great-cto 3.20.0 → 3.22.0

package/board/.claude-plugin/plugin.json

@@ -1,11 +1,10 @@
 {
-  "name": "great_cto",
-  "id": "great_cto",
-  "description": "Engineering process for solo founders and teams up to 50 engineers. Agents do architecture, code review, QA, and security. You make two decisions per feature.",
-  "version": "3.20.0",
+  "name": "great-cto",
+  "description": "You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 70 specialist agents \u2014 an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether it ships.",
+  "version": "3.22.0",
   "author": {
-    "name": "Great CTO",
-    "url": "https://github.com/avelikiy/great_cto"
+    "name": "Alexander Velikiy",
+    "url": "https://hashnode.com/@Greatcto"
   },
   "license": "MIT",
   "keywords": [
@@ -62,7 +61,7 @@
           },
           {
             "type": "command",
-            "command": "export PATH=\"/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\"; PLUGIN_DIR=$(ls -d ~/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||'); if [ -z \"$PLUGIN_DIR\" ]; then echo 'GREAT_CTO: plugin dir not found \u2014 run /update'; else mkdir -p ~/.claude/commands ~/.claude/agents ~/.great_cto .great_cto; for STALE in triage gates dora investigate threat-model sbom security-incident update status capture revisit board-report; do STALE_F=~/.claude/commands/${STALE}.md; [ -f \"$STALE_F\" ] && grep -q 'great_cto-managed' \"$STALE_F\" 2>/dev/null && rm -f \"$STALE_F\" 2>/dev/null; done; for CMD in start audit inbox board digest review recall ownership oncall rfc release doctor burn cost sec poc promote crystallize migrate resume save learn agent-review agent-retire help voice-compliance aedt-bias-audit api-contract-review discover gen-evals prd prompt-evolve skillify spec ccr exception trace coding-audit gov-metrics upl-check procurement-review close-review msp-review tax-review; do if cp \"${PLUGIN_DIR}/commands/${CMD}.md\" ~/.claude/commands/${CMD}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/commands/${CMD}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/commands/${CMD}.md; fi; done; for STALE_AGENT in tech-lead; do STALE_AF=~/.claude/agents/great_cto-${STALE_AGENT}.md; [ -f \"$STALE_AF\" ] && grep -q 'great_cto-managed' \"$STALE_AF\" 2>/dev/null && rm -f \"$STALE_AF\" 2>/dev/null; done; for AGENT in product-owner architect senior-dev code-reviewer qa-engineer e2e-test-engineer security-officer devops l3-support project-auditor ai-prompt-architect ai-eval-engineer ai-security-reviewer web-store-reviewer pci-reviewer oracle-reviewer firmware-reviewer regulated-reviewer healthcare-reviewer performance-engineer db-migration-reviewer pm mobile-store-reviewer library-reviewer infra-reviewer cli-reviewer mcp-server-reviewer game-reviewer data-platform-reviewer devtools-reviewer enterprise-saas-reviewer mlops-reviewer streaming-reviewer marketplace-reviewer cms-reviewer continuous-learner edtech-reviewer gov-reviewer insurance-reviewer voice-ai-reviewer hr-ai-reviewer api-platform-reviewer gdpr-reviewer us-privacy-reviewer dpdpa-reviewer adtech-privacy-reviewer cmmc-reviewer us-ai-reviewer legal-reviewer rcm-reviewer procurement-reviewer accounting-reviewer msp-reviewer tax-reviewer coordinator; do if cp \"${PLUGIN_DIR}/agents/${AGENT}.md\" ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/agents/great_cto-${AGENT}.md; fi; done; cp \"${PLUGIN_DIR}/skills/great_cto/ARCHETYPES.md\" .great_cto/ARCHETYPES.md 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/SKILL.md\" .great_cto/SKILL.md 2>/dev/null || true; { printf \"export PATH=/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\\nexport ARCHETYPES_MD=.great_cto/ARCHETYPES.md\\n\"; } > .great_cto/env.sh; fi; if [ ! -d ~/.great_cto/catalog ]; then git clone --depth=1 https://github.com/davila7/claude-code-templates.git ~/.great_cto/catalog 2>/dev/null & fi; if [ ! -d ~/.great_cto/anthropic-skills ]; then git clone --depth=1 https://github.com/anthropics/skills.git ~/.great_cto/anthropic-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/anthropic-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/anthropic-skills/.git 2>/dev/null || echo 0))) -gt 604800 ]; then (cd ~/.great_cto/anthropic-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -d ~/.great_cto/personal-skills ]; then git clone --depth=1 https://github.com/avelikiy/ai-agent-skills.git ~/.great_cto/personal-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/personal-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/personal-skills/.git 2>/dev/null || echo 0))) -gt 86400 ]; then (cd ~/.great_cto/personal-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -f ~/.great_cto/skills-registry.json ] || [ $(($(date +%s) - $(stat -f %m ~/.great_cto/skills-registry.json 2>/dev/null || stat -c %Y ~/.great_cto/skills-registry.json 2>/dev/null || echo 0))) -gt 86400 ]; then [ -x \"${PLUGIN_DIR}/scripts/skill-discover.sh\" ] && bash \"${PLUGIN_DIR}/scripts/skill-discover.sh\" >/dev/null 2>&1 & fi; [ -x \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" ] && bash \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" 2>/dev/null || true; bash \"${PLUGIN_DIR}/scripts/apply-model-override.sh\" 2>/dev/null || true; bd prime 2>/dev/null || true; echo '=== PREFERENCES ==='; cat ~/.great_cto/preferences.md 2>/dev/null || true; echo '=== PROJECT ==='; cat .great_cto/PROJECT.md 2>/dev/null || echo 'GREAT_CTO: No PROJECT.md \u2014 run /start'; PHASE=$(grep '^phase:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' || echo implementation); echo '=== PHASE ==='; echo \"$PHASE\"; { [ \"$PHASE\" != review ] && [ \"$PHASE\" != release ]; } && { echo '=== BRAIN ==='; head -30 .great_cto/brain.md 2>/dev/null; } || true; [ \"$PHASE\" = implementation ] && { echo '=== CODEBASE ==='; head -20 .great_cto/CODEBASE.md 2>/dev/null; } || true; echo '=== LOCAL ==='; cat .great_cto/local.md 2>/dev/null || true; [ \"$PHASE\" != planning ] && { echo '=== HANDOFF ==='; cat .great_cto/HANDOFF.md 2>/dev/null || echo 'No handoff state \u2014 fresh session'; } || true; [ \"$PHASE\" = review ] && { echo '=== LATEST QA ==='; ls docs/qa-reports/QA-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; echo '=== LATEST CSO ==='; ls docs/security/CSO-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; } || true; [ \"$PHASE\" = release ] && { echo '=== PERF BASELINE ==='; tail -10 .great_cto/perf-baseline.log 2>/dev/null; } || true; echo '=== STATUS ==='; OPEN_GATES=$(bd list --label gate --status open 2>/dev/null | wc -l | tr -d ' '); OPEN_TASKS=$(bd list --status open 2>/dev/null | wc -l | tr -d ' '); BRANCH=$(git branch --show-current 2>/dev/null || echo '?'); LAST_AGENT=$(ls -t .great_cto/verdicts/*.log 2>/dev/null | head -1 | xargs tail -1 2>/dev/null | awk '{print $2}' || echo 'none'); printf 'branch=%s | gates=%s | tasks=%s | last_agent=%s\\n' \"$BRANCH\" \"${OPEN_GATES:-0}\" \"${OPEN_TASKS:-0}\" \"${LAST_AGENT:-none}\"; [ \"${OPEN_GATES:-0}\" -gt 0 ] && echo '\u2192 run /inbox to see pending decisions' || true; P0_OPEN=$(bd list --status open 2>/dev/null | grep -c 'P0'); P0_OPEN=${P0_OPEN:-0}; if [ \"$P0_OPEN\" -gt 0 ]; then echo ''; printf '\\033[41;97m \ud83d\udea8 P0 OPEN: %s \u2014 run /inbox NOW \\033[0m\\n' \"$P0_OPEN\"; bd list --status open 2>/dev/null | grep 'P0' | head -3 | sed 's/^/    /'; fi; NOW_EPOCH=$(date +%s); LAST_AUDIT_FILE=$(find docs/audit -maxdepth 1 -name 'AUDIT-*.md' 2>/dev/null | sort | tail -1); if [ -n \"$LAST_AUDIT_FILE\" ]; then AUD_M=$(stat -f %m \"$LAST_AUDIT_FILE\" 2>/dev/null || stat -c %Y \"$LAST_AUDIT_FILE\" 2>/dev/null || echo $NOW_EPOCH); AUD_AGE=$(( (NOW_EPOCH - AUD_M) / 86400 )); [ \"$AUD_AGE\" -gt 30 ] && echo \"\u26a0 audit $AUD_AGE days old \u2014 run /audit\"; else echo '\u26a0 no audit artefact \u2014 run /audit or /doctor'; fi; if [ -f .great_cto/digest-latest.md ]; then DIG_M=$(stat -f %m .great_cto/digest-latest.md 2>/dev/null || stat -c %Y .great_cto/digest-latest.md 2>/dev/null || echo $NOW_EPOCH); DIG_AGE=$(( (NOW_EPOCH - DIG_M) / 86400 )); [ \"$DIG_AGE\" -gt 8 ] && echo \"\u26a0 digest $DIG_AGE days old \u2014 run /digest 7\"; fi; [ \"$PHASE\" != implementation ] && cat .great_cto/digest-latest.md 2>/dev/null | head -5 || true; [ -f \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" ] && node \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" 2>/dev/null; [ -n \"$PLUGIN_DIR\" ] && [ -f .great_cto/PROJECT.md ] && [ ! -f .great_cto/CODEBASE.md ] && node \"${PLUGIN_DIR}/scripts/first-run-codebase.mjs\" >/dev/null 2>&1 & node \"${PLUGIN_DIR}/scripts/hooks/quota-check.mjs\" 2>/dev/null || true; echo '=== PATTERNS ==='; GP_DIR=\"$HOME/.great_cto/global-patterns\"; ARCH=$(grep '^primary:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' | head -1); if [ -d \"$GP_DIR\" ] && ls \"$GP_DIR\"/GP-*.md >/dev/null 2>&1; then ACTIVE_COUNT=$(grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | wc -l | tr -d ' '); echo \"Active patterns: ${ACTIVE_COUNT:-0}\"; if [ -n \"$ARCH\" ] && [ \"${ACTIVE_COUNT:-0}\" -gt 0 ]; then grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | xargs grep -lE \"applies_to:.*$ARCH\" 2>/dev/null | sort -V | tail -5 | while read f; do SLUG=$(basename \"$f\" .md); SYMPT=$(grep -m1 '^symptom:' \"$f\" 2>/dev/null | sed 's/symptom: //'); DETECT=$(grep -A 2 '^detection_order:' \"$f\" 2>/dev/null | grep '^  - ' | head -1 | sed 's/^  - //'); HITS=$(grep -m1 '^hits:' \"$f\" 2>/dev/null | awk '{print $2}'); printf '  %s (hits=%s): %s\\n  \\u2192 Check first: %s\\n' \"$SLUG\" \"${HITS:-0}\" \"$SYMPT\" \"$DETECT\"; done || echo \"  no patterns match archetype=$ARCH yet \u2014 /crystallize builds the library\"; fi; else echo 'no global patterns yet \u2014 run /crystallize after first incident'; fi; [ -x \"${PLUGIN_DIR}/scripts/check-update.sh\" ] && bash \"${PLUGIN_DIR}/scripts/check-update.sh\" \"${PLUGIN_DIR}/.claude-plugin/plugin.json\" 2>/dev/null || true ; # great_cto-cache-cleanup v2.5.8: keep only 3 most recent cached versions to prevent disk bloat. ls -d \"$HOME\"/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | awk -v k=3 '{a[NR]=$0} END {for (i=1; i<=NR-k; i++) print a[i]}' | xargs -I{} rm -rf {} 2>/dev/null || true",
+            "command": "export PATH=\"/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\"; PLUGIN_DIR=$(ls -d ~/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||'); if [ -z \"$PLUGIN_DIR\" ]; then echo 'GREAT_CTO: plugin dir not found \u2014 run /update'; else mkdir -p ~/.claude/commands ~/.claude/agents ~/.great_cto .great_cto; for STALE in triage gates dora investigate threat-model sbom security-incident update status capture revisit board-report; do STALE_F=~/.claude/commands/${STALE}.md; [ -f \"$STALE_F\" ] && grep -q 'great_cto-managed' \"$STALE_F\" 2>/dev/null && rm -f \"$STALE_F\" 2>/dev/null; done; for CMD in start audit inbox board digest review recall ownership oncall rfc release doctor burn cost sec poc promote crystallize migrate resume save learn agent-review agent-retire help voice-compliance aedt-bias-audit api-contract-review discover gen-evals prd prompt-evolve skillify spec ccr exception trace coding-audit gov-metrics upl-check procurement-review close-review msp-review tax-review; do if cp \"${PLUGIN_DIR}/commands/${CMD}.md\" ~/.claude/commands/${CMD}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/commands/${CMD}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/commands/${CMD}.md; fi; done; for STALE_AGENT in tech-lead; do STALE_AF=~/.claude/agents/great_cto-${STALE_AGENT}.md; [ -f \"$STALE_AF\" ] && grep -q 'great_cto-managed' \"$STALE_AF\" 2>/dev/null && rm -f \"$STALE_AF\" 2>/dev/null; done; for AGENT in product-owner architect senior-dev code-reviewer qa-engineer e2e-test-engineer security-officer devops l3-support project-auditor ai-prompt-architect ai-eval-engineer ai-security-reviewer web-store-reviewer pci-reviewer oracle-reviewer firmware-reviewer regulated-reviewer healthcare-reviewer performance-engineer db-migration-reviewer pm mobile-store-reviewer library-reviewer infra-reviewer cli-reviewer mcp-server-reviewer game-reviewer data-platform-reviewer devtools-reviewer enterprise-saas-reviewer mlops-reviewer streaming-reviewer marketplace-reviewer cms-reviewer continuous-learner edtech-reviewer gov-reviewer insurance-reviewer voice-ai-reviewer hr-ai-reviewer api-platform-reviewer gdpr-reviewer us-privacy-reviewer dpdpa-reviewer adtech-privacy-reviewer cmmc-reviewer us-ai-reviewer legal-reviewer rcm-reviewer procurement-reviewer accounting-reviewer msp-reviewer tax-reviewer coordinator; do if cp \"${PLUGIN_DIR}/agents/${AGENT}.md\" ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null; then grep -q 'great_cto-managed' ~/.claude/agents/great_cto-${AGENT}.md 2>/dev/null || echo '<!-- great_cto-managed -->' >> ~/.claude/agents/great_cto-${AGENT}.md; fi; done; cp \"${PLUGIN_DIR}/skills/great_cto/ARCHETYPES.md\" .great_cto/ARCHETYPES.md 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/SKILL.md\" .great_cto/SKILL.md 2>/dev/null || true; { printf \"export PATH=/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\\nexport ARCHETYPES_MD=.great_cto/ARCHETYPES.md\\n\"; } > .great_cto/env.sh; fi; if [ ! -d ~/.great_cto/catalog ]; then git clone --depth=1 https://github.com/davila7/claude-code-templates.git ~/.great_cto/catalog 2>/dev/null & fi; if [ ! -d ~/.great_cto/anthropic-skills ]; then git clone --depth=1 https://github.com/anthropics/skills.git ~/.great_cto/anthropic-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/anthropic-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/anthropic-skills/.git 2>/dev/null || echo 0))) -gt 604800 ]; then (cd ~/.great_cto/anthropic-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -d ~/.great_cto/personal-skills ]; then git clone --depth=1 https://github.com/avelikiy/ai-agent-skills.git ~/.great_cto/personal-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/personal-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/personal-skills/.git 2>/dev/null || echo 0))) -gt 86400 ]; then (cd ~/.great_cto/personal-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -f ~/.great_cto/skills-registry.json ] || [ $(($(date +%s) - $(stat -f %m ~/.great_cto/skills-registry.json 2>/dev/null || stat -c %Y ~/.great_cto/skills-registry.json 2>/dev/null || echo 0))) -gt 86400 ]; then [ -x \"${PLUGIN_DIR}/scripts/skill-discover.sh\" ] && bash \"${PLUGIN_DIR}/scripts/skill-discover.sh\" >/dev/null 2>&1 & fi; [ -x \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" ] && bash \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" 2>/dev/null || true; bash \"${PLUGIN_DIR}/scripts/apply-model-override.sh\" 2>/dev/null || true; bd prime 2>/dev/null || true; echo '=== PREFERENCES ==='; node \"${PLUGIN_DIR}/scripts/hooks/read-global-memory.mjs\" 2>&1 || true; echo '=== PROJECT ==='; cat .great_cto/PROJECT.md 2>/dev/null || echo 'GREAT_CTO: No PROJECT.md \u2014 run /start'; PHASE=$(grep '^phase:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' || echo implementation); echo '=== PHASE ==='; echo \"$PHASE\"; { [ \"$PHASE\" != review ] && [ \"$PHASE\" != release ]; } && { echo '=== BRAIN ==='; head -30 .great_cto/brain.md 2>/dev/null; } || true; [ \"$PHASE\" = implementation ] && { echo '=== CODEBASE ==='; head -20 .great_cto/CODEBASE.md 2>/dev/null; } || true; echo '=== LOCAL ==='; cat .great_cto/local.md 2>/dev/null || true; [ \"$PHASE\" != planning ] && { echo '=== HANDOFF ==='; cat .great_cto/HANDOFF.md 2>/dev/null || echo 'No handoff state \u2014 fresh session'; } || true; [ \"$PHASE\" = review ] && { echo '=== LATEST QA ==='; ls docs/qa-reports/QA-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; echo '=== LATEST CSO ==='; ls docs/security/CSO-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; } || true; [ \"$PHASE\" = release ] && { echo '=== PERF BASELINE ==='; tail -10 .great_cto/perf-baseline.log 2>/dev/null; } || true; echo '=== STATUS ==='; OPEN_GATES=$(bd list --label gate --status open 2>/dev/null | wc -l | tr -d ' '); OPEN_TASKS=$(bd list --status open 2>/dev/null | wc -l | tr -d ' '); BRANCH=$(git branch --show-current 2>/dev/null || echo '?'); LAST_AGENT=$(ls -t .great_cto/verdicts/*.log 2>/dev/null | head -1 | xargs tail -1 2>/dev/null | awk '{print $2}' || echo 'none'); printf 'branch=%s | gates=%s | tasks=%s | last_agent=%s\\n' \"$BRANCH\" \"${OPEN_GATES:-0}\" \"${OPEN_TASKS:-0}\" \"${LAST_AGENT:-none}\"; [ \"${OPEN_GATES:-0}\" -gt 0 ] && echo '\u2192 run /inbox to see pending decisions' || true; P0_OPEN=$(bd list --status open 2>/dev/null | grep -c 'P0'); P0_OPEN=${P0_OPEN:-0}; if [ \"$P0_OPEN\" -gt 0 ]; then echo ''; printf '\\033[41;97m \ud83d\udea8 P0 OPEN: %s \u2014 run /inbox NOW \\033[0m\\n' \"$P0_OPEN\"; bd list --status open 2>/dev/null | grep 'P0' | head -3 | sed 's/^/    /'; fi; NOW_EPOCH=$(date +%s); LAST_AUDIT_FILE=$(find docs/audit -maxdepth 1 -name 'AUDIT-*.md' 2>/dev/null | sort | tail -1); if [ -n \"$LAST_AUDIT_FILE\" ]; then AUD_M=$(stat -f %m \"$LAST_AUDIT_FILE\" 2>/dev/null || stat -c %Y \"$LAST_AUDIT_FILE\" 2>/dev/null || echo $NOW_EPOCH); AUD_AGE=$(( (NOW_EPOCH - AUD_M) / 86400 )); [ \"$AUD_AGE\" -gt 30 ] && echo \"\u26a0 audit $AUD_AGE days old \u2014 run /audit\"; else echo '\u26a0 no audit artefact \u2014 run /audit or /doctor'; fi; if [ -f .great_cto/digest-latest.md ]; then DIG_M=$(stat -f %m .great_cto/digest-latest.md 2>/dev/null || stat -c %Y .great_cto/digest-latest.md 2>/dev/null || echo $NOW_EPOCH); DIG_AGE=$(( (NOW_EPOCH - DIG_M) / 86400 )); [ \"$DIG_AGE\" -gt 8 ] && echo \"\u26a0 digest $DIG_AGE days old \u2014 run /digest 7\"; fi; [ \"$PHASE\" != implementation ] && cat .great_cto/digest-latest.md 2>/dev/null | head -5 || true; [ -f \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" ] && node \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" 2>/dev/null; [ -n \"$PLUGIN_DIR\" ] && [ -f .great_cto/PROJECT.md ] && [ ! -f .great_cto/CODEBASE.md ] && node \"${PLUGIN_DIR}/scripts/first-run-codebase.mjs\" >/dev/null 2>&1 & node \"${PLUGIN_DIR}/scripts/hooks/quota-check.mjs\" 2>/dev/null || true; echo '=== PATTERNS ==='; GP_DIR=\"$HOME/.great_cto/global-patterns\"; ARCH=$(grep '^primary:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' | head -1); if [ -d \"$GP_DIR\" ] && ls \"$GP_DIR\"/GP-*.md >/dev/null 2>&1; then ACTIVE_COUNT=$(grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | wc -l | tr -d ' '); echo \"Active patterns: ${ACTIVE_COUNT:-0}\"; if [ -n \"$ARCH\" ] && [ \"${ACTIVE_COUNT:-0}\" -gt 0 ]; then grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | xargs grep -lE \"applies_to:.*$ARCH\" 2>/dev/null | sort -V | tail -5 | while read f; do SLUG=$(basename \"$f\" .md); SYMPT=$(grep -m1 '^symptom:' \"$f\" 2>/dev/null | sed 's/symptom: //'); DETECT=$(grep -A 2 '^detection_order:' \"$f\" 2>/dev/null | grep '^  - ' | head -1 | sed 's/^  - //'); HITS=$(grep -m1 '^hits:' \"$f\" 2>/dev/null | awk '{print $2}'); printf '  %s (hits=%s): %s\\n  \\u2192 Check first: %s\\n' \"$SLUG\" \"${HITS:-0}\" \"$SYMPT\" \"$DETECT\"; done || echo \"  no patterns match archetype=$ARCH yet \u2014 /crystallize builds the library\"; fi; else echo 'no global patterns yet \u2014 run /crystallize after first incident'; fi; [ -x \"${PLUGIN_DIR}/scripts/check-update.sh\" ] && bash \"${PLUGIN_DIR}/scripts/check-update.sh\" \"${PLUGIN_DIR}/.claude-plugin/plugin.json\" 2>/dev/null || true ; # great_cto-cache-cleanup v2.5.8: keep only 3 most recent cached versions to prevent disk bloat. ls -d \"$HOME\"/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | awk -v k=3 '{a[NR]=$0} END {for (i=1; i<=NR-k; i++) print a[i]}' | xargs -I{} rm -rf {} 2>/dev/null || true",
             "timeout": 30,
             "statusMessage": "Loading Great CTO context..."
           },
@@ -199,6 +198,12 @@
           {
             "type": "command",
             "command": "PLUGIN_DIR=$(ls -d ~/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||'); node \"${PLUGIN_DIR}/scripts/hooks/lesson-rules-check.mjs\" 2>/dev/null; true"
+          },
+          {
+            "type": "command",
+            "command": "PLUGIN_DIR=$(ls -d ~/.claude/plugins/cache/local/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||'); node \"${PLUGIN_DIR}/scripts/hooks/docs-reference-sync.mjs\" 2>/dev/null; true",
+            "timeout": 25,
+            "async": true
           }
         ]
       },
@@ -283,5 +288,7 @@
         ]
       }
     ]
-  }
+  },
+  "homepage": "https://greatcto.systems",
+  "repository": "https://github.com/avelikiy/great_cto"
 }

package/board/packages/board/lib/alerts.mjs

@@ -12,6 +12,7 @@ import { recurrence } from './alert-recurrence.mjs';
 import { waitingOnYou, dedupeKeyFor } from '../../../scripts/lib/waiting-on-you.mjs';
 import { listProjects, readProjectMd } from './projects.mjs';
 import { addNotification } from './notifications.mjs';
+import { digestDecision } from './digest-policy.mjs';
 import { getMetrics } from './metrics.mjs';
 import { getCostHistory, getInbox } from './data-readers.mjs';
 // Every sweep below runs over EVERY registered project. `sweep: true` opts a
@@ -410,8 +411,17 @@ function startAlertCron() {
           if (!t.closed_at) return false;
           return t.closed_at.slice(0, 10) === yesterday;
         }).length;
-        // Skip digest if nothing happened yesterday
-        if (ySpend === 0 && doneYesterday === 0 && blocked === 0 && gates === 0) continue;
+        // Two reasons not to speak, and they are different. Nothing happened and
+        // nothing is open: silence. Nothing happened and the same gate is open as
+        // yesterday: that sentence was already sent, and sending it every morning
+        // is how 31 of 44 digests on this machine carried no new information and
+        // two P0s sank among them. Yesterday's reported state is read from
+        // alerts-fired.json; no record means UNKNOWN, which sends once — a
+        // comparison nobody could make is not a match. See digest-policy.mjs.
+        const stateKey = `digest.state:${proj.slug}`;
+        const prevState = readAlertsFired()[stateKey] ?? null;
+        const decision = digestDecision({ ySpend, doneYesterday, blocked, gates, prevState });
+        if (!decision.send) continue;
         const kvObj = {
           date: yesterday,
           'AI spend': `$${ySpend.toFixed(2)}`,
@@ -443,6 +453,12 @@ function startAlertCron() {
         await fireEmailAlert('digest.daily', dedupeKey, dailyPayload);
         addNotification('digest.daily', dailyPayload, dedupeKey);
         await firePushAlert('digest.daily', dedupeKey, dailyPayload);
+        // Record what was reported, so tomorrow can tell "unchanged" from "new".
+        // After the sends, not before: a digest that failed to go out is not one
+        // the operator has read.
+        const firedNow = readAlertsFired();
+        firedNow[stateKey] = decision.state;
+        writeAlertsFired(firedNow);
       }
     } catch (e) { log.warn('cron digest.daily failed:', e.message); }
   }, FIVE_MIN);

package/board/packages/board/lib/beads.mjs

@@ -104,7 +104,12 @@ function bdEnv() {
 }
 // Centralized bd invocation — resolved binary + augmented PATH for every call site.
 function bd(args, opts = {}) {
-  return spawnSync(BD_BIN, args, { encoding: 'utf8', timeout: 8000, ...opts, env: { ...bdEnv(), ...(opts.env || {}) } });
+  // 20s default. It was 8000, and `bd` was measured in this repository at up to
+  // 8.7s when ten test files spawn it at once (see tests/pipeline-contracts.test.mjs)
+  // — so the default cap sat BELOW the known worst case, and every call site that
+  // did not name its own timeout inherited a cap the machine could exceed while
+  // working correctly. What came back was indistinguishable from beads failing.
+  return spawnSync(BD_BIN, args, { encoding: 'utf8', timeout: 20000, ...opts, env: { ...bdEnv(), ...(opts.env || {}) } });
 }
 // Turn a failed bd result into an actionable message (the bare "bd update failed" hid ENOENT).
 function bdErr(r, what) {
@@ -313,7 +318,13 @@ function bdRefreshAsync(cwd, onDone = () => {}) {
   lastBdRunAt.set(cwd, startedAt);
   let out = '';
   try {
-    const child = spawn(BD_BIN, ['list', '--json', '--all', '--include-gates'], { cwd, env: bdEnv() });
+    // Bounded like every other bd call. Without a timeout a hung bd never fires
+    // 'close', so `refreshing` stays held for this cwd forever and the cache
+    // silently serves stale tasks with no error anywhere — the async twin of the
+    // sync path's 500s. Node kills on timeout, which DOES fire 'close' with a
+    // non-zero code, so the failure handling below reports it rather than the
+    // board simply going quiet.
+    const child = spawn(BD_BIN, ['list', '--json', '--all', '--include-gates'], { cwd, env: bdEnv(), timeout: 20000 });
     child.stdout?.on('data', (d) => { out += d; });
     child.on('error', (e) => {
       refreshing.delete(cwd);

package/board/packages/board/lib/data-readers.mjs

@@ -1,3 +1,4 @@
+import { reversibilityOf } from '../../../scripts/lib/gate-reversibility.mjs';
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
@@ -8,6 +9,17 @@ import { readVerdicts, readSecStats } from './verdicts.mjs';
 import { datePlans } from './plan-date.mjs';
 
 // ── Memory: 4-layer file contents ─────────────────────────────────────────────
+/**
+ * The gate's NAME out of a bead title. Titles are shaped `gate:ship — release X`,
+ * and the id is a bead id, so the name only ever lives in the title. A title that
+ * does not carry one yields '' — which reversibilityOf reports as unclassified,
+ * never as routine.
+ */
+function gateNameOf(task) {
+  const m = /^\s*gate[:\-]\s*([a-z0-9-]+)/i.exec(String(task?.title ?? ''));
+  return m ? `gate:${m[1].toLowerCase()}` : '';
+}
+
 function getMemory(cwd = process.cwd()) {
   const home = os.homedir();
   const layers = [
@@ -440,7 +452,15 @@ function getInbox(cwd = process.cwd()) {
     .map((t) => ({ ...t, also: alsoOf.get(t?.id ?? t?.title) || [] }))
     .slice(0, limit);
 
-  const ownedGates = own('gate', pendingGates, 20);
+  // ADR-009 says gates follow cost-of-undo, and the pipeline obeys it — but every
+  // gate reaches this screen looking the same, so `gate:ship` to production and a
+  // brief approval are one purple chip apart at the moment somebody clicks. The
+  // doctrine lived in the ADR and in the map and never reached the pixel where
+  // the decision is taken. This attaches it; nothing here decides anything.
+  const ownedGates = own('gate', pendingGates, 20).map((g) => ({
+    ...g,
+    reversibility: reversibilityOf(gateNameOf(g)),
+  }));
   const ownedP0 = own('p0', p0, 10);
   const ownedBlocked = own('blocked', blocked, 10);
   const ownedStale = own('stale', stale, 10);
@@ -466,4 +486,41 @@ function getInbox(cwd = process.cwd()) {
   };
 }
 
-export { getMemory, getPipeline, getCostHistory, getInbox };
+/**
+ * What is waiting on the PERSON in the projects this one is not.
+ *
+ * The inbox headline said "nothing is waiting on you" while two P0s sat open
+ * in another project of the same operator's. The sentence was true of the
+ * project and false of the person, and the person is who reads it. Every
+ * reader above is scoped to one cwd on purpose; this one walks the registry so
+ * the headline can be scoped to the human.
+ *
+ * Three states per project, and the third is not folded into the first:
+ *   counted     its inbox was read and its gate/P0 counts added.
+ *   nothing     read, and nothing there — contributes zero, honestly.
+ *   unreadable  its inbox threw. Listed by name in `unreadable`, NOT counted
+ *               as zero: a project that could not be read may hold the P0.
+ *
+ * `readInbox` is injectable so the walk can be tested with stub projects
+ * without a beads store behind each one.
+ */
+function inboxElsewhere(projects, currentPath, { readInbox = getInbox } = {}) {
+  const same = (a, b) => {
+    if (!a || !b) return false;
+    try { return fs.realpathSync(a) === fs.realpathSync(b); } catch { return path.resolve(a) === path.resolve(b); }
+  };
+  const out = { p0: 0, gates: 0, projects: [], unreadable: [] };
+  for (const p of projects || []) {
+    if (!p?.path || same(p.path, currentPath)) continue;
+    let s;
+    try { s = readInbox(p.path)?.summary; } catch { out.unreadable.push(p.slug || p.path); continue; }
+    const p0 = Number(s?.p0) || 0;
+    const gates = Number(s?.gates) || 0;
+    if (p0 || gates) out.projects.push({ slug: p.slug || path.basename(p.path), p0, gates });
+    out.p0 += p0;
+    out.gates += gates;
+  }
+  return out;
+}
+
+export { getMemory, getPipeline, getCostHistory, getInbox, inboxElsewhere };

package/board/packages/board/lib/digest-policy.mjs

@@ -0,0 +1,48 @@
+/**
+ * Should the morning digest speak today?
+ *
+ * The daily digest skipped a day on which nothing happened — no spend, nothing
+ * shipped, no gate, nothing blocked — and sent otherwise. So a project with one
+ * gate open for 26 days sent "$0.00 AI · 0 shipped · 🔒 1 gate awaiting
+ * approval" every morning for 26 mornings. Measured on the author's machine:
+ * 31 of the last 44 digests repeated the previous day's state exactly, and the
+ * two P0s in the same feed were buried under them.
+ *
+ * Two reasons not to speak, and they are different things:
+ *
+ *   nothing-happened   nothing moved AND nothing is open. Silence is right.
+ *   unchanged-state    nothing moved AND what is open is exactly what was
+ *                      reported yesterday. The operator has already read this
+ *                      sentence. A reminder is a different feature with a
+ *                      different cadence — see waiting-on-you — not a digest.
+ *
+ * And three states of "what was reported yesterday", because the record is on
+ * disk and disks are lossy:
+ *
+ *   null        no record. NOT "unchanged" — a comparison nobody could make is
+ *               not a match. Send, once, and record.
+ *   equal       reported already. Suppress.
+ *   different   the world moved even though the numbers did not. Send.
+ *
+ * Activity always speaks: money was spent or work shipped, and a digest of
+ * that is the feature.
+ */
+
+export function digestState({ gates = 0, blocked = 0 } = {}) {
+  return `gates:${Number(gates) || 0}|blocked:${Number(blocked) || 0}`;
+}
+
+/**
+ * @returns {{ send: boolean, reason: 'nothing-happened'|'unchanged-state'|'activity'|'first-report'|'state-changed', state: string }}
+ */
+export function digestDecision({ ySpend = 0, doneYesterday = 0, blocked = 0, gates = 0, prevState = null } = {}) {
+  const state = digestState({ gates, blocked });
+  const moved = (Number(ySpend) || 0) > 0 || (Number(doneYesterday) || 0) > 0;
+  const open = (Number(gates) || 0) > 0 || (Number(blocked) || 0) > 0;
+
+  if (moved) return { send: true, reason: 'activity', state };
+  if (!open) return { send: false, reason: 'nothing-happened', state };
+  if (prevState == null) return { send: true, reason: 'first-report', state };
+  if (prevState === state) return { send: false, reason: 'unchanged-state', state };
+  return { send: true, reason: 'state-changed', state };
+}

package/board/packages/board/lib/routes.mjs

@@ -15,7 +15,7 @@ import { readScores, summarizeScores } from '../../../scripts/lib/scores.mjs';
 import { status as routerKeyStatus, writeKey as writeRouterKey } from '../../../scripts/lib/router-key.mjs';
 import { broadcastTasks } from './sse.mjs';
 import { saveNotifHistory } from './notifications.mjs';
-import { getMemory, getPipeline, getCostHistory, getInbox } from './data-readers.mjs';
+import { getMemory, getPipeline, getCostHistory, getInbox, inboxElsewhere } from './data-readers.mjs';
 import { log } from './log.mjs';
 import { bdCacheInvalidate, checkBeadsAvailable, bdWriteSerialised, bd, bdErr, getTasks, setTaskStatusInTasksMd, getReadDegradation } from './beads.mjs';
 import { getMetrics } from './metrics.mjs';
@@ -480,7 +480,11 @@ async function dispatch(req, res, url, cwd) {
         const r = beadsErr
           ? { status: 1, error: { code: 'NO_BEADS' } }
           : bd(['update', id, '--status', status, ...(reason ? ['--notes', `[${action}] ${reason}`] : [])],
-              { cwd: gateCwd, timeout: 5000 });
+              // 20s: this is the gate-approval write, and it failed in the full
+              // gate at 71s wall-clock with the gate simply absent from the
+              // inbox afterwards. bd was measured at up to 8.7s under the
+              // suite's own parallelism; 5s could not be met.
+              { cwd: gateCwd, timeout: 20000 });
         if (r.status !== 0) {
           if (!setTaskStatusInTasksMd(gateCwd, id, status)) {
             return { error: (beadsErr ? 'beads unavailable' : bdErr(r, 'bd update failed'))
@@ -489,13 +493,31 @@ async function dispatch(req, res, url, cwd) {
           via = 'tasks.md';
         }
         bdCacheInvalidate(gateCwd);
-        // Append to global decisions log — still inside the lock window
+
+        // The decision log, and why this is not one try block any more.
+        //
+        // It used to be: look the gate's TITLE up through getTasks(), then write
+        // the line — all inside one `catch { /* best-effort */ }`, after which the
+        // handler returned `{ ok: true }` whatever had happened. getTasks() reads
+        // beads, beads takes a Dolt lock, and under a loaded test run that read
+        // throws. So the approval landed, the API answered 200 ok:true, and the
+        // decision was never recorded — a write that did not happen, wearing the
+        // response of one that did. It surfaced as a test failing one run in four
+        // with "Got 0 decisions", four layers away from the swallowed exception.
+        //
+        // The title is a NICETY — `id` was already its documented fallback. The
+        // line is the record. So the lookup gets its own try and cannot take the
+        // record down with it, and the caller is told which of the two happened.
+        const projectSlug = parsed.project || path.basename(gateCwd);
+        let title = id;
+        try {
+          const gateTask = getTasks(gateCwd).find((t) => t.id === id);
+          if (gateTask?.title) title = gateTask.title;
+        } catch { /* the id is a documented fallback; the record still gets written */ }
+        gateTitle = title;
+
+        let decision;
         try {
-          const projectSlug = parsed.project || path.basename(gateCwd);
-          const allTasks = getTasks(gateCwd);
-          const gateTask = allTasks.find(t => t.id === id);
-          const title = gateTask?.title || id;
-          gateTitle = title;
           appendDecisionLog({
             ts: new Date().toISOString(),
             project: projectSlug,
@@ -505,8 +527,16 @@ async function dispatch(req, res, url, cwd) {
             reason: reason || '',
             cwd: gateCwd,   // project-scoped (ADR-008) — never the global log
           });
-        } catch { /* best-effort */ }
-        return { ok: true, via };
+          decision = { logged: true };
+        } catch (err) {
+          // Named, not swallowed — the same rule the `wake` handler thirty lines
+          // below already states: a handler that reports nothing is only better
+          // than one that guesses. The approval itself stands; what is reported
+          // is that its record does not.
+          log.warn(`[decisions] approve ${id} landed but was not logged: ${err?.message || err}`);
+          decision = { logged: false, why: String(err?.message || err) };
+        }
+        return { ok: true, via, decision };
       });
       if (!result || result.error) {
         res.writeHead(500, { 'Content-Type': 'application/json' });
@@ -543,7 +573,11 @@ async function dispatch(req, res, url, cwd) {
       }
 
       res.writeHead(200, { 'Content-Type': 'application/json' });
-      res.end(JSON.stringify({ ok: true, id, action, via: result.via, ...(wake ? { wake } : {}) }));
+      // `decision` rides out with the response for the same reason `wake` does:
+      // the caller asked for a gate to be approved and a record to be kept, and
+      // `ok: true` alone cannot say whether the second half happened.
+      res.end(JSON.stringify({ ok: true, id, action, via: result.via,
+        ...(result.decision ? { decision: result.decision } : {}), ...(wake ? { wake } : {}) }));
       broadcastTasks(gateCwd);
       // Auto-republish share report when a gate is approved (fire-and-forget)
       if (action === 'approve') {
@@ -560,8 +594,16 @@ async function dispatch(req, res, url, cwd) {
 
   // Inbox — what needs your attention right now
   if (pathname === '/api/inbox') {
+    const inbox = getInbox(cwd);
+    // What is waiting on the person in their OTHER projects. The headline and
+    // the badge are about the person, and the person is not scoped to `cwd`.
+    // If the registry itself cannot be walked, say so — `unreadable` is not
+    // `{p0: 0}`, and the page must not print "nothing elsewhere" from it.
+    let elsewhere;
+    try { elsewhere = inboxElsewhere(listProjects(), cwd, { readInbox: getInbox }); }
+    catch (e) { elsewhere = { state: 'unreadable', why: String(e?.message || e) }; }
     res.writeHead(200, verdictHeaders(cwd, { 'Content-Type': 'application/json' }));
-    res.end(JSON.stringify(getInbox(cwd)));
+    res.end(JSON.stringify({ ...inbox, elsewhere }));
     return true;
   }
 
@@ -882,8 +924,20 @@ async function dispatch(req, res, url, cwd) {
         // Concurrent POST /api/tasks calls used to race on bd's file lock —
         // one crash would leave a stale .beads/.lock that froze ALL writes.
         const result = await bdWriteSerialised(() => {
-          const r = bd(args, { cwd, timeout: 5000 });
-          if (r.status !== 0) return { error: bdErr(r, 'bd create failed') };
+          // 20s, not 5s. `bd` was measured in this repository at 1.9s alone and
+          // up to 8.7s when ten test files spawn it at once (see the note in
+          // tests/pipeline-contracts.test.mjs), and bdWriteSerialised queues
+          // every write behind every other write on top of that. A 5s cap could
+          // not be met under the load the suite creates for itself, so "did bd
+          // succeed" was really asking "was the machine quiet" — and the answer
+          // came back as HTTP 500, indistinguishable from a malformed request.
+          const r = bd(args, { cwd, timeout: 20000 });
+          if (r.status !== 0) {
+            // A cap we imposed firing is not the same as beads refusing. The
+            // caller can retry one of them and not the other.
+            const timedOut = r.error && r.error.code === 'ETIMEDOUT';
+            return { error: bdErr(r, 'bd create failed'), timedOut };
+          }
           const idMatch = (r.stdout || '').match(/Created issue:\s*(\S+)/);
           const id = idMatch ? idMatch[1] : null;
 
@@ -897,14 +951,22 @@ async function dispatch(req, res, url, cwd) {
               if (lbl) { updateArgs.push('--add-label', lbl); needUpdate = true; }
             }
             if (agent && !lbls.includes(agent)) { updateArgs.push('--add-label', agent); needUpdate = true; }
-            if (needUpdate) bd(updateArgs, { cwd, timeout: 5000 });
+            if (needUpdate) bd(updateArgs, { cwd, timeout: 20000 });
           }
           return { id };
         });
 
         if (!result || result.error) {
-          res.writeHead(500, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({ error: (result && result.error) || 'bd create failed' }));
+          // 503 for a timeout: the request was fine, beads was busy, and coming
+          // back shortly is the right response. 500 told every caller — the UI,
+          // the tests, a person — that they had done something wrong.
+          const status = result && result.timedOut ? 503 : 500;
+          if (status === 503) res.setHeader('Retry-After', '5');
+          res.writeHead(status, { 'Content-Type': 'application/json' });
+          res.end(JSON.stringify({
+            error: (result && result.error) || 'bd create failed',
+            retryable: status === 503,
+          }));
           return;
         }
 
@@ -942,7 +1004,9 @@ async function dispatch(req, res, url, cwd) {
         return;
       }
       const result = await bdWriteSerialised(() => {
-        const r = bd(['update', id, '--status', status], { cwd, timeout: 5000 });
+        // 20s for the same reason as the create path above: bd was measured at
+        // up to 8.7s under `node --test` parallelism, and 5s could not be met.
+        const r = bd(['update', id, '--status', status], { cwd, timeout: 20000 });
         if (r.status !== 0) return { error: bdErr(r, 'bd update failed') };
         bdCacheInvalidate(cwd);
         return { ok: true };
@@ -980,7 +1044,7 @@ async function dispatch(req, res, url, cwd) {
         return;
       }
       const result = await bdWriteSerialised(() => {
-        const r = bd(['update', id, '--priority', String(priority)], { cwd, timeout: 5000 });
+        const r = bd(['update', id, '--priority', String(priority)], { cwd, timeout: 20000 });
         if (r.status !== 0) return { error: bdErr(r, 'bd update failed') };
         bdCacheInvalidate(cwd);
         return { ok: true };
@@ -1017,6 +1081,13 @@ async function dispatch(req, res, url, cwd) {
     try {
       const lines = fs.readFileSync(interactionsFile, 'utf8').split('\n').filter(Boolean);
       const events = [];
+      // A row we could not parse is dropped — that is right, one bad line is
+      // not evidence — but it was dropped SILENTLY, so a short history and a
+      // complete one looked identical. Count them and send the count: the
+      // client can then say "3 rows unreadable" instead of quietly showing less
+      // than happened. Same rule as routes.mjs:661 one screen up, which does
+      // report what it skipped.
+      let unreadableRows = 0;
       for (const line of lines) {
         try {
           const obj = JSON.parse(line);
@@ -1030,10 +1101,10 @@ async function dispatch(req, res, url, cwd) {
               notes: obj.notes || null,
             });
           }
-        } catch {}
+        } catch { unreadableRows++; }
       }
       res.writeHead(200, { 'Content-Type': 'application/json' });
-      res.end(JSON.stringify({ events }));
+      res.end(JSON.stringify({ events, unreadable_rows: unreadableRows }));
     } catch (e) {
       res.writeHead(500, { 'Content-Type': 'application/json' });
       res.end(JSON.stringify({ error: String(e.message || e) }));
@@ -1459,6 +1530,8 @@ async function dispatch(req, res, url, cwd) {
     let budgetsDeprecatedKey = null;
     const budgetsMalformed = [];
     let goalAncestry = null;
+    let budgetsRead = true;
+    let budgetsWhy = null;
     try {
       const projectTxt = fs.readFileSync(projectMdPath, 'utf8');
       // One parser, in scripts/lib/agent-budget.mjs — the same one the pipeline
@@ -1476,15 +1549,30 @@ async function dispatch(req, res, url, cwd) {
       const phase = (projectTxt.match(/^phase:\s*(\S+)/m) || [])[1] || null;
       const complianceClean = compliance && !/^\[?none\]?$/i.test(compliance.trim()) ? compliance.trim() : null;
       if (archetype) goalAncestry = `[archetype:${archetype}]${complianceClean ? ` [compliance:${complianceClean}]` : ''}${phase ? ` [phase:${phase}]` : ''}`;
-    } catch { /* project not found */ }
+      budgetsRead = true;
+    } catch (err) {
+      // "No PROJECT.md" and "PROJECT.md is there and we could not read it" are
+      // different answers, and budgets={} renders as "no caps set" for both. A
+      // cap its author believes they have, silently not shown, is the same
+      // defect the caps exist to prevent — so say which happened.
+      budgetsRead = false;
+      budgetsWhy = err?.code === 'ENOENT' ? 'no PROJECT.md' : String(err?.message || err);
+    }
 
     // Tool failure rate in last hour
     let toolFailureRate1h = 0;
+    let failuresMeasured = true;
+    let failuresWhy = null;
     try {
       const failLog = fs.readFileSync(path.join(cwd, '.great_cto', 'tool-failures.log'), 'utf8');
       const cutoff = new Date(nowMs - 3600000).toISOString();
       toolFailureRate1h = failLog.split('\n').filter(l => l > cutoff && l.trim()).length;
-    } catch { /* no log */ }
+    } catch (err) {
+      // Zero failures and an unreadable log render identically, and the
+      // reassuring one is what the operator would see.
+      failuresMeasured = false;
+      failuresWhy = err?.code === 'ENOENT' ? 'no tool-failures.log' : String(err?.message || err);
+    }
 
     res.writeHead(200, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' });
     // `budgets_deprecated_key` and `budgets_malformed` travel with the caps.
@@ -1495,6 +1583,12 @@ async function dispatch(req, res, url, cwd) {
       stuck, budgets, goal_ancestry: goalAncestry, tool_failure_rate_1h: toolFailureRate1h,
       budgets_deprecated_key: budgetsDeprecatedKey,
       budgets_malformed: budgetsMalformed,
+      // Three states, not two: read / absent / unreadable. Without these, a
+      // failed read is indistinguishable from an empty result on the client.
+      budgets_read: budgetsRead,
+      budgets_why: budgetsWhy,
+      tool_failures_measured: failuresMeasured,
+      tool_failures_why: failuresWhy,
     }));
     return true;
   }