ARCH\" ] && [ \"${ACTIVE_COUNT:-0}\" -gt 0 ]; then grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | xargs grep -lE \"applies_to:.*$ARCH\" 2>/dev/null | sort -V | tail -5 | while read f; do SLUG=$(basename \"$f\" .md); SYMPT=$(grep -m1 '^symptom:' \"$f\" 2>/dev/null | sed 's/symptom: //'); DETECT=$(grep -A 2 '^detection_order:' \"$f\" 2>/dev/null | grep '^  - ' | head -1 | sed 's/^  - //'); HITS=$(grep -m1 '^hits:' \"$f\" 2>/dev/null | awk '{print $2}'); printf '  %s (hits=%s): %s\\n  \\u2192 Check first: %s\\n' \"$SLUG\" \"${HITS:-0}\" \"$SYMPT\" \"$DETECT\"; done || echo \"  no patterns match archetype=$ARCH yet \u2014 /crystallize builds the library\"; fi; else echo 'no global patterns yet \u2014 run /crystallize after first incident'; fi; [ -x \"${PLUGIN_DIR}/scripts/check-update.sh\" ] && bash \"${PLUGIN_DIR}/scripts/check-update.sh\" \"${PLUGIN_DIR}/.claude-plugin/plugin.json\" 2>/dev/null || true ; # great_cto-cache-cleanup v2.5.8: keep only 3 most recent cached versions to prevent disk bloat. ls -d \"$HOME\"/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | awk -v k=3 '{a[NR]=$0} END {for (i=1; i<=NR-k; i++) print a[i]}' | xargs -I{} rm -rf {} 2>/dev/null || true",
             "timeout": 30,
             "statusMessage": "Loading Great CTO context..."
           },

package/board/packages/board/lib/beads.mjs

@@ -132,7 +132,14 @@ function tasksMdStatus(rawStatus, id, title) {
   else if (s === 'in_progress' || s === 'in-progress' || s === 'wip' || s === 'doing') status = 'in_progress';
   else if (s === 'blocked') status = 'blocked';
   else status = isGate ? 'gate' : 'backlog';
-  return { status, raw_status: status === 'done' ? 'closed' : 'open', isGate };
+  // raw_status is what the inbox filters on, because mapStatus() rewrites any
+  // gate-labelled task to 'gate' and filtering on the mapped value would leave
+  // closed gates in the inbox forever. That fix covered `done`; it did not cover
+  // `blocked`, so a gate marked blocked in tasks.md reported raw_status 'open'
+  // and never left the inbox — for exactly the bd-less projects this parser
+  // exists to serve.
+  const raw = status === 'done' ? 'closed' : status === 'blocked' ? 'blocked' : 'open';
+  return { status, raw_status: raw, isGate };
 }
 
 // Build the full task record both parsers emit — one shape so getTasks can
@@ -201,7 +208,19 @@ const TITLE_MAX = 160;
 function capTitle(title, description) {
   const t = String(title || '').trim();
   if (t.length <= TITLE_MAX) return { title: t, description };
-  const cut = t.lastIndexOf(' ', TITLE_MAX);
+  let cut = t.lastIndexOf(' ', TITLE_MAX);
+  // Cutting inside a markdown link leaves `see [the design…` in the title and
+  // the URL stranded in the description — the board renders a broken link and
+  // the reader cannot tell the title was truncated rather than malformed. Back
+  // up to before the link when the cut lands inside one.
+  const linkStart = t.lastIndexOf('[', cut);
+  if (linkStart !== -1) {
+    const linkEnd = t.indexOf(')', linkStart);
+    if (linkEnd === -1 || linkEnd >= cut) {
+      const before = t.lastIndexOf(' ', linkStart);
+      if (before > 0) cut = before;
+    }
+  }
   const at = cut > TITLE_MAX * 0.6 ? cut : TITLE_MAX;
   const overflow = t.slice(at).trim();
   return {
@@ -264,11 +283,23 @@ function setTaskStatusInTasksMd(cwd, id, newStatus) {
     if (!cols) {
       const lower = cells.map(c => c.toLowerCase());
       if (lower.indexOf('id') !== -1 && lower.indexOf('status') !== -1) {
-        cols = { id: lower.indexOf('id'), status: lower.indexOf('status') };
+        cols = { id: lower.indexOf('id'), status: lower.indexOf('status'), width: cells.length };
       }
       continue;
     }
     if ((cells[cols.id] || '') === id) {
+      // A title containing an unescaped `|` — "deploy A | B decision" — splits
+      // into an extra cell, so every column after it is shifted. Writing by
+      // index then put the new status INSIDE the title and left the real status
+      // cell untouched: the row lost text and the gate stayed open while the
+      // board reported it approved. A row that does not match the header's
+      // width is not one we can address by index, so it is refused instead.
+      if (cells.length !== cols.width) {
+        readDegradation.set(cwd,
+          `tasks.md row '${id}' has ${cells.length} cells but the table header has ${cols.width} ` +
+          '(an unescaped `|` in a cell?) — status not written, as writing by column would corrupt the row');
+        return false;
+      }
       cells[cols.status] = newStatus;
       // Re-escape pipes we unescaped on the way in, then rebuild the row.
       lines[i] = '| ' + cells.map(c => c.replace(/\|/g, '\\|')).join(' | ') + ' |';
@@ -344,8 +375,13 @@ function parseTasksMd(cwd) {
         source: 'tasks.md',
       });
     }
-    // No checkbox tasks → try the table dialect before giving up.
-    if (tasks.length === 0) return parseTableTasks(r.text);
+    // Both dialects, always. Parsing the table only when the checkbox pass came
+    // back empty meant a single stray `- [ ] …` line hid every table row behind
+    // it — and a gate row that never reaches the board is a gate nobody can
+    // approve. The checkbox pass wins a duplicate id: it is the older dialect,
+    // so a file carrying both is one being migrated away from it.
+    const seen = new Set(tasks.map((t) => t.id));
+    for (const t of parseTableTasks(r.text)) if (!seen.has(t.id)) tasks.push(t);
     return tasks;
   } catch (e) {
     // The file was readable but we could not make sense of it. Record it: an

package/board/packages/board/lib/fleet.mjs

@@ -23,7 +23,12 @@ function deriveDomain(slug) {
   const s = slug.toLowerCase();
   if (/architect|adr|design|prompt/.test(s)) return 'arch';
   if (/security|sec-|threat|pci|gdpr|hipaa/.test(s)) return 'security';
-  if (/qa|test|eval|review/.test(s)) return 'qa';
+  // `review` used to be in this alternation, and it matched every `*-reviewer`
+  // slug — so 37 of the 40 agents in `qa` were domain reviewers, the `domain`
+  // bucket below was permanently empty, and the panel grouped 58% of the fleet
+  // under one heading. The rule that was supposed to separate them sat two lines
+  // later and could never be reached.
+  if (/\bqa\b|test|eval|^code-reviewer$/.test(s)) return 'qa';
   if (/devops|deploy|infra|l3|support|oncall/.test(s)) return 'ops';
   if (/reviewer$/.test(s)) return 'domain';
   if (/pm|plan|product/.test(s)) return 'pm';

package/board/packages/board/lib/projects.mjs

@@ -64,18 +64,59 @@ function pickBestBySlug(candidates) {
 function existsSafe(p) {
   try { return !!p && fs.existsSync(p); } catch { return false; }
 }
-// Dedupe registry entries by slug before writing, so the registry self-heals
-// on every write regardless of how the duplicate got in (great_cto-7xfc).
+// Two directories that share a basename — ~/work/api and ~/personal/api — read
+// as the same slug. Collapsing them lost one project outright, so a colliding
+// name is qualified by its parent instead: api → api@work, api@personal. The
+// slug stays the lookup key, so it still has to be unique; what changed is that
+// uniqueness is now bought by renaming rather than by dropping a project.
+function qualifiedSlug(project, taken) {
+  const parts = String(project.path || '').split(path.sep).filter(Boolean).slice(0, -1).reverse();
+  let candidate = project.slug;
+  for (const parent of parts) {
+    if (!taken.has(candidate)) return candidate;
+    candidate = `${project.slug}@${parent}`;
+  }
+  let n = 2;
+  while (taken.has(candidate)) candidate = `${project.slug}@${n++}`;
+  return candidate;
+}
+
+// Dedupe registry entries before writing, so the registry self-heals on every
+// write regardless of how the duplicate got in (great_cto-7xfc).
+//
+// Identity is the PATH. Entries sharing a slug are only the same project when
+// at most one of their paths still exists — that is a repo that moved, and
+// collapsing it is the original fix. Two live paths are two projects.
 function dedupeProjects(projects) {
-  const bySlug = new Map();
+  // Same slug AND same path is one entry written twice. A shared path under two
+  // different slugs is left alone — someone registered an alias deliberately.
+  const exact = new Map();
   for (const p of projects) {
     if (!p || !p.slug) continue;
+    const key = `${p.slug}\u0000${p.path || ''}`;
+    const prior = exact.get(key);
+    exact.set(key, prior ? pickBestBySlug([prior, p]) : p);
+  }
+
+  const bySlug = new Map();
+  for (const p of exact.values()) {
     const group = bySlug.get(p.slug) || [];
     group.push(p);
     bySlug.set(p.slug, group);
   }
+
   const out = [];
-  for (const group of bySlug.values()) out.push(pickBestBySlug(group));
+  const taken = new Set();
+  for (const group of bySlug.values()) {
+    const live = group.filter((p) => existsSafe(p.path));
+    // 0 or 1 live path → one project, possibly one that moved.
+    const keep = live.length > 1 ? live : [pickBestBySlug(group)];
+    for (const p of keep) {
+      const slug = qualifiedSlug(p, taken);
+      taken.add(slug);
+      out.push(slug === p.slug ? p : { ...p, slug });
+    }
+  }
   return out;
 }
 function writeProjectsRegistry(reg) {
@@ -169,7 +210,10 @@ function autoRegisterProject(dir) {
   const reg = readProjectsRegistry();
   const existingByPath = reg.projects.find(p => p.path === meta.path);
   if (existingByPath) return meta; // already registered at this path, nothing to do
-  const existingBySlug = reg.projects.find(p => p.slug === meta.slug);
+  // Only an entry whose path is GONE is this repo having moved. An entry whose
+  // path still exists is a different project that happens to share a name, and
+  // overwriting its path deleted it from the switcher silently.
+  const existingBySlug = reg.projects.find(p => p.slug === meta.slug && !existsSafe(p.path));
   if (existingBySlug) {
     // Repo moved: update the existing entry's path in place instead of
     // inserting a second entry for the same slug (great_cto-7xfc).

package/board/packages/board/lib/verdicts.mjs

@@ -1,6 +1,8 @@
 import fs from 'fs';
 import path from 'path';
 import { GREAT_CTO_DIR } from './config.mjs';
+import { parseVerdictLine } from '../../../scripts/lib/verdict-record.mjs';
+
 
 function readVerdicts(cwd = null) {
   // Verdict attribution model:
@@ -44,37 +46,23 @@ function readVerdicts(cwd = null) {
     const lines = fs.readFileSync(path.join(verdictDir, file), 'utf8')
       .split('\n').filter(Boolean);
     for (const line of lines) {
-      // When reading global with a project filter, only include lines tagged
-      // with this project's slug.
-      if (projectTagFilter) {
-        const tagMatch = line.match(/\bproject=([^\s|]+)/);
-        if (!tagMatch || tagMatch[1] !== projectTagFilter) continue;
-      }
-      // Two formats agents emit in the wild:
-      //   space-separated:  "<ts> <verdict> <details> cost=$X"
-      //   pipe-separated:   "<ts> | <agent> | <verdict> | <details> | cost=$X"
-      // Pre-2026-05: parts[1] always took the 2nd whitespace token, which
-      // for the pipe form is "|", breaking /api/pipeline status mapping
-      // (verdicts displayed as "|" instead of APPROVED/DONE/BLOCKED).
-      // Now we detect the pipe form and parse it differently.
-      let ts, verdict;
-      if (line.includes(' | ')) {
-        const pipeParts = line.split('|').map(s => s.trim());
-        ts = pipeParts[0].trim();
-        // Pipe form: [ts, agent, verdict, details, cost]
-        // Verdict is at index 2 (after ts and agent name).
-        verdict = pipeParts[2] || '';
-      } else {
-        const parts = line.split(' ');
-        ts = parts[0];
-        verdict = parts[1] || '';
-      }
-      const costMatch = line.match(/\bcost=\$?(\d+\.?\d*)\b/i);
+      const parsed = parseVerdictLine(line);
+      if (!parsed.ok) continue;          // unreadable — counted by the CLI, not shown as a verdict
+
+      // When reading global with a project filter, only include records for this
+      // project. Read from the parsed record, not from a `project=` substring:
+      // that tag only exists in the legacy text form, so matching on it would
+      // have dropped every new NDJSON record from the global view.
+      if (projectTagFilter && parsed.rec.project !== projectTagFilter) continue;
+      // Format handling lives in scripts/lib/verdict-record.mjs: v1 NDJSON for
+      // anything written from 2026-08 on, plus both legacy text dialects so the
+      // history keeps reading.
+      const { ts, verdict } = parsed.rec;
       results.push({
         ts,
         agent,
         verdict,
-        cost_usd: costMatch ? parseFloat(costMatch[1]) : null,
+        cost_usd: parsed.rec.cost_usd ?? null,
         raw: line.replace(/\s*\bcost=\$?\d+\.?\d*\b/i, ''),
       });
     }
@@ -169,8 +157,14 @@ function readSecStats(cwd = process.cwd()) {
   if (!fs.existsSync(secDir)) return { approved: 0, blocked: 0 };
   for (const file of fs.readdirSync(secDir).filter(f => f.endsWith('.md'))) {
     const content = fs.readFileSync(path.join(secDir, file), 'utf8');
-    if (/APPROVED/i.test(content)) approved++;
-    if (/BLOCKED/i.test(content)) blocked++;
+    // One report is one outcome. Testing for each word separately counted a
+    // report that says "initially BLOCKED, now APPROVED" as both an approval
+    // and a block — the two counters summed to more than the number of reports,
+    // and a resolved finding kept inflating the blocked count forever. The LAST
+    // verdict word in the file is the one that stands.
+    const last = [...content.matchAll(/\b(APPROVED|BLOCKED)\b/gi)].pop();
+    if (!last) continue;
+    if (last[1].toUpperCase() === 'APPROVED') approved++; else blocked++;
   }
   return { approved, blocked };
 }

package/board/packages/board/mcp-server.mjs

@@ -118,13 +118,22 @@ const TOOLS = [
 ];
 
 // ── HTTP helpers ───────────────────────────────────────────────────────────
+// An MCP tool call blocks the model until it answers. Without a deadline, a
+// board that accepts the connection and then never replies — paused process,
+// half-open socket after a laptop sleep — hangs the caller indefinitely with no
+// way to tell it apart from slow work.
+const FETCH_TIMEOUT_MS = 10_000;
+
 async function boardFetch(path) {
   try {
-    const res = await fetch(`${BASE_URL}${path}`);
+    const res = await fetch(`${BASE_URL}${path}`, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
     if (!res.ok) throw new Error(`HTTP ${res.status}`);
     return res.json();
   } catch (e) {
-    throw new Error(`Board unreachable at ${BASE_URL} — is great-cto board running? (${e.message})`);
+    const why = e.name === 'TimeoutError' || e.name === 'AbortError'
+      ? `no response within ${FETCH_TIMEOUT_MS / 1000}s`
+      : e.message;
+    throw new Error(`Board unreachable at ${BASE_URL} — is great-cto board running? (${why})`);
   }
 }
 
@@ -163,17 +172,20 @@ async function callTool(name, args = {}) {
         lines.push(`- **${b.id}** ${b.title}`);
       }
     }
-    if (metrics) {
-      const done = metrics.done ?? 0;
-      const total = metrics.total ?? 0;
-      lines.push('', `**Tasks:** ${done}/${total} done`);
-    }
+    // /api/metrics nests these under `tasks` — reading metrics.done/.total off
+    // the root gave undefined every time, so this line reported "0/0 done" for
+    // every project regardless of how much had shipped.
+    const t = metrics && metrics.tasks;
+    if (t) lines.push('', `**Tasks:** ${t.done ?? 0}/${t.total ?? 0} done`);
     return lines.join('\n');
   }
 
   if (name === 'cost_summary') {
     const days = Math.min(365, Math.max(1, args.days || 30));
-    const d = await boardFetch(`/api/cost${pqs(proj)}&days=${days}`);
+    // With no project, pqs() is empty and this built `/api/cost&days=30` — a
+    // path the router never matches, so cost_summary answered "board
+    // unreachable" for anyone who did not pass a project.
+    const d = await boardFetch(`/api/cost${pqs(proj)}${pqs(proj) ? '&' : '?'}days=${days}`);
     const lines = [
       `## Cost summary${proj ? ` — ${proj}` : ''} (last ${days} days)`,
       '',

package/board/scripts/lib/verdict-record.mjs

@@ -0,0 +1,238 @@
+#!/usr/bin/env node
+/**
+ * verdict-record — one schema for the lines agents write and the board reads.
+ *
+ * Why this exists
+ * ---------------
+ * Verdicts were free text in two dialects:
+ *
+ *   "<ts> <verdict> <details> cost=$X"
+ *   "<ts> | <agent> | <verdict> | <details> | cost=$X"
+ *
+ * The reader chose between them by asking whether the line contained ' | '.
+ * Agents write prose in the details field and prose contains pipes, so
+ * "BLOCKED 3 findings | all in the auth path" was read as the second dialect and
+ * the verdict came back as "all in the auth path" — which the board then showed
+ * as the agent's verdict. That was fixed by guessing more carefully. This
+ * removes the guess: a line is JSON, the fields are named, and no amount of
+ * punctuation in a human sentence can move one field into another.
+ *
+ * The format carries its own version. A reader that meets a version it does not
+ * know says so instead of interpreting the fields it happens to recognise —
+ * silently half-reading a newer record is how a format change becomes a data
+ * bug six weeks later.
+ *
+ * Reading stays permissive: the two legacy dialects are still parsed, because
+ * every verdict log written before today is in them and a reader that drops
+ * history to enforce a schema has destroyed the thing the schema protects.
+ * Writing is strict: everything new is v1 NDJSON.
+ */
+
+export const VERDICT_FORMAT_VERSION = 1;
+
+/** Verdict values with a defined meaning. Anything else is kept but flagged. */
+export const KNOWN_VERDICTS = Object.freeze([
+  'APPROVED', 'BLOCKED', 'DONE', 'FAIL', 'PASS', 'REJECTED', 'SKIPPED', 'ESCALATED',
+]);
+
+/**
+ * The v1 record. Every field is either present and typed, or absent — there is
+ * no "empty string means unknown", because that is the ambiguity the text
+ * format had.
+ *
+ * @typedef {object} VerdictRecord
+ * @property {number} v         format version
+ * @property {string} ts        ISO-8601 UTC
+ * @property {string} agent     agent slug
+ * @property {string} verdict   see KNOWN_VERDICTS
+ * @property {string} [project] project slug the run belongs to
+ * @property {number} [cost_usd]
+ * @property {object} [meta]    free-form key/value from the caller
+ */
+
+const ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/;
+
+/**
+ * Is this a well-formed v1 record?
+ * @returns {{valid: boolean, errors: string[]}}
+ */
+export function validateVerdict(rec) {
+  const errors = [];
+  if (!rec || typeof rec !== 'object') return { valid: false, errors: ['not an object'] };
+  if (rec.v !== VERDICT_FORMAT_VERSION) errors.push(`v must be ${VERDICT_FORMAT_VERSION}, got ${JSON.stringify(rec.v)}`);
+  if (typeof rec.ts !== 'string' || !ISO.test(rec.ts)) errors.push('ts must be an ISO-8601 UTC timestamp');
+  if (typeof rec.agent !== 'string' || !rec.agent) errors.push('agent is required');
+  if (typeof rec.verdict !== 'string' || !rec.verdict) errors.push('verdict is required');
+  if ('cost_usd' in rec && (typeof rec.cost_usd !== 'number' || !Number.isFinite(rec.cost_usd) || rec.cost_usd < 0)) {
+    errors.push('cost_usd must be a non-negative number');
+  }
+  if ('project' in rec && typeof rec.project !== 'string') errors.push('project must be a string');
+  if ('meta' in rec && (typeof rec.meta !== 'object' || rec.meta === null || Array.isArray(rec.meta))) {
+    errors.push('meta must be an object');
+  }
+  return { valid: errors.length === 0, errors };
+}
+
+/** Build a v1 record, normalising what the caller passed. Throws if unusable. */
+export function makeVerdict({ ts, agent, verdict, project, cost_usd, meta } = {}) {
+  const rec = {
+    v: VERDICT_FORMAT_VERSION,
+    ts: String(ts ?? '').trim(),
+    agent: String(agent ?? '').trim(),
+    verdict: String(verdict ?? '').trim().toUpperCase(),
+  };
+  if (project) rec.project = String(project).trim();
+  if (cost_usd !== undefined && cost_usd !== null && cost_usd !== '') rec.cost_usd = Number(cost_usd);
+  if (meta && Object.keys(meta).length) rec.meta = meta;
+
+  const { valid, errors } = validateVerdict(rec);
+  // Refusing here is the point: a malformed record that reaches the log is read
+  // by something later, and by then nobody knows which agent wrote it.
+  if (!valid) throw new Error(`invalid verdict record: ${errors.join('; ')}`);
+  return rec;
+}
+
+/** One record → one NDJSON line (no trailing newline). */
+export function formatVerdict(rec) {
+  return JSON.stringify(rec);
+}
+
+/**
+ * `k=v k2=v2` → object. Values may not contain spaces; that is what the text
+ * format allowed and all it ever allowed.
+ */
+function parseMetaPairs(s) {
+  const meta = {};
+  for (const m of String(s ?? '').matchAll(/(^|\s)([A-Za-z_][\w-]*)=([^\s|]*)/g)) meta[m[2]] = m[3];
+  return meta;
+}
+
+/**
+ * One log line → a record, whatever dialect it is in.
+ *
+ * @returns {{ok: true, rec: VerdictRecord, legacy: boolean} | {ok: false, reason: string, line: string}}
+ */
+export function parseVerdictLine(line) {
+  const raw = String(line ?? '').trim();
+  if (!raw) return { ok: false, reason: 'blank', line: raw };
+
+  if (raw.startsWith('{')) {
+    let obj;
+    try { obj = JSON.parse(raw); } catch { return { ok: false, reason: 'malformed JSON', line: raw }; }
+    // A version we do not know: report it rather than reading the fields we
+    // happen to recognise and pretending we understood the record.
+    if (obj && obj.v !== VERDICT_FORMAT_VERSION) {
+      return { ok: false, reason: `unsupported format version ${JSON.stringify(obj.v)} (this reader knows ${VERDICT_FORMAT_VERSION})`, line: raw };
+    }
+    const { valid, errors } = validateVerdict(obj);
+    if (!valid) return { ok: false, reason: errors[0], line: raw };
+    return { ok: true, rec: obj, legacy: false };
+  }
+
+  // ── legacy ────────────────────────────────────────────────────────────────
+  // Pipe form is recognised by SHAPE — a timestamp, a separator, then fields —
+  // not by containing ' | ' anywhere, which ordinary prose does.
+  const cost = raw.match(/\bcost=\$?(\d+\.?\d*)/i);
+  const project = raw.match(/\bproject=([^\s|]+)/);
+  const piped = raw.match(/^(\S+)\s+\|\s+(.*)$/);
+
+  let ts, agent, verdict;
+  if (piped) {
+    const fields = piped[2].split('|').map((s) => s.trim());
+    ts = piped[1];
+    agent = fields.length >= 2 ? fields[0] : '';
+    verdict = fields.length >= 2 ? fields[1] : fields[0];
+  } else {
+    const parts = raw.split(/\s+/);
+    ts = parts[0] || '';
+    verdict = parts[1] || '';
+    agent = '';           // the space form never carried one; the filename did
+  }
+
+  const rec = { v: VERDICT_FORMAT_VERSION, ts, agent, verdict: String(verdict || '').toUpperCase() };
+  if (project) rec.project = project[1];
+  if (cost) rec.cost_usd = parseFloat(cost[1]);
+  const meta = parseMetaPairs(raw);
+  delete meta.cost; delete meta.project;
+  if (Object.keys(meta).length) rec.meta = meta;
+
+  return { ok: true, rec, legacy: true };
+}
+
+/**
+ * A whole log file → records, plus the lines that could not be read.
+ *
+ * Unreadable lines are RETURNED, not skipped. A parser that silently drops what
+ * it cannot understand reports a clean file and a short list, and the gap
+ * between them is invisible.
+ */
+export function parseVerdictLog(text, { agent } = {}) {
+  const records = [];
+  const rejected = [];
+  for (const line of String(text ?? '').split('\n')) {
+    if (!line.trim()) continue;
+    const r = parseVerdictLine(line);
+    if (!r.ok) { rejected.push({ line: line.trim(), reason: r.reason }); continue; }
+    // The space dialect carried the agent in the filename, not the line.
+    if (!r.rec.agent && agent) r.rec.agent = agent;
+    records.push(r.rec);
+  }
+  return { records, rejected };
+}
+
+// ── CLI ─────────────────────────────────────────────────────────────────────
+
+async function main(argv) {
+  const { readFileSync } = await import('node:fs');
+  const { basename } = await import('node:path');
+  // `--emit` builds one line from the environment. It exists so log-verdict.sh
+  // can produce a valid record without embedding a JSON writer in shell, where
+  // quoting a user-supplied meta value correctly is a losing game.
+  if (argv.includes('--emit')) {
+    const meta = {};
+    for (const kv of String(process.env.META || '').split(/\s+/).filter(Boolean)) {
+      const i = kv.indexOf('=');
+      if (i > 0) meta[kv.slice(0, i)] = kv.slice(i + 1);
+    }
+    try {
+      process.stdout.write(formatVerdict(makeVerdict({
+        ts: process.env.TS,
+        agent: process.env.AGENT,
+        verdict: process.env.VERDICT,
+        project: process.env.PROJECT_SLUG || undefined,
+        cost_usd: process.env.COST === '' || process.env.COST === undefined ? undefined : Number(process.env.COST),
+        meta,
+      })) + '\n');
+      return 0;
+    } catch (e) {
+      console.error(`verdict-record: ${e.message}`);
+      return 1;
+    }
+  }
+
+  const files = argv.filter((a) => !a.startsWith('--'));
+  if (!files.length) {
+    console.error('usage: verdict-record.mjs <verdicts/*.log>... [--json] [--strict]');
+    console.error('       verdict-record.mjs --emit    (fields from TS/AGENT/VERDICT/COST/PROJECT_SLUG/META)');
+    return 2;
+  }
+  let bad = 0;
+  const all = [];
+  for (const f of files) {
+    let text;
+    try { text = readFileSync(f, 'utf8'); } catch { console.error(`cannot read ${f}`); bad++; continue; }
+    const { records, rejected } = parseVerdictLog(text, { agent: basename(f).replace(/\.log$/, '') });
+    all.push(...records);
+    for (const r of rejected) { bad++; console.error(`${f}: ${r.reason} — ${r.line.slice(0, 80)}`); }
+  }
+  if (argv.includes('--json')) console.log(JSON.stringify(all, null, 2));
+  else {
+    const legacyish = all.filter((r) => !r.agent).length;
+    console.log(`${all.length} record(s), ${bad} unreadable line(s)${legacyish ? `, ${legacyish} without an agent` : ''}`);
+  }
+  return argv.includes('--strict') && bad ? 1 : 0;
+}
+
+if (import.meta.url === `file://${process.argv[1]}`) {
+  main(process.argv.slice(2)).then((c) => { process.exitCode = c; });
+}

package/dist/board-daemon.js

@@ -141,3 +141,29 @@ export function decideEnsureAction(s) {
         return "restart";
     return "noop";
 }
+/**
+ * Is this HTTP response the great_cto board, or just something on that port?
+ *
+ * The probe used to accept ANY response, including a 404 — so a dev server, a
+ * Docker proxy, or an unrelated app squatting on 3141 made `board ensure` print
+ * "board already running" and exit 0. The supervisor then never started the
+ * board, and the user got a healthy-looking line pointing at someone else's app.
+ *
+ * `/api/version` answers with the board's own build identity, which nothing else
+ * on the machine has a reason to serve.
+ */
+export function isBoardResponse(status, body) {
+    if (status !== 200)
+        return false;
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return false;
+    }
+    if (!parsed || typeof parsed !== "object")
+        return false;
+    const o = parsed;
+    return typeof o.version === "string" && typeof o.surface === "string";
+}

package/dist/main.js

@@ -23,7 +23,7 @@ import { shouldUseLlmFallback, suggestArchetypeFromLlm } from "./llm-fallback.js
 import { sendUsagePing, sendInstallPing, telemetrySubcommand, isTelemetryEnabled, computeAnonId } from "./telemetry.js";
 import { checkForUpdate } from "./update-check.js";
 import { findBoardServerPath } from "./board-path.js";
-import { daemonSpec, decideEnsureAction } from "./board-daemon.js";
+import { daemonSpec, decideEnsureAction, isBoardResponse } from "./board-daemon.js";
 import { readFileSync, writeFileSync, copyFileSync, chmodSync, mkdirSync, unlinkSync, existsSync as fsExistsSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -370,11 +370,27 @@ function isPidAlive(pid) {
         return false;
     }
 }
-/** Does the board answer HTTP on this port? Any response (even 4xx) = healthy. */
+/**
+ * Is OUR board answering on this port?
+ *
+ * Any-response-is-healthy was the bug: whatever happened to hold 3141 — a dev
+ * server, a proxy, an unrelated app — made `ensure` print "board already
+ * running" and never start the board. `/api/version` returns the board's own
+ * identity, so a stranger on the port now reads as "not running".
+ */
 async function probeBoardPort(port) {
     const http = await import("node:http");
     return new Promise(resolve => {
-        const req = http.request({ host: "127.0.0.1", port, path: "/", method: "GET", timeout: 1200 }, res => { res.resume(); resolve(true); });
+        const req = http.request({ host: "127.0.0.1", port, path: "/api/version", method: "GET", timeout: 1200 }, res => {
+            const status = res.statusCode ?? 0;
+            let body = "";
+            res.setEncoding("utf8");
+            // A stranger could stream forever; the identity fits in well under 4 KB.
+            res.on("data", (c) => { body += c; if (body.length > 4096)
+                req.destroy(); });
+            res.on("end", () => resolve(isBoardResponse(status, body)));
+            res.on("error", () => resolve(false));
+        });
         req.on("error", () => resolve(false));
         req.on("timeout", () => { req.destroy(); resolve(false); });
         req.end();
@@ -1180,6 +1196,23 @@ async function runSelfUpgrade() {
         return result.exitCode;
     }
     success(result.message);
+    // The CLI is upgraded; the plugin Claude Code actually loads may not be.
+    // `npm i -g` never touches the plugin cache, so without this the user is told
+    // the upgrade succeeded and keeps running the previous release's hooks and
+    // agent prompts with nothing anywhere saying so.
+    try {
+        const { pluginCacheLagWarning } = await import("./self-upgrade.js");
+        const { readdirSync } = await import("node:fs");
+        const { join } = await import("node:path");
+        const cacheRoot = join(homedir(), ".claude", "plugins", "cache", "local", "great_cto");
+        const dirs = readdirSync(cacheRoot);
+        const warning = pluginCacheLagWarning(result.newVersion ?? "", dirs);
+        if (warning) {
+            log("");
+            log(dim(warning));
+        }
+    }
+    catch { /* no plugin cache is not a lag — the plugin is simply not installed */ }
     return 0;
 }
 async function runUpgrade(rawArgv, args) {
@@ -1226,6 +1259,10 @@ async function main() {
     // is the single exit funnel: it fires one fire-and-forget event (command + node + os
     // + exit_code + duration, no PII) only when the user has opted in, then exits.
     const __tStart = Date.now();
+    // Promise<never>, not Promise<void>: this always exits, and typing it as such
+    // is what lets `await finish(2)` narrow a nullable the way `process.exit(2)`
+    // did. Without it, routing an exit through the update check would silently
+    // widen types at every call site.
     const finish = async (code) => {
         try {
             await sendUsagePing({
@@ -1254,7 +1291,7 @@ async function main() {
     if (args.command === "telemetry") {
         const { exitCode, output } = telemetrySubcommand(args.positional[0]);
         process.stdout.write(output);
-        process.exit(exitCode);
+        await finish(exitCode);
     }
     if (args.command === "help") {
         printHelp();
@@ -1265,7 +1302,7 @@ async function main() {
         error(`great-cto: unknown command or flag '${tok}'`);
         log("");
         log(`Run ${cyan("great-cto --help")} for usage.`);
-        process.exit(2);
+        await finish(2);
     }
     if (args.command === "board") {
         try {
@@ -1288,7 +1325,7 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(1);
+            await finish(1);
         }
     }
     if (args.command === "console") {
@@ -1298,7 +1335,7 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(1);
+            await finish(1);
         }
     }
     if (args.command === "register") {
@@ -1308,7 +1345,7 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(1);
+            await finish(1);
         }
     }
     if (args.command === "ci") {
@@ -1319,7 +1356,7 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(2);
+            await finish(2);
         }
     }
     if (args.command === "mcp") {
@@ -1333,7 +1370,7 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(2);
+            await finish(2);
         }
     }
     if (args.command === "adapt") {
@@ -1348,16 +1385,16 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(2);
+            await finish(2);
         }
     }
     if (args.command === "task") {
         const { runTask } = await import("./worker.js");
-        process.exit(await runTask(args.taskArgs ?? []));
+        await finish(await runTask(args.taskArgs ?? []));
     }
     if (args.command === "worker") {
         const { runWorker } = await import("./worker.js");
-        process.exit(await runWorker(args.taskArgs ?? []));
+        await finish(await runWorker(args.taskArgs ?? []));
     }
     if (args.command === "serve") {
         try {
@@ -1374,7 +1411,7 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(2);
+            await finish(2);
         }
     }
     if (args.command === "webhook") {
@@ -1383,14 +1420,14 @@ async function main() {
             const parsed = parseWebhookArgs(rawArgv);
             if (!parsed) {
                 error("usage: great-cto webhook list | add-incoming <name> --secret <s> | add-outgoing <name> --url <u> --format <f> --triggers <t1,t2> | remove <name> | test <name>");
-                process.exit(2);
+                return finish(2);
             }
             const code = await runWebhookCli(parsed);
             await finish(code);
         }
         catch (e) {
             error(e.message);
-            process.exit(2);
+            await finish(2);
         }
     }
     if (args.command === "upgrade") {
@@ -1400,7 +1437,7 @@ async function main() {
         }
         catch (e) {
             error(e.message);
-            process.exit(2);
+            await finish(2);
         }
     }
     if (args.command === "chat-only-hint") {
@@ -1417,21 +1454,21 @@ async function main() {
         log(`  ${cyan("serve")} · ${cyan("webhook")} · ${cyan("report")} · ${cyan("board")} · ${cyan("register")} · ${cyan("upgrade")}`);
         log("");
         log(`Run ${cyan("npx great-cto --help")} for the full CLI reference.`);
-        process.exit(2);
+        await finish(2);
     }
     if (args.command === "report") {
         try {
             const { runReport, parseReportArgs } = await import("./report.js");
             const parsed = parseReportArgs(rawArgv, args.dir);
             if (!parsed) {
-                process.exit(2);
+                return finish(2);
             }
             const code = await runReport(parsed);
             await finish(code);
         }
         catch (e) {
             error(e.message);
-            process.exit(2);
+            await finish(2);
         }
     }
     if (args.command === "version") {
@@ -1448,7 +1485,7 @@ async function main() {
                     const pkg = JSON.parse(readFileSync(p, "utf-8"));
                     if (pkg.name === "great-cto" && pkg.version) {
                         log(pkg.version);
-                        process.exit(0);
+                        await finish(0);
                     }
                 }
                 catch { /* keep searching */ }
@@ -1458,7 +1495,7 @@ async function main() {
         catch {
             log("0.0.0");
         }
-        process.exit(0);
+        await finish(0);
     }
     try {
         const code = await runInit(args);

package/dist/mcp.js

@@ -99,13 +99,19 @@ const BOARD_PORT = parseInt(process.env.GREAT_CTO_PORT ?? "3141", 10);
 const BOARD_BASE = `http://127.0.0.1:${BOARD_PORT}`;
 async function boardFetch(path) {
     try {
-        const res = await fetch(`${BOARD_BASE}${path}`);
+        // A tool call blocks the model until it answers; a board that accepts the
+        // connection and never replies would hang it with no timeout to end the wait.
+        const res = await fetch(`${BOARD_BASE}${path}`, { signal: AbortSignal.timeout(10_000) });
         if (!res.ok)
             throw new Error(`HTTP ${res.status}`);
         return res.json();
     }
     catch (e) {
-        throw new Error(`Board unreachable at ${BOARD_BASE} — run \`great-cto board\` first. (${e.message})`);
+        const err = e;
+        const why = err.name === "TimeoutError" || err.name === "AbortError"
+            ? "no response within 10s"
+            : err.message;
+        throw new Error(`Board unreachable at ${BOARD_BASE} — run \`great-cto board\` first. (${why})`);
     }
 }
 function boardPqs(project) {
@@ -139,7 +145,9 @@ async function toolProjectStatus(args) {
         }
     }
     if (metrics) {
-        lines.push("", `**Tasks:** ${metrics.done ?? 0}/${metrics.total ?? 0} done`);
+        // /api/metrics nests these under `tasks`; off the root they are undefined,
+        // so this reported "0/0 done" for every project.
+        lines.push("", `**Tasks:** ${metrics.tasks?.done ?? 0}/${metrics.tasks?.total ?? 0} done`);
     }
     return lines.join("\n");
 }

package/dist/self-upgrade.js

@@ -154,3 +154,57 @@ export function performSelfUpgrade(opts) {
 }
 // Re-export for callers that only need the prefix-derivation logic directly.
 export { derivePrefixFromBinPath as _derivePrefixFromBinPath };
+/**
+ * Newest version present in the Claude Code plugin cache, or null.
+ *
+ * Takes the directory names so the rule is testable without a filesystem.
+ */
+export function newestCachedPlugin(dirNames) {
+    const versions = dirNames.filter((d) => /^\d+\.\d+\.\d+$/.test(d));
+    if (!versions.length)
+        return null;
+    const key = (v) => v.split(".").map(Number);
+    return versions.sort((a, b) => {
+        const [A, B] = [key(a), key(b)];
+        for (let i = 0; i < 3; i++)
+            if (A[i] !== B[i])
+                return A[i] - B[i];
+        return 0;
+    })[versions.length - 1];
+}
+/**
+ * Warn when the npm package has moved ahead of the plugin Claude Code loads.
+ *
+ * `npm i -g` replaces the CLI. It does not touch
+ * ~/.claude/plugins/cache/local/great_cto/<version>/, which is where the hooks
+ * and agent prompts are actually read from — so a user can take the update
+ * prompt, be told the upgrade succeeded, and keep running the previous release's
+ * agents with nothing anywhere saying so. That is the same defect this codebase
+ * keeps finding: a step reported as done while the thing it was meant to change
+ * stayed as it was.
+ *
+ * Returns null when they match, when nothing is cached (the plugin is simply not
+ * installed), or when the cache is somehow ahead — none of those are the failure
+ * this exists to catch.
+ */
+export function pluginCacheLagWarning(npmVersion, cachedDirs) {
+    const cached = newestCachedPlugin(cachedDirs);
+    if (!cached || !npmVersion)
+        return null;
+    if (cached === npmVersion)
+        return null;
+    const key = (v) => v.split(".").map(Number);
+    const [c, n] = [key(cached), key(npmVersion)];
+    for (let i = 0; i < 3; i++) {
+        if (c[i] > n[i])
+            return null; // cache ahead — not the case we guard
+        if (c[i] < n[i])
+            break;
+    }
+    return [
+        `note: the npm package is ${npmVersion}, but the plugin Claude Code loads is ${cached}.`,
+        "      Hooks and agent prompts come from the plugin cache, not from npm — until it is",
+        "      refreshed, this session keeps running the previous release's agents.",
+        "      Refresh it with:  bash scripts/install-local.sh --prune",
+    ].join("\n");
+}

package/dist/telemetry.js

@@ -82,7 +82,10 @@ export function computeAnonId() {
 /** Resolve telemetry-enabled state. Pure function, no side effects. */
 export function isTelemetryEnabled(cliFlag = false) {
     // Opt-out wins, in priority order:
-    if (process.env.DO_NOT_TRACK === "1" || process.env.DO_NOT_TRACK === "true")
+    // consoledonottrack.com specifies ANY non-empty value as opt-out. Accepting
+    // only "1"/"true" meant `DO_NOT_TRACK=yes` — which a user sets believing it
+    // works, and which the spec says does work — silently left telemetry on.
+    if ((process.env.DO_NOT_TRACK ?? "") !== "")
         return false;
     if (process.env.GREAT_CTO_TELEMETRY === "off")
         return false;

package/dist/update-check.js

@@ -58,6 +58,29 @@ export function cachePath() {
 }
 /** Pure function: is a suppression condition active? Fail-open to "suppressed" on any ambiguity. */
 export function isSuppressed(opts = {}) {
+    if (isRefreshSuppressed(opts))
+        return true;
+    // Nothing may be printed when stderr is not a terminal — the output is being
+    // read by something. This is about PRINTING only; see isRefreshSuppressed.
+    if (opts.stderrIsTTY === false)
+        return true;
+    return false;
+}
+/**
+ * Should the background cache refresh be suppressed too?
+ *
+ * Deliberately narrower than isSuppressed. Not printing and not learning are
+ * different things, and conflating them had a consequence: the refresh sits
+ * behind the same non-TTY check as the hint, so a user whose runs are mostly
+ * non-interactive never warmed the cache — and their occasional interactive run
+ * therefore had no cache to read and showed nothing, every time. The cache file
+ * was simply absent on this machine, which is how this was found.
+ *
+ * A detached refresh with stdio ignored pollutes no output. What genuinely must
+ * not spawn: the protocol commands, whose children would outlive a parsed
+ * stream, and anyone who asked us not to check at all.
+ */
+export function isRefreshSuppressed(opts = {}) {
     const env = opts.env ?? process.env;
     if (env.CI != null && env.CI !== "" && env.CI !== "0" && env.CI !== "false")
         return true;
@@ -65,8 +88,6 @@ export function isSuppressed(opts = {}) {
         return true;
     if (opts.command && PROTOCOL_SENSITIVE_COMMANDS.has(opts.command))
         return true;
-    if (opts.stderrIsTTY === false)
-        return true;
     return false;
 }
 /**
@@ -213,10 +234,15 @@ export async function checkForUpdate(opts) {
         const env = opts.env ?? process.env;
         const stderrIsTTY = opts.stderrIsTTY ?? Boolean(process.stderr.isTTY);
         const stdinIsTTY = opts.stdinIsTTY ?? Boolean(process.stdin.isTTY);
-        if (isSuppressed({ env, command: opts.command, stderrIsTTY }))
+        // Warm the cache even when nothing may be printed. A run that cannot show a
+        // hint can still learn the version for the run that can.
+        if (isRefreshSuppressed({ env, command: opts.command }))
             return;
+        const quiet = isSuppressed({ env, command: opts.command, stderrIsTTY });
         const cache = readCache();
         if (isCacheFresh(cache, opts.now)) {
+            if (quiet)
+                return; // fresh cache, but this run may not speak
             if (!cache || !isNewerVersion(opts.currentVersion, cache.latest))
                 return;
             if (shouldPrompt({ currentVersion: opts.currentVersion, cache, env, command: opts.command, stderrIsTTY, stdinIsTTY })) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "2.90.0",
+  "version": "2.92.0",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",