setAuthenticated() is computed as bearerToken !== undefined, where bearerToken is the stored apiKey verbatim. An empty string is not undefined, so an auth.json containing apiKey: "" satisfies the mandatory-account gate on every team feature. This is not a hypothetical file: saveIdentityCache() writes exactly that on a machine that has never logged in.

Where (source)

src/cli/load_identity.ts:56-57 — bearerToken = credentials?.apiKey.
src/cli/mod.ts:1401 — setAuthenticated(autoResolverIdentity.bearerToken !== undefined).
src/infrastructure/persistence/auth_repository.ts:173 — apiKey: existing?.apiKey ?? "" in the record saveIdentityCache builds.
src/cli/mod.ts:1360-1374 — reaches saveIdentityCache on the personal-key path whenever SWAMP_API_KEY is set and the cached credentials carry no username.
The behavior is pinned by an existing test: auth_repository_test.ts:352-378 asserts loaded.apiKey === "".

Also note the gate accepts any non-empty junk: requireScope returns early for anything lacking the swamp_org_ prefix (auth_context.ts:87), so a one-character SWAMP_API_KEY passes both the account gate and the scope gate.

Deterministic repro

A — the empty key satisfies the gate

export SWAMP_HOME="$(mktemp -d)"; mkdir -p "$SWAMP_HOME/config"
cat > "$SWAMP_HOME/config/auth.json" <<'JSON'
{"serverUrl":"https://swamp-club.com","apiKey":"","apiKeyId":"id",
 "username":"repro","collectives":[],"apiKeyFingerprint":""}
JSON

swamp vault create env my-vault

Observed:

Error: Unknown vault type: env. Available types: local_encryption. ...

That is the type error, meaning the account gate passed. With the same command and no auth.json at all, the result is the paywall ("Non-local vaults are a team feature..."). The only difference between the two runs is a credential that is the empty string.

B — how the file gets there without logging in

On a machine with no auth.json, run any single command with a personal SWAMP_API_KEY set. mod.ts:1367 calls saveIdentityCache, which creates auth.json with apiKey: "" (the env key itself is deliberately not persisted). Unset the env var afterwards and the CLI reports itself as authenticated forever, holding no credential at all.

Impact

The gate that is supposed to require an account can be satisfied by a file containing no account. Two practical consequences:

The friendly local error is skipped and replaced by a worse remote one. Instead of "requires a free swamp-club.com account, run swamp auth login", the user proceeds into the operation and gets an opaque server 401 — or, for the client-side-only gates (vault create, datastore setup extension), no error at all, because those paths never call swamp-club.
It is trivially self-inflicted. Anyone who uses SWAMP_API_KEY once on a fresh machine ends up in this state; nothing about it is visible in swamp auth whoami, which will report a username while apiKey is empty.

I am not filing this as a privilege-escalation report, because the gated operations are local and no server-side authorization depends on this flag. It is a correctness bug that makes the account requirement unreliable in both directions.

Expected

Treat an empty (or whitespace-only) apiKey as absent: setAuthenticated(Boolean(bearerToken)), and have AuthRepository.load() return undefined rather than a record whose apiKey is "".
Do not write a credential record with an empty apiKey at all — if there is no key to cache, cache identity under a separate key or skip the write.
Consider validating the shape of SWAMP_API_KEY (non-empty, recognized prefix) rather than accepting any string.

Environment

Verified against source main @ 10943ef. Gate shipped in a519305 (#1934), 2026-07-23; installed stable 20260722.210030.0-sha.7ff1e2f0 predates it.
macOS 14.

02Bog Flow

Closed

7/24/2026, 10:45:14 PM

No activity in this phase yet.

03Sludge Pulse

stack72 commented 7/24/2026, 10:45:14 PM

@magistr Thanks for the detailed reports — we appreciate the work you're putting in to make the tool better. Fixes are in #1956 and will be released shortly.

worker daemon enable: relative/missing --cache-dir fails launchd EX_CONFIG while daemon status reports running

vault extensions: emit OTel spans for vault operations (AWS SM, Azure KV, 1Password)

azure-kv error wrapping loses original error type — ERROR_TYPE always 'Error' in traces

aws-sm deleteAnnotation removes all non-aws: tags, not just swamp-specific ones

Docs: document datastore directory relocation during setup

--quiet mode does not suppress in-process extension logger output

Expose resource attributes in DataHandle for workflow report stepExecutions

Expose workflow inputs in WorkflowReportContext

Issue redactor corrupts reports: dotted code identifiers masked as hostnames, loopback and RFC 5737 documentation IPs masked, angle-bracket placeholders half-eaten

data prune resolves auto-definitions at the local path, not the datastore path — deletes live models' data (verified: destroyed a working server token and an active grant)

workflow/job-lifetime data is never reclaimed — expiry check requires an ownerDefinition.workflowId that step execution never sets

runModel breadth limit (MAX_INVOCATION_BREADTH=100) is never enforced — tracking object is never written back to the caller context; verified 150/150 calls succeeded

serve daemon enable is ungated — it reports success, then the account gate fires inside the detached daemon, which crash-loops invisibly

Purely local operations require a swamp-club account: local-token serve is gated while deprecated --auth-mode none is not, third-party OIDC is gated, and 'Local_Encryption' is paywalled by capitalization

A collective token stored in auth.json (rather than SWAMP_API_KEY) is permanently scope-less — resolution only runs for the env var, and scopes are never persisted for collective tokens

An empty stored apiKey counts as authenticated — saveIdentityCache writes apiKey:'' on a virgin machine, permanently satisfying the mandatory-account gate with no credential

Account/scope gates fire before argument, type and repo validation — 'swamp vault create env my-vault' (the command's own example, an invalid type) returns a paywall instead of 'Unknown vault type'

auth token create advertises a 'collective:write' scope that does not exist, and following its advice hits 'collective tokens cannot create other collective tokens'

requireScope does exact string matching — fine-grained scopes fail gates that demand the literal wildcard, and minted scopes are never validated or normalized

Collective-token scope cache never expires, is never refreshed by whoami, and cannot be cleared via the CLI — scope changes and revocations never take effect

Collective-token scope cache is keyed on a 12-char token prefix — only 2 chars distinguish org tokens, so a rotated token silently inherits another token's scopes

Misleading 'Your collective token lacks the X scope' when scope resolution failed — startup whoami errors are silently swallowed

Community points / reputation: award points for upvoting extensions, feature requests, comments, and feed posts

globalArgs fields leak into method arguments when a method's arguments schema is a bare z.record()

swamp serve --auth-mode oauth: crash during first-run admin resolution discards the OAuth token, forcing full device-flow re-registration

Docs: document extension runtime permissions and device I/O workaround in user manual

datastore setup extension drops 'namespace' from --config, making extensions that require it impossible to configure

Kiro CLI v3 permissions: no capability covers disclose_context (skill loading)

CLI: swamp invite <email> to drive the platform-invite API

api-key-scoping explanation doc contradicts shipped fine-grained scopes

Fine-grained scopes for swamp.club access tokens

End-to-end UAT for fine-grained collective token scopes (#960)

Docs: document swamp auth token create command for collective tokens

open method fails for password-auth hosts: SSHPASS env set but ssh call never wrapped in sshpass

docs: update swamp skills for setup extension --namespace

apps sync/lookup fail with 'partial() cannot be used on object schemas containing refinements'

Docs: update autoGc documentation to reflect write-time version pruning

model search/list doesn't enumerate auto-created definitions under .swamp/auto-definitions/

CLI command to create scoped collective tokens (phase 8 of #960)

docs: document auth gates for team features (datastores, vaults, serve)

`datastore setup filesystem` never transfers content when leaving a sync-based (remote) datastore — copies only the catalog and hardcodes `filesPulled: 0`

Workflow/CLI output uses red text for non-error/informational lines, contradicting standard error-color convention

Support end-user timezones on https://swamp-club.com/u/shelson/activity

Document doctor datastores --repair for namespace contamination cleanup

version-drift check (from #236) is a raw string-inequality, false-positives on multi-model manifests and metadata-only bumps

Pre-flight checks receive unresolved vault.get() expression text, not the resolved secret

Invite people who have never used swamp to a collective (email invite flow)

docs: update giga-swamp manual pages for setup extension --namespace

Docs: update extension push output examples to include channel and visibility

Collective management API for extension-based automation

Remote --server wss:// fails through an HTTP/2 TLS reverse proxy (WS client ALPN is h2-only)

uat: add namespace isolation and shard resilience test coverage

docs: update giga-swamp guides and skills for setup extension --namespace

Quest page: all leaderboard usernames show 'Swamp Baby' title

Website extension search ignores API relevance — exact name match "good-planning" ranks #10 (API ranks it #1)

Extension/type search at method granularity — find capabilities, not just packages

data query and data get return the same payload under different keys

forEach leaves self.* unresolved in target

It is possible for a member to be a member of a collective twice

swamp-club: score-reads tierTotals GET overflows URL with inline param_ownerIds (Invalid URL, mislabeled clickhouse-network-error) for large collectives

Docker-related model types/workflows would benefit from first-class dry-run/plan support

Hide enterprise (SSO) operatives from announcements and leaderboard by default

Worker queries need a safe connected-worker filter for fleet fan-out

Published extension scores dependency-trust as "missing" (0/2) while client `extension quality` earns it (2/2); no verdict exposed

Add a :micdrop: emoji / reaction shortcode (swamp-native art included)

namespace unset --migrate silently deletes artifact history via catalog-rebuild GC (~484k files lost)

serve: workflow.approvals and workflow.run.search still full-scan the workflow-run store after the #1284 data.query pushdown

Bugs filed by a team-subscription user are not tagged "team" in the Lab

Bundled extension model cannot deserialize AWS SDK S3 XML that works in direct Deno

gcp/sheets spreadsheets-values: batch_get crashes with "Request with GET/HEAD method cannot have body"

Token creation API and UI scope selector for collective tokens (phase 4 of #960)

Make Cloudflare CRUD methods factory-aware so list-discovered resources can be managed in-place

[sc] quest-grant Mongo ops (recentHeartbeat/signalCounts/countIssueShipped) regressed to ~5s timeouts — missing index

Add @swamp/kubernetes/statefulset model type

Sync guard skips bound namespace directory during push — 0 files pushed after namespace migrate

Flaky #1052 preparePush test: mtime-granularity race on Linux tmpfs

command/shell renders JSON-object stdout lines as the literal string 'undefined'

Issue redactor treats the MongoDB authSource parameter as a secret, corrupting reproduction steps

Docs: document repo root resolution from subdirectories

Expose the swamp.club feed as an RSS feed

Grant revoke is never applied to the running server — under `--grant-reload auto` and `manual` alike, a revoked grant stays in force until an explicit `access reload`