great-cto 3.27.1 → 3.27.3

package/board/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "great-cto",
   "description": "You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 70 specialist agents \u2014 an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether it ships.",
-  "version": "3.27.1",
+  "version": "3.27.3",
   "author": {
     "name": "Alexander Velikiy",
     "url": "https://hashnode.com/@Greatcto"
@@ -284,6 +284,10 @@
           {
             "type": "command",
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hooks/pipeline-stall-guard.mjs\" 2>/dev/null || true"
+          },
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hooks/cross-review-gate.mjs\" 2>/dev/null || true"
           }
         ]
       }

package/board/packages/board/lib/routes.mjs

@@ -25,6 +25,9 @@ import { parseAgentBudgets, upsertAgentBudget, removeAgentBudget } from '../../.
 import { resolveSecondOpinion, SECOND_OPINION_PROVIDERS } from '../../../scripts/lib/second-opinion.mjs';
 import { detectCodex } from '../../../scripts/lib/codex-exec.mjs';
 import { upsertCapability, capabilitiesFromProjectMd } from '../../../scripts/lib/stack-capabilities.mjs';
+// Moved to scripts/lib so the cross-review Stop hook can ask the same question
+// without importing a server. Re-exported here: this module's callers are unchanged.
+import { secondOpinionForTree } from '../../../scripts/lib/second-opinion-for-tree.mjs';
 import { getAgentsFleet, getAgentProfile, retireAgent, restoreAgent, appendDecisionLog, readDecisionsLog } from './fleet.mjs';
 import { getResume, getShareState, toggleShare } from './share.mjs';
 import { listSessions, readSession, editedFiles, searchSessions } from './transcripts.mjs';
@@ -1952,34 +1955,5 @@ async function dispatch(req, res, url, cwd) {
  * a throw, because "could not tell" is data for the row, not a reason to lose
  * the inbox.
  */
-export function secondOpinionForTree(c) {
-  let projectMd = null;
-  try { projectMd = fs.readFileSync(path.join(c, '.great_cto', 'PROJECT.md'), 'utf8'); } catch { projectMd = null; }
-  let declared = null;
-  try { declared = projectMd == null ? null : capabilitiesFromProjectMd(projectMd).map.second_opinion; } catch { declared = null; }
-  const tool = declared?.tool ?? null;
-  const declaredState = declared?.state ?? (projectMd == null ? 'no-project-md' : 'undeclared');
-  let head = null;
-  try { head = execFileSync('git', ['rev-parse', 'HEAD'], { cwd: c, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim() || null; } catch { head = null; }
-  const base = { declared: declaredState, tool, head, verdict: null, findings: null, p0: null, sha: null, ts: null };
-  if (declaredState !== 'declared' || !tool) {
-    return { ...base, state: 'not-run', why: declaredState === 'none' ? 'second_opinion: none — deliberately off' : 'no second opinion declared in PROJECT.md' };
-  }
-  let lines = [];
-  try { lines = fs.readFileSync(path.join(c, '.great_cto', 'cross-review.log'), 'utf8').trim().split('\n').filter(Boolean); }
-  catch { return { ...base, state: 'unmeasured', why: `declared (${tool}), no review has been written yet` }; }
-  const rows = [];
-  for (const line of lines) { try { rows.push(JSON.parse(line)); } catch { /* counted by /api/harnesses; not a verdict either way */ } }
-  const paired = rows.filter((r) => typeof r.sha === 'string' && r.sha !== '' && head && (r.sha === head || head.startsWith(r.sha) || r.sha.startsWith(head)) && r.state === 'ok');
-  if (paired.length) {
-    const r = paired[paired.length - 1];
-    return { ...base, state: 'ok', verdict: r.verdict ?? null, findings: r.findings ?? null, p0: r.p0 ?? null, sha: r.sha, ts: r.ts ?? null, why: '' };
-  }
-  const anyKeyed = rows.some((r) => typeof r.sha === 'string' && r.sha !== '');
-  if (!anyKeyed && rows.length) {
-    return { ...base, state: 'unreadable', why: `${rows.length} review line(s) predate the join key — none can be paired with this tree` };
-  }
-  return { ...base, state: 'unmeasured', why: `declared (${tool}), no review line for ${head ? head.slice(0, 8) : 'this tree'}` };
-}
 
-export { dispatch };
+export { dispatch, secondOpinionForTree };

package/board/packages/board/public/index.html

@@ -3046,7 +3046,10 @@ h1, h2, h3, h4 { font-weight: 600; font-family: var(--sans); }
 .inbox-row .ttl { font-size: var(--fs-small); }
 /* A stalled task is one line: id · reason · title · agent, and the re-run button
    sits at the row's right instead of on a second grid row under it. */
-.inbox-row { grid-template-columns: 110px 1fr auto auto; align-items: center; }
+.inbox-row { grid-template-columns: 110px 1fr auto auto auto; align-items: center; }
+.inbox-row .actions:empty { display: none; }
+.ledger-title-row { display: flex; align-items: center; justify-content: space-between; gap: 16px; flex-wrap: wrap; margin-bottom: 12px; }
+.side-task-actions .gate-btn { flex: 0 0 auto; min-width: 96px; }
 .inbox-row .ttl { flex-direction: row; flex-wrap: wrap; align-items: baseline; gap: 4px 10px; }
 .inbox-row .ttl > :first-child { display: inline; }
 .inbox-row .ttl .why { display: inline-block; font-size: var(--fs-eyebrow); padding: 0 6px; line-height: 18px; white-space: nowrap; }
@@ -3629,7 +3632,21 @@ h1, h2, h3, h4 { font-weight: 600; font-family: var(--sans); }
 
     <div class="panel" id="panel-budgets" role="tabpanel">
       <div class="metrics-page">
-        <h1 class="page-title">Ledger</h1>
+        <div class="ledger-title-row">
+          <h1 class="page-title" style="margin:0">Ledger</h1>
+          <!-- The period governs every figure below it, so it sits where the
+               figures start — beside the name, not under the stuck list. -->
+          <div class="period-toolbar" style="margin:0">
+            <span class="period-label">PERIOD</span>
+            <div class="period-chips" id="period-chips">
+              <button class="period-chip" data-period="1">1D</button>
+              <button class="period-chip" data-period="7">7D</button>
+              <button class="period-chip active" data-period="30">30D</button>
+              <button class="period-chip" data-period="90">90D</button>
+              <button class="period-chip" data-period="365">1Y</button>
+            </div>
+          </div>
+        </div>
         <!-- Ledger (great_cto-ki1x.7): the one decision this screen supports is
              "is something running that I should stop". Two figures, the stage
              strip and the stuck list answer it; the caps table below is where
@@ -3638,16 +3655,6 @@ h1, h2, h3, h4 { font-weight: 600; font-family: var(--sans); }
         <!-- From the old Metrics tab (great_cto-ki1x.16): the period chips, the caps
              card and the cost panel keep their ids — the code that fills them did
              not move, only the screen that shows them. -->
-        <div class="period-toolbar">
-          <span class="period-label">PERIOD</span>
-          <div class="period-chips" id="period-chips">
-            <button class="period-chip" data-period="1">1D</button>
-            <button class="period-chip" data-period="7">7D</button>
-            <button class="period-chip active" data-period="30">30D</button>
-            <button class="period-chip" data-period="90">90D</button>
-            <button class="period-chip" data-period="365">1Y</button>
-          </div>
-        </div>
         <!-- Budgets live HERE, on Metrics, not two clicks deep in the Agents
              drill-in. A control the operator could not find is a control they do
              not have — and it was invisible on top of that, hidden whenever a
@@ -4553,6 +4560,11 @@ function renderInboxList(rootId, items, countId, opts = {}) {
         + `<button type="button" class="gate-btn" title="Copy a git diff limited to the reviewed files"`
         + ` onclick="event.stopPropagation(); copyDiff(${esc(JSON.stringify(JSON.stringify(t.__files)))})">Copy diff</button></div>`
       : '';
+    const unblock = (!canDecide && !t.__synthetic && t.id && (t.raw_status || t.status) === 'blocked')
+      ? `<div class="actions" onclick="event.stopPropagation()">`
+        + `<button type="button" class="gate-btn gate-approve" title="Set the task back to open"`
+        + ` onclick="event.stopPropagation(); taskDecision('${esc(t.id)}', 'open')">Unblock</button></div>`
+      : '';
     const rerun = (!canDecide && !t.__synthetic && t.agent && t.id)
       ? `<div class="actions" onclick="event.stopPropagation()">`
         + `<button type="button" class="gate-btn" title="Copy the line that re-runs this agent"`
@@ -4607,7 +4619,7 @@ function renderInboxList(rootId, items, countId, opts = {}) {
         ${canDecide ? gateChip(t) : `<span class="id">${esc(t.id || '')}</span>`}
         <span class="ttl">${canDecide ? '' : reasonChip}${esc(canDecide ? String(t.title || '').replace(/^gate:[a-z-]+\s*[—–-]?\s*/, '') : t.title)}${desc}<span class="meta">${meta}</span>${tierNote}</span>
         ${canDecide ? reviewerCells(t) : ''}
-        ${actions}${rerun}${diffBtn}
+        ${actions}${unblock}${rerun}${diffBtn}
       </div>`;
   }).join('');
 }
@@ -7877,11 +7889,22 @@ function openSide(task) {
         Reject
       </button>
     </div>` : '';
+  // A task that is not a gate still needs a decision the operator can take
+  // here: a blocked one is unblocked, an open one is started, either is closed.
+  // Before this the drawer showed the status and told the operator to go run
+  // `bd update` — a board that could read the state but not change it.
+  const taskActions = (!task.is_gate && rawStatus !== 'closed') ? `
+    <div class="side-gate-actions side-task-actions">
+      ${rawStatus === 'blocked' ? `<button class="gate-btn gate-approve" onclick="taskDecision('${esc(task.id)}', 'open')">Unblock</button>` : ''}
+      ${rawStatus === 'open' ? `<button class="gate-btn gate-approve" onclick="taskDecision('${esc(task.id)}', 'in_progress')">Start</button>` : ''}
+      ${rawStatus === 'in_progress' || rawStatus === 'open' ? `<button class="gate-btn" onclick="taskDecision('${esc(task.id)}', 'blocked')">Block</button>` : ''}
+      <button class="gate-btn gate-reject" onclick="taskDecision('${esc(task.id)}', 'closed')">Close</button>
+    </div>` : '';
   _sideTask = task;   // so the doc viewer's "← back" can restore this task
   document.getElementById('side-body').innerHTML = `
     <div class="side-title">${esc(task.title)}</div>
     ${desc}
-    ${gateActions}
+    ${gateActions}${taskActions}
     <div class="props">
       ${rows.map(([k, v]) => `<div class="prop-key">${k}</div><div class="prop-val">${v}</div>`).join('')}
     </div>
@@ -7914,6 +7937,23 @@ function openSide(task) {
       </div>`).join('')}`;
   });
 }
+// One status change, through the endpoint the board has had since the kanban:
+// POST /api/tasks/:id/status. Closing asks once — it is the only transition the
+// list stops showing; the rest are visible and reversible from the same drawer.
+async function taskDecision(id, status) {
+  if (status === 'closed' && !confirm(`Close ${id}? It leaves every list on this board.`)) return;
+  const r = await api(`/api/tasks/${encodeURIComponent(id)}/status${pqs()}`, {
+    method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ status }),
+  }).catch(() => null);
+  if (!r || r.error) { showToast('✗ ' + esc(r?.error || 'status not changed'), 'error', 4000); return; }
+  const said = { open: 'unblocked', in_progress: 'started', blocked: 'blocked', closed: 'closed' }[status] || status;
+  showToast(`<strong>${esc(id)}</strong> ${said}`, status === 'closed' ? 'error' : 'success', 2500);
+  if (_sideTask && _sideTask.id === id) {
+    if (status === 'closed') closeSide();
+    else openSide({ ..._sideTask, status, raw_status: status });
+  }
+  refreshInbox();
+}
 // ── Documents referenced by a task: extraction + the inline side-panel viewer ──
 let _sideTask = null;
 function extractDocRefs(task) {

package/board/scripts/lib/second-opinion-for-tree.mjs

@@ -0,0 +1,48 @@
+// One reader for "has another model seen THIS tree", used by the board and by
+// the Stop gate.
+//
+// It lived inside the board's route module, which was fine while the board was
+// the only thing asking. The cross-review Stop gate asks the same question, and
+// a hook importing the board's server routes to get it would drag a server into
+// a hook — so the reader moved here and routes.mjs re-exports it. One reader,
+// because two would drift and then disagree about whether a diff was reviewed.
+//
+// The states are the point, and none of them is a pass:
+//   ok         — a review line joins this HEAD; carries its verdict
+//   not-run    — no second opinion is declared (including a deliberate `none`)
+//   unmeasured — declared, but nothing has reviewed THIS tree
+//   unreadable — lines exist and none can be paired (they predate the join key)
+import fs from 'node:fs';
+import path from 'node:path';
+import { execFileSync } from 'node:child_process';
+import { capabilitiesFromProjectMd } from './stack-capabilities.mjs';
+
+export function secondOpinionForTree(c) {
+  let projectMd = null;
+  try { projectMd = fs.readFileSync(path.join(c, '.great_cto', 'PROJECT.md'), 'utf8'); } catch { projectMd = null; }
+  let declared = null;
+  try { declared = projectMd == null ? null : capabilitiesFromProjectMd(projectMd).map.second_opinion; } catch { declared = null; }
+  const tool = declared?.tool ?? null;
+  const declaredState = declared?.state ?? (projectMd == null ? 'no-project-md' : 'undeclared');
+  let head = null;
+  try { head = execFileSync('git', ['rev-parse', 'HEAD'], { cwd: c, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim() || null; } catch { head = null; }
+  const base = { declared: declaredState, tool, head, verdict: null, findings: null, p0: null, sha: null, ts: null };
+  if (declaredState !== 'declared' || !tool) {
+    return { ...base, state: 'not-run', why: declaredState === 'none' ? 'second_opinion: none — deliberately off' : 'no second opinion declared in PROJECT.md' };
+  }
+  let lines = [];
+  try { lines = fs.readFileSync(path.join(c, '.great_cto', 'cross-review.log'), 'utf8').trim().split('\n').filter(Boolean); }
+  catch { return { ...base, state: 'unmeasured', why: `declared (${tool}), no review has been written yet` }; }
+  const rows = [];
+  for (const line of lines) { try { rows.push(JSON.parse(line)); } catch { /* counted by /api/harnesses; not a verdict either way */ } }
+  const paired = rows.filter((r) => typeof r.sha === 'string' && r.sha !== '' && head && (r.sha === head || head.startsWith(r.sha) || r.sha.startsWith(head)) && r.state === 'ok');
+  if (paired.length) {
+    const r = paired[paired.length - 1];
+    return { ...base, state: 'ok', verdict: r.verdict ?? null, findings: r.findings ?? null, p0: r.p0 ?? null, sha: r.sha, ts: r.ts ?? null, why: '' };
+  }
+  const anyKeyed = rows.some((r) => typeof r.sha === 'string' && r.sha !== '');
+  if (!anyKeyed && rows.length) {
+    return { ...base, state: 'unreadable', why: `${rows.length} review line(s) predate the join key — none can be paired with this tree` };
+  }
+  return { ...base, state: 'unmeasured', why: `declared (${tool}), no review line for ${head ? head.slice(0, 8) : 'this tree'}` };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "3.27.1",
+  "version": "3.27.3",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",