Steve Yegge 9f165d7c82 Fix SQL injection vulnerability in convoy.go (gt-frvun) ...

Add input validation for convoyID before using it in SQL query.
Issue IDs must match ^[a-zA-Z0-9_-]+$ to prevent injection attacks.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-30 14:14:46 -08:00

..

beads

ZFC #4: Replace daemon identity parsing with agent self-registration

2025-12-30 02:13:14 -08:00

claude

Startup hooks nudge Deacon for GUPP backstop (gt-vdprb.3)

2025-12-29 18:05:50 -08:00

cmd

Fix SQL injection vulnerability in convoy.go (gt-frvun)

2025-12-30 14:14:46 -08:00

config

fix: Tighten overseer validation, document fallback behavior

2025-12-29 18:31:58 -08:00

constants

Extract timing constants to constants package (gt-795e8)

2025-12-28 17:18:03 -08:00

crew

fix: stop writing Gas Town context to CLAUDE.md

2025-12-30 11:58:07 -08:00

daemon

ZFC #4: Replace daemon identity parsing with agent self-registration

2025-12-30 02:13:14 -08:00

deacon

…

doctor

fix: Capture stderr instead of suppressing in command execution

2025-12-30 00:52:02 -08:00

dog

Add Dog infrastructure package for Deacon helper workers (gt-0x5og.2)

2025-12-30 10:38:18 -08:00

events

Instrument gt commands to emit events to activity feed (gt-7aw1m)

2025-12-30 10:43:34 -08:00

feed

Add feed curator to daemon for activity feed curation (gt-38doh)

2025-12-30 02:12:01 -08:00

git

polecat: fresh unique branches per run, add gc command (gt-ake0m)

2025-12-27 17:19:02 -08:00

keepalive

docs: Add best-effort design doc to keepalive package (gt-gcnnr)

2025-12-28 16:40:04 -08:00

lock

Remove dead code: splitLines loop, unused methods (gt-2g130)

2025-12-28 17:13:34 -08:00

mail

Add @group dynamic resolution in mail router (gt-tgy1v)

2025-12-30 10:47:05 -08:00

mq

…

mrqueue

feat: Wire MQ lifecycle events to gt feed display (gt-lak31)

2025-12-30 01:45:04 -08:00

polecat

fix: stop writing Gas Town context to polecat CLAUDE.md

2025-12-30 12:01:27 -08:00

protocol

Implement Witness-Refinery protocol handlers (gt-m5w4g.2)

2025-12-30 10:48:00 -08:00

refinery

ZFC #5: Move merge/conflict decisions from Go to Refinery agent

2025-12-30 02:12:43 -08:00

rig

fix: Use BeadsPath() for swarm status to read from git-synced beads (gt-1rxz5)

2025-12-29 23:46:59 -08:00

session

Fix --issue flag in gt session start to hook work to polecat (gt-pxsna)

2025-12-29 22:00:07 -08:00

style

Standardize warning output to use style.PrintWarning (gt-g6kor)

2025-12-28 16:38:04 -08:00

suggest

…

swarm

fix: Use BeadsPath() for swarm status to read from git-synced beads (gt-1rxz5)

2025-12-29 23:46:59 -08:00

templates

ZFC #5: Move merge/conflict decisions from Go to Refinery agent

2025-12-30 02:12:43 -08:00

tmux

Fix gt crew at to detect existing Claude sessions (gt-l90dq)

2025-12-29 22:01:59 -08:00

townlog

Add witness activity events to gt feed (gt-nfdyl)

2025-12-29 23:52:38 -08:00

tui/feed

Wire witness patrol events to gt feed display

2025-12-30 01:55:09 -08:00

util

feat: Add gt rig boot command to start witness and refinery

2025-12-28 19:19:10 -08:00

wisp

Eradicate hook files, use pinned beads only (gt-rgd9x)

2025-12-26 16:46:39 -08:00

witness

Implement Polecat-Witness protocol handlers (gt-m5w4g.3)

2025-12-30 10:44:34 -08:00

workspace

…