Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

46m ago

#3818

scanFleet: support a different SSH user per host (user@host entries)

2h ago

#3817

swamp update suggests sudo for a binary in ~/.local/bin, and following it breaks every later update

2h ago

#3816

CEL: data.latest(...).version is a double, but data.version() only accepts int, so "version - 1" fails at run time

2h ago

#3815

workflow resume --run refuses workflows with the same step name in two jobs, though validate and run accept them

2h ago

#3814

@swamp/cve/dirtyfrag: scan flags suspicious XFRM SAs on every unprivileged Linux scan (greps 'error' in /proc/net/xfrm_stat counter names)

3h ago

#3800

Homepage club plate link has no visible keyboard focus

12h ago

#3795

forEachNameWithoutSecrets property test fails intermittently: an empty-string secret and an overlapping recorded value give different names

13h ago

#3793

extension push (package.json mode): two installed copies under one declared range are audited once, so the second shipped version goes unaudited

14h ago

#3792

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

12h ago

#3788

Scheduled flaky-test detection is failing

16h ago

#3787

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

16h ago

#3783

Registry scorecard: score secret-safe-docs (rubric v4) and keep sensitive on extracted arguments

18h ago

#3781

Share the extension quality rubric between the swamp CLI and swamp-club instead of mirroring it

20h ago

#3778

Registry dependency audit: audit the locked version push records in the archive, not the registry's newest match for a range specifier (swamp-club half of #3662)

21h ago

#3776

@swamp/cve/dirtyfrag: report and README print the old swamp model command spelling

21h ago

#3775

@swamp/cve/php-rce-2026-10: match RHEL fixes for the PHP RCEs

21h ago

#3772

cve/emudhra page: Windows and macOS support, and shared CVE layer fixes (follow-up to #3710 and #3766)

22h ago

#3771

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

20h ago

#3767

CVE pages: horizontally scrolling code blocks are not keyboard-reachable

1d ago

#3735

typed-secrets 4.6: turn the typed path on for every entry point, remove the internal option, and delete the regular-expression rewrite, the value search and the plaintext resolution of tagged fields

1d ago

#3734

typed-secrets 4.5: the inline resolutions refuse or mask: placement, task selectors, child references and deferred targets refuse secrets, assert messages mask them, and the deprecated resolvers go

1d ago

#3728

Docs: extension fmt never writes deno.lock and warns on a stale one (swamp-club#3717)

21h ago

#3725

Docs: extension manual pages describe push and quality resolving only the deno.json import map

21h ago

#3705

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

1d ago

#3703

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

1d ago

#3702

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

1d ago

#3679

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

2d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

2d ago

#3663

vary/forEach object values with no key/name/id produce data names Windows refuses

2d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

3d ago

#3647

swamp core: a non-string sensitive value reads back as a JSON string

3d ago

#3641

Generated vault keys carry raw data-name and vary characters that strict vault providers reject

3d ago

#3639

bundleExtension 'bundles on different caches do not wait for each other' test fails under CPU load

3d ago

#3634

extension install and extension pull leave different bundles for the same extension version

3d ago

#3608

Registry drops contentMetadata.extensions (method grafts) at confirm-push

3d ago

#3603

Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)

s3d ago

#3600

local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)

3d ago

#3580

Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition

Team5d ago

#3579

Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support

Team5d ago

#3578

workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)

Team5d ago

#3554

issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream

6d ago

#3523

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

7d ago

#3514

swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)

3d ago

#3483

Workflow run cancellation on concurrency-key conflict

8d ago

#3480

Read non-string sensitive resource fields back with their type

8d ago

#3470

Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds

8d ago

#3408

Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them

8d ago

#3401

A global argument that evaluates to swamp-namespace expression text is silently dropped, and literal() cannot pass it through

9d ago

#3399

serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other

6d ago

#3383

extension pull: safety analysis scans the bundle the extension runs

9d ago

#3378

verification: run the upgrade-path test in parallel, and skip the dynamic test for no-op bumps

9d ago

#3361

S3-backed serve: a poll that pulls one file invalidates the whole data catalog, so the next query re-reads every version

9d ago

#3349

swamp-extensions: CI check that every manifest declares license: and ships a LICENSE file

9d ago

#3344

extensions_search index is never created if the first attempt fails, until the process restarts

10d ago

#3305

S3/GCS datastore sync: shared sync service lets one sync clear another's dirty marks and pull over unpushed files

10d ago

#3298

swamp-uat: the SIGTERM drain test does not check that the run succeeded

10d ago

#3297

stagecraft: a factory-wide read of work items waiting on a person (no studio, no per-item status loop)

10d ago

#3292

stagecraft: rebind a work item to another tracker (mirrored built-in tickets to Jira)

10d ago

#3280

s3-datastore: first push on a fresh cache prints 'Index merge failed' for a missing local .datastore-index.json

11d ago

#3272

swamp-extensions: use explicit npm:/jsr: specifiers in root extensions/models

11d ago

#3229

stagecraft: studio state_test 'after its event stream reconnects' is timing-flaky under load

12d ago

#3208

Activity projector fails with ZooKeeper "Bad version" error on swamp.score_grants during keeper instability

13d ago

#3198

s3-datastore: model-scoped pullChanged lists and walks the whole namespace

14d ago

#3169

extension safety analyzer does not warn on node:child_process or cluster subprocess spawning

14d ago

#3153

extension push: a swamp-quality-ignore directive after a comment holding an apostrophe is silently ignored

15d ago

#3133

Model types: decide whether names like @/@x/y or a+b/c should be legal (type grammar)

15d ago

#3103

seed:collective cannot produce a superseded personal trial or a returned trial, so the UAT cannot cover them

16d ago

#3073

serve HA: pull a token's definition on an auth miss so a peer accepts a new token at once

16d ago

#3065

extension push: accept attestation-backed adversarial-review evidence (lookup by extension and content hash), generated provenance, and carry the evidence to the registry at confirm (design: Lab #3023)

16d ago

#3060

Decide a stricter naming rule for workflow step and job names

16d ago

#3010

s3-datastore/serve: readResource without a version returns an older version; the latest marker is rewritten backwards

Team6d ago

#3004

Publish agent-facing projections of the manual: /llms.txt, .md pages, and llms-full.txt

Enterprise19d ago

#3000

Let agent-runner drive more agent CLIs (Kilo Code and others)

20d ago

#2998

s3-datastore: every fast-path miss re-downloads every _index shard, so a busy serve pulls the whole index every poll (~230 GB/day S3 egress)

Team20d ago

#2993

Feedback: Swamp as an approval-gated control plane for a small fleet

17d ago

#2907

S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back

21d ago

#2865

Tracking: test baseline required before the datastore refactor (commit-log design)

9d ago

#2754

serve: define and supply the collective and owner grant condition variables

23d ago

#2749

No first-class workflow primitive for spawning a permission-scoped agent session

23d ago

#2727

Decorative animations outside the Lab still repaint on the main thread

23d ago

#2683

s3/gcs datastore: pullChanged overwrites dirty, unpushed cache files

23d ago

#2623

Codegen/AWS: create-only required fields block list/get/delete in generated AWS models

24d ago

#2618

End a collective's trial when it begins a paid subscription

24d ago

#2592

s3-datastore: SWAMP_S3_REQUEST_TIMEOUT_MS does not appear to apply to ListObjectsV2 during pull

24d ago

#2591

s3-datastore: S3Lock.acquire overshoots maxWaitMs by up to a full backoff interval

24d ago

#2590

s3-datastore: a model-scoped pull still lists, walks and indexes the whole namespace

24d ago

#2586

Run the web dashboard locally from the CLI without swamp serve

s24d ago

#2560

extensions: cold-path catalog rebuild skips sources whose type is not a string literal, dropping them for one process lifetime

27d ago

#2540

serve: rotate the external token-secrets key

27d ago

#2527

@swamp/aws/certificatemanager/certificate: expose ACM's reported attributes (NotAfter, Type, RenewalEligibility, InUseBy) on read

27d ago

#2499

Link each swamp-club panel to its manual page with a header DOCS link

28d ago

#2495

managedConfig: extension lockfile writes lose updates, and auto-resolved installs never reach the shared lockfile

z22d ago

#2487

Generated @swamp/aws StateSchemas mark conditional and create-only properties as required, producing schema warnings on every read

28d ago

#2465

workflows: a nested workflow step should inherit the caller's placement when the child declares none

Team5d ago

#2461

Supported vault-write API for extension model methods (per-instance vault target)

Team29d ago

#2421

datastore sync: repositories mark paths dirty before writing, so a concurrent ungated push can drop the write

29d ago

#2418

serve: after lazy hydration, scoped poller pulls never take the fast path, and the login mint waits behind them on the sync gate

14d ago

#2416

datastore extensions: full pushes re-hash every pulled file on every run because index mtimes never match pulled copies

29d ago

#2410

Extension catalog caches a datastore bundle with an empty type, so the repo fails with Unknown datastore type when addressed by its realpath

29d ago

#2379

Let a method inside serve start a workflow run: context.runWorkflow

1mo ago

#2349

s3/gcs datastore: no safe recovery when _meta.json v2 lists a shard missing from the bucket

1mo ago

#2345

worker secret allowlist rejects caller-chosen vault references resolved at run time (method args carrying {vaultName, secretKey})

Team23d ago

#2344

serve: default placement for steps that declare none (so one workflow runs both locally and via workers)

Team5d ago

#2339

s3-datastore: per-datastore AWS profile, so a serve audit store can use different credentials from the main datastore

Team1mo ago

#2329

s3/gcs-datastore: clean up data left behind by deletes that silently no-opped before the swamp-club#2249 fix

1mo ago

#2326

Expose Swamp as a REST/OpenAPI endpoint (for GPT Actions and other REST clients)

1mo ago

#2323

Promote CodeBuddy and WorkBuddy from custom-tool configs to first-class Swamp clients

1mo ago

#2299

s3-datastore: documented offline behaviour is unreachable — lock acquire fails closed before pull, while a mid-run outage exits 0 with the data stranded

Team1mo ago

#2259

Route log-mode output to stderr by default, with commands opting stdout back in

1mo ago

#2232

Billing telemetry: surface scheduled cancellations (cancelAtPeriodEnd) and emit subscription_canceled reliably

1mo ago

#2210

A pending platform invite that loses to the recruit lane is never consumed and leaks a pending slot

1mo ago

#2209

Retire or rebuild /admin/nurture once the epic lands — it is a gate, and gates are single-use

1mo ago

#2025

harness-marketing-funnel posts {batch:[...]} to /ingest, which is not a batch — every run silently measures zero

1mo ago

#2024

feat(cli): swamp inbox — read swamp-club notifications without leaving the terminal

1mo ago

#2023

feat(cli): tell operatives they have swamp-club notifications waiting

1mo ago

#2022

feat(api): a cheap unread-notification count for API-key clients

1mo ago

#2021

feat(nurture): deliver to the swamp-club inbox on the same dedupe decision as email

1mo ago

#2008

Epic: Product nurture — lifecycle identification, dedupe-safe delivery, and operator control (email, inbox, CLI)

1mo ago

#1969

Add interactive serve setup skill with best-practice guidance

1mo ago

#1968

Add intent and scope discovery to extension creation skill

1mo ago

#1886

feat(ui/tokens): metadata field or tags for collective API tokens

1mo ago

#1857

UAT: workflow resume --from with forEach expression template names

1mo ago

#1821

SCIM 2.0 provisioning endpoint for swamp-club (Users + Groups, deprovision)

1mo ago

#1820

SSO user profile fields are frozen at first login — overrideUserInfo is never set on any provider

1mo ago

#1814

add links to the docs for all account progress teasers

Team1mo ago

#1813

A subscription stuck in incomplete has no path forward: it grants nothing, and the billing page offers no way to finish paying

1mo ago

#1812

Identifier lookups are exact-match and case-sensitive across username, email and slug

1mo ago

#1811

Invite failures emit no telemetry, so a rejected invitation leaves no trace anywhere

1mo ago

#1810

Collective invitations expire after 48h and the auto-claim is gated on that window, so a late signup is never bound

1mo ago

#1809

Invite typeahead searches username prefix only, so an operative cannot be found by name or email

1mo ago

#1806

Send the release headline from the release pipeline so New Release announcements say what shipped

1mo ago

#1686

Support credentials in datastore config (vault-resolvable)

2mo ago

#1674

Feature: user-configurable redaction rules (.swamp/redaction.yaml)

Enterprise2mo ago

#1668

Lab lifecycle POST rejects any payload string that starts with a dollar sign, not just operator keys

2mo ago

#1667

Finish the swamp_* attribute set on Attio users, and settle the two unprefixed ones (#809 follow-up)

2mo ago

#1666

aria-expanded is a raw boolean in 12 places — collapsed state is unannounced to screen readers

2mo ago

#1663

swamp CLI: surface the audience and resolvedInVersion fields swamp-club now serves

s1mo ago

#1662

ApiKeyManager's collapsed trigger points aria-controls at an element it never renders

2mo ago

#1661

A boolean aria-expanded renders as no aria-expanded: two disclosure widgets report no state to a screen reader

2mo ago

#1653

Tell the inviter when a collective invite mis-lands, instead of leaving it pending forever

2mo ago

#1603

CLI has never sent insert_id: retried telemetry batches are double-counted into cli_daily, inflating XP in an append-only ledger

2mo ago

#1597

Docs: manual never mentions telemetry, and the serve/scheduling pages imply automated runs are visible when they are not

22d ago

#1595

Explore: reconcile quality rubric's dormant provenance factor

Enterprise2mo ago

#1594

Explore: pull-time signature verification for extensions

Enterprise2mo ago

#1593

Explore: transparency-log integration (Rekor) for extension signatures

Enterprise2mo ago

#1592

Explore: publish-time artifact signing for extensions (cosign keyless)

Enterprise2mo ago

#1583

Docs: document catalog completeness check and --repair in doctor reference

2mo ago

#1536

Add --server support to model cancel (server-side run cancellation)

2mo ago

#1375

End-to-end UAT for fine-grained collective token scopes (#960)

3mo ago

#1358

uat: add namespace isolation and shard resilience test coverage

3mo ago

#1349

Extension/type search at method granularity — find capabilities, not just packages

Enterprise3mo ago

#1340

Docker-related model types/workflows would benefit from first-class dry-run/plan support

3mo ago

#1312

Issue filing inherits most-recently-created collective's scope and privacy, with no way to choose

Teams1mo ago

#1235

CLI telemetry: fold third-level verbs into subcommand + canonicalize aliases

1mo ago

#916

Driving agent can wedge a workflow-stage run irrecoverably (workflow-succeeded vs dispatch limit); skill should prevent it

s3d ago

#723

Data-driven webhook signature verifiers (avoid a code change + release per provider)

4mo ago

#356

Add first-class Kilo Code tool support

20d ago

#19

@swamp/aws/ec2: auto-generated models lack list, tag, and factory-compatible update methods

6mo ago

#18

@swamp/digitalocean/space-key stores secret in plaintext - should mark as sensitive

22d ago

← Back to list

01Issue

BugShippedSwamp ClubPublic

Assigneesstack72

Relationships

#1601 Docs: `swamp compile` subcommand doesn't exist

Opened by dismal_swamper · 8/11/2026· Shipped 8/11/2026

The Docker worker-fleet guide at https://swamp-club.com/manual/how-to/worker-fleets/docker recommends swamp compile to produce a binary for the Docker image, but compile is not a valid subcommand. The install script installs to ~/.local/bin/swamp — adding that directory to PATH is the correct fix.

02Bog Flow

Shipped

8/11/2026, 5:32:41 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack728/11/2026, 2:59:22 PM

stack72 commented 8/11/2026, 5:33:41 PM

Thanks @dismal_swamper for reporting this! The fix has been merged and a release is on its way. We appreciate your contribution to swamp.