great-cto 3.68.0 → 3.68.1

package/board/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "great-cto",
   "description": "You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 72 specialist agents \u2014 an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether it ships.",
-  "version": "3.68.0",
+  "version": "3.68.1",
   "author": {
     "name": "Alexander Velikiy",
     "url": "https://hashnode.com/@Greatcto"

package/board/scripts/lib/receipt.mjs

@@ -29,7 +29,8 @@ import { execFileSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import * as fsModule from 'node:fs';
-import { join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 const sha = (s) => createHash('sha256').update(String(s)).digest('hex');
 
@@ -351,12 +352,23 @@ export function describeDrift(cmp, { max = 10 } = {}) {
 export const APPROVING_AGENTS = Object.freeze(['code-reviewer', 'security-officer', 'qa-engineer']);
 const APPROVING_VERDICTS = new Set(['APPROVED', 'PASS', 'PASSED']);
 
-export function latestApproval(cwd = process.cwd(), { agents = APPROVING_AGENTS, read = readFileSync } = {}) {
+/** Same state location as log-verdict.sh; the candidate bytes stay in cwd. */
+export function verdictStateDir(cwd = process.cwd(), env = process.env) {
+  if (env.GREAT_CTO_DIR) return resolve(cwd, env.GREAT_CTO_DIR);
+  const common = git(['rev-parse', '--git-common-dir'], cwd)?.trim();
+  const gitdir = git(['rev-parse', '--git-dir'], cwd)?.trim();
+  if (common && gitdir && resolve(cwd, common) !== resolve(cwd, gitdir)) {
+    return join(dirname(resolve(cwd, common)), '.great_cto');
+  }
+  return join(cwd, '.great_cto');
+}
+
+export function latestApproval(cwd = process.cwd(), { agents = APPROVING_AGENTS, read = readFileSync, stateDir = verdictStateDir(cwd) } = {}) {
   let best = null;
   for (const agent of agents) {
     let text;
     try {
-      text = read(join(cwd, '.great_cto', 'verdicts', `${agent}.log`), 'utf8');
+      text = read(join(stateDir, 'verdicts', `${agent}.log`), 'utf8');
     } catch { continue; }
     for (const line of String(text).split('\n')) {
       if (!line.trim()) continue;
@@ -454,8 +466,26 @@ function requireFs() {
 // `--check <file>`  compares a recorded receipt held in a file.
 // `--verify` compares the newest approving verdict's receipt against now.
 
-if (import.meta.url === `file://${process.argv[1]}`) {
+function currentForReceipt(cwd, receipt) {
+  // Persisted evidence is data, not Git options or a new revision expression.
+  // Missing bases retain legacy behavior; invalid declared bases stay unreadable.
+  let base = receipt?.base;
+  // The emitter uses HEAD when there is no conventional default branch. Bind
+  // that legacy symbolic base to the recorded commit, not today's moving HEAD.
+  if (base === 'HEAD') {
+    if (!receipt?.head) return null;
+    base = receipt.head;
+  }
+  if (base != null && (typeof base !== 'string' || !/^[0-9a-f]{7,64}$/i.test(base))) return null;
+  return treeReceipt(cwd, { base: base || null });
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1])) {
   const argv = process.argv.slice(2);
+  if (argv.includes('--state-dir')) {
+    console.log(verdictStateDir());
+    process.exit(0);
+  }
   if (argv.includes('--emit')) {
     // `--verdicts <dir>`: measure the change from where the previous stage stood.
     const vi = argv.indexOf('--verdicts');
@@ -467,7 +497,7 @@ if (import.meta.url === `file://${process.argv[1]}`) {
   if (argv.includes('--verify')) {
     const cwd = process.cwd();
     const approval = latestApproval(cwd);
-    const current = treeReceipt(cwd);
+    const current = currentForReceipt(cwd, approval?.receipt);
     const cmp = compareReceipts(approval?.receipt ?? null, current);
     if (cmp.state === 'no-receipt') {
       // Not silence. A push with no approval to compare against and a push whose
@@ -479,6 +509,7 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     console.log(`receipt: against ${who}`);
     console.log(describeDrift(cmp).split('\n').map((l) => `  ${l}`).join('\n'));
 
+    if (cmp.state === 'unreadable') process.exit(2);
     if (cmp.state !== 'differs') process.exit(0);
 
     // Drift, but a human may already have looked at exactly this state.
@@ -507,8 +538,12 @@ if (import.meta.url === `file://${process.argv[1]}`) {
   if (argv.includes('--accept')) {
     const cwd = process.cwd();
     const approval = latestApproval(cwd);
-    const current = treeReceipt(cwd);
+    const current = currentForReceipt(cwd, approval?.receipt);
     const cmp = compareReceipts(approval?.receipt ?? null, current);
+    if (cmp.state === 'unreadable') {
+      console.error(`receipt: cannot accept — ${cmp.why}`);
+      process.exit(2);
+    }
     if (cmp.state !== 'differs') {
       console.log(`receipt: nothing to accept — ${cmp.why}`);
       process.exit(0);
@@ -537,9 +572,9 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     const { readFileSync } = await import('node:fs');
     let recorded = null;
     try { recorded = JSON.parse(readFileSync(argv[i + 1], 'utf8')); } catch { /* absent */ }
-    const cmp = compareReceipts(recorded, treeReceipt(process.cwd()));
+    const cmp = compareReceipts(recorded, currentForReceipt(process.cwd(), recorded));
     console.log(describeDrift(cmp));
-    process.exit(cmp.state === 'differs' ? 1 : 0);
+    process.exit(cmp.state === 'unreadable' ? 2 : cmp.state === 'differs' ? 1 : 0);
   }
   console.log(JSON.stringify(treeReceipt(process.cwd()), null, 2));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "3.68.0",
+  "version": "3.68.1",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",