This release includes 5 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+2 more
Affected surfaces
Summary
AI summaryThe operator console is now a separate entry with its own CLI, bind/host options, and invite‑only access.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Operator console becomes separate entry point from dev board. Operator console becomes separate entry point from dev board. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Medium |
Adds `great-cto console` CLI command with optional --port and --bind flags. Adds `great-cto console` CLI command with optional --port and --bind flags. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Medium |
Distinguishes invite token from builder key across all modes. Distinguishes invite token from builder key across all modes. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Medium |
Enforces invite‑only access for the console surface; unauthorized users see a lock screen prompting to contact administrator. Enforces invite‑only access for the console surface; unauthorized users see a lock screen prompting to contact administrator. Source: llm_adapter@2026-06-11 Confidence: low |
— |
| Feature | Medium |
Imposes tenant boundary on console write operations, returning 403 for cross‑tenant actions. Imposes tenant boundary on console write operations, returning 403 for cross‑tenant actions. Source: llm_adapter@2026-06-11 Confidence: low |
— |
| Feature | Low |
Introduces `GET /api/autopilot/surface` beacon endpoint. Introduces `GET /api/autopilot/surface` beacon endpoint. Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
The operator console becomes its own entry (PLAN-ui-split P1+P2)
- Surface boundary:
--surface consoleserves ONLY the operator console — the dev board (UI + API) does not exist on that surface. great-cto console [--port] [--bind 0.0.0.0]— second CLI entry; board and console run side by side; hostable via--bind.- Invite-only console: no local-admin fallback on the console surface — without a valid invite, an 'ask your administrator' lock screen.
- Invite token ≠ builder key (any mode) and tenant boundary on writes (approve/reject/escalate/bulk/qa-score/requeue → 403 on another tenant's cases).
- New
GET /api/autopilot/surfacebeacon; surface tests 8/8.
Breaking Changes
- --surface console now serves ONLY the operator console; the dev board UI and API are removed from that surface
- `great-cto console` is a new CLI entry; board and console run side by side with independent `--port` and `--bind` options
- Console access requires a valid invite; local‑admin fallback is disabled, showing an 'ask your administrator' lock screen otherwise
- Invite token is distinct from the builder key in all modes
- Write operations (approve/reject/escalate/bulk/qa-score/requeue) are tenant‑bounded; attempting them on another tenant returns 403
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About great_cto
Engineering-management layer of 34 specialist AI agents covering the full SDLC (architect, PM, senior-dev, reviewer, QA, security, devops, L3-support + 18 archetype-specific reviewers) with auto-detected archetypes and compliance gates (PCI-DSS, HIPAA, FedRAMP, GDPR, EU AI Act). Runs in Claude Code, Cursor, Codex CLI, Aider, and Continue via AGENTS.md + MCP. MIT.
Related context
Related tools
Earlier breaking changes
- v2.72.2 Removes Autopilot sidebar item and Operate topbar button from dev board.
- v2.55.0 Hard-gates the Build board; redirects invite sessions to Operate for operators.
- v2.43.0 Runtime now blocks autonomous execution of irreversible actions without prior human checkpoint.
- v2.43.0 Adds reversible and blastRadius fields to every flow step.
- v2.32.0 Removed AgentShield scanner and its CLI commands.
Beta — feedback welcome: [email protected]