agent-runner: record token usage and cost on runResult (Claude --output-format json, Codex --json)

7h ago

#4055

swamp skill docs: publishing.md contradicts itself on dynamic imports, overstates where git dependencies are listed, and never says consumers keep the publisher's bundle

7h ago

#4054

extension push: the dynamic import() refusal tells authors to run swamp extension fmt, and the archive-project-file fix names the kind directory push never filters

7h ago

#4053

extension push: file:, link:, workspace: and git package.json dependencies are left out of the unaudited list when the project also has a deno.json

7h ago

#4051

push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

9h ago

#4050

Streak projector: incremental runs instead of a full scan every minute

9h ago

#4047

Studio board: "Show finished" / "Show claimed" are pushed off-screen, with no scroll, when a factory has many stages

10h ago

#4045

datastore v3: a parent run recording its child's rejected approval on a nested step is judged as needing approve

11h ago

#4041

Scheduled flaky-test detection is failing

12h ago

#4040

Docs: doctor datastores --repair --json describes a repairReport shape the CLI never produced

12h ago

#4039

Registry: detect code from outside npm and JSR in a v2 archive itself, not only from the author's dependency-audit.json

12h ago

#4035

Scorecard: code past the analyzer's read caps, or unreadable, is skipped silently instead of counting as not audited

12h ago

#4032

Datastore v2 on macOS: order data-version writes with F_BARRIERFSYNC instead of full syncs

13h ago

#4028

@swamp/cloudflare/analytics README documents CRUD methods the GraphQL analytics model does not have

13h ago

#4027

swamp extension source add rejects a relative direct-content path that works as an absolute path

14h ago

#4026

swamp hangs silently when an extension source directory contains the swamp repo itself

14h ago

#4022

Inbox: automatic points message when a quest season or double-points event starts

14h ago

#4021

Inbox: automatic issue_update message when a Lab issue ships

14h ago

#4020

Inbox sending: segments, a per-user limit of 3 messages per 24 hours, and terminal preview

14h ago

#4019

Datastore v3: data writes the datastore filter keeps local are never fsynced

14h ago

#4016

Docs: doctor datastores reference — unreadable data version check and repair (swamp-club#3955)

15h ago

#4010

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

17h ago

#4009

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

17h ago

#4008

access can-i: evaluate a local grants file without --server

17h ago

#4007

Show each method's kind in type describe --json

17h ago

#4006

Team mode: serve sends the compacted base, so a serve-mode checkout can catch up past compaction

17h ago

#3999

Support search and filters as URL query parameters on /extensions

18h ago

#3998

bundleExtension same-cache test can pass with a broken first-bundle gate under CPU load

18h ago

#3994

Five Mongo queues can hand the same row to two replicas

23h ago

#3993

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

23h ago

#3992

Collective invite shows "This invitation has expired or has already been used" after a successful join via Google sign-in

1d ago

#3991

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

1d ago

#3988

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

1d ago

#3987

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

1d ago

#3980

Rescore every extension's current version under rubric v5

1d ago

#3964

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

1d ago

#3963

A long-lived serve client for extensions, and a stable rate_limited error code

1d ago

#3962

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

1d ago

#3961

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

1d ago

#3957

Support creating 1Password vaults for new clients

1d ago

#3953

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

2d ago

#3946

Generated state schemas require every child of nested objects, so normal resources warn on create/get

2d ago

#3930

Add LinkedIn as a login provider

2d ago

#3929

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

2d ago

#3928

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

2d ago

#3887

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

1d ago

#3885

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

3d ago

#3865

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

4d ago

#3855

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

4d ago

#3843

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

4d ago

#3841

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

4d ago

#3833

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

4d ago

#3829

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

4d ago

#3825

Extension registry page: a supported way to include media (images) in the README

4d ago

#3787

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

5d ago

#3705

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

6d ago

#3703

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

6d ago

#3702

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

6d ago

#3679

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

7d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

4d ago

#3663

vary/forEach object values with no key/name/id produce data names Windows refuses

7d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

8d ago

#3647

swamp core: a non-string sensitive value reads back as a JSON string

8d ago

#3641

Generated vault keys carry raw data-name and vary characters that strict vault providers reject

8d ago

#3608

Registry drops contentMetadata.extensions (method grafts) at confirm-push

s8h ago

#3603

Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)

s8d ago

#3600

local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)

8d ago

#3580

Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition

Team10d ago

#3579

Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support

Team10d ago

#3578

workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)

Team10d ago

#3554

issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream

11d ago

#3523

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

12d ago

#3514

swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)

8d ago

#3483

Workflow run cancellation on concurrency-key conflict

13d ago

#3480

Read non-string sensitive resource fields back with their type

13d ago

#3470

Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds

13d ago

#3408

Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them

13d ago

#3401

A global argument that evaluates to swamp-namespace expression text is silently dropped, and literal() cannot pass it through

14d ago

#3399

serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other

11d ago

#3361

S3-backed serve: a poll that pulls one file invalidates the whole data catalog, so the next query re-reads every version

1d ago

#3344

extensions_search index is never created if the first attempt fails, until the process restarts

15d ago

#3305

S3/GCS datastore sync: shared sync service lets one sync clear another's dirty marks and pull over unpushed files

15d ago

#3298

swamp-uat: the SIGTERM drain test does not check that the run succeeded

15d ago

#3297

stagecraft: a factory-wide read of work items waiting on a person (no studio, no per-item status loop)

15d ago

#3292

stagecraft: rebind a work item to another tracker (mirrored built-in tickets to Jira)

15d ago

#3280

s3-datastore: first push on a fresh cache prints 'Index merge failed' for a missing local .datastore-index.json

15d ago

#3229

stagecraft: studio state_test 'after its event stream reconnects' is timing-flaky under load

17d ago

#3208

Activity projector fails with ZooKeeper "Bad version" error on swamp.score_grants during keeper instability

18d ago

#3198

s3-datastore: model-scoped pullChanged lists and walks the whole namespace

19d ago

#3169

extension safety analyzer does not warn on node:child_process or cluster subprocess spawning

19d ago

#3133

Model types: decide whether names like @/@x/y or a+b/c should be legal (type grammar)

20d ago

#3103

seed:collective cannot produce a superseded personal trial or a returned trial, so the UAT cannot cover them

21d ago

#3073

serve HA: pull a token's definition on an auth miss so a peer accepts a new token at once

21d ago

#3065

extension push: accept attestation-backed adversarial-review evidence (lookup by extension and content hash), generated provenance, and carry the evidence to the registry at confirm (design: Lab #3023)

4d ago

#3060

Decide a stricter naming rule for workflow step and job names

21d ago

#3010

s3-datastore/serve: readResource without a version returns an older version; the latest marker is rewritten backwards

Team11d ago

#3004

Publish agent-facing projections of the manual: /llms.txt, .md pages, and llms-full.txt

Enterprise24d ago

#3000

Let agent-runner drive more agent CLIs (Kilo Code and others)

25d ago

#2998

s3-datastore: every fast-path miss re-downloads every _index shard, so a busy serve pulls the whole index every poll (~230 GB/day S3 egress)

Team25d ago

#2993

Feedback: Swamp as an approval-gated control plane for a small fleet

22d ago

#2865

Tracking: test baseline required before the datastore refactor (commit-log design)

14d ago

#2754

serve: define and supply the collective and owner grant condition variables

27d ago

#2749

No first-class workflow primitive for spawning a permission-scoped agent session

28d ago

#2727

Decorative animations outside the Lab still repaint on the main thread

28d ago

#2683

s3/gcs datastore: pullChanged overwrites dirty, unpushed cache files

28d ago

#2623

Codegen/AWS: create-only required fields block list/get/delete in generated AWS models

29d ago

#2618

End a collective's trial when it begins a paid subscription

29d ago

#2592

s3-datastore: SWAMP_S3_REQUEST_TIMEOUT_MS does not appear to apply to ListObjectsV2 during pull

29d ago

#2591

s3-datastore: S3Lock.acquire overshoots maxWaitMs by up to a full backoff interval

29d ago

#2590

s3-datastore: a model-scoped pull still lists, walks and indexes the whole namespace

29d ago

#2586

Run the web dashboard locally from the CLI without swamp serve

s29d ago

#2560

extensions: cold-path catalog rebuild skips sources whose type is not a string literal, dropping them for one process lifetime

1mo ago

#2540

serve: rotate the external token-secrets key

1mo ago

#2499

Link each swamp-club panel to its manual page with a header DOCS link

1mo ago

#2495

managedConfig: extension lockfile writes lose updates, and auto-resolved installs never reach the shared lockfile

z27d ago

#2487

Generated @swamp/aws StateSchemas mark conditional and create-only properties as required, producing schema warnings on every read

1mo ago

#2465

workflows: a nested workflow step should inherit the caller's placement when the child declares none

Team10d ago

#2461

Supported vault-write API for extension model methods (per-instance vault target)

Team1mo ago

#2418

serve: after lazy hydration, scoped poller pulls never take the fast path, and the login mint waits behind them on the sync gate

19d ago

#2416

datastore extensions: full pushes re-hash every pulled file on every run because index mtimes never match pulled copies

1mo ago

#2410

Extension catalog caches a datastore bundle with an empty type, so the repo fails with Unknown datastore type when addressed by its realpath

1mo ago

#2379

Let a method inside serve start a workflow run: context.runWorkflow

1mo ago

#2349

s3/gcs datastore: no safe recovery when _meta.json v2 lists a shard missing from the bucket

1mo ago

#2345

worker secret allowlist rejects caller-chosen vault references resolved at run time (method args carrying {vaultName, secretKey})

Team28d ago

#2344

serve: default placement for steps that declare none (so one workflow runs both locally and via workers)

Team10d ago

#2339

s3-datastore: per-datastore AWS profile, so a serve audit store can use different credentials from the main datastore

Team1mo ago

#2329

s3/gcs-datastore: clean up data left behind by deletes that silently no-opped before the swamp-club#2249 fix

1mo ago

#2326

Expose Swamp as a REST/OpenAPI endpoint (for GPT Actions and other REST clients)

1mo ago

#2323

Promote CodeBuddy and WorkBuddy from custom-tool configs to first-class Swamp clients

1mo ago

#2299

s3-datastore: documented offline behaviour is unreachable — lock acquire fails closed before pull, while a mid-run outage exits 0 with the data stranded

Team1mo ago

#2259

Route log-mode output to stderr by default, with commands opting stdout back in

1mo ago

#2232

Billing telemetry: surface scheduled cancellations (cancelAtPeriodEnd) and emit subscription_canceled reliably

1mo ago

#2210

A pending platform invite that loses to the recruit lane is never consumed and leaks a pending slot

1mo ago

#2209

Recruit links have no web surface — a CLI-less operative cannot get their link

1mo ago

#2196

Workload identity (Kubernetes ServiceAccount / OIDC) for worker enrollment

1mo ago

#2147

Feed grant projection stamps a site route that does not exist

1mo ago

#2141

UAT coverage for workflow history outputs and expanded JSON schema

1mo ago

#2102

Serve Audit Log - Phase 6: Full documentation

25d ago

#2096

Per-extension white listing

1mo ago

#2027

Retire or rebuild /admin/nurture once the epic lands — it is a gate, and gates are single-use

1mo ago

#2025

harness-marketing-funnel posts {batch:[...]} to /ingest, which is not a batch — every run silently measures zero

1mo ago

#2021

feat(nurture): deliver to the swamp-club inbox on the same dedupe decision as email

1mo ago

#2008

Epic: Product nurture — lifecycle identification, dedupe-safe delivery, and operator control (email, inbox, CLI)

1mo ago

#1969

Add interactive serve setup skill with best-practice guidance

1mo ago

#1968

Add intent and scope discovery to extension creation skill

1mo ago

#1886

feat(ui/tokens): metadata field or tags for collective API tokens

2mo ago

#1857

UAT: workflow resume --from with forEach expression template names

2mo ago

#1821

SCIM 2.0 provisioning endpoint for swamp-club (Users + Groups, deprovision)

2mo ago

#1820

SSO user profile fields are frozen at first login — overrideUserInfo is never set on any provider

2mo ago

#1814

add links to the docs for all account progress teasers

Team2mo ago

#1813

A subscription stuck in incomplete has no path forward: it grants nothing, and the billing page offers no way to finish paying

2mo ago

#1812

Identifier lookups are exact-match and case-sensitive across username, email and slug

2mo ago

#1811

Invite failures emit no telemetry, so a rejected invitation leaves no trace anywhere

2mo ago

#1810

Collective invitations expire after 48h and the auto-claim is gated on that window, so a late signup is never bound

2mo ago

#1809

Invite typeahead searches username prefix only, so an operative cannot be found by name or email

2mo ago

#1806

Send the release headline from the release pipeline so New Release announcements say what shipped

2mo ago

#1686

Support credentials in datastore config (vault-resolvable)

2mo ago

#1674

Feature: user-configurable redaction rules (.swamp/redaction.yaml)

Enterprise2mo ago

#1668

Lab lifecycle POST rejects any payload string that starts with a dollar sign, not just operator keys

2mo ago

#1667

Finish the swamp_* attribute set on Attio users, and settle the two unprefixed ones (#809 follow-up)

2mo ago

#1666

aria-expanded is a raw boolean in 12 places — collapsed state is unannounced to screen readers

2mo ago

#1663

swamp CLI: surface the audience and resolvedInVersion fields swamp-club now serves

s1mo ago

#1662

ApiKeyManager's collapsed trigger points aria-controls at an element it never renders

2mo ago

#1661

A boolean aria-expanded renders as no aria-expanded: two disclosure widgets report no state to a screen reader

2mo ago

#1653

Tell the inviter when a collective invite mis-lands, instead of leaving it pending forever

2mo ago

#1603

CLI has never sent insert_id: retried telemetry batches are double-counted into cli_daily, inflating XP in an append-only ledger

2mo ago

#1597

Docs: manual never mentions telemetry, and the serve/scheduling pages imply automated runs are visible when they are not

27d ago

#1595

Explore: reconcile quality rubric's dormant provenance factor

Enterprise2mo ago

#1594

Explore: pull-time signature verification for extensions

Enterprise2mo ago

#1593

Explore: transparency-log integration (Rekor) for extension signatures

Enterprise2mo ago

#1592

Explore: publish-time artifact signing for extensions (cosign keyless)

Enterprise2mo ago

#1583

Docs: document catalog completeness check and --repair in doctor reference

2mo ago

#1536

Add --server support to model cancel (server-side run cancellation)

2mo ago

#1375

End-to-end UAT for fine-grained collective token scopes (#960)

3mo ago

#1358

uat: add namespace isolation and shard resilience test coverage

3mo ago

#1349

Extension/type search at method granularity — find capabilities, not just packages

Enterprise3mo ago

#1340

Docker-related model types/workflows would benefit from first-class dry-run/plan support

3mo ago

#1312

Issue filing inherits most-recently-created collective's scope and privacy, with no way to choose

Teams1mo ago

#1235

CLI telemetry: fold third-level verbs into subcommand + canonicalize aliases

2mo ago

#916

Driving agent can wedge a workflow-stage run irrecoverably (workflow-succeeded vs dispatch limit); skill should prevent it

s8d ago

#723

Data-driven webhook signature verifiers (avoid a code change + release per provider)

4mo ago

#356

Add first-class Kilo Code tool support

25d ago

#19

@swamp/aws/ec2: auto-generated models lack list, tag, and factory-compatible update methods

6mo ago

#18

@swamp/digitalocean/space-key stores secret in plaintext - should mark as sensitive

27d ago

← Back to list

01Issue

FeatureShippedExtensionsPublic

Assigneesstack72

Relationships

#1183 Add safe adoption and lifecycle methods for existing Hetzner resources

Opened by josh · 7/16/2026· Shipped 7/18/2026

Please add first-class adoption for existing servers, primary IPs, firewalls, and SSH keys with expected-identity validation; change_protection methods for servers and primary IPs; and firewall rule/attachment reconciliation. The current get method can seed state but does not validate identity, server/primary-IP protection is not exposed, and firewall update only changes name/labels. These gaps make a safe OpenTofu-to-Swamp migration impossible without local type extensions, especially for grandfathered servers that must never be recreated.

Upstream repository: https://github.com/swamp-club/swamp-extensions

Environment

Extension: @swamp/hetzner-cloud@2026.07.02.1
swamp: 20260707.035329.0-sha.84dbdd93
OS: linux (x86_64)
Deno: 2.8.3
Shell: /usr/bin/bash

02Bog Flow

Shipped

7/18/2026, 1:32:02 AM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack727/17/2026, 11:01:40 PM

agent-runner: record token usage and cost on runResult (Claude --output-format json, Codex --json)

swamp skill docs: publishing.md contradicts itself on dynamic imports, overstates where git dependencies are listed, and never says consumers keep the publisher's bundle

extension push: the dynamic import() refusal tells authors to run swamp extension fmt, and the archive-project-file fix names the kind directory push never filters

extension push: file:, link:, workspace: and git package.json dependencies are left out of the unaudited list when the project also has a deno.json

push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

Streak projector: incremental runs instead of a full scan every minute

Studio board: "Show finished" / "Show claimed" are pushed off-screen, with no scroll, when a factory has many stages

datastore v3: a parent run recording its child's rejected approval on a nested step is judged as needing approve

Scheduled flaky-test detection is failing

Docs: doctor datastores --repair --json describes a repairReport shape the CLI never produced

Registry: detect code from outside npm and JSR in a v2 archive itself, not only from the author's dependency-audit.json

Scorecard: code past the analyzer's read caps, or unreadable, is skipped silently instead of counting as not audited

Datastore v2 on macOS: order data-version writes with F_BARRIERFSYNC instead of full syncs

@swamp/cloudflare/analytics README documents CRUD methods the GraphQL analytics model does not have

swamp extension source add rejects a relative direct-content path that works as an absolute path

swamp hangs silently when an extension source directory contains the swamp repo itself

Inbox: automatic points message when a quest season or double-points event starts

Inbox: automatic issue_update message when a Lab issue ships

Inbox sending: segments, a per-user limit of 3 messages per 24 hours, and terminal preview

Datastore v3: data writes the datastore filter keeps local are never fsynced

Docs: doctor datastores reference — unreadable data version check and repair (swamp-club#3955)

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

access can-i: evaluate a local grants file without --server

Show each method's kind in type describe --json

Team mode: serve sends the compacted base, so a serve-mode checkout can catch up past compaction

Support search and filters as URL query parameters on /extensions

bundleExtension same-cache test can pass with a broken first-bundle gate under CPU load

Five Mongo queues can hand the same row to two replicas

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

Collective invite shows "This invitation has expired or has already been used" after a successful join via Google sign-in

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

Rescore every extension's current version under rubric v5

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

A long-lived serve client for extensions, and a stable rate_limited error code

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

Support creating 1Password vaults for new clients

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

Generated state schemas require every child of nested objects, so normal resources warn on create/get

Add LinkedIn as a login provider

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

Showcase editor: caption counter is not announced to screen readers

Profile showcase read: approved list sorts on review.reviewedAt in memory

Showcase countByStatus: $match live statuses before the $group

Showcase admin queues: index-serve the updatedAt sort on approved/rejected

Annotate and retain past workflow runs and data after the fact

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

Extension registry page: a supported way to include media (images) in the README

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

vary/forEach object values with no key/name/id produce data names Windows refuses

issue-lifecycle start drops issue comments: context.comments is always empty

swamp core: a non-string sensitive value reads back as a JSON string

Generated vault keys carry raw data-name and vary characters that strict vault providers reject

Registry drops contentMetadata.extensions (method grafts) at confirm-push

Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)

local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)

Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition

Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support

workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)

issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)

Workflow run cancellation on concurrency-key conflict

Read non-string sensitive resource fields back with their type