security: escape user content in triage prompt delimiters#204

Merged

BillChirico merged 12 commits intomainfrom

Mar 2, 2026

Commits on Mar 2, 2026

security: escape user content in triage prompt delimiters (#164)
BillChirico
committed
security: escape & chars and author fields in prompt delimiters
BillChirico
committed
fix(security): escape & in prompt delimiters and escape author fields
BillChirico
committed
fix: guard replyTo.content before .slice() to handle null/undefined
BillChirico
committed
perf: SQL-based conversation pagination + missing DB indexes (#221)

BillChirico
authored and
Bill Chirico
committed
feat: channel-level quiet mode via bot mention (#173) (#213)

BillChirico
authored and
Bill Chirico
committed
feat: audit log improvements — CSV/JSON export and real-time WebSocket stream (#215)

BillChirico
authored and
Bill Chirico
committed
feat: voice channel activity tracking — join/leave/move, leaderboard, export (#212)

authored and
Bill Chirico
committed
feat(dashboard): auto-save config with 500ms debounce (#199)

BillChirico
and
Bill Chirico
committed
feat: Reaction role menus (#162) (#205)

BillChirico
and
Bill Chirico
committed
fix(security): validate GitHub owner/repo format before gh CLI call (#198)

BillChirico
and
Bill Chirico
committed
merge: resolve conflicts with main
Bill Chirico
committed