Release v0.13.0

320 commits since v0.12.1. Major additions: directives/overlays system,
convoy watch/MQ panel, patrol scan CLI, checkpoint dog, crash recovery,
Wasteland stamps, Copilot support, unique polecat namepool. Extensive
fixes to Dolt stability, tmux reliability, refinery, convoy, polecat
lifecycle, Windows support, and security hardening.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Executed-By: mayor

Author: steveyegge

CHANGELOG.md

@@ -7,6 +7,154 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.13.0] - 2026-03-29
+
+### Added
+
+- **Directives and overlays** — New `gt prime` directive loader and overlay
+  system with CLI commands (`gt directive`, `gt overlay`), formula overlay
+  support, and doctor health check for overlay integrity.
+- **Gate bead instruction template** — Gate beads now carry structured
+  instruction templates with GitHub API client support.
+- **Merge queue step dependencies** — `gt mq submit` enforces molecule step
+  dependency ordering before submission.
+- **Convoy watch/unwatch** — `gt convoy watch` and `gt convoy unwatch` for
+  opt-in completion notifications on convoy progress.
+- **Convoy merge queue panel** — Feed view now shows merge queue status in
+  convoy panels.
+- **Patrol scan CLI** — `gt patrol scan` detects zombie and stalled polecats
+  from the command line.
+- **Checkpoint dog** — New `checkpoint_dog` auto-commits WIP changes in
+  polecat worktrees periodically.
+- **Crash recovery on startup** — `gt up` detects and recovers orphaned hooked
+  beads left by crashed sessions.
+- **Post-squash gate phase** — Refinery adds a pre-push validation gate after
+  squash merging.
+- **Refinery auto\_push config** — New `auto_push` rig setting controls whether
+  refinery pushes after merge.
+- **PR feedback patrol formula** — `mol-pr-feedback-patrol` formula for
+  automated PR review triage.
+- **Configurable tmux theming** — Window tint and `window-style` theming with
+  resolver; Mayor gets terminal-default theme.
+- **`gt changelog` command** — Generate changelogs from the CLI with tests.
+- **Wasteland stamps and pilot cohorts** — `gt wl stamp`, `gt wl stamps`
+  commands and `pilot_cohort` column for HOP pilot program.
+- **Wasteland scorekeeper** — Charsheet, scorekeeper, and stamp loop
+  integration tests.
+- **`gt wl show <work-id>`** — Structured work-item detail view with
+  auto-fetch.
+- **`gt default-agent list`** — New subcommand to list available agent presets.
+- **Disabled patrols setting** — `disabled_patrols` town config to suppress
+  patrols without editing daemon.json.
+- **Dolt failover/failback** — Multi-host Dolt setups can failover and
+  failback between primary and replica.
+- **`.no-sync` marker files** — Drop a `.no-sync` file in a database directory
+  to exclude it from sync.
+- **`/done` slash command** — Polecats can invoke `/done` with a Stop hook
+  safety net for clean lifecycle exit.
+- **Sling `--review-only` flag** — Prevent assignee from merging; report back
+  only.
+- **Copilot agent support** — GitHub Copilot CLI documented and preset updated
+  for GA release (Feb 2026).
+- **Unique polecat namepool** — Polecat names are now globally unique across
+  rigs via shared namepool with auto-assigned themes.
+- **Handoff restart prompt** — `gt handoff` now prompts the user before
+  restarting the session.
+
+### Changed
+
+- **Beads dependency** upgraded to v0.62.0.
+- **Compactor-dog threshold** — Default compaction threshold raised from 500 to
+  2000 to reduce unnecessary compactions.
+- **Dolt startup timeout** — Scales dynamically by database count (5s per DB)
+  instead of fixed timeout.
+- **Dolt SIGTERM→SIGKILL timeout** — Increased from 5s to 30s for graceful
+  shutdown of large databases.
+- **Polecat CLAUDE.md provisioning** — Lifecycle instructions provisioned on
+  all spawn paths including worktree reuse, with `gt done` reminders injected
+  at startup and after compaction.
+- **Boot and dog cost tiers** — Boot and dog roles now tracked in the cost tier
+  system.
+- **Plugin database discovery** — Plugins auto-discover databases instead of
+  using hardcoded lists; reaper uses `DiscoverDatabases` with proper error
+  handling.
+- **Session-hygiene plugin removed** — Removed after repeatedly killing crew
+  sessions (3 incidents).
+- **Dolt `dolt_transaction_commit` disabled** — Prevents read-only commit
+  storms on busy servers.
+
+### Fixed
+
+- **Dolt server stability** — Fixed thundering herd in `doltserver.Start()`,
+  port-squatter detection and kill on startup, `cmd.Dir` set on all CLI/SQL
+  invocations to prevent stray `.doltcfg` directories, and timing race in
+  startup sequence.
+- **Security hardening** — Bead ID suffix validation enforced, formula
+  variables use bead IDs instead of user-supplied titles, and
+  `--subject`/`--args` sanitized before tmux pane injection.
+- **Tmux reliability** — Replaced timing-based Enter delivery with
+  verification-based retry, detect and dismiss Claude Code Rewind menu during
+  nudge delivery, restored per-town socket isolation, and added flock-based
+  cross-process nudge lock to prevent interleaved delivery.
+- **Windows fixes** — Atomic counter in `generateStampID` for timer resolution,
+  pipe deadlock prevention in `prime_test`, process group test skips, and
+  multiple CI test stabilizations.
+- **Polecat lifecycle** — Skip crash/zombie alerts for done/nuked polecats,
+  use `IsIdle` instead of `IsAtPrompt` for startup nudge verify, clean dirty
+  worktree before reuse, kill session unconditionally when reusing idle
+  polecats, and wire operational config into startup nudge loop.
+- **Refinery fixes** — Use commit SHA instead of branch name for MR dedup,
+  supersede MR on same-branch re-submission, check `no_merge` flag before
+  merging, close task beads after successful merge, wait for CI in PR mode,
+  and filter MR listings by rig to prevent cross-rig contamination.
+- **Convoy fixes** — Use Unix epoch instead of zero time for initial event poll,
+  stranded scan checks completion status, create legs in target rig beads,
+  and cross-rig dependency routing uses town root.
+- **Cross-town safety** — Prevent orphan cleanup from killing agents on other
+  towns' sockets, distinguish sibling Gas Town instances from test zombies.
+- **Dog and daemon** — Clear agent identity env vars at startup, prevent
+  duplicate Mayor spawns during `gt up`, auto-clear hung dogs and orphan
+  sessions, include dogs in startup retry loop, prevent daemon restart during
+  `gt down`, and respect global default agent for dog spawns.
+- **Doctor improvements** — Avoid slow `filepath.Walk` on Docker bind mounts,
+  stale `sql-server.info` detection, hooks-sync check detects stale Gemini
+  settings, route misclassified wisp fixes by workdir, and repair relocated
+  worktree gitdir paths.
+- **Mail and communication** — Drain crashed polecat notifications, prefer
+  `GT_TOWN_ROOT` env var for town root detection, fall back to explicit agent
+  workspaces for mail delivery.
+- **Dolt plugins** — `dolt-archive` uses `while-read` loops for bash 3.2
+  compatibility (macOS), `dolt-backup` uses `$HOME/gt` as `GT_ROOT` fallback,
+  named Docker volume prevents journal corruption on macOS, and `grep -v`
+  exit code handled under `pipefail`.
+- **Formula and molecule** — Cap backoff before overflow in `await-event` and
+  `await-signal`, inject `merge_strategy` from rig settings into formula vars,
+  propagate `base_branch` to MR target in `gt done` and `gt mq submit`.
+- **Sling** — Serialize concurrent hook writes with per-assignee flock,
+  `--dry-run` detects tmux session collision before spawn, guard `sha[:8]`
+  slice against short hashes.
+- **Config and identity** — Dog sessions inherit env vars from base agent, custom
+  agents inherit Session/Tmux from preset, `CLAUDE_CONFIG_DIR` respected in
+  `gt costs`, rig prefix pattern refresh when stale, propagate
+  `BEADS_DOLT_SERVER_HOST` to subprocesses, and repair PROJECT IDENTITY
+  MISMATCH after crash.
+- **Guard and compliance** — Block polecats from pushing directly to main.
+- **Misc** — `formatPeriod` returns "Week of" on Mondays instead of "Today",
+  sync `agent_state` between column and description on transitions, validate
+  git URL before crew clone, `--flat` flag on all `bd list --json` calls to
+  guarantee JSON output, `gt upgrade` repairs missing identity beads, and
+  `CLAUDE.local.md` added to gitignore patterns.
+
+### Removed
+
+- **Session-hygiene plugin** — Removed entirely after causing repeated crew
+  session kills.
+- **`--no-history` flag** — Removed from identity bead creation in favor of
+  proper ephemeral bead support.
+- **Hardcoded database lists** — Reaper and plugin database discovery replaced
+  with dynamic `DiscoverDatabases`.
+- **Legacy `gt` database** — Removed from reaper fallback list.
+
 ## [0.12.1] - 2026-03-15
 
 ### Added

internal/cmd/audit.go

@@ -212,7 +212,7 @@ func collectGitCommits(townRoot, actor string, since time.Time) ([]AuditEntry, e
 			Type:      "commit",
 			Actor:     author,
 			Summary:   subject,
-			ID:        shortHash(hash),
+			ID:        hash[:8],
 		})
 	}
 

internal/cmd/compact_report.go

@@ -561,7 +561,6 @@ func findExistingCompactReport(dateStr string) (string, error) {
 
 	listCmd := exec.Command("bd", "list",
 		"--type=event",
-		"--status=closed",
 		"--json",
 		"--limit=50",
 	)

internal/cmd/dolt_rebase.go

@@ -312,7 +312,7 @@ func runDoltRebase(cmd *cobra.Command, args []string) error {
 	}
 	if currentHead != preHead {
 		rebaseCleanupAll(db, baseBranch, workBranch)
-		return fmt.Errorf("ABORT: main HEAD moved during rebase (%s → %s)", shortHash(preHead), shortHash(currentHead))
+		return fmt.Errorf("ABORT: main HEAD moved during rebase (%s → %s)", preHead[:8], currentHead[:8])
 	}
 
 	// Step 9: Swap branches — make compact-work the new main.

internal/cmd/escalate_impl.go

@@ -2,7 +2,6 @@ package cmd
 
 import (
 	"encoding/json"
-	"errors"
 	"fmt"
 	"io"
 	"net/http"
@@ -250,41 +249,14 @@ func runEscalateList(cmd *cobra.Command, args []string) error {
 		}
 	}
 
-	// Cross-check each entry against live Dolt to filter out phantom escalations.
-	// When a rig's Dolt server dies and is restarted fresh, the label-based list
-	// query may still return stale IDs (e.g. from a cached or cross-rig query)
-	// that no longer exist in the live database. We skip any entries that cannot
-	// be fetched individually, since they cannot be acked or closed anyway.
-	var live []*beads.Issue
-	var phantomCount int
-	for _, issue := range issues {
-		if _, err := bd.Show(issue.ID); err != nil {
-			if errors.Is(err, beads.ErrNotFound) {
-				phantomCount++
-				fmt.Fprintf(os.Stderr, "warning: skipping unresolvable escalation %s (not found in live Dolt)\n", issue.ID)
-				continue
-			}
-			// For other errors (e.g. Dolt temporarily unreachable), include
-			// the entry so the user can see it — just warn.
-			fmt.Fprintf(os.Stderr, "warning: could not verify escalation %s: %v\n", issue.ID, err)
-		}
-		live = append(live, issue)
-	}
-	issues = live
-
 	if escalateListJSON {
 		out, _ := json.MarshalIndent(issues, "", "  ")
 		fmt.Println(string(out))
 		return nil
 	}
 
 	if len(issues) == 0 {
-		if phantomCount > 0 {
-			fmt.Printf("No escalations found (%d phantom entr%s skipped — bead IDs no longer exist in live Dolt)\n",
-				phantomCount, map[bool]string{true: "y", false: "ies"}[phantomCount == 1])
-		} else {
-			fmt.Println("No escalations found")
-		}
+		fmt.Println("No escalations found")
 		return nil
 	}
 

internal/cmd/hash_display.go

@@ -127,13 +127,7 @@ func runHooksSync(cmd *cobra.Command, args []string) error {
 			if loc.Rig != "" {
 				rigPath = filepath.Join(townRoot, loc.Rig)
 			}
-			// Use ResolveRoleAgentName + ResolveAgentConfigByName so hooks sync works
-			// even when the agent binary is not installed on this machine.
-			agentName, _ := config.ResolveRoleAgentName(loc.Role, townRoot, rigPath)
-			if agentName == "" || agentName == "claude" {
-				continue
-			}
-			rc := config.ResolveAgentConfigByName(agentName, townRoot, rigPath)
+			rc := config.ResolveRoleAgentConfig(loc.Role, townRoot, rigPath)
 			if rc == nil || rc.Hooks == nil || rc.Hooks.Provider == "" {
 				continue
 			}

internal/cmd/hash_display_test.go

@@ -275,28 +275,18 @@ func calculateEventTimeout(idleCycles int) (time.Duration, error) {
 		if err != nil {
 			return 0, fmt.Errorf("invalid backoff-base: %w", err)
 		}
-
-		var maxDur time.Duration
+		timeout := base
+		for i := 0; i < idleCycles; i++ {
+			timeout *= time.Duration(awaitEventBackoffMult)
+		}
 		if awaitEventBackoffMax != "" {
-			maxDur, err = time.ParseDuration(awaitEventBackoffMax)
+			maxDur, err := time.ParseDuration(awaitEventBackoffMax)
 			if err != nil {
 				return 0, fmt.Errorf("invalid backoff-max: %w", err)
 			}
-		}
-
-		timeout := base
-		for i := 0; i < idleCycles; i++ {
-			// Cap early to prevent int64 overflow at high idle counts.
-			// time.Duration is int64 nanoseconds; multiplying repeatedly
-			// without a guard wraps negative around idle ~62+ (30s base,
-			// mult=2). Check before each multiply.
-			if maxDur > 0 && timeout >= maxDur {
-				return maxDur, nil
+			if timeout > maxDur {
+				timeout = maxDur
 			}
-			timeout *= time.Duration(awaitEventBackoffMult)
-		}
-		if maxDur > 0 && timeout > maxDur {
-			return maxDur, nil
 		}
 		return timeout, nil
 	}

internal/cmd/hooks_sync.go

@@ -62,23 +62,6 @@ func TestCalculateEventTimeout(t *testing.T) {
 			idleCycles:  10, // Would be 30s * 2^10 = ~8.5h but capped at 5m
 			want:        5 * time.Minute,
 		},
-		{
-			name:        "backoff overflow guard: idle=34 with max cap",
-			timeout:     "60s",
-			backoffBase: "30s",
-			backoffMult: 2,
-			backoffMax:  "5m",
-			idleCycles:  34, // 30s * 2^34 overflows int64; must clamp to 5m
-			want:        5 * time.Minute,
-		},
-		{
-			name:        "backoff overflow guard: idle=34 no max (no overflow without cap)",
-			timeout:     "60s",
-			backoffBase: "1ns",
-			backoffMult: 2,
-			idleCycles:  34, // 1ns * 2^34 = 17179869184ns ≈ 17s — fits in int64, no overflow
-			want:        time.Duration(1 << 34),
-		},
 		{
 			name:        "backoff base exceeds max",
 			timeout:     "60s",