Worker queries need a safe connected-worker filter for fleet fan-out

Teams3mo ago

#1415

Include a workflow's declared `inputs` in `workflow get --json` (and a `hasInputs` hint in `workflow search --json`)

Teams3mo ago

#1335

data query and data get return the same payload under different keys

Teams3mo ago

#1334

forEach leaves self.* unresolved in target

Teams3mo ago

#1310

serve: workflow.approvals and workflow.run.search still full-scan the workflow-run store after the #1284 data.query pushdown

Teams3mo ago

#1284

serve: read ops (data.query, workflow.approvals, workflow run.search) linearly scan the whole datastore — ~350–600ms floor regardless of match count

Teams3mo ago

#1285

serve: main JS thread holds ~40–70% of a core while idle (no clients, no runs, --no-schedule)

TeamsBlocked3mo ago

#1282

workflow.run: relay a custom model method's output as method_output (command steps already do)

Team1mo ago

#1240

Job-level labels: block is silently ignored, not rejected

Teamk3mo ago

#1241

Issue submission redactor silently corrupts report bodies

Teamk3mo ago

#1213

Grant revoke is never applied to the running server — under `--grant-reload auto` and `manual` alike, a revoked grant stays in force until an explicit `access reload`

Teams3mo ago

#1206

01Issue

BugShippedSwamp ClubPublicTeam

Assigneesstack72

Relationships

#1177 swamp serve `--grant-reload auto` never reloads

Opened by ehazlett · 7/16/2026· Shipped 7/16/2026

Started swamp serve --auth-mode token --grant-reload auto. Log confirms Policy snapshot loaded (reload mode: "auto").

Then, with no explicit reload:

Created a grant via local CLI (swamp access grant create) subject still denied after 30s. No reload log line.
Created a grant through the server (--server, as admin) subject still denied. Still no reload log line.
Ran swamp access reload --server reloaded: 5 grant(s) subject immediately allowed.

So in this build auto behaves identically to manual: the snapshot is loaded once at startup and never again. Either the flag is a no-op or its trigger is undocumented.

Ask: fix, or document precisely what event auto watches.

02Bog Flow

Shipped

7/16/2026, 8:24:20 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack727/16/2026, 5:39:34 PM

stack72 commented 7/16/2026, 8:24:29 PM

Thanks @ehazlett for reporting this! The fix has been merged and a release is on its way. We appreciate your contribution to swamp.

Worker queries need a safe connected-worker filter for fleet fan-out

Include a workflow's declared `inputs` in `workflow get --json` (and a `hasInputs` hint in `workflow search --json`)

data query and data get return the same payload under different keys

forEach leaves self.* unresolved in target

serve: workflow.approvals and workflow.run.search still full-scan the workflow-run store after the #1284 data.query pushdown

serve: read ops (data.query, workflow.approvals, workflow run.search) linearly scan the whole datastore — ~350–600ms floor regardless of match count

serve: main JS thread holds ~40–70% of a core while idle (no clients, no runs, --no-schedule)

workflow.run: relay a custom model method's output as method_output (command steps already do)

Job-level labels: block is silently ignored, not rejected

Issue submission redactor silently corrupts report bodies

Grant *revoke* is never applied to the running server — under `--grant-reload auto` and `manual` alike, a revoked grant stays in force until an explicit `access reload`

Unable to link account

swamp serve `--grant-reload auto` never reloads

WS handshake accepts the token **only** as a URL query parameter

Relationships

#1177 swamp serve `--grant-reload auto` never reloads

Shipped

Grant revoke is never applied to the running server — under `--grant-reload auto` and `manual` alike, a revoked grant stays in force until an explicit `access reload`

WS handshake accepts the token only as a URL query parameter