serve: idle peer data.query remains stale when a remote datastore honors selective pulls

2h ago

#2109

serve data.get cannot resolve models stored in managed configuration

9h ago

#2108

serve model.edit does not publish managed configuration changes to the shared datastore

9h ago

#2107

swamp serve daemon (user service) doesn't handle systemd 'lingering' — claims it 'starts automatically' but only runs while logged in

9h ago

#2106

swamp serve daemon (user service) doesn't handle systemd 'lingering' — claims it 'starts automatically' but only runs while logged in

9h ago

#2105

aws-sm vault: support profile config key to select named AWS credential profiles

21h ago

#2097

docs: data.latest second argument matches name OR spec, not just spec

21h ago

#2096

Per-extension white listing

Team1d ago

#2093

agent-runner: allow using the Claude CLI's stored login instead of requiring an API key

20h ago

#2089

data.latest().attributes/.content unresolved in workflow assert/guard CEL for @mgreten/cli-agent extension data

18h ago

#2087

Simplify CI: remove redundant jobs, automerge only on security + attestation gates

s1d ago

#2088

Add put_events method to event-bus type

20h ago

#2079

workflow guard: run requires ${{ }}, evaluate rejects it — no guard form satisfies both

s2d ago

#2084

Unify serve config credential resolution via CEL expressions

2d ago

#2077

Block temporary email services on signup

2d ago

#2072

repo upgrade/init hardcode absolute swamp binary path in hook commands, breaking cross-machine portability

Teams2d ago

#2075

Docs: Serve audit Phase 4 — SIEM sinks, HMAC, and export reference

2d ago

#2043

managedConfig: cross-process sentinel disagreement between CLI and serve

s2d ago

#2071

Expose swamp help to agents proactively in the swamp skill

s2d ago

#2070

Windows: vault roundtrip model outputs UTF-16LE instead of UTF-8

s2d ago

#2069

Make verification reviews tolerate a passing review without an explicit verdict

s2d ago

#2067

Enrich InvocationContext telemetry with datastore type and external vault detection

s2d ago

#2065

Windows: CLI outputs forward-slash lowercase paths instead of native backslash paths

s2d ago

#2057

Audit: emit auth-category events for OAuth device flow and token operations

s2d ago

#2068

Add create_pipeline_schedule to @webframp/gitlab

2d ago

#1442

First-class scheduled garbage collection policy per datastore namespace

Teams3d ago

#2060

Document run GC retention configuration

s3d ago

#2049

Serve Audit Log - Phase 3: Real-time WebSocket streaming

s3d ago

#2059

docs(cli): document run GC retention configuration

3d ago

#2058

Audit: many model/data handlers pass wildcard resource name instead of actual model name

3d ago

#1724

swamp cmds don't realise the user is sshed into the system

s3d ago

#1990

spreadsheets-values: append and update cannot send valueInputOption, so neither can write — query-location parameters are never populated

s3d ago

#2056

Flaky POSIX shutdown handler SIGINT test exits 130

s3d ago

#2055

Test flake: buildOtelResource env var race in parallel test execution

s3d ago

#2053

Windows: HOME environment variable not set — no USERPROFILE fallback

s3d ago

#2054

Property test flake: CEL embedded interpolation with empty expression key

s3d ago

#2052

Adversarial review guard does not cover src/cli/ outside src/cli/commands/

s3d ago

#2030

Expose configured per-method definition arguments in model get --json

s3d ago

#2050

Lab #2037 mitigation does not cover category-specific bundle stores (datastore-bundles, vault-bundles, report-bundles)

s3d ago

#2029

Implemented/shipped issues should reference the implementation more clearly

s3d ago

#2051

Document configured method arguments in model get JSON

3d ago

#2026

writeCatalogExport takes 55-150s per workflow step — serializes entire catalog as pretty-printed JSON

Teams3d ago

#1957

Separation of duties impossible: workflow.approve is authorized against the 'run' action, so approvers can start runs and operators can self-approve

s4d ago

#2028

Serve Audit Log - Phase 2: WAL, chain hashing, query API, complete coverage

s4d ago

#2035

data query omits report artifacts returned by data list and versions

s4d ago

#2040

swamp issue bug isn't auto-filling swamp version, OS and shell

s4d ago

#2038

Upgrade/Update causes odd locking issue on swamp deno

s4d ago

#2039

stale lock file not being cleaned up?

s4d ago

#2036

Document env.* namespace for model-instance globalArguments (host-portable config)

Team3d ago

#2031

In "swamp workflow run", "Still running... [Xs elapsed]" should be considered non-essential output

5d ago

#2005

Docs: document the approve grant action and separation-of-duties patterns

s6d ago

#1996

Docs: Add method-level grant scoping to authorization reference

s6d ago

#2007

Docs: document enriched model search JSON output shape

s6d ago

#2027

Retire or rebuild /admin/nurture once the epic lands — it is a gate, and gates are single-use

6d ago

#2012

feat(nurture): /admin/nurture — who would get what, and why

k6d ago

#2011

feat(nurture): the nurture_send ledger and the dry-run projector, with the cold-start seal

k6d ago

#2010

feat(nurture): batch cohort reads — account-grain identification that carries its evidence

k6d ago

#2009

feat(nurture): the flow catalog and the qualification contract (pure domain)

k6d ago

#2004

Serve Audit Log - Phase 1: Event pipeline and durable storage

s6d ago

#2025

harness-marketing-funnel posts {batch:[...]} to /ingest, which is not a batch — every run silently measures zero

6d ago

#2024

feat(cli): swamp inbox — read swamp-club notifications without leaving the terminal

6d ago

#2023

feat(cli): tell operatives they have swamp-club notifications waiting

6d ago

#2022

feat(api): a cheap unread-notification count for API-key clients

6d ago

#2021

feat(nurture): deliver to the swamp-club inbox on the same dedupe decision as email

6d ago

#2020

feat(nurture): arm needs-help-after-a-failed-run (NEEDS HELP)

kBlocked6d ago

#2019

feat(nurture): arm model-usage-without-workflows (BUILDING PRODUCT FEATURES)

kBlocked6d ago

#2018

feat(nurture): arm no-activation-after-30-days (ARRIVED, NEVER RAN)

kBlocked6d ago

#2017

feat(nurture): arm reactivation-after-7-days (DRIFTED)

kBlocked6d ago

#2016

feat(nurture): arm the first flow — extension published, email only, verified in prod

kBlocked6d ago

#2015

feat(nurture): the six nurture email templates, previewed before anything sends

k6d ago

#2014

feat(nurture): an outbound transport that reports its outcome, and per-channel send status

k6d ago

#2013

feat(nurture): suppression — opt-out, address-grain frequency caps, one-click unsubscribe

k6d ago

#2008

Epic: Product nurture — lifecycle identification, dedupe-safe delivery, and operator control (email, inbox, CLI)

6d ago

#2006

Workflow list endpoints authorize against workflow:* instead of per-workflow

s2d ago

#1904

Make model argument descriptions discoverable from model search

s6d ago

#2003

buildDeps should reuse repoContext.unifiedDataRepo instead of creating a standalone repo per step

Teams6d ago

#2002

Guard against null parseYaml returns in remaining YAML repositories

6d ago

#2001

SSO: SAML assertion attributes are never logged or persisted — cannot tell whether the IdP sent groups

k6d ago

#1994

Add method-level scoping to grants

s6d ago

#2000

Datastore-backed model catalog: register model definitions via the datastore, not only on-disk yaml

Teams6d ago

#1992

model_handlers acquires write lock on pure-read method invocations

s7d ago

#1995

data.latest cache is stale after nested workflow outputs

s7d ago

#1993

LockTimeoutError surfaces as generic 'internal error' at the CLI

s7d ago

#1819

IdP group memberships go stale indefinitely — user.idpGroups is only written by the SSO login hook

s7d ago

#1991

swamp data delete silently reverts — deleted records reappear on subsequent get

s7d ago

#1984

readResource returns stale cursor on serve scheduled workflow runs

Teams7d ago

#1987

Native background/daemon mode for swamp serve

7d ago

#1971

Support agent-neutral repository instructions without duplicating Claude configuration

s7d ago

#1979

target-domain create/get fail with "security token expired" using valid fresh SSO creds; identical raw AWS CLI call succeeds

s3d ago

#1977

AI-Friendly CLI Manual Dump

8d ago

#1974

Every swamp command dies at module load when $TMPDIR sits under a package.json declaring "type": "commonjs"

TeamsBlocked6d ago

#1966

Docs: local_encryption vault secrets are excluded from datastore sync — not documented anywhere

s8d ago

#1972

Docs: document --token-file and --server-token-file flags for worker commands

s8d ago

#1954

Docs: update pi skill directory path in repository-configuration.md

s8d ago

#1742

Installation with new account creation times out

s8d ago

#1786

vault.get() arguments are verbatim, so a per-target secret cannot be expressed in workflow YAML

s8d ago

#1862

feat(worker): --server-token-file (and --token-file) to read secrets from a mount without env-var round-trip

s8d ago

#1950

model type describe reports arguments: {} for models that define a full args schema

s8d ago

#1967

Self-update fails on Windows: running binary cannot be replaced due to file locking

s8d ago

#1969

Add interactive serve setup skill with best-practice guidance

8d ago

#1968

Add intent and scope discovery to extension creation skill

8d ago

#1963

Self-update broken on Windows: tar.gz format and zip extraction missing

s8d ago

#1958

run tracker: hostname-based PID liveness check fails in containers sharing a hostname

s8d ago

#1960

Fix Windows install script (install.ps1) parity with Unix

s8d ago

#1955

serve boot: sweepStaleRecords does a full modelMethodRun per stale lease (~12.5s each), serializing boot reconciliation — 4m28s to sweep nothing

Teams8d ago

#1962

Docs: add Windows install instructions to install-swamp how-to guide

8d ago

#1959

Add Windows binary to release pipeline

s8d ago

#1716

Generic OTLP endpoint appends signal path after query or fragment

s8d ago

#1961

Extension version binaries never persisted — binaries security notice has never rendered

k8d ago

#1952

swamp run gc undocumented in skill's data/model quick-reference tables

s8d ago

#1956

Dashboard renders a blank page when any workflow run has a pending manual approval (workflow.approvals shape mismatch)

s8d ago

#1953

Durable, detached workflow execution (DBOS evaluated as the engine)

9d ago

#1949

verification-attestation reports 0 skipped and omits skipped steps, including skipped asserts

8d ago

#1944

Swamp skill repo reference missing datastore config expression interpolation docs

s9d ago

#1942

Docs: document env and vault expression syntax in datastore configuration reference

s9d ago

#1935

Docs: add swamp auth token list/revoke to API key authentication guide

s9d ago

#1939

formatUserModelError reports 'Missing required methods field' for any method sub-field validation failure

s9d ago

#1943

formatUserModelError arguments check uses fixed path index, broken for extension schema

9d ago

#1801

Datastore config should support vault expressions or env var references for tokens

Teams9d ago

#1941

install.sh: 'stable' alias tarball and .sha256 are published non-atomically — checksum verification fails during every release window

Teams9d ago

#1936

Add support for Google AntiGravity as a supported agent

s9d ago

#1937

swamp update leaks raw LogTape output instead of using presentation output

s9d ago

#1940

Pi missing from VALID_HOOK_TOOLS — audit hooks are a silent no-op

s9d ago

#1697

Add native support for the Pi coding harness

Teams9d ago

#1938

serve still panics on successful OAuth device-flow completion after #1899 fix (200 branch only)

s8d ago

#1932

Catalog export blocks event loop and global lock during serve push

s9d ago

#1933

Show local vs remote mode indicator in command output

s9d ago

#1870

Move skill review and trigger eval into the local verification loop

s9d ago

#1930

'Active in swamp' in scoreboard is ambiguous

10d ago

#1928

S3 datastore: model method run & datastore sync deadlock in commit/lock phase (anon_pipe_read), no self-heal

Team10d ago

#1927

Docs: remove driver references from extension documentation

s10d ago

#1924

Remove extension driver support from CLI and domain layers

s10d ago

#1925

docs: write enablers/access-control.md design doc

s10d ago

#1926

docs: fix grant file examples to use actions (plural array) not action (singular)

s10d ago

#1915

swamp extension quality resolves datastores: against the repo root but models: against the manifest dir — datastore extensions are unscorable in a monorepo

Teams10d ago

#1899

swamp serve panics on successful OAuth device-flow completion (Deno HTTP invariant)

s10d ago

#1923

Software factory ignores earlier approvals with multiple cycle overrides

10d ago

#1919

Telemetry flush failed (network error) warning appears repeatedly across multiple users/environments

10d ago

#1918

verification-attestation report runs as default on every workflow

s10d ago

#1916

repo init and repo upgrade use LogTape output instead of clean human-readable output

s10d ago

#1914

enforceUniqueLatest can incorrectly demote foreign namespace rows

s10d ago

#1907

Extension catalog never re-bundles edited source files

s10d ago

#1902

Two versions of the same data record both flagged isLatest=true

s10d ago

#1906

verify-reviews workflow broken: UUID schema validation error on id field

s10d ago

#1912

verify-reviews workflow still has unsupported 'guard' key on ci-security-review step (incomplete fix from #1905)

10d ago

#1905

verify-build workflow broken: unknown 'guard' key on job

s11d ago

#1708

@swamp/git: add a read-only working-tree diff for pre-commit review

Teams11d ago

#1909

Correlate workflow gates with recorded run IDs

10d ago

#1908

Add safe per-work-item workspace preparation

10d ago

#1762

Suppress boot-time "pulled extension(s) have missing source files" WRN when invoked command is `swamp extension install`

s12d ago

#1900

dashboard device-login poll checks for an error code serve never sends, so all failures show as an endless spinner

s12d ago

#1903

doctor extensions --repair reports catalog orphans pruned but leaves them in place

ks10d ago

#1898

Namespace mismatch regression in datastore sync after PR #2314 lock key restructuring

s13d ago

#1901

docs(design): reorganise design/ around the six primitives

s13d ago

#1897

Core: namespace-scoped datastores write root-level lock key and pass undefined namespace to sync

s13d ago

#1856

Add Amp Code as a built-in tool in repo init

s13d ago

#1893

serve dashboard hardcodes swamp-club.com in OAuth login, ignoring --oauth-provider

s13d ago

#1896

S3 AccessDenied error message truncates the S3 key — the most useful diagnostic field

13d ago

#1895

Core passes undefined namespace to datastore sync operations in namespaced deployment

13d ago

#1894

datastoreGlobalLockOptions writes lock key at bucket root instead of under namespace prefix

13d ago

#1891

/u/dieter/activity shows "Active in swamp" when I did nothing

13d ago

#1886

feat(ui/tokens): metadata field or tags for collective API tokens

13d ago

#1867

Docs: document managedConfig for multi-instance serve deployments

s14d ago

#1883

serve: #2308 method-run push fails with namespace mismatch — grant create does not push until a reload

s14d ago

#1885

Add a Git ancestry check method

13d ago

#1884

Genesis "New Blood" (recruit_first) only counts collective invites — a platform invite can never complete it

k14d ago

#1880

Inviter gets no credit when the accepted account email differs from the invited email (plus-addressing mismatch)

k14d ago

#1865

Docs: fix incorrect write-bearing classification claim in failure-semantics.md

s14d ago

#1727

Concurrent suspended workflow runs can't be disambiguated from 'approvals'; fresh runs should supersede matching-input suspended runs

s14d ago

#1719

Support direct type execution (@type) with --server

s14d ago

#1882

serve HA: grant/group mutations are never pushed to the shared datastore — replication pull (#2305) has nothing to pull

s14d ago

#1873

serve: data handler authorization fields missing ns/tags/owner for CEL conditions

s14d ago

#1881

Add orphan branch creation

13d ago

#1876

serve HA: grants do not replicate across cluster instances — policy is repo-local despite the shared datastore

s14d ago

#1846

model get does not render the description field

s14d ago

#1878

Regression 20260826.004253.0: CEL data.latest()/data.version() throw in expressions — "Unresolved expression" for previously working models

s14d ago

#1864

swamp issue feature/bug --extension mangles owner name (ftveronezzi -> fveronezzi)

s14d ago

#1875

serve: access check --server evaluates the target subject with the caller's IdP groups/collectives

s14d ago

#1877

commitSeq fast path disarms on every run and cannot re-arm if any index entry is unhydrated

Teams14d ago

#1879

GitHub connector OAuth screen attributes swamp-club.com to "System Initiative" / "systeminit"

14d ago

#1866

`--server` list commands render the TUI picker into a non-TTY pipe

Teams14d ago

#1871

serve: workflow tags never reach grant CEL conditions — tag-conditioned grants always deny

s14d ago

#1874

migrate-index aborts on legacy bundles/ vault-bundles/ report-bundles/ entries — no in-product path forward

Teams14d ago

#1872

verify-reviews workflow uses local main as diff base, producing stale diffs in worktrees

s14d ago

#1868

Windows test failures in resolveManagedConfigPaths after managedConfig merge

s14d ago

#1869

Enforce attestation and review integrity as merge gates

s14d ago

#1785

Cancellation/--timeout skips remaining steps including `completed`/`always` branches; --timeout waits for the in-flight subprocess

s14d ago

#1784

Remote "write-bearing" classification is inferred from data-plane writes, not declared; external side effects can be re-executed on worker disconnect (docs say the opposite)

s14d ago

#1863

docs(skill): serve guide's Token Management section is bare, leads to picking the wrong mint command

s14d ago

#1861

Add AWS::DynamoDB::Table model to @swamp/aws/dynamodb

15d ago

#1860

MacOS - Sign released files instead of needing remove_macos_quarantine function

14d ago

#1831

Data Tutorial copy cmd only copies half of data query

s15d ago

#1803

Docs: document that workflow cancel --all skips serve-owned runs

s15d ago

#1859

Docs: document `swamp access token reveal` and update token retrieval guidance

s15d ago

#1759

`search` → `list` aliases are hand-rolled Command clones, not aliases: 10 of 11 have drifted from their parent's option set

Teams15d ago

#1853

Docs: document --filter flag on workflow history search

s15d ago

#1855

paths.base manifest with nested model path breaks registry metadata

s15d ago

#1854

Docs: document SWAMP_SERVER_URL as routing alias for SWAMP_SERVE_URL

s15d ago

#1847

Docs: add --ca-cert / SWAMP_CA_CERT for swamp worker connect to TLS reference

s15d ago

#1837

workflow validate: does not detect guard type mismatch when ${{ inputs.X }} fills the entire field and inputs.X is non-string

s15d ago

#1858

swamp access check/can-i report ALLOW where enforcement DENIES (explain() not deny-first)

s15d ago

#1825

access token mint: plaintext secret never surfaced to user, vault read-secret cannot access _token-secrets

Teams15d ago

#1857

UAT: workflow resume --from with forEach expression template names

15d ago

#1781

`workflow resume --from` does nothing for forEach steps whose template name contains `${{ }}`

s15d ago

#1852

Trial grant skips the paid-subscription check, starting trials on paying collectives

k15d ago

#1830

SWAMP_SERVER_URL is ignored for routing: commands silently read the local repository

s15d ago

#1848

Add --filter flag to workflow history search

s15d ago

#1843

worker connect fails against any h2-speaking TLS server (client offers h2 ALPN but WS layer is HTTP/1.1 only)

Teams15d ago

#1838

data.latest() throws ambiguity error on exact dataName matches (regression from #1816 in 20260826.004253.0)

s15d ago

#1842

model update rewrites the definition file and strips all comments

Teams15d ago

#1845

@swamp/method-summary report no longer includes argument values

15d ago

#1828

serve: catalog backfill indexes only session-local data, data query returns wrong results for pre-existing entries

Teams15d ago

#1844

model method run with ~100MB stdout hangs/times out

15d ago

#1840

serve: dashboard behind an ingress fails WS handshake — Origin allowlist is hardcoded

s15d ago

#1836

Add safe worktree removal

13d ago

#1835

profile page is confusing

16d ago

#1834

Leaderboard is confusing to new users

16d ago

#1833

workflow resume writes no progress to a redirected stdout until the run ends

s10d ago

#1832

Profile page exposes account email address

16d ago

#1827

data search: full filesystem walk on every call, bypasses catalog index

Teams16d ago

#1826

swamp workflow history search: add --workflow filter flag

Teams16d ago

#1823

Docs: add jira webhook scheme to manual documentation

s16d ago

#1816

data.latest() should error on ambiguous specName matches across multiple data items

s16d ago

#1560

swamp auth login process fails when run remotely

s16d ago

#1777

Support Jira webhooks with X-Hub-Signature HMAC-SHA256 verification

s16d ago

#1775

Add typed read-only remote ref lookup to @swamp/git

Teams16d ago

#1818

serve --dashboard: dashboard assets missing from release binary, always 404

s16d ago

#1817

@swamp/container-image@2026.08.25.1 fails to install: upgrades[0] is missing upgradeAttributes (plus: doctor validates the cached bundle, not the source)

s16d ago

#1822

swamp doctor extensions validates cached bundle instead of source on disk

s16d ago

#1821

SCIM 2.0 provisioning endpoint for swamp-club (Users + Groups, deprovision)

15d ago

#1820

SSO user profile fields are frozen at first login — overrideUserInfo is never set on any provider

16d ago

#1805

@swamp/s3-datastore disables IMDS on plain EC2, so an attached instance profile cannot resolve

s17d ago

#1779

rum/site-info: lookup GETs a non-existent endpoint, always 405

s17d ago

#1696

Cloud Build create supplies project instead of required projectId path parameter

s17d ago

#1815

can the combat log also tell me which hostname the command was run on?

17d ago

#1814

add links to the docs for all account progress teasers

17d ago

#1802

data catalog: multiple is_latest=1 rows per (model,data) — latest-demotion skips workflow step-output rows

s17d ago

#1673

Fatal JavaScript out of memory: Ineffective mark-compacts near heap limit

s17d ago

#1804

AWS credential handling is duplicated across five implementations — the #803 preflight and the #226/#228 SSO hints reached only one of them

s17d ago

#1799

privileged/extra-args option on the run method

s17d ago

#1813

A subscription stuck in incomplete has no path forward: it grants nothing, and the billing page offers no way to finish paying

17d ago

#1812

Identifier lookups are exact-match and case-sensitive across username, email and slug

17d ago

#1811

Invite failures emit no telemetry, so a rejected invitation leaves no trace anywhere

17d ago

#1810

Collective invitations expire after 48h and the auto-claim is gated on that window, so a late signup is never bound

17d ago

#1809

Invite typeahead searches username prefix only, so an operative cannot be found by name or email

17d ago

#1684

swamp serve OOMs on repos with 2000+ model definitions

Teams17d ago

#1808

CEL assert regression after 20260824 update: @swamp/ssh runResult .attributes access now errors

s17d ago

#1793

swamp serve daemon enable: add --dashboard flag

s17d ago

#1807

AWS region parser does not follow source_profile or sso-session blocks

17d ago

#1780

Step-level dependsOn on a forEach step never evaluates true (except `always`)

s17d ago

#1806

Send the release headline from the release pipeline so New Release announcements say what shipped

17d ago

#1127

New Release Discord notification links to GitHub Actions run instead of swamp changelog/release notes

Teamk17d ago

#1572

Epic: /leaderboard and /u/{username} do not survive 10B events — measured audit + phased plan

17d ago

#1769

workflow cancel --all on the serve host shuts down the serve process

s17d ago

#1750

Dispatched steps over 15 minutes cannot write results: dispatch credentials expire and never refresh

s17d ago

#1255

Reconcile collective-token CLI activity to members (attribute → bonus → stamp → even-split)

17d ago

#1207

Streamline user invitation to swamp.club without requiring collective membership

17d ago

#1770

A run's terminal status reaches the shared datastore only when a later run happens to push it

s17d ago

#1782

manual_approval suspends the run while parallel sibling jobs are mid-flight; in-flight steps are torn down and left `running`

s17d ago

#1792

CLI writes runtime state (lastStalenessWarning) into tracked .swamp.yaml, dirtying a committed config file

s18d ago

#1794

--ca-cert / SWAMP_CA_CERT are ignored when serve runs --auth-mode token — only DENO_CERT reaches the connection's TLS config (found validating #1748)

s18d ago

#1788

workflow validate does not resolve modelType on factory-pattern steps — a non-existent extension validates clean

s18d ago

#1795

Workflow summary omits failed assertion steps

Teams18d ago

#1798

Datastore lock warnings should use workflow step output format

s18d ago

#1800

deps-audit skips deno-runner and agent-runner lockfiles in ci.yml

18d ago

#1766

Readability of tables in documentation

k19d ago

#1797

software-factory: rename gates[].pass to gates[].satisfied - collides with a transition named 'pass'

17d ago

#1796

cycle-override grants are deduplicated, so 'one grant = one entry' fails from the second grant on

18d ago

#1789

Only documented non-interactive auth puts the password in argv; the safe SWAMP_API_KEY path is undocumented

s19d ago

#1737

Retyping a model instance strands catalog rows no command can reclaim — prune matches on model_id, delete resolves the current type (follow-up to #1009)

s19d ago

#1741

Docs: update cancel endpoint response statuses in REST API reference and workflows page

s19d ago

#1764

docs: update vault audit trail reference for write operation support

s19d ago

#1778

docs: document --dashboard flag for swamp serve

s19d ago

#1744

ExtensionWorkflowRepository scans manifest.yaml as a workflow, emitting 'Unknown key manifestVersion' warning

s19d ago

#1765

Relative path for custom agent skills setup doesn't provision skills

s19d ago

#1791

extension install serializes files[] in readdir order, producing machine-dependent reorder diffs in upstream_extensions.json

s18d ago

#1790

Workflow YAML rewritten in place: block-scalar description truncated, file left unparseable, and validate still reports PASSED

s18d ago

#1783

Audit timeline is not populated by swamp CLI commands unless the AI-tool hook fires (manual says recording is automatic)

16d ago

#1768

vault read-secret appends a newline to piped output

s20d ago

#1748

wss:// direct to serve's own TLS listener still fails on 20260817 — client ALPN lands on h2, WS-over-h2 unimplemented (follow-up to #1363)

s20d ago

#1767

serve: vault audit repository not wired up — audit trail always empty

s20d ago

#1771

pullChanged skips same-size updated files — size-only change detection ignores the index sha256

13d ago

#1754

repo init/upgrade --tool kiro references .kiro/skills/ but installs skills to ~/.kiro/skills/

s21d ago

#1745

vault: audit trail should record put, delete, and annotate operations

s21d ago

#1761

data.findBySpec() returns only the first in-run record, not all of them, so an .all() assert silently checks one element

s21d ago

#1763

repo upgrade --tool kiro reports wrong changedFiles paths

s17d ago

#1760

s3-datastore: a stale machine's sync pushes its old 'latest' pointer over the newer remote one, and the rollback is permanent

13d ago

#1756

Make official Docker image OCI-compliant

s21d ago

#1734

Method-name collision between a base model type and an extending extension silently drops the whole extension file — no error, doctor reports pass

s21d ago

#1749

data prune still misclassifies live records as orphans on 20260820 (after #1396) — serve-minted token/grant records, and report data of every live workflow

s21d ago

#1755

vault put prompts for the secret before validating the vault name exists

s21d ago

#1751

workflow validate: false 'Missing required inputs' for CEL-templated globalArgs (${{ inputs.* }})

s21d ago

#1753

Add SWAMP_CLI_OUTPUT env var to control default output mode (plaintext/tui/json)

21d ago

#1752

@swamp/git fetch: support local path as remote

21d ago

#1747

Concurrent pushes to one namespace fail with HTTP 409 ConditionalRequestConflict — the conditional PUT is never retried

13d ago

#1740

serve: triggerSource not persisted to workflow run summary

s22d ago

#1743

dataOutputOverrides not applied during remote execution — ephemeral resources GC'd before override takes effect

s22d ago

#1736

extension rm also deletes the lockfile entry, and install on an empty lockfile is a silent success — rm/install is not a round trip

s22d ago

#1718

--max-run-duration only applies to detached runs, not attached runs

s22d ago

#1738

Cancel endpoint reports status: cancelled for runs it did not actually cancel

s22d ago

#1739

@swamp/git: no way to amend a commit, but push can --force

Teams22d ago

#1721

pre-flight checks run on orchestrator, not on worker — breaks remote execution with filesystem-dependent checks

s22d ago

#1712

docs: document --remote-only flag for swamp serve

s22d ago

#1726

Swamp serve daemon doesn't run with --hot-reload

s22d ago

#1722

serve: include workflowName in HealthSnapshotSchedule

s22d ago

#1735

knowledge-base retrieve persists query output into the state resource, with lifetime infinite and the query text in the instance name

22d ago

#1733

Skip 50MB monolithic index rewrite on v2 shard-first path

Team19d ago

#1732

Share single AwsS3Client instance across lock, sync, and verifier

Team19d ago

#1731

Double shard assembly per command lifecycle (pull + push both read all shards)

Team14d ago

#1730

pullChanged never records commitSeq for shard-first (v2) index

Team14d ago

#1729

localHasAllRemoteEntries() permanently blocks sidecar update on partial caches

Team14d ago

#1723

serve: workflow.history.get cannot find CLI-created runs or look up by run ID

s22d ago

#1728

"TRIAL ENDED" modal shown to team plan user when toggling extension visibility

Team23d ago

#1725

I _think_ I might like a guard in the trigger yaml

10d ago

#1711

serve dashboard: add cluster.instances and serve.config endpoints

s23d ago

#1720

CEL expressions have timestamp/duration but no current-time value, so no guard can express "older than N"

22d ago

#1717

access token mint writes to user vault, not serve's _token-secrets control plane in HA mode

s21d ago

#1715

Issue lifecycle start drops top-level issue comments

23d ago

#1710

serve dashboard: add instanceId, triggerSource, and step progress to WorkflowRunSummary

s23d ago

#1714

Document worker affinity (affinity: true) for workflows and jobs

23d ago

#1706

swamp extracts embedded deno into $HOME → unexecutable under SELinux Enforcing; all user extensions fail to load

Teams23d ago

#1709

Datastore MongoDB driver leaks connections — 5960 accumulated over 8 days

Team23d ago

#1705

workflow approvals displays the latest run's prompt for every suspended run

Teams23d ago

#1704

docs: document --oauth-client-name flag for swamp serve

s24d ago

#1699

Docs: update workflow reference to include trigger in JSON output shapes

s24d ago

#1701

@swamp/git branch and push methods fail data naming when branch contains '/'

s24d ago

#1689

Docs: update workflow-placement.md for job/workflow-level placement inheritance

s24d ago

#1691

feat(serve): use identifiable OAuth client_name instead of random UUID

s24d ago

#1695

@swamp/git does not pass AbortSignal to Git subprocesses

Teams24d ago

#1694

Global Secret Manager methods build an invalid regional parent

s24d ago

#1687

Document model.method() support in assert expressions

s24d ago

#1703

No way to store code-review results — verdicts, findings, and cost are not persisted for any repo

s24d ago

#1702

Redaction regex boundary bug: label_base64 secrets with an unrecognized label pass through unredacted (e.g. swamp_ API keys)

Team24d ago

#1700

User token page (/u/<user>) shows only "swamp_..." for every API key, making leaked-key identification impossible

Team24d ago

#1692

upstream_state treats sparse-fetch branches as having no upstream

Teams24d ago

#1685

workflows: support labels/target/platform at job and workflow level

s24d ago

#1682

swamp access grant create never registers the grant — a --deny created this way silently fails open

s24d ago

#1686

Support credentials in datastore config (vault-resolvable)

24d ago

#1679

Serve telemetry attribution for collectives

s24d ago

#1633

Extension workflows: no way to override trigger configuration

s24d ago

#1637

Add a list/discover method to the generated @swamp/aws types — no way to enumerate resources in a region

Teams25d ago

#1677

Document @vault= prefix for webhook secrets in serve.yaml

s25d ago

#1676

swamp access grant create installs an unrelated extension from the registry

s25d ago

#1675

docs: document SWAMP_API_KEY headless OAuth bootstrap for swamp serve

s25d ago

#1678

workflow-succeeded selects the globally-latest run, so siblings block each other under parallel use

s24d ago

#1632

swamp serve: webhook secrets should support @vault= resolution

s25d ago

#1672

Misleading collective_not_trusted auto-resolve error when a local source extension transiently fails to index during workflow validate

s25d ago

#1670

datastore setup: symlinks not counted in bytesCopied, causing misleading '(0B)' output

s25d ago

#1671

vault.get() CEL error embeds raw newline when wrapped by model resolver, producing broken output

s25d ago

#1674

Feature: user-configurable redaction rules (.swamp/redaction.yaml)

Team25d ago

#1665

Sync every signup to Attio, and backfill the existing population (#809 follow-up)

k27d ago

#1669

@swamp/issue-lifecycle probes /api/health, which swamp-club stopped serving when the Fresh scaffold stubs were removed

25d ago

#1668

Lab lifecycle POST rejects any payload string that starts with a dollar sign, not just operator keys

27d ago

#1138

Feed: detect and gracefully handle dead (404) post links (link rot)

Teamk27d ago

#1137

/feed: per-post unread indicators and mark-as-read to track reading progress

Teamk27d ago

#1147

/feed: filter and search by author, title/text, and topic

Teamk27d ago

#1333

Add a :micdrop: emoji / reaction shortcode (swamp-native art included)

k27d ago

#1497

Push down the two cheap leaderboard scans: ghost-gate dictionary and eventCounts owner filter

k27d ago

#967

$identify events are never consumed — anonymous web history never binds to the account

k27d ago

#1667

Finish the swamp_* attribute set on Attio users, and settle the two unprefixed ones (#809 follow-up)

27d ago

#1666

aria-expanded is a raw boolean in 12 places — collapsed state is unannounced to screen readers

27d ago

#1658

One standing read: every scalar score consumer reads board_totals, not the ledger

k27d ago

#1657

Profile Edit trigger is a fire-and-forget island: no aria-expanded, and a silent no-op if the editor island does not hydrate

k27d ago

#1654

Profile XP bar jumps ~25px on fill, and pays the full cumulative walk for two numbers board_totals already holds

k27d ago

#929

Incremental activity projector + swamp.events username bloom index (spun off #925, stages 5+7)

k27d ago

#1254

Telemetry stats consumer: insert_id dedup commits before the write it guards — any upsert failure is silently swallowed on retry

k27d ago

#1598

score-rollup projector runs N× per cadence — the run gate is per-replica memory, not shared state

k27d ago

#1579

Leaderboard board windows re-anchor on wall-clock while the rest of the view is frozen at asOf

k27d ago

#1365

Collective management API for extension-based automation

Teamk27d ago

#1663

swamp CLI: surface the audience and resolvedInVersion fields swamp-club now serves

s8d ago

#1652

Docs: document swamp workflow trigger set/get/remove commands

s27d ago

#1659

serve reload should pick up trigger override changes from serve.yaml

s27d ago

#1638

Catalog write-lock contention during extension load leaves a partial registry; auto-resolve fabricates 'local edits' and suggests a destructive --force re-pull

s27d ago

#1352

Website extension search ignores API relevance — exact name match "good-planning" ranks #10 (API ranks it #1)

Teamk27d ago

#1510

Operatives button on Collectives page does nothing

k27d ago

#1662

ApiKeyManager's collapsed trigger points aria-controls at an element it never renders

27d ago

#1661

A boolean aria-expanded renders as no aria-expanded: two disclosure widgets report no state to a screen reader

27d ago

#1042

Collective leaderboard: activity metrics aggregated by identity group

Teamk27d ago

#1651

Ripple redaction rewrites HTTP status-code runs as phone numbers, silently corrupting evidence

s27d ago

#1655

@adam/cfgmgmt/directory: uses GNU stat -c, silently non-compliant on FreeBSD and macOS targets

13d ago

#1644

CLI: swamp workflow trigger set/get/remove commands

s27d ago

#1503

Profile score section blocks the render on a ClickHouse read

k27d ago

#1474

Plus-addressed emails stripped on invite acceptance, breaking collective join and quest reward

k27d ago

#1348

It is possible for a member to be a member of a collective twice

Teamk27d ago

#1139

Lab: URLs inside list items aren't clickable (linkified) in rendered issue bodies/summaries

Teamk27d ago

#1204

Collective invite emailed-link return path is dropped: /accept-invite sends ?returnUrl= but /login reads ?redirect=

k27d ago

#1211

Season Journey card shows "Claim Now" when there are no unclaimed tiers

k27d ago

#1210

Clicking username on a quest page opens profile preview modal instead of navigating to the profile

k27d ago

#1653

Tell the inviter when a collective invite mis-lands, instead of leaving it pending forever

27d ago

#1504

Ghost profile bypasses the score-read seam and 500s on a slow ledger

k27d ago

#1589

A ledger read failure still renders as 'no activity': loadProfileScore swallows to an empty standing behind HTTP 200

k27d ago

#1642

Docs: document health monitoring endpoints for swamp serve

s27d ago

#1650

Remote trigger override management via --server

27d ago

#1649

feat(serve): headless OAuth client bootstrap via SWAMP_API_KEY

s24d ago

#1648

Trigger overrides: observability and cleanup follow-ups

s24d ago

#1646

Make model output retention fields optional with sensible defaults

3d ago

#1645

Docs: document trigger overrides in swamp-club manual

s27d ago

#1643

Smoke test: gated lab issue lifecycle workflow

28d ago

#1613

Cluster health snapshots with SSE streaming for swamp serve

s28d ago

#1640

Docs: document auto-raise of open-file limit in swamp serve reference

s28d ago

#1641

Quality rubric + push gate for version upgrade chain correctness

Teams28d ago

#1639

workflow resume truncates the run's log file, losing every earlier attempt's records

s28d ago

#1634

Add an upstream-state method: status cannot answer whether commits are pushed

s28d ago

#1630

swamp serve dies of descriptor exhaustion on an ordinary workload, having warned about it at startup

s28d ago

#1636

extension quality awards repository-verified 2/2 for a nonexistent or private GitHub repo

Teams28d ago

#1635

extension/guide.md quick reference uses -j, which no swamp command accepts

Teams28d ago

#1628

serve: stale empty directories in active-runs/ never cleaned up

s29d ago

#1615

WebSocket auth rate limiter blocks legitimate users when sharing IP with a failing client

s29d ago

#1631

Failing on claude validate

17d ago

#1614

GC expired OAuth server tokens and control plane secrets

s29d ago

#1618

Client shows 'Authentication failed' when actually rate-limited

s29d ago

#1627

serve: cron ticks leak pending-run records, replaying every past tick on restart

s29d ago

#1617

Workers retry forever on permanent auth failures instead of backing off

s29d ago

#1629

Remote execution has no working network configuration: off-loopback serve requires TLS, but worker connect cannot connect over TLS

s29d ago

#1608

Support --grants-dir for loading grants from a directory

s29d ago

#1626

migrate-index still drops shallow-path entries on 2026.08.07.1 — #1584 marked shipped but no released version carries the fix (self-contained repro)

s29d ago

#1616

Server token definitions and encryption keys are not durable across pod restarts

s29d ago

#1621

data.latest() is memoized per run, contradicting the documented "sees current-run data" contract

s29d ago

#1620

Model lookup misreports EMFILE (too many open files) as a broken definition file and dumps a raw stacktrace

s29d ago

#1619

Lab Insights not publicly available

k1mo ago

#1612

Docs: add swamp access group list-idp to access commands reference

s1mo ago

#1605

serve telemetry identity warnings are diagnostic but not actionable — say how to fix them

s1mo ago

#1588

swamp quest: drop the heartbeat field the server no longer sends

s1mo ago

#1610

--grant-reload auto does not detect filesystem changes — blind to ConfigMap updates

s1mo ago

#1571

Add native Bedrock Knowledge Base Retrieve support

s1mo ago

#1584

migrate-index silently drops entries with shallow paths — all of workflows-evaluated/ and any root-level file

s1mo ago

#1611

Add swamp access group list-idp to enumerate IdP groups seen by the server

s1mo ago

#1609

Grants directory loader skips symlinks — breaks Kubernetes ConfigMap mounts

s1mo ago

#1604

Daemon telemetry flush: stop() can skip its final flush when a timer drain is already in flight

s1mo ago

#1601

Docs: `swamp compile` subcommand doesn't exist

s1mo ago

#1607

Guard the projector's full rewrites against the fail-open lease (ADV-6 from #1575/#1576)

k1mo ago

#1606

Projector write amplification: board_totals/owner_devices full rewrites are owners × runs/day

k1mo ago

#1576

Profile candidateIds prune costs a full ledger scan to build itself — 42.88M rows for one keyed read

k1mo ago

#1575

Leaderboard phase 3: owner-grain board_totals so a cache miss is survivable at 10B

k1mo ago

#1591

swamp serve is telemetry-dark: scheduled workflow runs never reach /ingest, and the daemon never flushes

k1mo ago

#1603

CLI has never sent insert_id: retried telemetry batches are double-counted into cli_daily, inflating XP in an append-only ledger

1mo ago

#1581

Catalog backfill reconciles against the local cache, not the datastore

s1mo ago

#1602

Extension bundle cache not invalidated when an imported sibling module changes (entry-file fingerprint only)

s1mo ago

#1600

swamp serve: data.query fails permanently with "UNIQUE constraint failed: catalog.*" — one duplicate catalog 5-tuple aborts every catalog rebuild

Teams1mo ago

#1599

dailyHistory range pushdown — deferred from #1576, and the measurement says why

k27d ago

#1597

Docs: manual never mentions telemetry, and the serve/scheduling pages imply automated runs are visible when they are not

1mo ago

#1596

Explore: CLI binary update integrity lacks independent verification

Team12d ago

#1574

Leaderboard phase 2: take score_grants off the board read path — read today from score_daily

k1mo ago

#1595

Explore: reconcile quality rubric's dormant provenance factor

Team1mo ago

#1594

Explore: pull-time signature verification for extensions

Team1mo ago

#1593

Explore: transparency-log integration (Rekor) for extension signatures

Team1mo ago

#1592

Explore: publish-time artifact signing for extensions (cosign keyless)

Team1mo ago

#1586

Profile day drill-down returns 0 entries at the 5s ClickHouse ceiling for every operative

k1mo ago

#1582

reconcile_from_disk_bench.ts fails deno check (stale DenoRuntime stub)

s1mo ago

#1563

Improve multi-word search query handling and guidance

s1mo ago

#1573

Leaderboard phase 1: cache the board read and bust it on tier crossings (no schema change)

k1mo ago

#1580

Catalog backfill deletes rows for any model whose data names are numeric

k1mo ago

#1583

Docs: document catalog completeness check and --repair in doctor reference

1mo ago

#1577

Leaderboard phase 5: score-rollup-projector write cost at 10B — ~430M rows scanned per 60s tick

k1mo ago

#1569

Datastore-managed configuration for multi-instance serve deployments

s24d ago

#1568

Ghosts on the leaderboard 500

29d ago

#1561

swamp command doesn't check cwd

25d ago

#1558

serve boot OOM: findAllGlobalSince loads all workflow runs as full aggregates during reconciliation

s1mo ago

#1555

extension search: channel-filtered results carry null version fields, and multiple --channel values collapse instead of unioning

Teams1mo ago

#1556

s3-datastore: localHasAllRemoteEntries uses bare rel instead of localRelPath, always returns false in namespaced mode

s1mo ago

#1559

datastoreSetupExtension migrates .swamp/ to cache root instead of namespace directory

s1mo ago

#1557

swamp serve writes outputs/ outside the bound namespace — silently never persisted to the remote datastore

s1mo ago

#1554

s3-datastore: bulk pull writes to cache root instead of the namespace, wedging push and arming a full-datastore delete

s1mo ago

#1551

git: add pull, fetch --tags, and cherry-pick methods

s1mo ago

#1552

Workflow runs with wide dataArtifact fan-out (~400/run) OOM both workflow history get and swamp serve boot, crash-looping the scheduler; rollback doesn't help (state-triggered, not release-triggered)

Teams1mo ago

#1547

Show user:<name> instead of user:<id> in grant list output

s1mo ago

#1553

Reusable long-lived invite link: one URL to bring people into the swamp

1mo ago

#1546

Exclude swamp internal model types from model list output

s1mo ago

#1550

Skill docs use invalid two-argument 'vault get' form

s1mo ago

#1549

access token mint prints an invalid retrieval command (vault get, not vault read-secret)

s1mo ago

#1548

serve reload and model edit timeout over --server in Kubernetes

s1mo ago

#1544

swamp auth whoami should report paid tier and trial status

k1mo ago

#1545

Use whoami entitlement to explain private-extension push refusals

1mo ago

#1542

Document --restricted-commands flag for swamp serve

s1mo ago

#1534

vault put: pass tags through to extension provider CreateSecret/setSecret calls

s1mo ago

#1538

Docs: update manual for 23 new --server commands

s1mo ago

#1541

Update VaultProvider interface in @systeminit/swamp-testing to support optional tags in put()

s1mo ago

#1539

Docs: document --grants-file flag for swamp serve

s1mo ago

#1540

Docs: document --server support for serve reload

s1mo ago

#1535

Docs: add --tag flag to vault put reference

s1mo ago

#1523

Docs: update manual for --detach-runs deprecation and HA auto-detection

s1mo ago

#1526

Document the Codex plugin in swamp docs

s1mo ago

#1531

Add --server support to CLI commands missing it

s1mo ago

#1527

Document the swamp Claude Code plugin in the swamp documentation

s1mo ago

#1537

Make --server a global CLI option

1mo ago

#1536

Add --server support to model cancel (server-side run cancellation)

1mo ago

#1530

Load grants from external source on swamp serve startup

s1mo ago

#1529

swamp vault put should support tags for secret governance

s1mo ago

#1533

Improve hot reload of the deamon, include extension source/bundle changes

s1mo ago

#1528

Authenticated users must re-login after swamp serve restart

s1mo ago

#1532

Add --server support to serve reload

s1mo ago

#1525

Harden queue claim semantics: atomic claims + status-guarded markDelivered/markFailed across app queues

1mo ago

#1505

Auto-detect HA mode and deprecate --detach-runs flag

s1mo ago

#1367

version-drift check (from #236) is a raw string-inequality, false-positives on multi-model manifests and metadata-only bumps

s1mo ago

#1524

Resend newsletter audience sync: contacts, segments, backfill, unsubscribe sync-back

a29d ago

#1511

Move per-login token secrets from vault to encrypted control-plane store

s1mo ago

#1520

Docs: document macOS TLS trust limitation and SSL_CERT_FILE workaround

s1mo ago

#1488

Validate swamp serve deployment stack on startup

s1mo ago

#1519

Docs: serve config file (.swamp/serve.yaml) and --config flag

s1mo ago

#1517

Serve config file — read swamp serve configuration from YAML

s1mo ago

#1518

Deno runtime does not trust ISRG Root YR — extensions fail with valid Let's Encrypt certs

s1mo ago

#1508

Docs: update hot-reload reference to include trust list refresh

s1mo ago

#1514

Cross-instance client re-attach for multi-instance swamp serve

s1mo ago

#1512

vercel codegen: inline rawSyncResult in non-unwrap sync path

s1mo ago

#1515

vercel codegen: unused listAll import blocks extension publish for 4 models

s1mo ago

#1513

vercel codegen: add round-trip idempotency test for the pipeline

1mo ago

#1507

Track active runs in the control-plane store for cross-instance visibility

s1mo ago

#1509

validateGlobalArgInputRefs checks step-level inputs but step schema rejects 'inputs' key

1mo ago

#1506

Docs: document continuous reconciliation and multi-instance serve flags

s1mo ago

#1492

Docs: update workflow guard skip output to include guardExpression and guardResult

s1mo ago

#1499

Make it aware hot reload on the deamon does not take into account trust list changes, or do take into account the trust list for the hot reload.

s1mo ago

#1500

workflow validate: new 'GlobalArgument input references' check resolves model-definition ${{ inputs.* }} against workflow inputs, false-failing steps that supply the input

s1mo ago

#1493

Continuous reconciliation for multi-instance swamp serve

s1mo ago

#1496

Split the score-read circuit breaker so leaderboard pressure can't blank profile scores

k1mo ago

#1475

oauth_sign_in telemetry records provider as the literal ":id" for every event

k1mo ago

#881

Council: set the scoring balance — command tiers, farm-decay parameters, cross-category ratio

1mo ago

#880

Scoring coverage gaps: instrument drop-off, score ripples/mentions, reward invite-converts

1mo ago

#1495

Materialize an active-days-by-id table for the streak board

s17d ago

#1494

score-rollup-projector: O(all-time ledger) closure + per-pod fan-out saturates prod ClickHouse CPU

k1mo ago

#1491

Startup cache hydration for swamp serve instance replacement

s1mo ago

#1489

Output a log line for steps skipped due to guards

s1mo ago

#1490

extension quality scorer misreads a template-literal import specifier in generated code as an unresolvable bare import, hard-erroring the whole extension as UNSCORABLE

Teamk1mo ago

#1315

Add @swamp/kubernetes/statefulset model type

Teams1mo ago

#1472

Docs: access token commands reference says plaintext is 'shown once'

s1mo ago

#1485

Document --restricted-model-types flag for swamp serve

s1mo ago

#1486

swamp auth server-login ignores SWAMP_SERVE_URL

s1mo ago

#1483

s3-datastore extension: pullChanged writes namespace-stripped paths to local cache

s1mo ago

#1478

serve oauth: an unrecognized device-token error kills the whole serve process instead of the bootstrap

s1mo ago

#1458

s3-datastore: bidirectional sync pull writes namespace-stripped copies to cache root, wedging push with no supported recovery

s1mo ago

#1482

CLI reports 'HTTP/2 not supported by this client' when the server actually returned 401 — masks auth failures as a transport error

s1mo ago

#1471

access token mint: allow reusing a revoked token name

s1mo ago

#1481

extension quality --json exits 1 with 'rubric factors missing' even when a full score was computed (unearned factor, not uncomputable)

Teams1mo ago

#1477

serve oauth: startDeviceGrant discards the OAuth error field, making device-code failures undiagnosable

s1mo ago

#1470

access token rotate: add --vault flag to override inherited vault

s1mo ago

#1479

Extensions without a repository can't receive issues — including the issue asking them to add one

3d ago

#1476

serve oauth bootstrap: device flow rate-limited to a 45-second window by validateClient counter, shared globally across tenants

k1mo ago

#1468

workflow edit: after saving an invalid workflow, re-running edit reports "Workflow not found"

s1mo ago

#1459

Authentication via Google Broken

k1mo ago

#1473

Profile edit broken on Safari

k27d ago

#1469

Configurable write paths for object-creating commands (repo-relative swamp root)

1mo ago

#1464

Docs: document rollbackOnFailure with safety guidance for external-dependency models

s1mo ago

#1465

Remote execution tutorial: sample runner output is missing the stdout line that #1462 restored

s1mo ago

#1467

seadex-latent-bugs: latent product bugs pinned by the wave-2b test backfill

Team1mo ago

#1462

Remote step stdout is not streamed to the workflow runner (log artifact is transferred correctly)

s1mo ago

#1463

Redactor false positives: HH:MM:SS timestamps masked as IPs, SHA-256 digests masked as secrets (both inside code fences)

s1mo ago

#1461

Remote execution tutorial: worker token list output and inline workflow-summary block no longer match CLI output

s1mo ago

#1451

Add rollbackOnFailure for method-level write atomicity

s1mo ago

#1460

docs: working-with-data tutorial uses removed depends_on step key, blocking the tutorial

s1mo ago

#1457

Document --server support for extension pull/update, datastore setup, and vault migrate

s1mo ago

#1453

model validate: transport-reachable preflight sends unresolved vault CEL expression as credential

s1mo ago

#1452

Add `amp` (Amp Code) as a built-in --tool for repo init/upgrade/audit

1mo ago

#1401

Expose resource attributes in DataHandle for workflow report stepExecutions

Teams1mo ago

#1448

Make swamp serve durable and highly available

1mo ago

#1446

Docs: document guard and resume --from in workflows reference

s1mo ago

#1439

.swamp.yaml rewritten with quote style change + lastSkillMigrationWarning on read-only operations

Teams1mo ago

#1444

Add --from flag to workflow resume for DAG re-entry on failed runs

s1mo ago

#1440

data delete removes data locally but push reports 'no changes' — next datastore sync restores everything

Teams1mo ago

#1443

Empty report returns persist 0-byte versions that mask the real report — and `swamp data gc` then deletes the real version, keeping the empties

s1mo ago

#1438

Docs: document guard field for workflow steps

s1mo ago

#1437

Add guard field to workflow steps for idempotent execution

s1mo ago

#1402

--quiet mode does not suppress in-process extension logger output

Teams1mo ago

#1423

tailscale transport hangs indefinitely on Tailscale SSH check-mode auth; never surfaces the login URL

s1mo ago

#1431

Concurrent @type auto-creation races: N simultaneous runs create N definitions sharing one name, and only one is reachable

s1mo ago

#1336

Worker queries need a safe connected-worker filter for fleet fan-out

s1mo ago

#1432

Extension docs still ship the Driver extension type, which the binary refuses (rejectRemovedDriverFields) after #535

s1mo ago

#1429

Docs: document vault selection for sensitive fields (defaultVault, per-resource vaultName)

s1mo ago

#1407

azure-kv error wrapping loses original error type — ERROR_TYPE always 'Error' in traces

s1mo ago

#1430

writeResource commits per-call: a method that fails midway leaves its earlier outputs persisted, with no marker that the run failed

s1mo ago

#1422

Docs: document workflow-scope ReportContext fields in extension report reference

s1mo ago

#1421

Cloudflare: expose GraphQL Analytics API (httpRequestsAdaptiveGroups / client-IP request analytics)

s1mo ago

#1406

aws-sm deleteAnnotation removes all non-aws: tags, not just swamp-specific ones

s1mo ago

#1420

No way to select which vault receives a sensitive-marked field's value

Teams1mo ago

#1428

aws-sm: namespace annotation labels with swamp:label: prefix

1mo ago

#1427

workflow assert: a step whose CEL expression fails to evaluate is omitted from --junit output, so the XML reports a clean pass

Team1mo ago

#1418

Documentation for workflow assert steps and JUnit output

s1mo ago

#1400

Expose workflow inputs in WorkflowReportContext

Teams1mo ago

#1417

Teach swamp skill how to write assert workflow steps

s1mo ago

#1415

Include a workflow's declared `inputs` in `workflow get --json` (and a `hasInputs` hint in `workflow search --json`)

s1mo ago

#1416

Docs: add how-to guide for running swamp serve/worker in daemon mode

s1mo ago

#1414

worker daemon enable: relative/missing --cache-dir fails launchd EX_CONFIG while daemon status reports running

Teams1mo ago

#1419

swamp doctor extensions: nondeterministic BundleBuildFailed for local extensions on an unchanged tree

TeamsBlocked1mo ago

#1404

Docs: document datastore directory relocation during setup

s1mo ago

#1405

vault extensions: emit OTel spans for vault operations (AWS SM, Azure KV, 1Password)

s1mo ago

#1392

Issue redactor corrupts reports: dotted code identifiers masked as hostnames, loopback and RFC 5737 documentation IPs masked, angle-bracket placeholders half-eaten

Teams1mo ago

#1396

data prune resolves auto-definitions at the local path, not the datastore path — deletes live models' data (verified: destroyed a working server token and an active grant)

Teams1mo ago

#1398

workflow/job-lifetime data is never reclaimed — expiry check requires an ownerDefinition.workflowId that step execution never sets

Teams1mo ago

#1399

runModel breadth limit (MAX_INVOCATION_BREADTH=100) is never enforced — tracking object is never written back to the caller context; verified 150/150 calls succeeded

Teams1mo ago

#1391

serve daemon enable is ungated — it reports success, then the account gate fires inside the detached daemon, which crash-loops invisibly

Team1mo ago

#1390

Purely local operations require a swamp-club account: local-token serve is gated while deprecated --auth-mode none is not, third-party OIDC is gated, and 'Local_Encryption' is paywalled by capitalization

Team1mo ago

#1389

A collective token stored in auth.json (rather than SWAMP_API_KEY) is permanently scope-less — resolution only runs for the env var, and scopes are never persisted for collective tokens

Team1mo ago

#1388

An empty stored apiKey counts as authenticated — saveIdentityCache writes apiKey:'' on a virgin machine, permanently satisfying the mandatory-account gate with no credential

Team1mo ago

#1387

Account/scope gates fire before argument, type and repo validation — 'swamp vault create env my-vault' (the command's own example, an invalid type) returns a paywall instead of 'Unknown vault type'

Team1mo ago

#1386

auth token create advertises a 'collective:write' scope that does not exist, and following its advice hits 'collective tokens cannot create other collective tokens'

Team1mo ago

#1385

requireScope does exact string matching — fine-grained scopes fail gates that demand the literal wildcard, and minted scopes are never validated or normalized

Team1mo ago

#1384

Collective-token scope cache never expires, is never refreshed by whoami, and cannot be cleared via the CLI — scope changes and revocations never take effect

Team1mo ago

#1382

Collective-token scope cache is keyed on a 12-char token prefix — only 2 chars distinguish org tokens, so a rotated token silently inherits another token's scopes

Team1mo ago

#1381

Misleading 'Your collective token lacks the X scope' when scope resolution failed — startup whoami errors are silently swallowed

Teams1mo ago

#1380

Community points / reputation: award points for upvoting extensions, feature requests, comments, and feed posts

Team1mo ago

#1364

globalArgs fields leak into method arguments when a method's arguments schema is a bare z.record()

s1mo ago

#1379

swamp serve --auth-mode oauth: crash during first-run admin resolution discards the OAuth token, forcing full device-flow re-registration

s1mo ago

#1378

Docs: document extension runtime permissions and device I/O workaround in user manual

s1mo ago

#1302

datastore setup extension drops 'namespace' from --config, making extensions that require it impossible to configure

Teams1mo ago

#1377

Kiro CLI v3 permissions: no capability covers disclose_context (skill loading)

Teams29d ago

#1376

CLI: swamp invite <email> to drive the platform-invite API

1mo ago

#1374

api-key-scoping explanation doc contradicts shipped fine-grained scopes

s1mo ago

#960

Fine-grained scopes for swamp.club access tokens

Teams1mo ago

#1375

End-to-end UAT for fine-grained collective token scopes (#960)

1mo ago

#1373

Docs: document swamp auth token create command for collective tokens

s1mo ago

#1339

open method fails for password-auth hosts: SSHPASS env set but ssh call never wrapped in sshpass

s1mo ago

#1356

docs: update swamp skills for setup extension --namespace

s1mo ago

#1344

apps sync/lookup fail with 'partial() cannot be used on object schemas containing refinements'

s1mo ago

#1332

Docs: update autoGc documentation to reflect write-time version pruning

s1mo ago

#1347

Run-context variables (run.id, workflowRunId) undefined in step-input CEL after suspend+resume

Teams1mo ago

#1370

model search/list doesn't enumerate auto-created definitions under .swamp/auto-definitions/

s1mo ago

#1372

CLI command to create scoped collective tokens (phase 8 of #960)

s1mo ago

#1368

docs: document auth gates for team features (datastores, vaults, serve)

s1mo ago

#1271

`datastore setup filesystem` never transfers content when leaving a sync-based (remote) datastore — copies only the catalog and hardcodes `filesPulled: 0`

Teams1mo ago

#1345

--server wss:// client offers h2 ALPN then fails the WebSocket upgrade over HTTP/2 (should pin http/1.1)

Teams1mo ago

#1371

HTTP egress does not honor Happy Eyeballs (RFC 8305) on dual-stack DNS responses — IPv6 blackhole hangs the request

TeamsBlocked10d ago

#1369

Workflow/CLI output uses red text for non-error/informational lines, contradicting standard error-color convention

1mo ago

#1361

Support end-user timezones on https://swamp-club.com/u/shelson/activity

k1mo ago

#1353

Document doctor datastores --repair for namespace contamination cleanup

s1mo ago

#1362

Pre-flight checks receive unresolved vault.get() expression text, not the resolved secret

s1mo ago

#1366

Invite people who have never used swamp to a collective (email invite flow)

k1mo ago

#1357

docs: update giga-swamp manual pages for setup extension --namespace

s1mo ago

#1360

Docs: update extension push output examples to include channel and visibility

s1mo ago

#1363

Remote --server wss:// fails through an HTTP/2 TLS reverse proxy (WS client ALPN is h2-only)

Team1mo ago

#1358

uat: add namespace isolation and shard resilience test coverage

1mo ago

#1355

docs: update giga-swamp guides and skills for setup extension --namespace

1mo ago

#1354

Quest page: all leaderboard usernames show 'Swamp Baby' title

Team1mo ago

#1349

Extension/type search at method granularity — find capabilities, not just packages

Team1mo ago

#1335

data query and data get return the same payload under different keys

s1mo ago

#1334

forEach leaves self.* unresolved in target

s1mo ago

#1346

swamp-club: score-reads tierTotals GET overflows URL with inline param_ownerIds (Invalid URL, mislabeled clickhouse-network-error) for large collectives

s1mo ago

#1340

Docker-related model types/workflows would benefit from first-class dry-run/plan support

1mo ago

#1337

Hide enterprise (SSO) operatives from announcements and leaderboard by default

k1mo ago

#1326

Published extension scores dependency-trust as "missing" (0/2) while client `extension quality` earns it (2/2); no verdict exposed

Teams1mo ago

#1304

namespace unset --migrate silently deletes artifact history via catalog-rebuild GC (~484k files lost)

Teams1mo ago

#1310

serve: workflow.approvals and workflow.run.search still full-scan the workflow-run store after the #1284 data.query pushdown

s1mo ago

#1327

Bugs filed by a team-subscription user are not tagged "team" in the Lab

Team1mo ago

#1324

Bundled extension model cannot deserialize AWS SDK S3 XML that works in direct Deno

TeamsBlocked29d ago

#1322

gcp/sheets spreadsheets-values: batch_get crashes with "Request with GET/HEAD method cannot have body"

s1mo ago

#1311

Documentation gives conflicting behavior for pulling yanked extension versions

Teams1mo ago

#1299

Token creation API and UI scope selector for collective tokens (phase 4 of #960)

s1mo ago

#1293

Make Cloudflare CRUD methods factory-aware so list-discovered resources can be managed in-place

s1mo ago

#1317

[sc] quest-grant Mongo ops (recentHeartbeat/signalCounts/countIssueShipped) regressed to ~5s timeouts — missing index

s1mo ago

#1312

Issue filing inherits most-recently-created collective's scope and privacy, with no way to choose

Teams10d ago

#1280

Sync guard skips bound namespace directory during push — 0 files pushed after namespace migrate

s1mo ago

#1307

Flaky #1052 preparePush test: mtime-granularity race on Linux tmpfs

s1mo ago

#1301

command/shell renders JSON-object stdout lines as the literal string 'undefined'

Teams1mo ago

#1303

Issue redactor treats the MongoDB authSource parameter as a secret, corrupting reproduction steps

Teams1mo ago

#1292

Docs: document repo root resolution from subdirectories

s1mo ago

#1294

Expose the swamp.club feed as an RSS feed

k1mo ago

#1287

Email invitation is not linked to account created from invite URL

Teamk1mo ago

#1300

Add serve, datastore, vault, and worker wildcard scopes to token registry (phase 4 prep, #960)

s1mo ago

#1290

Docs: update manual to document --yes/-y as the standard confirmation-skip flag

s1mo ago

#1291

Docs: update data.query and CEL expressions references for SQL pushdown

s1mo ago

#1267

Docs: document collective token CLI usage in API key authentication pages

s1mo ago

#1298

Add a --release-notes option to `swamp update` (or even make it the default)

15d ago

#1246

Docs: manual should state workflow unknown keys are rejected and placement is step-only (follow-up to #1240)

s1mo ago

#442

Make GCP CRUD methods factory-aware so list-discovered resources can be managed in-place

s1mo ago

#1284

serve: read ops (data.query, workflow.approvals, workflow run.search) linearly scan the whole datastore — ~350–600ms floor regardless of match count

s1mo ago

#1286

Running "swamp workflow run ..." in a subdir of the swamp repo fails

s1mo ago

#1219

Guide agents to inspect reports after failed model and workflow runs

Teams1mo ago

#1285

serve: main JS thread holds ~40–70% of a core while idle (no clients, no runs, --no-schedule)

sBlocked1mo ago

#1253

Search box collapses to near-zero width on mobile on the Extensions page

k1mo ago

#1283

Extensions page: Search bar missing on mobile

Team1mo ago

#1274

spreadsheets-values: every method fails with 'Missing required path parameter: spreadsheetId' — implementation reads a global argument the schema does not declare

s1mo ago

#1265

namespace migrate/set workflow broken for extension datastores: migrate skipped by sync guard, set not idempotent, migrate-index empties shards

s1mo ago

#1276

ExtensionInfo.latestVersion typed 'string' but registry returns null; harden pull/resolve for prerelease-only extensions

s1mo ago

#1282

workflow.run: relay a custom model method's output as method_output (command steps already do)

3d ago

#1281

promptChoice infinite-loops on non-interactive stdin

1mo ago

#1275

gcp _lib: unconditional x-goog-user-project header causes USER_PROJECT_DENIED (403) for service accounts without the serviceUsageConsumer role

s1mo ago

#1273

extension push: issue-verdict review is indistinguishable from missing/stale

k1mo ago

#1272

swamp extension version crashes with 'Invalid CalVer version: "null"' when only a prerelease (beta/rc) version is published

Teamk1mo ago

#1269

Pushing an extension after creating a public git repo that is the same as other previously pushed extensions doesn't update the "Verified public repository"

k1mo ago

#1268

Scaleway models: create methods should not require the resource ID they generate (ipId/gatewayId/serverId/...)

1mo ago

#1238

gcp/calendar events.list reads wrong array field ('defaultReminders' not 'items') → always returns 0 events

Teams1mo ago

#1237

provisioner.provision fails with 'Cannot read properties of undefined (reading trim)' at method_execution_service.ts:852

Teams1mo ago

#1266

method_execution_service.ts:852 crashes on undefined.trim() when writeResource receives undefined instance name

s1mo ago

#1264

CLI support for collective API tokens (phase 3 of #960)

s1mo ago

#1231

@swamp/gcp/calendar: service-account & ADC auth mint cloud-platform-scoped tokens → 403 on Calendar API

Teams1mo ago

#1261

Scope enforcement and whoami introspection for collective tokens (phase 2 of #960)

s1mo ago

#1262

fix(software-factory): DeclaredSchemaSchema.enum rejects boolean literals

1mo ago

#1259

Surface cloud-provider labels (scaleway, digitalocean, oracle/oci) as first-class search/filter facets on the Extensions page

1mo ago

#1258

Profile link in genesis subdirectory does not navigate back to main profile

1mo ago

#1256

Profile stats: per-user daily rollup table + MV in ClickHouse

k27d ago

#1249

Telemetry stats consumer: unsanitized subcommand in Mongo update path drops user metrics silently

k1mo ago

#1240

Job-level labels: block is silently ignored, not rejected

k1mo ago

#1241

Issue submission redactor silently corrupts report bodies

k1mo ago

#1235

CLI telemetry: fold third-level verbs into subcommand + canonicalize aliases

17d ago

#1234

Docs: update extension info reference to document extensions (type grafts) in content metadata

s1mo ago

#1229

Docs: swamp skill repo-structure reference still documents repo-local .swamp/telemetry/ as live

s1mo ago

#1183

Add safe adoption and lifecycle methods for existing Hetzner resources

s1mo ago

#1233

Docs: update manual telemetry reference for user-global spool and telemetry.yaml opt-out

s1mo ago

#1101

export const extension can graft methods onto foreign-collective types, undisclosed in extension info / contentMetadata

Teams1mo ago

#1142

Add lookup support to the Cloudflare DNS records model

s1mo ago

#1232

Expand token scope registry to full taxonomy (phase 1 addendum, #960)

s1mo ago

#1129

Docs: document user-global telemetry (telemetry.yaml opt-out, spool location, telemetry stats behavior)

s1mo ago

#1082

score_daily rollup strands stale grains when a day-less grant re-stamps onto a later day

k1mo ago

#1093

swamp-club: global rate limiter runs pre-auth and collapses all direct clients into one per-IP bucket — 429s authenticated CLI traffic

k1mo ago

#1228

Collective API token scopes: domain, persistence, and auth threading (phase 1 of #960)

s1mo ago

#1214

Telemetry migration from ~/.swamp/telemetry should auto-detect home-as-repo

k1mo ago

#958

feed_post_score_events queue grows unboundedly (no TTL, no delete-on-delivery)

k1mo ago

#1105

Issue-filing skill should require ownership classification before submitting a bug

Teams1mo ago

#1221

Interactive finder silently drops the preview pane on narrower terminals, and layout selection is unstable

Teams1mo ago

#954

@-mention autocomplete for users when writing lab ripples

k1mo ago

#959

Remove comments from /feed and redesign the page

k1mo ago

#1220

Interactive finder preview corrupts: overlapping/stale lines when preview content overflows the pane

Teams1mo ago

#875

Score-refresh consumer: harden coalescing against a diverse backlog (bistability)

k1mo ago

#844

Remove feed comments — consolidate discussion in Discord

k1mo ago

#933

Add a 'my collective extensions' filter to extensions page

Teamk1mo ago

#956

Relax the profanity filter

k1mo ago

#736

Extension search returns edit-distance noise for short queries ("asdl" → "AWS DEADLINE")

k1mo ago

#828

Telemetry recoverOrphaned startup race with multiple replicas (created_at-based)

k1mo ago

#827

Telemetry retry/failed path has the same non-atomic claim as #820

k1mo ago

#591

Option to change email in your Swamp Club profile or delete account

1mo ago

#1226

Embeddable operative profile cards (iframe + oEmbed)

s1mo ago

#1224

vault edit resolves wrong path (.swamp/vault/ instead of repo-root vaults/)

Teams1mo ago

#1213

Grant revoke is never applied to the running server — under `--grant-reload auto` and `manual` alike, a revoked grant stays in force until an explicit `access reload`

s1mo ago

#1201

Docs: update auth login examples for username support and piped passwords

s1mo ago

#1200

Docs: add reference page for swamp run gc

s1mo ago

#1206

Unable to link account

k1mo ago

#1203

Could not start dynamically linked executable: /home/sven/.swamp/bin/swamp

s1mo ago

#1186

Collective invite is never claimed when the invitee registers via Google with the invited address — stays pending forever, invisible to the invitee

Teamk1mo ago

#1187

/orgs shows no pending collective invitations to the invitee — no list, banner, or accept affordance anywhere in the product

Teamk1mo ago

#1196

Cannot subscribe: personal collective has 0 operatives (owner missing from own roster) — payment returns Forbidden, while whoami and extension push both grant the collective

Teamk1mo ago

#1198

`models.md` says the `latest` marker is a symlink but it's a plain text file now

s1mo ago

#1202

ln: failed to create symbolic link '/usr/local/bin/swamp': No such file or directory

s1mo ago

#1205

Dead code: CollectivesSection island (pending-invite prompt) is never mounted; listPendingInvitationsByEmail has no production consumer

29d ago

#1194

swamp auth login prompts are confusing — "username" only accepts email, and --username is re-prompted

Teams1mo ago

#1172

No retention/prune for .swamp/workflow-runs and .swamp/outputs

Teams1mo ago

#1191

swamp issue get exposes commentCount but no way to read ripple bodies

Teams1mo ago

#1197

Add a command to re-trigger repository verification (repositoryVerified)

1mo ago

#1189

quest: 'Case Closed' (issue_shipped) does not fire when an issue you filed ships — #1181 shipped, challenge still 0/1 (bug_hunter fired for the same issue)

Teamk1mo ago

#1178

Unclear whether SWAMP_API_KEY auth claims a device's banked "ghost" reputation, or only swamp auth login does

Teams1mo ago

#1195

Re-publish of an existing extension succeeds but latestVersion/pull never advances to it

Team1mo ago

#1193

No way to log in on a headless host or with an OIDC-only account — please allow an API key

Team1mo ago

#1190

Genesis Pass tier 14 (Halogen Saint) shows claimed 260 XP before its own threshold, contradicting the same page's progress tracker

Teamk1mo ago

#1184

Quest XP milestones reference 'swamp extension publish' but the command is 'swamp extension push'

Teamk1mo ago

#1173

swamp workflow history search OOMs on workflows with large run history

Teamk1mo ago

#1181

Unreachable path in .swamp-sources.yaml is fatal to every command, including 'swamp version'

Teams1mo ago

#1188

Bind ghost device reputation on whoami when Swamp-Distinct-Id header is present

s1mo ago

#1180

swamp quest: deeds credit XP on command invocation, not success — failed commands still award full XP

k1mo ago

#1185

extension pull fails permanently when a pinned exact-version dependency is removed from the registry

Team1mo ago

#1177

swamp serve `--grant-reload auto` never reloads

s1mo ago

#1182

Quest points are awarded for actions that are usage errors.

Team1mo ago

#1179

Quests can be farmed by repeating the same command in a loop

1mo ago

#1174

Committed .swamp-sources.yaml relative paths resolve against worktree cwd, not the main checkout — and missing sources are now skipped silently

s1mo ago

#1169

readResource + vaulted sensitive fields: cross-run reads return the unresolved ref, and per-instance vault keys appear to collide

Teams1mo ago

#1171

Docs: add IdP group refresh and deprovisioning details to swamp-serve manual pages

s1mo ago

#1156

Blocked model methods are uninterruptible: SIGINT/SIGTERM don't force-exit; no cancellation signal for execute()

Teams1mo ago

#1166

Document IdP group-based access control in serve guide

s1mo ago

#1170

SSO admin setup guide for swamp-club

s1mo ago

#1167

Surface the bundled deno path in the first-loaded extension guide + expose it via CLI

Teams1mo ago

#1162

Docs: document the OTel logs signal in the swamp-club manual (opentelemetry.md)

s1mo ago

#1163

OTel setup manual example (OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317) cannot work — exporter is OTLP/HTTP-only, needs port 4318

Teams1mo ago

#1168

Pin the deno runtime for extension checks — bare `deno` is a PATH-hijack surface for the test/lint runtime

Team1mo ago

#1165

swamp extension update doesn't migrate existing model instances to the new typeVersion — new methods are 'Unknown' (persists after #869)

1mo ago

#1164

Configure the OTLP trace exporter (endpoint/service/headers) in .swamp.yaml, not only via OTEL_ env vars

Teams1mo ago

#1153

SSO + IdP group federation for swamp-club

s1mo ago

#1152

Docs: add workflow blocking semantics and lock concurrency to manual

s1mo ago

#1151

Docs: add CEL run.* and webhook.* context variables to manual expressions reference

s1mo ago

#1149

Hot-reload finds 0 types for large pulled extensions (empty extension_name in catalog rows)

s1mo ago

#1143

UAT Phase 2: auth and agent commands

s1mo ago

#1155

[@adam/cfgmgmt] ssh-exec models uninterruptible: SIGINT/SIGTERM ignored, child ssh not aborted (only SIGKILL works)

Team1mo ago

#1154

Parse IdP groups from userinfo and wire into grant enforcement

s1mo ago

#1148

How-to guide: How can I collaborate in the Swamp?

s1mo ago

#1150

Stripe checkout product description says '2–20 portable seats' but platform allows 1–20 for Team

Teamk1mo ago

#1146

vault skill docs don't mention --refresh-from/--refresh-ttl auto-refresh or that 'vault inspect' shows refresh-hook status

s1mo ago

#1145

Docs: add --timeout to workflow resume reference

s1mo ago

#1132

Harden the CLI update path so a future artifact-host migration can't strand clients again

1mo ago

#1128

UAT Phase 2: source commands and completions extension

s1mo ago

#1125

Telemetry silently dropped outside a swamp repo — lost events + undercounted scores

k1mo ago

#1124

UAT Phase 2: doctor install, secrets, and workflows

s1mo ago

#1126

Docs: update --server support tables for extension and doctor commands

s1mo ago

#1122

Docs: document WebSocket Bearer header and Sec-WebSocket-Protocol auth transports

s1mo ago

#1076

serve: extension and doctor extension handlers return not_implemented

s1mo ago

#1119

WS handshake accepts the token only as a URL query parameter

s1mo ago

#1120

serve: create*Deps() factories leak file-based catalog stores (3 FDs) per API request

k1mo ago

#1121

flaky test: manual_approval suspension test leaks 3 timers (OTel InMemorySpanExporter setTimeout)

k1mo ago

#1117

Document vault read-access audit trail

s1mo ago

#1123

flaky test: serve OAuth client tests leak unconsumed fetch response bodies (+ connection_test readDir leak)

k1mo ago

#1111

UAT Phase 2: telemetry, update --check, version/help

s1mo ago

#1118

serve leaks file descriptors (EMFILE) — runFileSink.unregister runs after yield, not in finally

k1mo ago

#1115

Docs: document instructionsMode for custom AI agent tools

s1mo ago

#1109

Vault: native secret-read access audit trail

Teams1mo ago

#1106

agent setup silently selects a destructive overwrite mode, with no way to choose otherwise and no documentation

Teams1mo ago

#1116

Vault audit trail: wire audit through model resolver, serve, and token paths

s1mo ago

#1113

Docs: document --hot-reload flag and swamp serve reload subcommand

s1mo ago

#1104

Add a 'verify capability exists before relying on it' rule to repo-init CLAUDE.md

Teams1mo ago

#1103

Architecture guide decision tree omits partial-match extend and package-granularity guidance

Team3d ago

#1102

Main page stats discrepancy

Teamk2mo ago

#1099

UAT Phase 2: run history and run doctor

s2mo ago

#1100

Missing reference files from bundled swamp skill

s2mo ago

#1098

UAT Phase 1f: alias-parity micro-suite

s2mo ago

#1096

UAT Phase 1e: report family verb gap-fill

s2mo ago

#1095

Docs: add OTEL_RESOURCE_ATTRIBUTES to OpenTelemetry reference

s2mo ago

#1084

Tracing ignores OTEL_RESOURCE_ATTRIBUTES — only service.name reaches the Resource

Teams2mo ago

#1080

runModel(): options.arguments never reach the child's per-method arguments — merged into globalArgs, then dropped or rejected

Teams2mo ago

#1092

swamp-club: /api/whoami 500s on fresh install — ensureIndexes {id:1} conflicts with migration 012 id_lookup index

k2mo ago

#1091

data prune --json omits reclaimedModels[].modelName when a report entry is grouped first

k2mo ago

#1094

swamp serve leaks esbuild bundler subprocesses as zombies (reparented to PID 1, never reaped)

Teams2mo ago

#1083

One-time prod data checks: github:-authored lab issues blast radius + legacy uppercase extension names

2mo ago

#1079

UAT Phase 1d: data family verb gap-fill

s2mo ago

#1078

Improve skills and documentation to guide agents toward correct swamp patterns

s2mo ago

#1077

runModel(): nested outputs record triggeredBy "manual" with no parentOutputId — docs promise model-trigger lineage

Teams2mo ago

#1081

workflow history logs --follow for live-tailing running workflows

1mo ago

#1072

UAT Phase 1c: vault family verb gap-fill

s2mo ago

#1074

--skip-reports (and --report/--skip-report*) hard-fails with --server

Teams2mo ago

#1073

vault list-keys no-arg form errors despite help text suggesting it works

s2mo ago

#1056

extension pull only materializes skills for the primary tool, deletes other enrolled tools' copies

Teams2mo ago

#1075

Add swamp straitjacket: opt-in, binary-shipped agent guardrail hooks

Team2mo ago

#1070

UAT Phase 1b: workflow family verb gap-fill

s2mo ago

#1062

Nested workflow invocation does not apply the child workflow's input defaults

s2mo ago

#1071

Slow Mongo: subscription.findByCollectiveId N+1 fan-out inflates p95 (lab issue list)

s2mo ago

#720

#welcome channel references "System Initiative" instead of "Swamp"

s2mo ago

#1065

Self-update changes catalog source naming; stale rows trip I-Repo-1 and brick every CLI command

s2mo ago

#1061

allowFailure not honored on workflow-task steps - parent run aborts, downstream steps stay pending

s2mo ago

#1068

UAT Phase 1a: model family verb gap-fill

s2mo ago

#1063

workflow validate treats defaulted model-method inputs as required (validate fails, run succeeds)

s2mo ago

#1058

Serve leaderboard locate ('find yourself') live, retiring its per-replica standings cache

k2mo ago

#1059

UAT Phase 8a: CI guard + adversarial tier-6 catch-all

s2mo ago

#1060

Document context.runModel() model-to-model invocation

s2mo ago

#1055

Serve leaderboard live from the score_daily rollup — retire per-pod snapshot & campaign-blind board fallback

k2mo ago

#1057

i should be bull gator on discord

Team2mo ago

#1052

commitPush no-op verification fetches the full monolithic index instead of the v2 shard/commitSeq fast-path (follow-up to #1034)

Teams2mo ago

#1048

skill: add serve, grants, and access control guidance to the swamp skill

s2mo ago

#1054

GCS datastore has same v1/v2 monolith-fetch paths as S3 (follow-up to #1052)

2mo ago

#1051

Regression: swamp update syncs global skills to unconfigured agent directories

Teams2mo ago

#1047

Share skill: guided solo-to-team promotion

s2mo ago

#1053

Make PR links in Labs details clickable

s2mo ago

#1049

Catalog export re-uploads the full monolithic object every sync, even with zero changes (sibling to #1034)

Teams2mo ago

#1035

Adversarial-review recording under-communicates its contract (no dimension definitions, undocumented verdict enum, silent failure on invalid verdict)

s2mo ago

#1050

Native FreeBSD build for swamp CLI

2mo ago

#1044

extension push 'credentials-sensitive-field' flags z.number() counts + type-aliases as secrets

s2mo ago

#1045

repo upgrade fatally aborts on a yanked pinned dependency (HTTP 410) instead of forward-resolving

s2mo ago

#1046

docs: declarative grants directory how-to and reference updates

s2mo ago

#1034

Shard-first v2 still re-uploads the full monolithic index + catalog export every commit; silent writeback failure above the 30s request timeout

Teams2mo ago

#1037

serve-auth: declarative grants directory with validate-and-reconcile on reload

s2mo ago

#1038

Docs: document per-invocation traceparent/tracestate support

s2mo ago

#1043

work-item-summary report renders zero rows despite work items existing

1mo ago

#1036

Monolithic index warning prints wrong command

Teams2mo ago

#1041

repo-indexer: search fails immediately after index completes

Team2mo ago

#1040

repo-indexer: SQL TRACE logs dominate search output

Team2mo ago

#1039

repo-indexer: add list-indexed method

Team2mo ago

#1033

S3 datastore push walks the entire cache root — nested/foreign namespace dirs become doubled index keys (recurring)

Teams2mo ago

#1012

Docs: document swamp data prune (orphaned-data reclamation)

s2mo ago

#1027

CI: review jobs check stale global state, causing cross-reviewer blocking

s2mo ago

#1032

Docs: document CEL grant condition cost limits

s2mo ago

#1029

serve-auth: CEL cost-bounding for grant conditions

s2mo ago

#1030

swamp serve crashes with JavaScript heap OOM while running scheduled workflows

Teams2mo ago

#1031

fix(access): align model RESOURCE_FIELDS between validation and runtime

2mo ago

#1020

swamp serve startup/shutdown is very slow on large repo and lacks diagnostics

Teams2mo ago

#904

Automated activity channel does not post on issue reopen — only open and close events are surfaced

k2mo ago

#1019

Vault push log overstates what left the machine: Pushed N vault file(s) to datastore counts every dirty file, not just vault files

Teams2mo ago

#1026

docs: OAuth authentication how-to and explanation guides for swamp serve

s2mo ago

#1016

serve-auth: mode: oauth — device grant client + collective-based admission

s2mo ago

#1021

extension update/install reports new version while on-disk pulled files stay old

Teams2mo ago

#1025

Scorecard: beta/rc-only extensions show "not scored" despite successful scoring (GET /score resolves only latestVersion)

s2mo ago

#1024

`swamp extension search --channel beta|rc|stable` ignores the filter — all channels + the no-flag default return an identical result set

Team2mo ago

#1023

Beta-channel extensions are never scored — perpetual 'Scoring is taking longer than expected'

Team2mo ago

#1022

feat: allow models to call other models mid-execution via context.runModel()

s2mo ago

#1015

swamp-club: enable OAuth provider for swamp serve collective-based admission

s2mo ago

#1013

command/shell: step with timeout + a surviving child process reports exit -1 despite command exiting 0

s2mo ago

#1014

serve-auth: enable OIDC Provider + Device Authorization plugins in swamp-club

s2mo ago

#1009

Orphaned data (migrated-away/deleted model) can't be GC'd or deleted

Teamk2mo ago

#1011

UAT: CLI coverage for swamp data prune (orphaned-data reclamation)

2mo ago

#1010

Session credential revocation scans entire credential map on every dispatch completion

s2mo ago

#1006

Docs: update worker-commands.md for --all flag and JSON output change

s2mo ago

#1008

datastore migrate-index aborts on hardcoded 30s S3 requestTimeout for large shards

Teams1mo ago

#1000

swamp worker list: hide disconnected workers by default, add --all flag

s2mo ago

#1001

swamp serve should survive bad extension failures

Teams2mo ago

#1002

Worker fleets phase 7: how-to guides and explanation docs

s2mo ago

#1003

swamp serve: catch unhandled promise rejections from extensions

s2mo ago

#999

[@adam/cfgmgmt] SSH helper can crash swamp serve via unhandled finally() rejection

Teams2mo ago

#998

Docs: add --server-token flag to worker connect reference

s2mo ago

#996

Add --server-token to worker connect for authenticated orchestrators

s2mo ago

#997

Docs: document --trusted-hosts flag for swamp serve

s2mo ago

#995

Document SWAMP_SERVE_EXTRA_HEADERS for reverse proxy/tunnel setups

s2mo ago

#994

Add --trusted-hosts flag to swamp serve for Docker/Kubernetes worker connections

s2mo ago

#990

Allow swamp clients to send custom headers when connecting to swamp serve

Teams2mo ago

#993

Docs: update serve-flags.md default queue timeout from 60s to 10m

s2mo ago

#992

Worker fleets phase 6: raise default queue timeout to 10 minutes

s2mo ago

#989

Worker fleets phase 4b: capacity slots and concurrent dispatch

s2mo ago

#984

MethodContext docs/comments mention context.putSecret but runtime exposes vaultService.put

Teams2mo ago

#991

Docs: add --concurrency flag and SLOTS column to worker-commands reference

s2mo ago

#983

install.sh still points users to systeminit/swamp

Teams2mo ago

#988

Support user systemd units for 'swamp serve daemon enable'

Teams2mo ago

#974

swamp serve scheduled execution runs steps in an isolated data scope: readResource sees empty state, writeResource never reaches the model-scope chain — stateful scheduled workflows duplicate instead of deduplicating

Teams2mo ago

#982

Support installing swamp via mise GitHub backend

Teams2mo ago

#981

Worker fleets phase 4a: dispatch runner extraction — child process per dispatch

s2mo ago

#980

Docs: add swamp worker daemon enable/disable/status to worker-commands reference

s2mo ago

#979

Worker fleets phase 3 PR2: swamp worker daemon enable

s2mo ago

#977

Docs: add drain, lifecycle policies, and exit-code contract to references

s2mo ago

#976

Worker fleets phase 3 PR1: drain state machine, lifecycle policies, signal handling

s2mo ago

#978

Leaderboard search excludes ghosts — a visible ghost can't be found by its alias

k2mo ago

#973

issue-lifecycle: plan lifecycle entry silently dropped when summary exceeds 1000 chars

s2mo ago

#975

Docs: add worker verify, --verify-on-enroll, and env-var config to references

s2mo ago

#940

Labs - Filters do not apply to Blocked status and Billing Tier category

k2mo ago

#969

Worker fleets phase 2 PR2: env-var config, swamp worker verify, --verify-on-enroll

s2mo ago

#970

Docs: add --type flag to issue edit reference and how-to

s2mo ago

#972

Docs: update manual with whole-field expression syntax for workflow task inputs/globalArgs

s2mo ago

#963

Allow changing an existing issue to security/confidential after submission

Teams2mo ago

#932

Allow dynamic object expressions for workflow task inputs/globalArgs

Teams2mo ago

#968

Docs: update enrollment token references for fleet tokens (--max-enrollments)

s2mo ago

#966

Worker fleets phase 2 PR1: fleet tokens (--max-enrollments, bindings, worker naming)

s2mo ago

#952

Worker fleets phase 1 PR3: boot reconciliation and integration test

s2mo ago

#961

Login success still shows login tip

Teams2mo ago

#964

Support confidential visibility for non-security issues

Team2mo ago

#945

Add associative info to user profiles: collective membership + collaborative contributions

Team2mo ago

#957

Make paid subscribers visually stand out (badge, profile popup summary)

1mo ago

#955

Giphy integration via /giphy command

k27d ago

#949

Worker fleets phase 1 PR2: step_queued events, pending-dispatch model, queue introspection

s2mo ago

#953

Docs: add swamp worker queue to worker-commands reference

s2mo ago

#950

/lab shipped list is sorted by issue number, not ship date

k2mo ago

#951

Docs: update manual for ephemeral data and step-output dependency deferral

s2mo ago

#948

Docs: update remote execution references for elastic queueing

s2mo ago

#947

Worker fleets phase 1: elastic queueing

s2mo ago

#919

catalog backfill should support scoped population for targeted lookups

s2mo ago

#946

Docs: document global skill sync behavior for custom tools in manual

s2mo ago

#943

swamp update syncs global skills to default agent directories instead of configured custom Pi skillsDir

Teams2mo ago

#941

coerceToSuffix does not sanitize path-unsafe characters, causing forEach items and vary dimensions with / to produce invalid data instance names

Teams2mo ago

#944

Badge for activity on other people's issues

Team2mo ago

#938

swamp serve: add @keychain=<service>/<account> indirection for secret args on macOS

1mo ago

#937

swamp serve: eliminate wrapper scripts via @vault= secret refs and native startup hooks

1mo ago

#936

Automate mechanical frontmatter fixes in the fixing stage

2mo ago

#935

duplication criterion scores same-content skills as 100% duplicate when skill appears in multiple plugins

2mo ago

#934

spell-grammar false positives on CLI flag/placeholder patterns

2mo ago

#924

Collscan/index-gap pack: unindexed $or id branches (every registry request), computed-field sort kills extension browse indexes, $expr blocks pull counts, apikey.userId, workflow_runs, 1100-doc profile fetch

k2mo ago

#663

Implement ephemeral data as in-memory repository

s2mo ago

#926

Request-path external fetches with no timeout / no negative cache: profile GitHub/Discord resolution and landing-page total count (30s → 504 mechanism)

k2mo ago

#921

Auth hot path: 7 serial Atlas round trips per API-key request; session cookie cache dies after 5 min; session/apikey lookups unindexed

k2mo ago

#923

Leaderboard: window boards are unindexed full-collection aggregations ×4 per locate miss; locate fetches 4×10k rows to rank one user; search() has O(sum-of-ranks) lookup fan-out

k2mo ago

#922

/lab loads every issue with full markdown bodies on every request (incl. detail pages) + ~12 serial DB waves — the 3.4s avg / 30s tail

k2mo ago

#928

doctor extensions reports source-mounted bundles as unreferenced after repair

Teams2mo ago

#931

Agent setup suggests repo init in already initialized repos

Teams2mo ago

#920

repo upgrade reports success but extension commands still warn about pending migration

Teams2mo ago

#927

Activity projector runs on both telemetry replicas — same-day chunks can double-grant (grant_id collides but granted_at differs, ReplacingMergeTree never dedups)

1mo ago

#915

Clicking on any region in the Execution Records eventually breaks the pie graph

k2mo ago

#918

model evaluate is slow resolving data.latest expressions in large datastores

Teams2mo ago

#914

swamp serve: model resource vault-backed sensitive fields resolve empty during served/workflow execution (readResource)

Teams2mo ago

#917

Add SSH host public key collection for host certificate workflows

Teams2mo ago

#913

datastore migrate-index ignores the repo's configured namespace (migrates bucket-root index instead)

Teams2mo ago

#916

Driving agent can wedge a workflow-stage run irrecoverably (workflow-succeeded vs dispatch limit); skill should prevent it

2mo ago

#893

refactor: decompose connection.ts server handlers into domain-aligned modules

s2mo ago

#908

Leaderboard profile popover stuck on skeleton loader on second open

k2mo ago

#912

Document the run tracker across all four diataxis verticals

s2mo ago

#911

Add swamp datastore sync --migrate-index CLI command to trigger shard-first migration

s2mo ago

#910

Add how-to guides for core operations and operational tasks

s2mo ago

#906

Shard-first index: eliminate monolithic .datastore-index.json from commitPush critical section

s2mo ago

#909

Add core-concept explanation pages to the manual

s2mo ago

#655

SQLite run tracker subsystem for in-flight run lifecycle

s2mo ago

#907

Add comprehensive CLI command reference documentation to the manual

s2mo ago

#902

swamp audit record --from-hook exits non-zero as Claude Code PostToolUse hook despite internal try/catch design

s2mo ago

#903

Local extension files (export const extension) are indexed but methods not merged into target types

k2mo ago

#901

doctor extensions --repair should remove stale bundle entries for deleted source files

s2mo ago

#898

repo upgrade shadowing warning should list all shadowed skills by name

s2mo ago

#829

Intra-namespace write concurrency: whole-index sync under the lock serializes fan-out workloads (split from shipped #666)

Teams2mo ago

#872

Activity heatmap clips the current UTC day — uses local browser time for "today" but snapshots are UTC-keyed

s2mo ago

#876

hello-world tutorial: "use workflow inputs to pass..." misleads — should name CEL data.latest

s2mo ago

#892

docs: update swamp-serve manual reference for phase 2 --server commands

s2mo ago

#883

Extension skill should explicitly prohibit bare 'zod' imports (scorer sandbox fails)

Teams2mo ago

#711

serve-auth: --server support for remaining remote-capable commands (phase 2)

s2mo ago

#890

swamp serve --auth-mode token: redeem reads token-main as null → every valid token rejected 'Authentication failed' (real error hidden at debug)

Teams2mo ago

#867

Pre-sync pull aborts the whole command when an index entry's S3 object is missing — no built-in way to recover

Teams2mo ago

#891

GCS pushChanged bulk-walk deletion gate uses bulkInvalidated instead of dirtyPathsOverflowed, diverging from S3

2mo ago

#852

Global skills should auto-sync when binary version advances

Teams2mo ago

#889

swamp serve: hardcoded WebSocket host allowlist makes it unusable behind a reverse proxy (no --trusted-hosts/--allowed-origins)

Team2mo ago

#887

Extension detail page shows deno doc module-not-found failure for published extension

Teamk2mo ago

#886

swamp serve writes grant model files to ./models/swamp/grant/ instead of .swamp/

s2mo ago

#869

Local model source edit may not change the bundle cache key — rebuilt bundle shadowed by an older same-hash copy on a shared S3 datastore

Teams2mo ago

#884

serve: catalog backfill is unbounded and unsafe on large repos

s2mo ago

#882

serve: V8 out-of-memory crash during catalog init on large repos (regression from #841)

Teams2mo ago

#851

autoGc emits auto_gc_completed event on --json stdout, breaking single-parse consumers

Teams2mo ago

#845

copy/rsync ignores transport extraOptions (and proxyCommand), unlike exec/script

s2mo ago

#871

Model method execution overhead: 10s+ per trivial operation, global lock prevents concurrency

Teams2mo ago

#854

Epic #847 · Unit 2: score_grants append-only ledger write-model in Mongo (shadow, no read flip)

k2mo ago

#862

feat(clickhouse): tracked archive→CH backfill tooling (backfill.sql)

2mo ago

#861

feat(clickhouse): idempotent DDL migration path for running prod (#859 deliverable 2)

2mo ago

#860

chore(clickhouse): retire S3-backed v1 + s3 objects after #859 cutover

2mo ago

#859

Decouple prod ClickHouse from S3 (drop storage_policy=s3_main) + add a DDL migration path

2mo ago

#853

Epic #847 · Unit 1: Land the ClickHouse projection foundation (schema + init SQL + compose service)

k2mo ago

#850

Extension publish score is non-monotonic: yanking versions lowers a user's score

k1mo ago

#848

Docs: add --ws-idle-timeout to serve flags reference

s2mo ago

#849

Live Swamp Club event console on /feed — scrolling stream of all non-sensitive events

1mo ago

#843

Make serve WebSocket idle/keepalive timeout configurable (untunable default aborts runs when serve's loop briefly blocks)

s2mo ago

#841

serve startup time regression: synchronous catalog init delays WebSocket listener by ~4.5 minutes

Teams2mo ago

#842

Docs: update extension info reference with content metadata output

s2mo ago

#825

Surface extension type+method detail in CLI to eliminate expensive discovery loops

s2mo ago

#840

Expose run/job/step identifiers as SWAMP_* env vars + CEL values, and template placement selectors (extends #331's run.id)

3d ago

#835

Docs: document @env= and @file= webhook secret indirection in swamp-serve reference

s2mo ago

#839

fix: add .namespace.json to isInternalCacheFile() in datastore extensions

s2mo ago

#834

fix: datastore sync --push deletes the namespace registration manifest (canonical namespace flow un-registers itself)

s2mo ago

#838

docs: document swamp serve daemon enable/disable/status subcommands

s2mo ago

#837

docs: document execution cancellation commands and cancelled status

s2mo ago

#833

docs: bundled swamp agent skill lacks datastore-namespace guidance (giga-swamp)

s2mo ago

#826

Batch / prefix delete for swamp data delete (single lock acquisition)

Teams2mo ago

#836

docs: document autoGc config option for automatic garbage collection

s2mo ago

#830

data query --select crashes on BigInt: "Do not know how to serialize a BigInt" when CEL size() reaches the JSON renderer

s2mo ago

#823

Opt-in automatic garbage collection for datastore data

s2mo ago

#820

Telemetry watcher has no replica coordination: N replicas double-process the same batch (non-atomic find→updateMany claim)

k2mo ago

#824

Skill guides lack progressive reveal boundaries — agents over-read by 4x

s2mo ago

#808

Execution cancellation: abort stuck workflow runs and model method runs, bulk cleanup, and daemon-restart reaping

s2mo ago

#712

swamp repo upgrade should check git status and commit (or surface) the files it changes

s2mo ago

#822

UAT: swamp workflow evaluate/run with forEach dynamic workflowIdOrName targets

a2mo ago

#814

Resolve dynamic workflow task targets inside forEach

Teama2mo ago

#819

Telemetry drain still capped ~80-100/s in prod: per-username full-history re-aggregate is O(users) sequential per batch (deferred #817 fix #4)

k2mo ago

#817

Telemetry ingest is consumer-bound: counter & stats dedup via O(N) sequential insertOne, throughput stuck ~20 events/s regardless of BATCH_SIZE

k2mo ago

#813

Leaderboard and profile streak not reporting

s2mo ago

#812

Same-namespace writers fully serialize on the per-namespace lock — could maintenance/append writes avoid holding it?

Teams1mo ago

#811

Could method-summary report artifacts get a default retention cap? They grow to dominate the datastore manifest

Teams2mo ago

#807

Docs: document .? optional select for null-safe CEL data access

s2mo ago

#810

Docs: update vault inspect output in manual reference

s2mo ago

#803

Datastore should fail fast on unresolvable credentials instead of stalling on the AWS provider chain

Teams2mo ago

#806

Optional scheduled / automatic datastore GC (retention-policy-driven pruning)

Team2mo ago

#805

Notify issue author/participants on ripples & status changes — with Discord bot DM as a delivery channel

Team2mo ago

#804

Batch step 2 of enrichAuthorPlans (per-collective subscription reads)

1mo ago

#520

Per-model LockTimeoutError at 60s causes cascading failures under concurrent access

Teams2mo ago

#666

Single global datastore lock serializes unrelated writes across all repos/namespaces

Teams2mo ago

#802

Add SWAMP CLUB wordmark logo next to sc-mark.png in TRADEMARKS.md

k2mo ago

#801

Add SWAMP CLUB wordmark logo next to sc-mark.png in TRADEMARKS.md

2mo ago

#798

pushChanged does not implement absence-on-disk deletion (markDirty contract rule #2)

s2mo ago

#797

pushChanged does not implement absence-on-disk deletion (markDirty contract rule #2)

s2mo ago

#788

swamp data gc prunes the catalog but never deletes objects from S3 datastores (markDirty hook not wired) — sync manifest never shrinks

Teams2mo ago

#790

Add `vault delete` support to @swamp/1password extension

s2mo ago

#791

Add `vault delete` support to @swamp/azure-kv extension

s2mo ago

#792

Add `vault delete` support to @swamp/aws-sm extension

s2mo ago

#719

Docs: document trigger.inputs for scheduled/webhook workflows in the manual

k2mo ago

#729

serve --webhook usage string makes <header> look optional for generic scheme

s2mo ago

#789

Leaderboard window baseline: 90-day cutoff zeroes returning-dormant users (latent, 0 impact today)

1mo ago

#778

SKILL.md Common Commands: model create uses wrong @<type> prefix

s2mo ago

#779

SKILL.md Common Commands: model type search uses wrong command and syntax

s2mo ago

#679

docs: swamp serve user guide

s2mo ago

#737

Yank semantics inconsistent: all-versions-yanked acts as a free hidden/private extension; extension-level yank hard-blocks re-push

s2mo ago

#742

swamp issue bug times out posting to the Lab while swamp-club.com returns HTTP 200

Teams2mo ago

#741

telemetry stats fatally fails to load an installed datastore extension (auto-resolve path); all other commands load it fine

Teams2mo ago

#724

extension source: install skills from source-path extensions

s2mo ago

#728

serve: webhook scheme not surfaced in startup event, health endpoint, or log line

s2mo ago

#739

Add deleteResource to MethodContext and document dataRepository.delete in skills

s2mo ago

#732

Trajectory chart: current-day x-axis label is clipped at the right edge

Teams2mo ago

#707

Docs: update Copilot how-to for audit hooks support

s2mo ago

#740

tf plan: FETCH_BUNDLE PAGE_FETCH_ERR / NO_STATES on cleanup-only plan (no resource changes)

2mo ago

#726

Slack webhook pre-body gate only checks signature header, not timestamp

s2mo ago

#713

Document model-method data-mutation surface (dataRepository.delete, findAllForModelSince, queryData)

s2mo ago

#738

Homebrew formula

2mo ago

#725

Dead code: verifySignature in webhook.ts superseded by verifier abstraction

s2mo ago

#734

workflow resume holds the global lock across the resumed step, deadlocking any datastore op the step performs

s2mo ago

#710

serve-auth: add --server support to data, model, workflow, vault, audit, summary, and report commands

s2mo ago

#731

Telemetry not synced to swamp-club: local queue accumulating ~3 days despite valid auth

Teams2mo ago

#721

remote-execution.md tutorial claims hello-world repo already has a vault configured, but it doesn't

s2mo ago

#730

extension pull serves a stale version that disagrees with search (honors a legacy per-extension serverUrl)

sBlocked2mo ago

#723

Data-driven webhook signature verifiers (avoid a code change + release per provider)

2mo ago

#709

Replace third-party trademark symbol with Swamp Club (SC) mark in TRADEMARKS.md

k2mo ago

#708

Eager render stack (Ink/yoga-layout + marked-terminal) adds ~540ms to every command's startup

Teams2mo ago

#705

Update Copilot support

s2mo ago

#694

serve-auth: swamp access token rotate command

s2mo ago

#704

serve-auth: alias 'swamp access policy' as alternative to 'swamp access grant'

s2mo ago

#706

No self-serve way to rename username (sntxrrgithub -> desired sntxrr) after GitHub SSO signup

2mo ago

#701

Tutorial 'Publish an extension': examples hardcode @stack72 collective, breaks copy-paste publish step

s2mo ago

#703

serve-auth: add --server support to all read/query/operations commands

s2mo ago

#699

Tutorial "Validate with a dry run" section shows stale extension push --dry-run output

s2mo ago

#695

Extension dev workflow doc recommends `deno check` but deno isn't bundled or detected

s2mo ago

#702

serve-auth: SWAMP_SERVE_URL env var as default for --server flag

s2mo ago

#696

Tutorial extension search "entropy" zero-result example is now stale

s2mo ago

#690

serve-auth: swamp access can-i — user self-service permission check

s2mo ago

#689

serve-auth: hard refusals for off-loopback without TLS or auth

s2mo ago

#688

serve-auth: wire AccessDecisionService into serve chokepoints for authorization enforcement

s2mo ago

#685

serve-auth: mode: token — server token authentication on WebSocket connections

s2mo ago

#684

sensitive-arg guard rejects an all-vault.get() record/map as a "literal", blocking definition migration

s2mo ago

#683

serve-auth: mandatory admin materialization from config at startup

s2mo ago

#682

serve-auth: auth config schema and mode flag for swamp serve

s2mo ago

#681

serve-auth: remote grant management via swamp access --server

s2mo ago

#680

serve-auth: declarative grants file with startup reconciliation

s2mo ago

#678

serve-auth: swamp access CLI commands

s2mo ago

#676

Docs: add server-side TLS reference for swamp serve --cert-file/--key-file

s2mo ago

#675

serve-auth: static TLS for swamp serve

s2mo ago

#677

docs: TLS setup guide for swamp serve (direct and reverse proxy)

s2mo ago

#674

serve-auth: client-side server credential storage

s2mo ago

#673

serve-auth: server token built-in model

s2mo ago

#671

Telemetry flush blocks command exit, adding ~1.2s p50 to every invocation

Teams2mo ago

#672

serve-auth: AccessDecisionService with in-memory policy snapshot

s2mo ago

#670

serve-auth: sealed CEL grant-condition environment

s2mo ago

#667

serve-auth: access bounded context — Grant, Group, and shared value objects

s2mo ago

#665

data gc --dry-run ignores the flag and performs a destructive GC

Teams2mo ago

#669

Private / org-scoped collectives with member ACLs

Team2mo ago

#668

serve-auth: Group aggregate + built-in model

2mo ago

#618

@swamp/aws/cloudformation: expose StackSet instances, drift, and operations (Cloud Control cannot)

s2mo ago

#658

extension pull: detect ghost-row conflicts and suggest swamp doctor extensions

s2mo ago

#662

Design: serve authentication & authorization (TLS, OAuth, access control)

1mo ago

#660

extension push: adversarial-review report hash is platform-dependent (macOS vs Linux), so committed reviews never match a cross-OS runner

s2mo ago

#659

Can't click on repository from swamp extension search.

Teams2mo ago

#656

Remote Execution tutorial

s2mo ago

#657

`extension quality` false-positive bare-import detection on string literal "flexible"

Teams2mo ago

#654

Honour AWS profile default region when 'region' globalArg is omitted

s2mo ago

#629

Remote execution: comprehensive reference documentation

s2mo ago

#650

datastore setup migration relocates and deletes repo-root .swamp/secrets, breaking all local_encryption vault.get

s2mo ago

#642

model search --json returns a bare model object instead of {query, results} when exactly one model matches

s2mo ago

#643

model delete --json output shape doesn't match the documented {deleted, modelId, modelName, artifactsDeleted}

s2mo ago

#652

swamp serve does not open the UI

Team2mo ago

#649

Registry content-type search filter can match versions absent from the displayed extension

s2mo ago

#651

Docs: document --compact flag for model type describe

s2mo ago

#648

Docs: document reports.require failure semantics in the manual (unresolvable required report fails the run)

s2mo ago

#645

Resource-leak test failures on main: extension_rubric_scorer_test and worker_gateway_test

s2mo ago

#635

Tier-up announcements never fire for direct score contributions (badge awards, feed credits)

k2mo ago

#615

model type describe --json: bloated output (40% duplicated specs, no compact mode) and lost method-to-output mapping drive agents to read extension source

Teams2mo ago

#639

Yanked extension version still shown as active on swamp-club.com and in 'extension search'

Teams2mo ago

#640

reports.require in workflow YAML does not auto-execute pulled extension reports

k2mo ago

#638

Add deprecate/yank/unyank actions for own extensions on the web interface

Teamk3mo ago

#644

Landing page clips the curl install command instead of rendering the full text

3mo ago

#641

Extension author gitignore guidance: add .swamp.yaml and CLAUDE.md to recommended excludes

2mo ago

#631

Docs: document globalArgument input reference validation in workflow validate

s3mo ago

#637

Expose per-run memory/CPU metrics for method & workflow executions

1mo ago

#636

model method run OOMs at 4GB V8 heap on long high-fan-out methods; non-configurable heap + crash leaves run stuck in "running"

sBlocked2mo ago

#633

Discord role sync never assigns lower leaderboard tiers (Swamp Baby / Muck Runt / Sludge Whelp)

k3mo ago

#622

workflow validate: resolve model globalArguments expressions against the calling workflow's declared inputs

s3mo ago

#619

Extension API: allow export const extension to add resource specs, or document that it cannot

s3mo ago

#630

Remote execution: UAT coverage for tokens, enrollment, and dispatch

2mo ago

#535

Remote execution: orchestrator/worker fan-out (replaces execution drivers)

a3mo ago

#623

Docs: extension-publish skill guide doesn't cover release channels

Teams3mo ago

#628

doctor extensions: pulled-extension source files reported as orphans that --repair can't evict (nested @swamp/aws/* sibling mis-attribution)

s3mo ago

#626

Feature: make extension yank channel-scoped (--channel) so it doesn't nuke every channel

Teams3mo ago

#621

Add a way to list registered report definitions (report search only lists results)

s3mo ago

#617

workflow validate: method args with a Zod .default() are treated as required

s3mo ago

#625

swamp update --setup-auto does not work with bluefin44 (crontab not found, should

Teams3mo ago

#624

Feature: demote / withdraw an extension version from the stable channel

Teams3mo ago

#620

Inconsistent resource-field accessor: data get returns content, data query and CEL use attributes

s1mo ago

#616

Profile months overlap in trajectory

k3mo ago

#155

audit record --from-hook silently drops input from kiro-cli postToolUse hooks

3mo ago

#609

correcting capitlization of Swamp, Swamp Club, and The Swamp on the swamp-club.com website

k3mo ago

#613

Docs: Add release channel documentation to the manual

s3mo ago

#614

UAT: Release channel CLI and adversarial tests

s2mo ago

#608

API: Add release channel support for extension versions (beta, rc, stable)

s3mo ago

#612

Test skill evals with Fable in multi-skill eval tests

s3mo ago

#606

Resident/warm worker mode — `model method run` has ~6s fixed per-invocation overhead that rules out latency-sensitive use

Teams3mo ago

#600

Local source-loading should discover a report co-located with its model in a paths.base:manifest extension

s3mo ago

#602

extension quality scorer mis-detects quoted phrases in comments as bare imports

s3mo ago

#601

extension push: credentials-sensitive-field false positive when .meta({ sensitive: true }) is on a continuation line

Teams3mo ago

#507

Feed-post scoring is a direct domain write, not a consumer of feed_post_approved telemetry

k3mo ago

#492

reindexByUsername re-strands pre-association history and wipes sign_in_dates

k3mo ago

#599

extension push: optionally sync the published bundle to the manifest `repository:` (git mirror)

3mo ago

#597

Docs: vault refresh hooks (--refresh-from, --refresh-ttl, --clear-refresh)

s3mo ago

#598

Add 'creek' extension kind for cross-querying external systems alongside swamp data

3mo ago

#595

Deprecate "No slow types" (fast-check) rubric factor on server-side scorer

s3mo ago

#596

Support CI-friendly adversarial review artifacts for extension push

s3mo ago

#572

Quality rubric: scope "No slow types" for model extensions (consumed via model+CEL, not type imports)

s3mo ago

#505

extension quality fails to resolve bare specifiers — contradicts fmt no-import-prefix rule

Teams3mo ago

#594

Registry scorer fails on bare specifiers — mirror CLI fix from #505

s3mo ago

#543

Ability to change the email address associated with my Swamp Club Account

s3mo ago

#541

CI review jobs use two-dot diff that includes files the PR never touched

s3mo ago

#583

extension push --dry-run --json reports local helper imports as bogus model entries

s3mo ago

#590

Docs: vault reference in manual promotes inline KEY=VALUE as primary example

s3mo ago

#475

GCP: support vault expressions for credentials instead of env-var-only auth

s3mo ago

#587

Extension model method execute lacks typed args/context — every author has to use ': any' to unblock tests

s3mo ago

#584

model method run: cannot pass arrays, numbers, or booleans via --input

s3mo ago

#585

workflow resume fails to register all extension model types (local and pulled) — "Unknown model type"

s3mo ago

#477

Support for Custom CA's

k3mo ago

#588

swamp help extension omits yank and unyank (machine-readable CLI schema misses real subcommands)

s3mo ago

#586

@webframp/hashicorp-vault: empty KV engine causes 'data.data.keys is not iterable' on vault put

Team3mo ago

#474

AWS: support vault expressions for credentials instead of env-var/SDK-chain-only auth

s3mo ago

#582

Extension source: direct-content export scan only reads first 64 KiB, silently drops exports beyond it

s3mo ago

#571

data get/list --workflow and workflow history get/logs cannot resolve extension-delivered workflows (Workflow not found)

s3mo ago

#573

extension search returns null repository fields that extension info populates

s3mo ago

#580

Homepage install command: wrong domain and missing https:// protocol

Teams3mo ago

#579

Homepage install command: wrong domain and missing https:// protocol

Team3mo ago

#560

fix: giga-swamp UAT failures — 9 bugs found during comprehensive testing

s3mo ago

#570

Docs: add doctor secrets and doctor vaults to the troubleshooting how-to guide

s3mo ago

#568

Docs: add doctor vaults subcommand and pre-flight vault validation

s3mo ago

#567

gcs-datastore: registerNamespace does not detect conflicts with existing registrations

s3mo ago

#561

Codegen: auto-merge resources across GCP API versions instead of manual ADDITIONAL_VERSION_RESOURCE_FILTER

s3mo ago

#569

UAT: sensitive resource output without vault produces clear pre-flight error

3mo ago

#566

Validate vault availability when model has sensitive output fields

3mo ago

#565

Managed skills ship with dangling reference-doc links

s3mo ago

#564

swamp-club: update skill references and CLAUDE.md after superskill consolidation

s3mo ago

#563

swamp-uat: init_test.ts asserts old skill directory names after superskill consolidation

3mo ago

#559

fix: datastore setup extension with namespace config doesn't scope sync or register manifest

s3mo ago

#557

fix: namespace set on default repo writes incomplete filesystem config (missing path)

s3mo ago

#551

docs: giga-swamp user documentation — reference, how-to, and conceptual guide

s3mo ago

#552

Inconsistent failures in swamp doctor extensions (database is locked, bundle build failed)

s3mo ago

#555

feat: giga-swamp comprehensive UAT coverage

3mo ago

#548

feat: giga-swamp phase 7 — Data migration commands

s3mo ago

#508

Extension quality/adversarial-review: add a 'published-surface hygiene' check for real infra identifiers

s3mo ago

#547

feat: S3/GCS extension namespace manifest support (registerNamespace/listNamespaces)

s3mo ago

#542

feat: giga-swamp phase 5 — CLI output + namespace management commands

s3mo ago

#544

Should be able to see all the issues I created by a filter "submitted by me"

s3mo ago

#526

swamp-extension adversarial review skill needs mandatory mechanical verification checklist

Teams3mo ago

#540

paths.base: manifest is not honored for workflows: — bundled workflows only resolve from repo root, blocking self-contained subdir layouts (sibling to #459)

Teams3mo ago

#533

feat: S3/GCS extension namespace-scoped sync support

s3mo ago

#537

Add platform type to issue-lifecycle extension model Zod schema

s3mo ago

#536

fix: datastoreSetupExtension() ignores namespace config on initial migration push/pull

s3mo ago

#534

swamp datastore sync --push creates global .datastore-index.json ignoring namespace config

s3mo ago

#531

vault.get() expressions in extension model globalArguments are not resolved at runtime

s3mo ago

#532

Copy explicitGlobalArgs before mutation in resolveOrCreateDefinition

s3mo ago

#525

feat: giga-swamp phase 6 — Namespace-scoped sync

s3mo ago

#504

Allow global arguments in direct type execution (workflow fan-out)

s3mo ago

#529

workflow validate: trim stale 'skipped' label from model_not_found warning

s3mo ago

#517

workflow validate: fail on references to unknown model instances (typo'd modelIdOrName)

s3mo ago

#528

Add pi coding agent support

3mo ago

#518

swamp repo upgrade: ERR_SQLITE_ERROR 'attempt to write a readonly database' during extension catalog schema migration

s3mo ago

#509

Docs: TLS behind inspecting proxies / private CAs (system trust store, DENO_CERT, SSL_CERT_FILE)

3mo ago

#521

Workflow engine resolves extension methods against base type, ignoring extension-registered methods

Teams3mo ago

#527

hashicorp-vault should read token from env

3mo ago

#524

swamp workflow validate emits misleading "Extension failed to load" warning when type resolves locally

Teams3mo ago

#516

feat: giga-swamp phase 4 — CEL cross-namespace queries

s3mo ago

#515

Docs: document the extension push adversarial-review gate

s3mo ago

#519

Persistent, queryable workflow runs (status / cancel from any shell)

Team2mo ago

#510

copy method reports success when scp exits non-zero (e.g. 255)

s3mo ago

#500

Enforce adversarial review gate before extension push

Teams3mo ago

#503

Bundled Deno does not honor the OS/system CA trust store

k3mo ago

#502

Gator-approved feed post did not trigger Discord activity or profile points

Teamk3mo ago

#495

vault annotate --url fails with query params on @swamp/aws-sm

Teams3mo ago

#493

workflow approve/resume cannot find suspended run when using S3 datastore

Teams3mo ago

#494

datastore compact VACUUM fails with ERR_SQLITE_ERROR

Teams3mo ago

#498

Report type filtering in report search

Teamk3mo ago

#497

extension search: empty results from CLI despite known extensions

Teamk3mo ago

#501

username_metrics projection backfill does not trigger re-scoring (stale UserScore for dormant users)

1mo ago

#499

support git forge / web namespaces for collectives

k3mo ago

#496

workflow approve/resume cannot find suspended runs

Teams3mo ago

#491

Telemetry never retroactively credits a device's pre-association history

k3mo ago

#490

Docs: document swamp doctor secrets in manual reference doctor.md

s3mo ago

#489

Docs: document 'swamp workflow resume --input' in manual reference

s3mo ago

#483

Remediate existing definitions holding cleartext sensitive global arguments (follow-up to #480)

s3mo ago

#467

Support --input flags on workflow resume for elevated permissions and runtime overrides

s3mo ago

#488

Cloudflare codegen: manifest version bumps on every regeneration (README not deno-fmt-clean)

s3mo ago

#486

feat: giga-swamp phase 3 — Path resolver + per-namespace locking

s3mo ago

#476

Cloudflare: support vault expressions for API credentials instead of env-var-only auth

s3mo ago

#484

Add integration test for sensitive-arg guard on lazily-loaded extension types (follow-up to #480)

s3mo ago

#482

Docs: document refusal of literal sensitive global arguments (follow-up to #480)

s3mo ago

#463

swamp serve scheduled workflows do not load repo extension registries

s3mo ago

#473

DigitalOcean: support vault expressions for the API token instead of DO_API_TOKEN env var

s3mo ago

#479

feat: giga-swamp phase 2 — Catalog schema v4 + repository interface

s3mo ago

#481

Docs: update extension-trust reference for swamp-only default + lockfile version pinning (swamp-club#465)

s3mo ago

#472

swamp model get does not redact `sensitive: true` fields (logs/reports/storage do)

s3mo ago

#469

Document manual_approval workflow step type and suspend/approve/resume flow

s3mo ago

#470

UAT tests for manual_approval workflow commands

3mo ago

#466

Add HTTP approval endpoints to swamp serve for manual_approval steps

s3mo ago

#464

feat: giga-swamp phase 1 — Namespace value object + config

s3mo ago

#459

paths.base: manifest is not honored for skills: — bundled skills only resolve from repo root, blocking multi-extension repos

Teams3mo ago

#400

Improve idempotency match field heuristic for auto-generated name resources (tagKeys, tagValues)

s3mo ago

#460

Orphaned .swamp/ without .swamp.yaml marker is reported as plain 'Not a swamp repository' — partial/corrupt repo not detected

Teams3mo ago

#461

swamp CLI: send user/device identity on extension-registry HTTP calls

j3mo ago

#458

swamp data gc does not remove physical version directories from disk

Teams3mo ago

#462

ci: aws-check and gcp-check jobs take ~30min — rethink whether full model type-checking is needed per PR

s3mo ago

#425

Add extension deprecation support to CLI

s3mo ago

#426

Display extension deprecation state on swamp-club pages

s3mo ago

#456

Docs: update autoupdating how-to for Linux privileged schedulers

s3mo ago

#452

Support privileged autoupdate schedulers for root-owned binaries on Linux

s3mo ago

#448

Telemetry admin reindex endpoint is gated on a defunct @systeminit.com email domain — permanently 403

s3mo ago

#455

How-to: Define custom AI agent tools

s3mo ago

#451

Docs: document LaunchDaemon autoupdate for root-owned macOS binaries

s3mo ago

#445

extension update/pull deadlocks when the repo's datastore is the extension being updated

s3mo ago

#403

Add a list/discover method to dbcluster for enumerating clusters in a region

s3mo ago

#450

Support deepAgents CLI/SDK as a target agent

3mo ago

#447

CLI telemetry forwards non-personally-resolvable identity for collective auth; distinct_id is per-machine, not per-repo

k3mo ago

#446

Telemetry ingest only resolves personal API keys — collective-token events are unattributed, identity_map under-claims

k2mo ago

#440

Datastore: lazy hydration with metadata-only setup and transparent content download

s3mo ago

#444

Docs: update datastore reference for lazy hydration, SyncContext, and SyncCapabilities

s3mo ago

#443

Default hydrationStrategy to lazy after soak period

3mo ago

#375

Add list/search as a factory method that produces many data artifacts (Drive files.list, gmail messages.list, etc.)

s3mo ago

#430

--json output is polluted by non-JSON content, breaking machine parsing

s3mo ago

#428

Add extension info command for registry metadata

s3mo ago

#439

Slim down extension search output now that extension info exists

s3mo ago

#436

Datastore extensions: only write dirty partition files on push

s3mo ago

#438

exec fails on macOS: ControlPath exceeds 104-byte Unix socket limit

s3mo ago

#435

Datastore extension benchmark suite for S3 and GCS

s3mo ago

#437

CSS effects on swamp.club (any page) cause high CPU

k3mo ago

#434

GCS datastore: dirty sidecar, partitioned index, content hashing, and scoped sync

s3mo ago

#433

Direct execution @type prefix fails for repo-local extension model types

Teams3mo ago

#379

S3 datastore: dirty sidecar, partitioned index, content hashing, and scoped sync

s3mo ago

#432

Support GitHub username in swamp.club profile to fix PR attribution

k1mo ago

#431

dataRepository.getContent() fails in workflow-scope reports with 'type.toDirectoryPath is not a function'

s3mo ago

#429

Core repositories missing markDirty hook — scoped push only works on crash recovery

s3mo ago

#427

Add extension transfer between collectives

1mo ago

#424

swamp serve: extension bundle failure at startup is silently pinned, breaking scheduled workflows with permanent 'Unknown model type'

k3mo ago

#417

Docs: document VaultAnnotationProvider interface and extension opt-in pattern

s3mo ago

#415

Add VaultAnnotationProvider support to @swamp/azure-kv

s3mo ago

#421

Upgrade TUI graphics — better AI-generated ANSI or a Moebius hand-authored pipeline

3mo ago

#418

Vault annotations: --note/--notes flag inconsistency and UX improvements

s3mo ago

#419

Add VaultAnnotationProvider conformance helpers to @systeminit/swamp-testing

s3mo ago

#416

Add VaultAnnotationProvider support to @swamp/1password

s3mo ago

#414

Add VaultAnnotationProvider support to @swamp/aws-sm

s3mo ago

#236

Extension ecosystem: shared utility library, version sync tooling, and HTTP resilience patterns

Teams3mo ago

#420

Add assertVaultAnnotationExportConformance to @systeminit/swamp-testing

3mo ago

#348

Scaffold new extensions to publish-ready quality (12/12) by default

Teams3mo ago

#14

Add uniform bucket-level IAM support to @swamp/gcp/storage

s3mo ago

#410

workflow-scope report's dataRepository.getContent returns null for data written in the same workflow run

s3mo ago

#408

@swamp/digitalocean — add domain-records model for /v2/domains/{domain_name}/records

s3mo ago

#404

dbcluster state schema is missing DBClusterMembers (writer/reader, instance class)

s3mo ago

#411

workflow direct-execution inputs.* persist as globalArguments on auto-definitions and freeze on first run

s3mo ago

#413

Harness detection invents env vars for kiro/opencode/codex

k3mo ago

#393

Extension METHODS table truncates Method column; short names like apply/check wrap mid-word on /extensions/@swamp/ssh

s3mo ago

#407

Docs: update extension scoring documentation for dependency-trust rubric factor

s3mo ago

#401

cloudidentity API calls fail with 'requires a quota project' — bundle doesn't send x-goog-user-project header

s3mo ago

#406

Warn when a ${{ }} secret expression is single-quoted in a command/shell run: script

Teams3mo ago

#405

Workflow validation should resolve modelType for direct-execution steps

s3mo ago

#402

Add dependency-trust rubric factor to server-side scorer (RUBRIC_VERSION 3)

s3mo ago

#398

Add IAM policy management (setIamPolicy/getIamPolicy) on cloudresourcemanager resources; add custom-role CRUD to @swamp/gcp/iam

s3mo ago

#392

swamp extension rm leaves empty <kind>-bundles/<hash>/ dirs behind

s3mo ago

#378

Datastore sync: add SyncContext and SyncCapabilities framework contracts

s3mo ago

#399

@swamp/gcp/cloudresourcemanager/folders: create method has 5 blocking bugs (missing parent in body, LRO detection, post-LRO state, idempotency, projectId requirement)

s3mo ago

#386

issue-lifecycle: thank external contributors when issues are resolved

s3mo ago

#391

Pre-flight checks cannot access method arguments (check context omits methodArgs/unresolvedMethodArgs)

s3mo ago

#390

swamp audit record --from-hook creates a stray .swamp datastore in the process cwd instead of resolving the repo root

s3mo ago

#389

extension push publishes model files ending in _test.ts that no consumer can load

s3mo ago

#388

Docs: document --extensions-dir / SWAMP_EXTENSIONS_DIR for worktree workflows

s3mo ago

#397

@swamp/ssh exec method fails with 'ctx.createCelEnvironment is not a function'

3mo ago

#383

`swamp extension rm` leaves empty scaffold dirs behind

k3mo ago

#381

swamp CLI commands fail silently or hang when invoked from git worktrees via SWAMP_REPO_DIR

Teams3mo ago

#387

No user feedback when model method run is waiting for lock acquisition

s3mo ago

#382

Many CLI commands acquire global .datastore.lock unnecessarily, causing 60s LockTimeoutError under any concurrent writer

Teams3mo ago

#385

Add swamp extension prune to clean up stale catalog entries

3mo ago

#384

identity_map row not updated when user renames

s3mo ago

#376

Expose cel-js Environment to extensions for custom CEL evaluation

a3mo ago

#314

swamp issue get should rate-limit unauthenticated users instead of blocking

s3mo ago

#358

CEL and vault expressions not evaluated inside nested globalArguments fields

s3mo ago

#380

Datastore: lazy hydration for fast cold-start on first clone

3mo ago

#336

Add --stdin support to method run and workflow run for Unix pipe composition

s3mo ago

#374

files.get returns only minimal fields (id, name, kind, mimeType) because no 'fields' query parameter is sent

s3mo ago

#377

Terminal rendering breaks at large font sizes

Teams3mo ago

#373

ADC path uses wrong gcloud token store: 'gcloud auth print-access-token' instead of 'gcloud auth application-default print-access-token'

s3mo ago

#372

Docs: update doctor reference and autoupdate how-to for new doctor install subcommand

s3mo ago

#363

bucket-policy StateSchema.PolicyDocument declared z.string() but CloudControl returns it as a parsed object

s3mo ago

#366

bucket-policy GlobalArgsSchema requires Bucket and PolicyDocument, blocking workflow-YAML direct execution of get

s3mo ago

#367

Missing 'parent' field in GlobalArgsSchema for several @swamp/gcp/* models causes get to fail

s3mo ago

#371

createModelTestContext: storedResources not used by readResource; readResource always returns null

s3mo ago

#370

swamp-vault skill documents 'swamp vault read' but correct subcommand is 'read-secret'

s3mo ago

#365

Report execute throws are advisory: workflow marked succeeded, exit 0, AND report output is discarded

s3mo ago

#364

dataRepository.getContent rejects string type in production but docs and testing helper demonstrate strings

s3mo ago

#357

@swamp/digitalocean: 30 of 33 model types fail with version mismatch error

s3mo ago

#362

Unified login input that detects email vs username by presence of '@'

k3mo ago

#361

Introduce `swampd`: long-running local daemon for shared cache, secrets, and extensions

2mo ago

#359

workflow validate: false "Missing required inputs" when method args are set in the model definition

k3mo ago

#356

Add first-class Kilo Code tool support

3mo ago

#355

Partitioned index for S3/GCS datastores (Phase 3)

3mo ago

#354

Per-path dirty tracking in S3/GCS datastore extensions (Phase 2)

s3mo ago

#350

Scoped sync and capability-gated concurrency for datastores (Phase 1)

s3mo ago

#353

Docs: update doctor extensions JSON reference to include warnings[] field

s3mo ago

#351

Surface type-extraction failures in doctor JSON output

s3mo ago

#342

W7 — unify extension failure surfaces; collapse registries.failures[] into sourceDetails[]

s4mo ago

#352

Doctor kind-completed events should carry correct per-registry status

4mo ago

#349

Direct type execution fails for locally-defined extension types with pulled duplicates

s4mo ago

#340

Distinguish validation-throw from bundle-throw in reconcile catch; surface ValidationFailed in sourceDetails

s4mo ago

#341

Surface Tombstoned transitions in doctor extensions output

s4mo ago

#321

swamp issue: check if reporter is on an outdated binary before opening

s4mo ago

#326

Detect stale skill directories and prompt for repo upgrade

s4mo ago

#339

extension unyank needs -y/--yes flag for non-interactive use

s4mo ago

#338

Step key parsing in execution_service uses naive split(":") and silently truncates colon-containing step names

k4mo ago

#337

Workflow-scope report artifacts unreachable via `swamp data get --workflow`

k4mo ago

#334

Fix invalidate-then-reconcile sequencing in doctor extensions; failure-mode RowStates unreachable in sourceDetails

s4mo ago

#335

Docs: add run namespace to CEL expressions reference

s4mo ago

#329

Add 'swamp issue comment' command for updating existing issues

Teams4mo ago

#333

doctor extensions invalidateAll does not trigger fingerprint recheck for existing Indexed rows

4mo ago

#332

Extension failure recording has dual write paths (legacy buildIndex vs W3 reconcile)

4mo ago

#324

Add type search for driver, datastore, and report kinds

s4mo ago

#291

Workflow-level runtime expressions (env., vault.) not resolved in driverConfig — docker driver receives literal ${{ ... }} strings

j4mo ago

#328

Close #327 — fixed in 20260511.160514.0-sha.9d03b09a

Team4mo ago

#327

Nested workflow task fails with 'Bad resource ID' when workflowIdOrName uses @collective/ prefix

Teams4mo ago

#318

Investigate whether allExtensionMethodsAttached guard can be removed via registration-path consolidation

s4mo ago

#325

Improve skill trigger routing for cross-model edge cases

3mo ago

#322

Docs: update doctor extensions reference for W6 aggregate-state rendering + repair flags

s4mo ago

#320

Implement W6: swamp doctor extensions aggregate-state rendering + repair surface (extension catalog rearchitecture)

s4mo ago

#323

Surface ReconcileFromDisk dryRun transitions in swamp doctor extensions

s1mo ago

#290

Implement W5: Per-fingerprint import URLs + subprocess test harness (extension catalog rearchitecture)

s4mo ago

#313

swamp issue get should not require authentication

s4mo ago

#315

swamp model create --global-arg KEY=VALUE doesn't coerce strings to z.number() schemas

4mo ago

#306

Docs: Update model-definitions.md and workflows.md for direct type execution

s4mo ago

#312

telemetry: emit child entries for follow-up action method invocations

s3mo ago

#302

Direct type execution: collapse model create + method run into one command

s4mo ago

#305

Docs: document binaries manifest field in extension-manifest.md

s4mo ago

#303

Accept and display binaries field from extension push metadata

s4mo ago

#301

Per-method telemetry events for workflow runs

k4mo ago

#271

W3 sourceToRow writes empty source_mtime — should carry filesystem mtime through Source entity

s4mo ago

#269

Implement W4: KindAdapter + unified loader (extension catalog rearchitecture)

s4mo ago

#294

forEach self.* in modelIdOrName not resolved in runtime execution path

Teams4mo ago

#297

Extension update rejects multiple .ts files extending the same target type within one local extension (regression)

4mo ago

#293

Award leaderboard points for referrals and collective invites

17d ago

#292

Add agent harness detection and AiTool to telemetry

k4mo ago

#285

Docs: How-to guide for background autoupdating

s4mo ago

#288

datastore compact: VACUUM fails in compiled binary (SQLITE_LIMIT_ATTACHED=0)

s4mo ago

#289

swamp config set crashes with YAML serialization error

s4mo ago

#280

Missing unique indexes on user.email and user.username allow duplicate users

k4mo ago

#284

Manifest version bumps silently ignored for existing local extension aggregates

s4mo ago

#287

Repo-level version gating: minSwampVersion high-water mark for team consistency

3mo ago

#283

materialiseExtensions misclassifies pulled rows when manifest name collides with a pulled extension

s4mo ago

#286

Docs: document self.* expressions in modelIdOrName during forEach

s4mo ago

#279

Resolve self.* expressions in modelIdOrName during forEach expansion

Teams4mo ago

#282

Local extension edits don't reliably trigger rebundle

4mo ago

#278

discord-bot double-sends sign_up notifications

k4mo ago

#277

Discord bot sends duplicate signup notifications

4mo ago

#248

`swamp datastore setup` migration is not resumable / leaves the repo in a partial state on failure

s4mo ago

#239

extension quality/fmt fail on pulled extensions (path mismatch)

Teams4mo ago

#228

Detect AWS CredentialsProviderError in @swamp/aws-sm-vault and prepend SSO-expiration hint

s4mo ago

#270

Warm-start rebundleAndUpdateCatalog should respect terminal RowStates set by reconcile

4mo ago

#268

Docs: add vault read-secret command to reference manual

s4mo ago

#118

Add swamp issue get CLI command to fetch issue details

s4mo ago

#252

Implement W3: ReconcileFromDisk + freshness-as-aggregate-query (extension catalog rearchitecture)

s4mo ago

#238

vault: add read-secret CLI command for agent-driven secret retrieval

Teams4mo ago

#266

Docs: document workflow concurrency limits in reference manual

s4mo ago

#260

Configurable concurrency limits for workflow fan-out (forEach, parallel jobs/steps)

s4mo ago

#267

Extension layer garbage collection: prune catalog rows + evict orphaned bundles

4mo ago

#263

Vault expressions silently deliver __SWAMP_VSEC__ sentinels under the docker driver

s4mo ago

#254

Cross-process concurrency stress for W2 lifecycle services

s4mo ago

#261

Local extension model bundles don't rebuild when source changes (no rebuild CLI; manual cache delete breaks the runner)

s4mo ago

#249

Pre-existing TOCTOU windows in YAML repo walkers (findAll directory level + findById)

s4mo ago

#231

Implement W2: Lifecycle services own the catalog write (extension catalog rearchitecture)

s4mo ago

#241

performance degrades significantly with large SQLite catalog

Teams4mo ago

#258

feat(security): redact sensitive method arg values from audit log

s4mo ago

#257

docs: document swamp datastore compact and GC WAL behaviour

4mo ago

#256

UAT: swamp datastore compact reclaims WAL and catalog space

4mo ago

#255

Plan v4 step 9 literal test untestable under current catalog PK semantics

4mo ago

#253

UAT additions for W2 lifecycle services (Install/Remove/Upgrade)

4mo ago

#251

doctor extensions repair: clean catalog-only orphans

4mo ago

#240

summarise: timeout/hang on repos with many workflow runs

Teams4mo ago

#235

Agentic CLI improvements: --json stdout isolation, array inputs, and --repo-dir consistency

Teams4mo ago

#245

data search: surface jobTag alongside workflowTag and stepTag (follow-up to #237)

s4mo ago

#247

Built-in models must honor AbortSignal so --timeout works in practice

s4mo ago

#246

Reader-lock or lock-free read path for data list/get/search/query

s4mo ago

#234

data delete fails with "Directory not empty (os error 39)" when concurrent writes are active

Teams4mo ago

#237

data query: stepName and jobName fields always empty in CEL results

Teams4mo ago

#242

redmine extension: adopt state machine patterns from @magistr for agent-driven workflows

Team4mo ago

#226

Detect AWS CredentialsProviderError in summarizeSyncError and prepend SSO-expiration hint

s4mo ago

#232

Extend DatastoreSyncService.markDirty() with optional relPath argument

k4mo ago

#233

Extract LockfileRepository (W2 prequel for swamp-club#231)

s4mo ago

#229

DDD: refactor data services to depend on domain-side ports instead of infrastructure types

s4mo ago

#223

Implement W1b: Repository and RowState (extension catalog rearchitecture)

s4mo ago

#230

data·delete logger double-quotes the data name in log output

s4mo ago

#181

Add swamp data delete command to remove a data artifact by model and name

s4mo ago

#211

Implement W1: Repository and RowState (extension catalog rearchitecture)

s4mo ago

#222

Redundant push after pullChanged: localMtime clobbered by pullIndex(forceRemote)

s4mo ago

#221

Docs: update datastore-configuration manual after #220 setup-hydration fix lands

s4mo ago

#217

swamp-extension-model skill: include description field in upgrades quickref

s4mo ago

#172

Support multi-agent repo initialization (multiple --tool targets)

Teams4mo ago

#216

swamp-extension-model skill: include field in upgrades quickref

4mo ago

#215

Adversarial UAT test: missing cached bundle with intact catalog should self-recover

4mo ago

#214

Port importBundleByPath ENOENT fallback to datastore/driver/vault/report loaders

4mo ago

#212

swamp model type describe fails with 'No such file' instead of rebundling when bundle is missing

k4mo ago

#209

Schema-invalid extensions loop in rebundle path: catalog row never updates after first failed validation

s4mo ago

#210

feat: swamp extension verify — opaque extension-lifecycle verification primitive

1mo ago

#208

swamp model type search is slow (~8s) and re-bundles all extensions on every call

Teams4mo ago

#207

Per-extension layout migration drops Claude skill from @magistr/good-planning

Teams4mo ago

#206

swamp extension outdated crashes on empty repo (Stream ended...)

s4mo ago

#203

Docs: extension commands reference

s4mo ago

#205

Docs: extension install/pull/update sync-to-manifest behaviour

4mo ago

#204

Add process-level install lock around installExtension

s4mo ago

#198

Catalog retains stale source-file entries when extension version drops a file; no native prune/repair

4mo ago

#197

Document and surface a native cache-refresh path so agents stop doing cache surgery

4mo ago

#196

swamp should warn when installed extensions are outdated

4mo ago

#193

Re-enable Windows tests as deno compile for Windows lands

4mo ago

#192

swamp-club extension card no longer exposes @ns/slug as contiguous text

k4mo ago

#191

Docs: multi-tool repo support

s4mo ago

#180

add `swamp doctor extensions` subcommand for on-demand extension load diagnostics

s4mo ago

#170

Docs: repository-configuration.md missing defaultDriver / defaultDriverConfig

ks4mo ago

#189

swamp model method run: --foreach to fan out across instances

4mo ago

#188

swamp workflow validate: actionable error messages and template scaffolds

3mo ago

#187

swamp CLI cold-start latency (~5–7 s per invocation) compounds in workflows that shell out

3mo ago

#186

Workflow tasks should support ephemeral model instances (modelType + globalArgs) so workflows are zero-prereq

4mo ago

#177

Local extension models in extensions/models are not discovered in fresh repo tutorial flow

s4mo ago

#178

Better Auth rejects requests on hostnames not in hardcoded trustedOrigins (signup/signin broken on non-canonical hosts)

k4mo ago

#176

ticket 1138 not clear - can we still use github?

4mo ago

#175

Drag Windows into the Swamp

Teams4mo ago

#173

swamp repo init --tool kiro does not create .kiro/settings/cli.json

Teams4mo ago

#171

CLI dumps 300-line Cliffy Command object on unknown flags / subcommands

s4mo ago

#96

Persist lab filter selection in localStorage

k4mo ago

#169

Server-side parse query params on /lab/all so refresh preserves multi-filter URLs

k4mo ago

#168

fast-path sidecar TOCTOU: post-op HEAD can record generation from a concurrent writer's push, masking their data on next sync

s4mo ago

#156

Add a preflight diagnostic for AI-tool audit integrations (so upstream CLI changes stop breaking us silently)

s4mo ago

#166

@swamp/gcs-datastore: same minutes-slow zero-diff sync cliff as lab/164; mirror fingerprint fast path

s4mo ago

#164

swamp datastore sync is minutes-slow at 4k-file scale even with zero-diff; outer 300s timeout fires

s4mo ago

#167

Scorer should honour files/deno.json imports so bare specifiers resolve

s4mo ago

#165

cleanup for repoDriver

kj4mo ago

#159

Add repo-level `defaultDriver` to `.swamp.yaml`

k4mo ago

#158

User report extensions registered lazily are silently skipped during method execution

s4mo ago

#157

swamp extension install: datastore push hangs ~8.5m then crashes with Deno TLS panic (tls_wrap.rs:1918 unwrap on None)

s4mo ago

#41

deprovision: firewall deletion fails with resource_in_use immediately after server delete

s4mo ago

#152

Trailing slash on /extensions/@<namespace>/ returns 404

s4mo ago

#154

codegen pipelines don't detect _lib/*.ts changes so manifest CalVer never bumps

4mo ago

#153

Link to namespace extensions listing from profile pages

s4mo ago

#150

DatastoreProvider.resolveCachePath declared optional but silently required at runtime

s4mo ago

#146

additionalFiles flatten to basenames on push and lack a runtime access API, creating a source-vs-pulled layout mismatch

s4mo ago

Feature: swamp issue for extensions — bug reports, security disclosures, and author notifications

s4mo ago

#147

Accept-invite link returns HTML instead of JSON, breaking collective join

s4mo ago

#144

Docs: document jsr:/https: imports and non-local pinning convention in user-facing manual

s4mo ago

#143

First-class jsr: specifier support in extension bundler

s4mo ago

#97

Inline editing: click-to-edit fields instead of pencil icons

ks4mo ago

#142

Cross-extension code sharing via manifest exports field

4mo ago

#122

Footer floats when page content is shorter than viewport

s4mo ago

#135

Datastore sync surfaces opaque errors from extensions verbatim — no status code or body preview

s4mo ago

#133

Extension auto-resolve reports "already_installed" for truncated pulled-extension trees

4mo ago

#134

@swamp/s3-datastore: first-attempt 403 masked as "UnknownError" from AWS SDK deserializer

4mo ago

#128

Port bundle_freshness (content-fingerprint cache invalidation) to reports / drivers / datastores / vaults loaders

s4mo ago

#127

Mentions and notifications system for issues

s4mo ago

#129

open.ts web UI uses force:true pullExtension, same data-loss family as #126

s4mo ago

#131

Email delivery for mention notifications

4mo ago

#126

Datastore auto-update in resolve_datastore.ts uses force:true, risking silent overwrite of local edits

s4mo ago

#130

Auto-update WARN is silent in --json mode (logger suppresses non-fatal)

s4mo ago

#123

User extensions silently dropped when base type not yet registered at scan time

s4mo ago

#125

Per-repo user-extension bundle cache doesn't invalidate on source changes

s4mo ago

#121

workflow validate can silently overwrite local edits to pulled extensions via force-pull in auto-resolver

s4mo ago

#124

Adding methods to in-body `methods:{}` on `export const model` doesn't re-register

s4mo ago

#120

Extension pull should namespace files by extension to prevent filename collisions

s4mo ago

#110

Remove traffic lights in column 2 of /lab

ks4mo ago

#101

Flow modal: text rendering issues

k4mo ago

#106

Bog flow: text rendering and layout issues

k4mo ago

#109

Multi-select combo filtering on /lab

k4mo ago

#112

Filter lab issues by author (opened by user)

k4mo ago

#113

Usernames aren't linked to their profile pages

k4mo ago

#114

Collapsible left rail and repositionable right rail in Lab

k4mo ago

#117

swamp-club API: include issue author in GET /api/v1/lab/issues/{number} response

s4mo ago

#116

Install command curl-pipe-sh overflows the component on swamp.club homepage

s4mo ago

#115

'Assigned to me' overlaps 'Privacy policy' on short viewports

s4mo ago

#66

Add GitHub Copilot IDE support

s4mo ago

#119

Update CLAUDE.md co-author instructions to use swamp-club issue author lookup

s3mo ago

#111

Add skills extension type for bundling agent/human guidance documents

Teams4mo ago

#80

Improve skill trigger routing accuracy across models

s4mo ago

#84

Consolidate MethodReportContext construction — manual and workflow report paths build contexts divergently

s4mo ago

#108

data gc skips version-count GC when no lifetime-expired data exists

k5mo ago

#98

Description 'Show more' button appears even when text fits

k5mo ago

#99

Normalize text sizing across issue list and detail views

k5mo ago

#95

Update how-to guide with swamp-extension-publish skill

s5mo ago

#107

Content filter should identify the flagged word or phrase

k5mo ago

#92

Extension skills missing repository initialization and publishing prerequisites

Teams5mo ago

#94

Fix incorrect favicon in Google search results

5mo ago

#88

forEach.in with data.latest() throws misleading 'got: object' error for unresolved Promise

s5mo ago

#90

Audit: modelRegistry.get() without ensureTypeLoaded() in YAML repository save() paths

s5mo ago

#91

Vault CEL expressions replaced with VaultSecretBag sentinels after model type upgrade

k5mo ago

#93

Missing section on user profile page for wendy

s5mo ago

#86

issue-lifecycle models should support --assignee for swamp.club issues

s5mo ago

#89

Cross-model expression validator fails on lazy-loaded types — modelRegistry.get() bypasses ensureTypeLoaded

5mo ago

#55

Score daily sign-in events with streak multiplier

s5mo ago

#35

Consolidate method execution paths — workflow steps and manual runs build MethodContext divergently

k5mo ago

#85

Driver capability registry: declare richer execution capabilities at driver design time

s4mo ago

#59

Reindex path feeds error events to consumer, bypassing filtering

s5mo ago

#83

Workflow-level workspace for docker driver: stateful multi-step workflows

s4mo ago

#81

Workflow-scope user extension reports don't execute: getAll() excludes lazy-loaded reports

s5mo ago

#82

"OG Swamper" badge inconsistent

k5mo ago

#63

Architecture violation: search route imports directly from lib/infrastructure

s5mo ago

#56

Score extension pull events for extension authors

s5mo ago

#65

Phase 1: /feed — judge-gated content stream

k4mo ago

#64

Add reactions and Giphy integration to comments

4mo ago

#62

Introduce domain events to formalize the telemetry-to-consumer pipeline

4mo ago

#61

Refactor: move telemetry track() calls from route handlers to application services

s5mo ago

#58

Custom swamp-themed avatar generator with daily rerolls

4mo ago

#57

Profile content links with scoring for community contributions

4mo ago

#54

Score sign_up events in the telemetry pipeline

4mo ago

#53

Score extension publish events in the telemetry pipeline

s5mo ago

#52

Add 'award' telemetry event type for arbitrary score grants

4mo ago

#51

Bug: authenticated pulls always shows 0 on profile page

4mo ago

#50

Decouple identity_map from main app: username renames via event, not shared DB

4mo ago

#49

Optimise MongoDB Search Queries

4mo ago

#48

Transactional emails on login with google/similar

4mo ago

#47

Add rate limiting to send-verification-email endpoint

4mo ago

#46

Add authentication or rate limiting to check-verified endpoint

4mo ago

#39

data.latest() returns null when new data written while _catalog.db is already marked populated

a5mo ago

#38

Bundle cache fallback silently skipped when source and bundle have equal mtimes

s5mo ago

#44

Document vault migrate command in reference docs

s5mo ago

#43

Locks on long running actions

Team5mo ago

#45

swamp data query for morning-message in hello-world tutorial returns nothing.

a5mo ago

#13

Expand DataRecord with first-class provenance fields; remove all hidden scoping from data access

a5mo ago

#33

CatalogStore constructor runs createSchema before migrateIfNeeded; v1→v2 upgrade fails on existing repos

a5mo ago

#37

Add vault migrate command to move secrets between vaults

s5mo ago

#42

issue-lifecycle skill: improve resumption and close-out guidance

s5mo ago

#40

swamp workflow validate should check step inputs against method's required arguments

s5mo ago

#32

discord-bot poller double-processes events with >1 replica

5mo ago

#29

datastore sync --push fails on _catalog.db-wal: catalog SQLite DB lives inside the S3 sync cache

5mo ago

#31

datastore sync: clean up zombie _catalog.db* entries from remote index and S3 bucket

5mo ago

#30

datastore sync --push runs pushChanged() twice per invocation (coordinator dedup)

5mo ago

#26

Error when submitting a new issue manually

5mo ago

#25

Green text on issue details is a lot

5mo ago

#28

.swamp/datastore-bundles/ leaks into deno lint and deno fmt scans

5mo ago

#27

deno run audit task missing --allow-env flag

5mo ago

#24

evals/promptfoo: bump hono and @hono/node-server to clear 6 dependabot alerts

5mo ago

#21

issue-lifecycle: COMMENTED PR review can overwrite a prior decisive state in fetchPrReviews

4mo ago

#20

Add agent-constraints/ for issue-lifecycle skill

4mo ago

#19

@swamp/aws/ec2: auto-generated models lack list, tag, and factory-compatible update methods

5mo ago

#18

@swamp/digitalocean/space-key stores secret in plaintext - should mark as sensitive

5mo ago

#17

Add Azure provider pipeline to codegen

4mo ago

#16

feat: Namespace.so execution driver for remote workload execution

5mo ago

#15

Add macOS Keychain vault type

4mo ago

#12

feat: Private extensions

3mo ago

#11

Workflow execution repeats #1091: cross-model CEL expression validation fails for unresolved types

s4mo ago

#10

context.readModelData returns different results depending on invocation context (manual vs workflow)

s4mo ago

Handle sensitive fields gracefully when no vault is configured

s3mo ago

Vault reads for model global arguments are cached at workflow start, making in-workflow token refresh ineffective

4mo ago

feat: approval gates for workflow steps and jobs

4mo ago

Install script: curl fails TLS verification for swamp.club (certificate chain)

4mo ago

Extension Patches: contribution workflow for community extensions

4mo ago

Support 'swamp <app> run' as containerized entrypoint for easy onboarding

3mo ago

Persistent runner / server mode to eliminate per-invocation CLI startup overhead

4mo ago

feat: add support for Nix via a flake

s2mo ago

← Back to list

01Issue

FeatureShippedSwamp CLIPublic

Assigneesstack72

Relationships

#1925 docs: write enablers/access-control.md design doc

Opened by stack72 · 9/1/2026· Shipped 9/1/2026

Summary

design/primitives/serve.md:185-186 references enablers/access-control.md as the place where principals, grants, subjects, and the can-i request will be documented — but the file doesn't exist yet.

What to document

The grant evaluation model: authorization is checked at the serve handler boundary, not at the domain layer
Workflow execution context: a run grant on a workflow resource is sufficient for all model method calls within that workflow — individual model grants are not required for workflow-internal steps
Grant file schema: actions (plural, array), subject, effect, resource, condition
The can-i request flow
Principal resolution

Why this matters

A customer asked whether workflow-internal model method calls are authorized against the caller's model grants or the workflow grant. The answer (workflow grant is sufficient) is correct by design but not documented anywhere, leading to confusion and overly broad grant configurations.

🤖 Generated with Claude Code

Automoved by swampadmin from https://github.com/swamp-club/swamp/issues/2330

02Bog Flow

Shipped

9/1/2026, 1:28:44 AM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack729/1/2026, 12:44:15 AM

serve: idle peer data.query remains stale when a remote datastore honors selective pulls

serve data.get cannot resolve models stored in managed configuration

serve model.edit does not publish managed configuration changes to the shared datastore

swamp serve daemon (user service) doesn't handle systemd 'lingering' — claims it 'starts automatically' but only runs while logged in

swamp serve daemon (user service) doesn't handle systemd 'lingering' — claims it 'starts automatically' but only runs while logged in

deprecated extensions are more prominent than I expected :)

Trigger schedule overrides require a swamp serve restart to take effect

Serve Audit Log - Phase 5: Extension sinks, alerting, compliance

Serve Audit Log - Phase 6: Full documentation

CI auto-merge broken: removed claude-review job was the PR approver

createModelTestContext mock Logger has .warn() but real runtime has .warning()

Serve Audit Log - Phase 4: SIEM integrations, bulk export, HMAC

aws-sm vault: support profile config key to select named AWS credential profiles

docs: data.latest second argument matches name OR spec, not just spec

Per-extension white listing

agent-runner: allow using the Claude CLI's stored login instead of requiring an API key

data.latest().attributes/.content unresolved in workflow assert/guard CEL for @mgreten/cli-agent extension data

Simplify CI: remove redundant jobs, automerge only on security + attestation gates

Add put_events method to event-bus type

workflow guard: run requires ${{ }}, evaluate rejects it — no guard form satisfies both

Unify serve config credential resolution via CEL expressions

Block temporary email services on signup

repo upgrade/init hardcode absolute swamp binary path in hook commands, breaking cross-machine portability

Docs: Serve audit Phase 4 — SIEM sinks, HMAC, and export reference

managedConfig: cross-process sentinel disagreement between CLI and serve

Expose swamp help to agents proactively in the swamp skill

Windows: vault roundtrip model outputs UTF-16LE instead of UTF-8

Make verification reviews tolerate a passing review without an explicit verdict

Enrich InvocationContext telemetry with datastore type and external vault detection

Windows: CLI outputs forward-slash lowercase paths instead of native backslash paths

Audit: emit auth-category events for OAuth device flow and token operations

Add create_pipeline_schedule to @webframp/gitlab

First-class scheduled garbage collection policy per datastore namespace

Document run GC retention configuration

Serve Audit Log - Phase 3: Real-time WebSocket streaming

docs(cli): document run GC retention configuration

Audit: many model/data handlers pass wildcard resource name instead of actual model name

swamp cmds don't realise the user is sshed into the system

spreadsheets-values: append and update cannot send valueInputOption, so neither can write — query-location parameters are never populated

Flaky POSIX shutdown handler SIGINT test exits 130

Test flake: buildOtelResource env var race in parallel test execution

Windows: HOME environment variable not set — no USERPROFILE fallback

Property test flake: CEL embedded interpolation with empty expression key

Adversarial review guard does not cover src/cli/ outside src/cli/commands/

Expose configured per-method definition arguments in model get --json

Lab #2037 mitigation does not cover category-specific bundle stores (datastore-bundles, vault-bundles, report-bundles)

Implemented/shipped issues should reference the implementation more clearly

Document configured method arguments in model get JSON

writeCatalogExport takes 55-150s per workflow step — serializes entire catalog as pretty-printed JSON

Separation of duties impossible: workflow.approve is authorized against the 'run' action, so approvers can start runs and operators can self-approve

Serve Audit Log - Phase 2: WAL, chain hashing, query API, complete coverage

data query omits report artifacts returned by data list and versions

swamp issue bug isn't auto-filling swamp version, OS and shell

Upgrade/Update causes odd locking issue on swamp deno

stale lock file not being cleaned up?

Document env.* namespace for model-instance globalArguments (host-portable config)

In "swamp workflow run", "Still running... [Xs elapsed]" should be considered non-essential output

Docs: document the approve grant action and separation-of-duties patterns

Docs: Add method-level grant scoping to authorization reference

Docs: document enriched model search JSON output shape

Retire or rebuild /admin/nurture once the epic lands — it is a gate, and gates are single-use

feat(nurture): /admin/nurture — who would get what, and why

feat(nurture): the nurture_send ledger and the dry-run projector, with the cold-start seal

feat(nurture): batch cohort reads — account-grain identification that carries its evidence

feat(nurture): the flow catalog and the qualification contract (pure domain)

Serve Audit Log - Phase 1: Event pipeline and durable storage

harness-marketing-funnel posts {batch:[...]} to /ingest, which is not a batch — every run silently measures zero

feat(cli): swamp inbox — read swamp-club notifications without leaving the terminal

feat(cli): tell operatives they have swamp-club notifications waiting

feat(api): a cheap unread-notification count for API-key clients

feat(nurture): deliver to the swamp-club inbox on the same dedupe decision as email

feat(nurture): arm needs-help-after-a-failed-run (NEEDS HELP)

feat(nurture): arm model-usage-without-workflows (BUILDING PRODUCT FEATURES)

feat(nurture): arm no-activation-after-30-days (ARRIVED, NEVER RAN)

feat(nurture): arm reactivation-after-7-days (DRIFTED)

feat(nurture): arm the first flow — extension published, email only, verified in prod

feat(nurture): the six nurture email templates, previewed before anything sends

feat(nurture): an outbound transport that reports its outcome, and per-channel send status

feat(nurture): suppression — opt-out, address-grain frequency caps, one-click unsubscribe

Epic: Product nurture — lifecycle identification, dedupe-safe delivery, and operator control (email, inbox, CLI)