great-cto 3.68.0 → 3.69.0

package/board/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "great-cto",
   "description": "You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 72 specialist agents \u2014 an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether it ships.",
-  "version": "3.68.0",
+  "version": "3.69.0",
   "author": {
     "name": "Alexander Velikiy",
     "url": "https://hashnode.com/@Greatcto"

package/board/agents/coordinator.md

@@ -2,6 +2,7 @@
 name: coordinator
 description: "Multi-agent coordinator. Use when a CTO request spans 3+ independent work streams, requires parallel research before implementation, or the task graph is complex enough that sequencing matters. Orchestrates agents across the full DECOMPOSE→CLASSIFY→DISPATCH→MONITOR→SYNTHESIZE→VERIFY lifecycle."
 model: sonnet
+color: purple
 authority: autonomous
 tools: Read, Write, Edit, Bash, Glob, Grep, Agent
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep, Agent

package/board/packages/board/lib/fleet.mjs

@@ -10,6 +10,7 @@ import { readVerdicts } from './verdicts.mjs';
 // dispatcher enforces the same verdict — one definition, so the board cannot
 // show `within` while the dispatcher holds the stage.
 import { parseAgentBudgets, judgeAgentBudget } from '../../../scripts/lib/agent-budget.mjs';
+import { classifyAgentGroup } from '../../../scripts/lib/agent-groups.mjs';
 
 // ── Agent fleet view (DESIGN-agents-fleet-view §3) ─────────────────────────
 //
@@ -33,20 +34,7 @@ const AGENTS_DIR = process.env.GREAT_CTO_AGENTS_DIR
   || path.join(os.homedir(), '.claude', 'agents');
 
 function deriveDomain(slug) {
-  const s = slug.toLowerCase();
-  if (/architect|adr|design|prompt/.test(s)) return 'arch';
-  if (/security|sec-|threat|pci|gdpr|hipaa/.test(s)) return 'security';
-  // `review` used to be in this alternation, and it matched every `*-reviewer`
-  // slug — so 37 of the 40 agents in `qa` were domain reviewers, the `domain`
-  // bucket below was permanently empty, and the panel grouped 58% of the fleet
-  // under one heading. The rule that was supposed to separate them sat two lines
-  // later and could never be reached.
-  if (/\bqa\b|test|eval|^code-reviewer$/.test(s)) return 'qa';
-  if (/devops|deploy|infra|l3|support|oncall/.test(s)) return 'ops';
-  if (/reviewer$/.test(s)) return 'domain';
-  if (/pm|plan|product/.test(s)) return 'pm';
-  if (/learn|memory|continuous/.test(s)) return 'memory';
-  return 'other';
+  return classifyAgentGroup(slug);
 }
 
 // Founder Q#5 — picked: baked-in regex set (start small, expand later).

package/board/packages/board/public/assets/agent-groups.js

@@ -0,0 +1,41 @@
+/* Canonical role-group glyphs and classification. Pure classic script: loaded
+ * by the browser and imported by the Node bridge; no DOM, fetch or dependencies.
+ * The site vendors these exact bytes. Glyphs describe roles, never run status. */
+(function (root) {
+  'use strict';
+  const groups = Object.freeze([
+    { key: 'pm', label: 'Plan', svg: '<rect x="6" y="4" width="12" height="17" rx="2"/><path d="M9 4h6v3H9zM9 12h6M9 16h4"/>' },
+    { key: 'arch', label: 'Architecture', svg: '<path d="M12 3l9 5-9 5-9-5z"/><path d="M3 13l9 5 9-5"/>' },
+    { key: 'build', label: 'Build', svg: '<path d="M8 7l-5 5 5 5M16 7l5 5-5 5M14 4l-4 16"/>' },
+    { key: 'qa', label: 'Test & review', svg: '<circle cx="12" cy="12" r="9"/><path d="M8 12l3 3 5-6"/>' },
+    { key: 'security', label: 'Security', svg: '<path d="M12 3l8 3v6c0 5-3.5 8-8 9-4.5-1-8-4-8-9V6z"/>' },
+    { key: 'domain', label: 'Domain reviewers', svg: '<path d="M12 4v16M8 20h8M5 8h14M5 8l-2 6h4zM19 8l-2 6h4z"/>' },
+    { key: 'ops', label: 'Ops', svg: '<rect x="4" y="4" width="16" height="6" rx="1"/><rect x="4" y="14" width="16" height="6" rx="1"/><path d="M8 7h.01M8 17h.01"/>' },
+    { key: 'memory', label: 'Memory', svg: '<path d="M6 3h12v18l-6-4-6 4z"/>' },
+    { key: 'other', label: 'Other', svg: '<circle cx="12" cy="12" r="3"/>' },
+  ].map(Object.freeze));
+  // Order matters: test/eval before builders; domain reviewers before generic
+  // engineers. These are display hints, not pipeline routing or permissions.
+  const rules = [
+    [/architect|adr|design|prompt|decision-scorer|project-auditor/, 'arch'],
+    [/security|sec-|threat|pci|gdpr|hipaa|smart-contract/, 'security'],
+    [/\bqa\b|test|eval|performance|^code-reviewer$/, 'qa'],
+    [/devops|deploy|infra|l3|support|oncall/, 'ops'],
+    [/reviewer$/, 'domain'],
+    [/pm|plan|product|coordinator/, 'pm'],
+    [/learn|memory|continuous|knowledge/, 'memory'],
+    [/^senior-dev$|-engineer$|-builder$|scaffolder|ci-resolver/, 'build'],
+  ];
+  function classify(slug) {
+    const value = typeof slug === 'string' ? slug.toLowerCase() : '';
+    return rules.find(([pattern]) => pattern.test(value))?.[1] || 'other';
+  }
+  const group = key => groups.find(g => g.key === key) || groups[groups.length - 1];
+  const label = key => group(key).label;
+  function icon(key) {
+    const g = group(key);
+    // All markup and attributes below come from authored constants, never key.
+    return `<svg class="grp-icon" data-agent-group="${g.key}" aria-hidden="true" focusable="false" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round">${g.svg}</svg>`;
+  }
+  root.GctoAgentGroups = Object.freeze({ groups, classify, label, icon });
+})(globalThis);

package/board/packages/board/public/index.html

@@ -1524,6 +1524,9 @@ h1, h2, h3, h4 { font-weight: 600; font-family: var(--sans); }
   .bar > i { display: block; height: 100%; background: var(--accent); }
   /* Fleet (great_cto-ki1x.8): saved views in the sidebar, domain groups, AgentRow cells */
   .fleet-group-head { display: flex; align-items: center; gap: 8px; padding: 8px 12px 4px; font-size: var(--fs-eyebrow); letter-spacing: .08em; text-transform: uppercase; color: var(--text2); font-weight: 500; }
+  .fleet-group-head .grp-icon, .agent-row .grp-icon, #agent-drawer-title .grp-icon { width: 14px; height: 14px; flex-shrink: 0; color: var(--text2); vertical-align: -2px; }
+  .agent-row .grp-icon { margin-right: 6px; color: var(--text3); }
+  #agent-drawer-title .grp-icon { margin-right: 6px; }
   .fleet-group-collapsed { display: flex; flex-wrap: wrap; gap: 20px; padding: 10px 12px; font-size: var(--fs-eyebrow); letter-spacing: .08em; text-transform: uppercase; color: var(--text3); }
   .ar-cells { display: grid; grid-template-columns: minmax(200px, 1.4fr) 130px 48px 56px 80px auto; gap: 12px; align-items: center; margin-top: 4px; }
   .ar-posture { display: flex; gap: 6px; flex-wrap: wrap; }
@@ -3395,6 +3398,7 @@ h1, h2, h3, h4 { font-weight: 600; font-family: var(--sans); }
 </style>
 </head>
 <body>
+<script src="/assets/agent-groups.js"></script>
 <script src="/assets/work-view.js"></script>
 <div class="board">
   <!-- Subtle emerald glow background -->
@@ -9768,7 +9772,7 @@ function renderFleetList() {
   // Groups come from deriveDomain() on the server — one taxonomy, not two. A
   // group with rows in this view is expanded; the rest are one line each with
   // their count, so 70 agents fit a screen without a scroll or a virtualizer.
-  const DOMAINS = ['arch', 'security', 'qa', 'ops', 'domain', 'pm', 'memory', 'other'];
+  const DOMAINS = AGENT_GROUPS.map(g => g.key);
   const totals = {}; for (const a of fleetState.agents) totals[a.domain] = (totals[a.domain] || 0) + 1;
   const byDomain = {}; for (const a of filtered) (byDomain[a.domain] = byDomain[a.domain] || []).push(a);
   const order = [...DOMAINS, ...Object.keys(byDomain).filter((d) => !DOMAINS.includes(d))];
@@ -9781,14 +9785,21 @@ function renderFleetList() {
       : `<li class="fleet-group-collapsed"><span class="abs">${esc(uu.state === 'computing' ? 'counting dispatches in the session logs…' : (uu.why || 'dispatches not counted'))}</span></li>`;
   const head = usageLine + `<li class="fleet-head" aria-hidden="true"><span></span><span>Agent</span><span>Posture</span><span>Last verdict</span><span class="tab">Runs</span><span class="tab">Pass</span><span class="tab">30d $</span><span></span></li>`;
   const rows = head + expanded.map((d) => `
-    <li class="fleet-group-head"><span>${esc(d)} · ${byDomain[d].length} of ${totals[d] || 0}</span></li>
+    <li class="fleet-group-head">${groupIcon(d)}<span>${esc(groupLabel(d))} · ${byDomain[d].length} of ${totals[d] || 0}</span></li>
     ${byDomain[d].map(agentRowHtml).join('')}`).join('');
   const tail = collapsed.length
-    ? `<li class="fleet-group-collapsed">${collapsed.map((d) => `<span title="no ${esc(d)} agent is in this view">${esc(d)} · 0 of ${totals[d]}</span>`).join('')}</li>`
+    ? `<li class="fleet-group-collapsed">${collapsed.map((d) => `<span title="no ${esc(groupLabel(d))} agent is in this view">${esc(groupLabel(d))} · 0 of ${totals[d]}</span>`).join('')}</li>`
     : '';
   el.innerHTML = rows + tail;
 }
 
+// One glyph per role group, so a reviewer and a builder differ at a glance —
+// 72 agents share 10 frontmatter colors, and a color says nothing about the role.
+// Keys are deriveDomain() on the server; order is the pipeline's.
+const AGENT_GROUPS = window.GctoAgentGroups?.groups || [];
+function groupLabel(key) { return window.GctoAgentGroups?.label(key) || key; }
+function groupIcon(key) { return window.GctoAgentGroups?.icon(key) || ''; }
+
 // AgentRow (DESIGN §6.4 / §8.5): slug · posture · last verdict · runs · pass · 30d $.
 // Numbers that can be summed are tabular and right-aligned; identifiers are not.
 // Every absence carries its reason on hover.
@@ -9850,7 +9861,7 @@ function agentRowHtml(a) {
               onclick="openAgentDrawer('${esc(a.slug)}')"
               onkeydown="if(event.key==='Enter'){event.preventDefault();openAgentDrawer('${esc(a.slug)}')}">
         <span class="ar-status" aria-hidden="true"></span>
-        <span class="ar-name">${esc(a.slug)} <span class="mono cap muted" style="font-weight:400">${model}</span>${a.retired ? ' <span class="cap" style="color:var(--agent-retired)">retired</span>' : ''}</span>
+        <span class="ar-name">${groupIcon(a.domain)}${esc(a.slug)} <span class="mono cap muted" style="font-weight:400">${model}</span>${a.retired ? ' <span class="cap" style="color:var(--agent-retired)">retired</span>' : ''}</span>
         <span class="ar-posture">${requiredChip(a)}${postureChips(a)}</span>
         <span class="mono cap ar-last">${last}</span>
         <span class="mono cap tab" title="runs in the last 30 days">${runs}</span>
@@ -9979,7 +9990,7 @@ function renderAgentProfile(p, extra = {}) {
   const title = document.getElementById('agent-drawer-title');
   const pill  = document.getElementById('agent-drawer-pill');
   if (!body) return;
-  title.textContent = p.slug;
+  title.innerHTML = groupIcon(window.GctoAgentGroups?.classify(p.slug)) + esc(p.slug);
   const row = (fleetState.agents || []).find((a) => a.slug === p.slug) || {};
   const tier = extra.tier;
   const tierChip = tier

package/board/scripts/lib/agent-groups.mjs

@@ -0,0 +1,8 @@
+// One implementation for Node readers and the classic-script board. The
+// side-effect import also works in the site's committed CommonJS snapshot.
+import '../../packages/board/public/assets/agent-groups.js';
+const api = globalThis.GctoAgentGroups;
+export const agentGroups = api.groups;
+export const classifyAgentGroup = api.classify;
+export const agentGroupLabel = api.label;
+export const agentGroupIcon = api.icon;

package/board/scripts/lib/receipt.mjs

@@ -29,7 +29,8 @@ import { execFileSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import * as fsModule from 'node:fs';
-import { join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 const sha = (s) => createHash('sha256').update(String(s)).digest('hex');
 
@@ -351,12 +352,23 @@ export function describeDrift(cmp, { max = 10 } = {}) {
 export const APPROVING_AGENTS = Object.freeze(['code-reviewer', 'security-officer', 'qa-engineer']);
 const APPROVING_VERDICTS = new Set(['APPROVED', 'PASS', 'PASSED']);
 
-export function latestApproval(cwd = process.cwd(), { agents = APPROVING_AGENTS, read = readFileSync } = {}) {
+/** Same state location as log-verdict.sh; the candidate bytes stay in cwd. */
+export function verdictStateDir(cwd = process.cwd(), env = process.env) {
+  if (env.GREAT_CTO_DIR) return resolve(cwd, env.GREAT_CTO_DIR);
+  const common = git(['rev-parse', '--git-common-dir'], cwd)?.trim();
+  const gitdir = git(['rev-parse', '--git-dir'], cwd)?.trim();
+  if (common && gitdir && resolve(cwd, common) !== resolve(cwd, gitdir)) {
+    return join(dirname(resolve(cwd, common)), '.great_cto');
+  }
+  return join(cwd, '.great_cto');
+}
+
+export function latestApproval(cwd = process.cwd(), { agents = APPROVING_AGENTS, read = readFileSync, stateDir = verdictStateDir(cwd) } = {}) {
   let best = null;
   for (const agent of agents) {
     let text;
     try {
-      text = read(join(cwd, '.great_cto', 'verdicts', `${agent}.log`), 'utf8');
+      text = read(join(stateDir, 'verdicts', `${agent}.log`), 'utf8');
     } catch { continue; }
     for (const line of String(text).split('\n')) {
       if (!line.trim()) continue;
@@ -454,8 +466,26 @@ function requireFs() {
 // `--check <file>`  compares a recorded receipt held in a file.
 // `--verify` compares the newest approving verdict's receipt against now.
 
-if (import.meta.url === `file://${process.argv[1]}`) {
+function currentForReceipt(cwd, receipt) {
+  // Persisted evidence is data, not Git options or a new revision expression.
+  // Missing bases retain legacy behavior; invalid declared bases stay unreadable.
+  let base = receipt?.base;
+  // The emitter uses HEAD when there is no conventional default branch. Bind
+  // that legacy symbolic base to the recorded commit, not today's moving HEAD.
+  if (base === 'HEAD') {
+    if (!receipt?.head) return null;
+    base = receipt.head;
+  }
+  if (base != null && (typeof base !== 'string' || !/^[0-9a-f]{7,64}$/i.test(base))) return null;
+  return treeReceipt(cwd, { base: base || null });
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1])) {
   const argv = process.argv.slice(2);
+  if (argv.includes('--state-dir')) {
+    console.log(verdictStateDir());
+    process.exit(0);
+  }
   if (argv.includes('--emit')) {
     // `--verdicts <dir>`: measure the change from where the previous stage stood.
     const vi = argv.indexOf('--verdicts');
@@ -467,7 +497,7 @@ if (import.meta.url === `file://${process.argv[1]}`) {
   if (argv.includes('--verify')) {
     const cwd = process.cwd();
     const approval = latestApproval(cwd);
-    const current = treeReceipt(cwd);
+    const current = currentForReceipt(cwd, approval?.receipt);
     const cmp = compareReceipts(approval?.receipt ?? null, current);
     if (cmp.state === 'no-receipt') {
       // Not silence. A push with no approval to compare against and a push whose
@@ -479,6 +509,7 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     console.log(`receipt: against ${who}`);
     console.log(describeDrift(cmp).split('\n').map((l) => `  ${l}`).join('\n'));
 
+    if (cmp.state === 'unreadable') process.exit(2);
     if (cmp.state !== 'differs') process.exit(0);
 
     // Drift, but a human may already have looked at exactly this state.
@@ -507,8 +538,12 @@ if (import.meta.url === `file://${process.argv[1]}`) {
   if (argv.includes('--accept')) {
     const cwd = process.cwd();
     const approval = latestApproval(cwd);
-    const current = treeReceipt(cwd);
+    const current = currentForReceipt(cwd, approval?.receipt);
     const cmp = compareReceipts(approval?.receipt ?? null, current);
+    if (cmp.state === 'unreadable') {
+      console.error(`receipt: cannot accept — ${cmp.why}`);
+      process.exit(2);
+    }
     if (cmp.state !== 'differs') {
       console.log(`receipt: nothing to accept — ${cmp.why}`);
       process.exit(0);
@@ -537,9 +572,9 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     const { readFileSync } = await import('node:fs');
     let recorded = null;
     try { recorded = JSON.parse(readFileSync(argv[i + 1], 'utf8')); } catch { /* absent */ }
-    const cmp = compareReceipts(recorded, treeReceipt(process.cwd()));
+    const cmp = compareReceipts(recorded, currentForReceipt(process.cwd(), recorded));
     console.log(describeDrift(cmp));
-    process.exit(cmp.state === 'differs' ? 1 : 0);
+    process.exit(cmp.state === 'unreadable' ? 2 : cmp.state === 'differs' ? 1 : 0);
   }
   console.log(JSON.stringify(treeReceipt(process.cwd()), null, 2));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "3.68.0",
+  "version": "3.69.0",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",