Inbox notice policy and local inbox cache: when to poll, when the post-command notice shows and retires, and a cache file per API-key fingerprint, with no wiring yet

s1h ago

#3976

Scheduled flaky-test detection is failing

s2h ago

#3990

Inbox API contract and SwampClubClient inbox methods: summary, list, get and mark-read, pinned by a shared fixture and design/surfaces/inbox.md

s2h ago

#3922

Datastore rework Phase 5: content-level authorisation for forwarded definition and evaluated-file writes

s10h ago

#3993

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

2h ago

#3985

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

s2h ago

#3939

v3 read model: guard against aliased key spellings on case-insensitive filesystems, without slowing replay

s15h ago

#3954

Scheduled flaky-test detection is failing

s16h ago

#3918

stagecraft remote studio: one long-lived connection to serve instead of a swamp process per read

17h ago

#3921

stagecraft remote studio poll: follow-ups from #3658 review (flaky test, mid-poll first page, quiet-poll test)

17h ago

#3965

docs(manual): the manual documents swamp subscription status and start — standings, call to action, flags and --json output

s18h ago

#3951

swamp subscription start opens the Swamp Club billing page, or a collective's with --collective, and status points its call to action at it

s1d ago

#3916

v3: the compaction policy bounds how much history a fresh clone replays (retainMs, minCommits, retainCommits) and the base load skips files the tail removes

s1d ago

#3953

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

1d ago

#3935

v3 on S3/GCS: a replica restore yields a corrupt commits.db (fails SQLite's integrity check), so fresh clones and restores of the datastore fail; reproduces with Litestream alone from its first compacted L1 file (found by #3916)

s1d ago

#3950

swamp subscription status reports the plan and billing standing of the signed-in user and each collective, worded as auth whoami words it

s1d ago

#3949

/o/<slug>/billing sends a signed-out visitor to the collective page, or a 404 when private, instead of through login and back like /billing

sk1d ago

#3942

swamp-extensions GCS storage test 'put: an abort mid-upload leaves no object and no resumable session' fails about 1 run in 5 (fixed 50 ms sleeps)

s1d ago

#3947

refactor(cli): share auth whoami's collective-standing helpers ahead of swamp subscription, and pin Personal License and Admin standings

s1d ago

#3924

@swamp/cve/tailworm: check the reachability matrix against a Tailscale-hosted tailnet

s1d ago

#3944

AWS codegen treats nested primaryIdentifier pointers as top-level fields

1d ago

#3943

AWS codegen collapses nested createOnly/readOnly paths to their last segment

1d ago

#3946

Generated state schemas require every child of nested objects, so normal resources warn on create/get

1d ago

#3901

swamp-club.com/cve/tailworm states two things its sources do not say: finding 5's memory growth and no exploitation in the wild

s1d ago

#3945

cve/tailworm extension README says the findings were not seen in the wild, which no source states

1d ago

#3915

Datastore rework Phase 5 (team mode) 1/3: serve's datastore API — commit, chunk and catch-up endpoints, authorisation on each op's intent, principal stamping and actionable conflicts

s1d ago

#3923

@swamp/cve/tailworm: reachability follow-ups from #3919 review

1d ago

#3919

@swamp/cve/tailworm: opt-in reachability matrix from each node's packet filter

s1d ago

#3920

swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

s1d ago

#3913

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

1d ago

#3900

@swamp/cve/tailworm: after mitigate caps headscale, the rescan still tells you to set MemoryMax and Restart=always

s1d ago

#3910

@swamp/cve/tailworm grade: unix serve targets the probe could not resolve are graded as ordinary sockets

s1d ago

#3909

kubernetes: externalsecret and normalizeMeta follow-ups from #3907

s1d ago

#3902

v3 crash recovery's progress line breaks --json stderr: a failing command that recovered prints text before its JSON error (regression from #3363 / #3893)

s1d ago

#3877

Docs: vaults reference should say a wide local_encryption key file gets a warning

2d ago

#3859

Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint

2d ago

#3821

Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

s2d ago

#3893

v3 long silent waits: crash recovery runs ~24 s with no output, data prune is silent 6-10 s in log mode, and a lagging read hangs ~112 s when Litestream's listing is cut (found by #3756)

s2d ago

#3889

Add @swamp/cve/http2shell: scan and mitigate the Brotli decoder RCE (CVE-2026-111497, Node2Shell/HTTP2Shell)

s2d ago

#3891

extension_tarball_analyzer_test fails on macOS: tar --mode is GNU-only

s2d ago

#2907

S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back

2d ago

#3860

v2 S3: about 4-5% of serial workflow runs fail with datastore_unpublished_data_version ('a concurrent run or the serve poller synced') when nothing else is running (found by #3756)

s2d ago

#3756

Datastore rework Phase 4 I: dogfood and benchmark solo v3 (filesystem, S3, GCS) in a throwaway repo with the released binary, check the kill criteria, and decide whether to announce

s2d ago

#3882

v3 bucket outage: a command cut off while becoming the writer says its changes are saved locally when nothing was saved (workflow approve), and the suggested recover fails for a run cut mid-step (found by #3756)

s2d ago

#3879

auth login browser flow prints a fatal stack trace when swamp-club cannot be reached

s3d ago

#3880

Scheduled flaky-test detection is failing

s3d ago

#3803

v3 first clone and restore of a bucket datastore take 2.6-3x v2, missing #3418's 1.5x target (found by #3756)

s3d ago

#3767

swamp update downloads before failing in a sticky directory with another user's binary, and blames an immutable flag

s3d ago

#3771

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

3d ago

#3823

Docs: install-swamp says SWAMP_HOME moves everything, but agent skill folders stay in the user's home folder

3d ago

#3792

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

s3d ago

#3802

v3 bucket outage: a workflow run whose checkpoint committed is told nothing was committed, three outage errors have no stable code, and exit takes 15-60 s (found by #3756)

s3d ago

#3801

v3 identity on buckets: S3 checkouts with different endpoint spellings fork the datastore silently, and a hostname change blocks every write for ~5 minutes (found by #3756)

s4d ago

#3811

typed_workflow_passes_test child-sentinel case flakes under full-suite load: f.received.at(-1) reads the compare step's empty payload

4d ago

#3794

extension push drops local modules when the repo under a node_modules folder is reached through a symlinked path (macOS /var, the swamp-club#3782 fix)

4d ago

#3382

Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it

s4d ago

#3695

Docs: issue redaction keeps git ids and non-address colon runs, and asks before posting (swamp-club#3686)

4d ago

#3599

Docs: worker daemon enable reference is missing --ca-cert, --concurrency and SWAMP_SERVE_EXTRA_HEADERS

s4d ago

#3759

v3 on S3/GCS: a write whose commit cannot reach the bucket prints "succeeded" on --json, exits 1, and is lost (confirm-before-output, found by #3756)

s4d ago

#3761

swamp-club /cve/dirtyfrag page shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects

s5d ago

#3760

v3: datastore config migrate skips every workflow that has run (name-committed), and they are then "not found" (found by #3756)

s5d ago

#3762

@swamp/cve/dirtyfrag report suggests commands for dirtyfrag-scanner whatever the model is named

s5d ago

#3763

v3 on a bucket: after a commit fails because the bucket is unreachable, the closing sync still waits its full 60 s before the command exits

5d ago

#3743

Interactive history and output search pickers cannot open a run under a non-default datastore

s5d ago

#3736

v3 recovery sweep: dot-prefixed data names escape it, HFS+ non-ASCII names are deleted by it, and an old mtime keeps a dropped write's file (bug hunt group 8)

s5d ago

#3738

Source glob expansion crashes when a directory under the glob parent disappears mid-walk

s5d ago

#3737

v3 chunk barrier on macOS: use F_BARRIERFSYNC (ordering) instead of F_FULLFSYNC (full drive-cache flush), cutting ~10-25 ms (200 ms+ on a busy disk) per command

s5d ago

#3694

extension_source_add_test globs the real home directory and flakes when a file in ~ disappears mid-walk

s5d ago

#3696

v3 join check refuses a fresh managedConfig checkout on S3/GCS: the datastore extension's auto-install writes the managed lockfile first (regression of #3690)

s6d ago

#3675

Docs: doctor datastores reference for the v3 content check and lost format marker repair

6d ago

#3678

Docs: step dataOutputOverrides vaultName and the field-by-field override merge (swamp-club#3606)

6d ago

#3622

Docs: data name portability rule and warning

6d ago

#3623

Docs: vault create and vault migrate refuse a local_encryption name with leftover storage

s6d ago

#3691

v3 namespaces: cross-namespace reads return the reader's own content, a namespaced local tier is overwritten by solo commits, and namespaces can collide with swamp's own .swamp/ directories (bug hunt group 7)

s6d ago

#3690

v3: a checkout holding v2 records joins a v3 datastore through .swamp.yaml unguarded, overwriting its records and diverging for good (bug hunt group 5)

s6d ago

#3644

v3 on S3/GCS: the namespace refusal names setup filesystem, and an unreadable marker on a format-3 repo says "will not open … as format 2" (found by swamp-uat#715)

6d ago

#3643

v3 on S3/GCS: setup on a prefix holding only swamp's format-3 marker fails with "this swamp release can't open" format 3 (found by swamp-uat#715)

s6d ago

#3680

Workflow runs ignore defaultVault: step sensitive outputs land in the first vault, and validate predicts a vault the run doesn't use

s6d ago

#3617

v3 local durability: chunks aren't fsynced before the commit naming them, so a power cut can wedge every checkout; torn writer and format markers don't heal (bug hunt group 4)

s6d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

3d ago

#3653

Scheduled flaky-test detection is failing

s6d ago

#3652

ssh: follow-ups from #3581 review — master rekey vs per-call known_hosts, settle error handling, atomic new-file mode

s7d ago

#3642

v3 on S3/GCS: a fresh checkout whose restore from the replica fails reports an empty datastore and exits 0 (found by swamp-uat#715)

s7d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

7d ago

#3624

swamp CLI: revokeCollectiveToken should tell an unknown token from an unknown collective once swamp-club answers 404

s7d ago

#3615

Dev stack serves corrupted gzip under Vite: browsers fail with ERR_CONTENT_DECODING_FAILED

s7d ago

#3604

worker daemon enable: an unreadable --ca-cert passes enable, and SWAMP_SERVE_EXTRA_HEADERS is silently dropped under sudo

s7d ago

#3587

v3: a crashed workflow run and its completed steps' data are deleted by recovery before workflow recover or serve's reaper can see them (bug hunt group 6)

s7d ago

#3588

Scheduled flaky-test detection is failing

s7d ago

#3586

v3 outbox: a reported failure can land, a commit can name a deleted chunk, and a fenced writer is told nothing landed when it did (bug hunt group 3)

s7d ago

#3564

v3: writer liveness is judged wrong: a same-hostname container takes over a live writer, a stalled writer's file is reverted then committed, and a fenced retention pass rewinds the new writer (bug hunt group 1)

s9d ago

#3572

agent-runner and deno-runner: support Windows (both refuse to start: Unsupported operating system)

s10d ago

#3565

v3 replication: check a possible S1 in serve's retake, fix serve wedging on a retake mid-replacement, and stop 'the next write replicates them' being false (bug hunt group 2)

s10d ago

#3567

Enforce the minimum S3/GCS extension version for v3 bucket datastores from the lockfile

s10d ago

#3534

Datastore rework Phase 4 E: v3 on S3 and GCS (solo mode): setup --format 3 on buckets, replication as a datastore property, end to end

s10d ago

#3566

doctor datastores decides v3 from the format key, so an override pointed at a v3 bucket runs the v2 contamination check and repair

s10d ago

#3535

Retention under serve load: measure and fix automatic passes against #3518's busy-serve contention, and the large-backlog first pass

s10d ago

#3556

Scheduled flaky-test detection is failing

s10d ago

#3549

S3/GCS datastores: keep v2 sync off v3 buckets (exclude _litestream/, refuse a format-3 marker) for swamp releases before v20261009.154711.0

s10d ago

#3553

v3: a refused commit leaves its staged files in the checkout for good, so that checkout shows data the datastore doesn't hold (exposed by #3532; swamp-uat breakglass test failing)

s10d ago

#3193

Datastore sync: a no-op push after a model-scoped pull arms the remote commitSeq, hiding other hosts' commits until the next commit

s10d ago

#3550

Regression from #3546: legacy (hashless) cache files lose their mtime trust, so a peer's deletion can be undone and untouched files are re-uploaded (seed the own record once)

s10d ago

#3546

@swamp/s3-datastore and @swamp/gcs-datastore: pull's same-size fast path trusts the pushing machine's mtime, so a conflicting local file can be kept

s10d ago

#3541

Scheduled flaky-test detection is failing

s10d ago

#3508

Datastore rework Phase 4 G: S3 and GCS extensions implement replicaTarget() for v3 Litestream replication

s10d ago

#3532

v3: a data name emptied of every version restarts at version 1, reusing a number for different content (use the partition's highWater; refuse a reused version)

s11d ago

#3537

Docs: garbageCollection retention — per-kind keys, automatic passes, and what is never removed

10d ago

#3531

Datastore rework Phase 4: a provider capability to remove abandoned Litestream lineage paths on buckets (replicaPaths), so chunk GC isn't deferred forever

s11d ago

#3533

In-memory remote: model create-only data version writes so core tests can pin them (follow-up to swamp-club#3377)

10d ago

#3507

Datastore rework Phase 4: a provider-supplied replica target (replicaTarget()) so v3 replicates to the datastore's own bucket, plus conformance

s11d ago

#3506

v3 commit outbox: a discarded entry is removed without fsync, so after a power cut recovery can land a commit whose command reported failure

s11d ago

#3492

Datastore rework Phase 4 G: S3 and GCS extensions implement storage/1 chunk storage for v3

11d ago

#3395

Datastore rework Phase 4 G: S3 and GCS implement the writable datastore-wide control plane and keep _control/writer/ at the bucket root

s11d ago

#3494

Scheduled flaky-test detection is failing

s11d ago

#3490

Datastore rework Phase 4 F: a durable outbox for v3 commits, the post-commit chunk check on recovery, and pruning compacted_txns

s11d ago

#3501

swamp worker list shows a worker as idle while its verify-on-enroll probe is still pending

s11d ago

#3505

Docs: say what the first run after a typeVersion upgrade writes to the definition file

10d ago

#3491

Datastore rework Phase 4: close D2 follow-ups before v3 replication is switched on (lineage, messages, migration, chunk GC)

s12d ago

#3489

Datastore rework Phase 4: serve confirms each v3 write request is replicated before it answers (group commit)

s12d ago

#3493

@swamp/gcs-datastore: GcsLock.inspect() reports a failed read as no lock, so a GCS outage looks like a lost model lock

11d ago

#3482

Datastore rework Phase 4 D2: restore, refresh and takeover from the v3 replica, with a checkout-local commits.db (dormant)

s12d ago

#3485

S3/GCS: a run refused for losing its model lock keeps its write dirty when the refresh can't reach the datastore, so a later sync pushes it

s12d ago

#3469

Docs: add PowerShell to Set Up Shell Completions

s12d ago

#3471

Add Windows installer to the homepage and manual

s12d ago

#3476

CopyCommand's clipboard fallback selects the wrong command on pages with several copies

s12d ago

#3475

README: add Windows to the supported platforms and its installer

12d ago

#3474

install.ps1 closes the user's PowerShell window on failure when run via irm | iex

s12d ago

#3418

v3 first clone on Linux is 2.6x slower than v2: batch the catalog refresh during catch-up

s12d ago

#3459

Windows: no PowerShell completions subcommand

s12d ago

#3458

Windows: extension yank fails with API key auth despite extensions:* scope

s12d ago

#3457

Windows: registry rejects windows-x86_64 as a valid platform

s12d ago

#3460

Windows: update --check reports no binary available for windows/x86_64

s12d ago

#3456

Windows: extension push type field shows file path instead of exported type name

s10d ago

#3453

Docs: extension quality now reports repository-verified for private source hosting (swamp-club#3406)

10d ago

#3448

Docs: choosing where a new workspace is created (--path, start page Location field, workspaces.dir)

12d ago

#3433

Manual: broken anchor and tutorials teach deprecated swamp data get

s12d ago

#3446

Docs: serve-flags.md admin/allowed-user resolution is stale (pinned names, oauth:manage for lookups, plain usernames only)

12d ago

#3428

swamp update --check fails with a raw [FTL] TimeoutError when the artifacts host takes over 5s

s12d ago

#3440

whoami reports each collective's private source hosting and namespace privacy, so the CLI quality rubric can match the registry's repository-verified verdict

s12d ago

#3445

Manual: working-with-data copy button copies a truncated data query

12d ago

#3437

Error and help messages still say model under swamp behavior commands (follow-up to #3431)

s12d ago

#3431

CLI output still says model under swamp behavior commands

s12d ago

#3429

Manual: make behavior the primary term and command spelling

s13d ago

#3273

Docs: Layout Migration says repo upgrade deletes gen-2 files without re-pulling

s13d ago

#3426

Scheduled flaky-test detection is failing

s13d ago

#3416

Datastore rework Phase 4 D1: Litestream sidecar for v3 writers, and a write command waits for replication before it reports success (dormant)

s13d ago

#3123

Accept usernames for user subjects in grant files

s13d ago

#3427

Docs: swamp workspace commands and workspaces in the manual (swamp-club#3424)

13d ago

#3423

Docs: document swamp start onboarding and the local dashboard

13d ago

#3419

Docs: grant-file username: subjects in the swamp serve manual

13d ago

#3414

Datastore rework Phase 4: the v3 writer lease requires an extension's explicit declaration that it keeps _control/writer/ at the root, not just a writable store's shape

s13d ago

#3417

Datastore rework Phase 4: real-endpoint check of Phase 4A's replication figures on a hosted S3-compatible service (spike)

12d ago

#3364

Datastore rework Phase 4 E/G: a writable datastore-wide control plane so the v3 writer lease binds at the bucket root

s13d ago

#3413

Docs: serve-flags check-config row for bare restricted-model-types entries

13d ago

#3357

Datastore rework Phase 4: measure Litestream replication on real S3 and GCS buckets (spike: per-command vs idle sidecar, cost of waiting for replication)

s13d ago

#3375

v3 writer lease: a stray or unpadded fence key under _control/writer/ wedges the lease

s13d ago

#3372

datastore lock status reports held: false for model locks on S3 and GCS datastores

s13d ago

#3338

Extensions accept export const behavior, extensions/behaviors/ and a behaviors: manifest key alongside model

s13d ago

#3387

Docs: grant and revoke changes reach every serve instance within one poll interval (S3/GCS and v2 filesystem)

13d ago

#3373

S3/GCS: a run whose model lock was force-released still pushes, and one run's write is lost

s13d ago

#3255

rollbackOnFailure methods fail when run as a workflow step

sz13d ago

#3381

Registry UI and manual say Behaviors, keeping the stored models content type

12d ago

#3377

S3/GCS datastores: write data version files create-only so a second writer cannot overwrite an existing version

s10d ago

#3359

Datastore rework Phase 4: a fenced writer lease for v3 datastores, replacing Phase 3's writer lock

s13d ago

#3334

Workflow YAML, extension exports and serve grants accept the behavior spelling alongside model

s13d ago

#3358

Datastore rework Phase 4: download, verify and cache a pinned Litestream binary on first v3 use (dormant)

s13d ago

#3333

Serve dashboard uses behavior terminology, with old routes kept

s13d ago

#3362

Docs: Claude Code page says swamp always writes CLAUDE.md (changed by swamp-club#3346)

13d ago

#2746

A pulled extension can shadow a built-in type, and removing it leaves serve without the built-in

s13d ago

#3332

Skills and generated agent guidance use behavior and swamp behavior commands

s13d ago

#3345

Docs: state the OpenCode version requirement for the swamp audit plugin

13d ago

#3331

swamp behavior is the full preferred command group, with every swamp model spelling kept

s14d ago

#3315

DispatchService two-slot worker test assigns disabled Object.prototype.proto

s14d ago

#2563

Partial extension catalog saves delete rows for sources mounted from outside the repo

s14d ago

#3337

Datastore rework: a fresh v3 checkout is slow because catch-up fsyncs every file one at a time (27 s vs 1.1 s for 1,000 items on macOS)

s14d ago

#3330

Build each swamp model command from a factory so behavior can share it (no visible change)

s14d ago

#3329

Design record: behavior is the product term for models, with model kept working

s14d ago

#3336

Docs: show the full --literal-inputs warning, including Raw:, in the model definitions reference

13d ago

#3321

model method run --literal-inputs: the warning's Raw: text drops a brace from the expression

s14d ago

#3322

repo init --help omits pi and antigravity from the built-in --tool list

s14d ago

#3302

swamp model edit silently renames the target when the piped body's name differs

z14d ago

#3265

Add swamp behaviour run as the preferred model-method command

z14d ago

#3299

Datastore rework: on v3, an interrupted method run's outputs never reach other clones (SIGTERM should commit; SIGKILL must be visible)

s14d ago

#3300

Datastore rework: on v3, turning managedConfig on hides existing config (the default vault); give v3 its own config migrate

s14d ago

#3301

Datastore rework: on v3, namespace set before setup --format 3 fails without --skip-migration, and namespace list shows no namespaces

s14d ago

#3305

S3/GCS datastore sync: shared sync service lets one sync clear another's dirty marks and pull over unpushed files

14d ago

#3304

Docs: --literal-inputs and data that never evaluates as authored (swamp-club#3205)

14d ago

#3296

Docs: say that validation applies the upgrade chain before checking global arguments

14d ago

#3281

datastore setup strands repo-local audit history and run logs in the new datastore

s14d ago

#3279

Datastore rework Phase 3: opt in to v3 for new filesystem datastores (single writer), and wire v3 into CLI and serve (no v2 behaviour change)

s14d ago

#3276

classifyConnectionError mislabels non-auth connection failures as auth failures

s14d ago

#3283

Docs: datastore reference says audit logs and telemetry live in the datastore

13d ago

#3278

Datastore rework Phase 3: a v3 home for audit, telemetry, logs and files, dormant (no behaviour change)

s14d ago

#3280

s3-datastore: first push on a fresh cache prints 'Index merge failed' for a missing local .datastore-index.json

15d ago

#3258

Datastore rework Phase 3: history compaction so superseded chunks can be reclaimed, dormant (no behaviour change)

s15d ago

#3271

Windows: extension install legacy migration finds zero files

s15d ago

#3269

Windows: worker daemon status reports not installed (no systemd/launchd)

s15d ago

#3270

Windows: extension rm joins repo dir with already-absolute bundle path

s15d ago

#3257

Datastore rework Phase 3: workflow run and vault config repositories stage typed changes on v3 (no v2 behaviour change)

s15d ago

#3267

Windows: cancelled step records error suffix that POSIX does not

s15d ago

#3266

Run GC never removes run logs when a non-default datastore is configured

s15d ago

#3268

Windows: check-config --grants-file and --grants-dir still output backslash absolute paths

s15d ago

#3256

Datastore rework Phase 3: definition, workflow and evaluated repositories stage typed changes on v3 (no v2 behaviour change)

s15d ago

#3264

Windows: datastore compact fails with database is not open

s15d ago

#3259

repo init: create a default local_encryption vault, and stop persisting absolute base_dir in vault configs

s15d ago

#3260

Docs: default vault at repo init, --no-vault, and base_dir no longer persisted (swamp-club#3259)

14d ago

#3250

Datastore rework Phase 3: shared typed staging route, and data and output repositories stage typed changes on v3 (no v2 behaviour change)

s15d ago

#3246

Extension auto-resolution installs an unrelated extension when a registry search guess does not provide the type

s15d ago

#3249

Datastore rework Phase 3: chunk garbage collection for unreferenced chunks, dormant (no behaviour change)

s15d ago

#3245

Windows: check-config grant error messages use backslash paths

s15d ago

#3248

Windows: workflow run --input does not honour \@ escape in k=v value

s15d ago

#3247

Windows: model run with vault secret containing $ exits 1 silently

s15d ago

#3239

Datastore rework Phase 3: the v3 read model, dormant (no behaviour change)

s15d ago

#3241

Windows: workflow cancel and model cancel do not kill the step process tree

s15d ago

#3243

Extension auto-resolution reports a registry timeout as "no extension publishes this type"

s15d ago

#3240

Datastore rework Phase 3: the commit-log unit of work and binding registry (no v2 behaviour change)

s15d ago

#3242

Windows: workflow history outputs stdout has trailing CRLF that breaks exact-match schemas

s15d ago

#2534

serve: without a remote datastore the token GC is not serialized against token rotate/re-mint

s15d ago

#3236

Datastore rework Phase 3: the commits.db commit store, dormant (no behaviour change)

s15d ago

#3237

Datastore rework Phase 3: the chunk store and the storage/1 contract, dormant (no behaviour change)

s15d ago

#3233

Datastore rework Phase 3: the v3 commit and partition domain model, dormant (no behaviour change)

s16d ago

#3234

Datastore rework Phase 3: Litestream embedding spike (a written decision, no production code)

s16d ago

#3222

repo init writes Amp and Kiro permission settings in formats current versions no longer read

s16d ago

#2535

serve: server token GC follow-ups (upgrade backlog holds the sync gate, not-found matching, owner lookup, UX)

s16d ago

#3235

Docs: update Kiro and Amp how-to pages for the new scaffolding (swamp-club#3222)

14d ago

#3232

Docs: serve token GC per-sweep limit and quoting 0 in serve.yaml

14d ago

#3191

Datastore rework Phase 3: measure and bound the format-guard marker read's cost

s16d ago

#3204

@swamp/s3-datastore and @swamp/gcs-datastore: implement datastoreControlPlaneStore() for the format marker read

11d ago

#3192

Datastore rework Phase 3: publish the extension lockfile as a unit-of-work commit (no behaviour change)

s18d ago

#3203

Docs: datastore-provider reference for datastoreControlPlaneStore and control-plane read options

14d ago

#3188

Scheduled flaky-test detection is failing

s18d ago

#3199

Docs: concurrent scheduled runs and queue delay in swamp serve

14d ago

#2863

Tests: serve pollers make a peer's writes, deletes and grants visible with a real catalog (before Phase 5)

s18d ago

#3198

s3-datastore: model-scoped pullChanged lists and walks the whole namespace

18d ago

#3186

Docs: worker connect no longer needs a swamp-club credential (swamp-club#3128)

s18d ago

#3189

Datastore rework Phase 3: format-guard release, so swamp refuses datastores with a newer format and writes nothing

s18d ago

#3187

access grant create: --methods is silently dropped on the local path, so an allow grant covers every method

18d ago

#2643

Codegen/DigitalOcean: create-only required fields block list/get/delete in generated DigitalOcean models

s18d ago

#2906

Tests: bring the in-memory remote's default semantics up to @swamp/s3-datastore and @swamp/gcs-datastore 2026.10.01.1

s18d ago

#2900

Tell the pushing client when its extension contentMetadata fails validation

z18d ago

#3167

Windows Compatibility CI fails on main: about a dozen tests across serve, sync, CLI path resolution, process and tracing

s18d ago

#2671

Concurrent first runs in a fresh repo log 'Catalog migration to per-extension-aggregate-v3 failed (database is locked)'

s18d ago

#3185

Docs: state the literal type/version catalog contract and the uncatalogued-model push warning in the extensions publishing reference

18d ago

#2513

worker prune: remote datastore keeps deleted worker records (no-path markDirty() skips deletions)

s18d ago

#3155

worker prune cannot delete worker models when auto-definitions live in a remote datastore

s19d ago

#3154

model get and model search miss auto-definitions stored in a remote datastore

s19d ago

#2382

model delete resolves auto-definitions from repo-local .swamp instead of the datastore cache

s19d ago

#3162

datastore setup filesystem --path .swamp copies .swamp onto itself and never writes the datastore block

19d ago

#3165

Docs: vault grants and run vault scoping on swamp serve (swamp-club#2676, swamp-club#2206)

18d ago

#3124

Flaky property test: analyzeExpression dot/bracket agreement fails when the generated model name is a CEL keyword

s19d ago

#3122

Docs: enable-managed-config should say to re-run config migrate when its push fails

18d ago

#2621

datastore config migrate checks the sentinel in the stale local cache and re-runs a full migration over a shared S3 datastore

20d ago

#3117

datastore config migrate writes its sentinel before pushing; after a failed push a re-run reports 'already completed' and never publishes

s20d ago

#3121

Docs: grant file reference shows a stale format and omits resources and subjects

18d ago

#3076

Resolve non-admin actors in dashboard audit logs

s20d ago

#3115

Docs: serve authorization page should cover expression-reference checks and the vault.get trust boundary

20d ago

#3101

Shell steps: a vault.get on a continuation line of a multi-line double-quoted string inside a here-doc is wrapped in quotes

s20d ago

#2669

GCP bigquery datasets update cannot target the dataset: reads the id from a name field datasets do not have

s20d ago

#3090

swamp-testing withMockedCommand: record env and cwd in CapturedCommandCall

s20d ago

#3077

Share dashboard authentication across tabs for deep links

s20d ago

#3099

Docs: vault.get shell references are placed per occurrence, and every single-quoted use is warned about

20d ago

#3058

Scheduled flaky-test detection is failing

s20d ago

#3091

Docs: serve authorization of expression references, env and direct-type runs (swamp-club#2786)

20d ago

#3087

Docs: dispatch-env-allow and how remote shell steps receive secrets (swamp-club#2760, swamp-club#2791)

20d ago

#2901

serve: a failed pull in acquireModelLocks leaves the per-model lock held until serve exits

z20d ago

#3056

Datastore rework Phase 2: find, wrap and warn on hooked writes outside a unit of work (route 2), without removing it (no behaviour change)

s20d ago

#3054

Serve audit: WAL replay at startup deletes segments before the store confirms them

s21d ago

#3055

Datastore rework Phase 2: one flush path, so every push is a root's flush or checkpoint (no behaviour change)

s21d ago

#3050

Flaky test: usePreviewFetch in-flight fetch for A is discarded after switching to cached B

21d ago

#3052

Serve audit: delivered WAL segments are only deleted at shutdown, so a long-running serve fills the WAL

21d ago

#2990

Serve audit: sink filter config in serve.yaml is never validated

21d ago

#3053

Datastore rework Phase 2: root units can checkpoint, and the CLI token commands push mid-command through it (no behaviour change)

s21d ago

#3049

Docs: data query reference lists a --limit default of 100 and omits --single

21d ago

#3035

Datastore rework Phase 2: remaining serve direct pushes commit through root units (no behaviour change)

s21d ago

#2988

Serve audit: emitter breaks the durable hash chain and drops WAL events when a non-durable sink fails or lags

z21d ago

#3034

Datastore rework Phase 2: serve handlers commit through the unit of work (no behaviour change)

s21d ago

#3029

CEL data.version, data.listVersions and data.findBySpec drop data written before a model instance rename

s21d ago

#3036

Docs: doctor install reports a stale or failing autoupdate scheduler

18d ago

#3033

Datastore rework Phase 2: CLI commands stop marking and pushing directly (no behaviour change)

s21d ago

#3032

Datastore rework Phase 2: commit pushes through a root unit of work per command or request (no behaviour change)

s21d ago

#3025

Datastore rework Phase 2: use cases open and commit the unit of work (no behaviour change)

s21d ago

#3028

Docs: manual approval pages show old quoted approve/approvals hints

21d ago

#2996

Datastore rework Phase 1 close-out: lock repository marks at zero, remove dead helpers, document the end state (no behaviour change)

s24d ago

#2997

Installer and README present required Swamp Club login as optional

s24d ago

#2995

Datastore rework Phase 1 move C2: the vault config repository stages typed changes, serve stops marking vault files by hand (no behaviour change)

s24d ago

#2846

Model add-ons that extend a built-in model type never attach in CLI processes

s24d ago

#2992

Datastore rework Phase 1 move C1: the workflow run repository stages typed changes (no behaviour change)

s24d ago

#2980

Datastore rework Phase 1 move B: definition, workflow and evaluated repositories stage typed changes (no behaviour change)

s24d ago

#2348

Add self._index to forEach expression context

s24d ago

#2979

Datastore rework Phase 1 move A: data and output repositories stage typed changes (no behaviour change)

s24d ago

#2986

Docs: document self._index for forEach steps in the manual

21d ago

#2971

Datastore rework Phase 1: optional ambient unit of work in repositories (no behaviour change)

s24d ago

#2904

Extension content extractor truncates metadata when a string, comment or regex contains an unpaired brace

s24d ago

#2970

Datastore rework Phase 1: UnitOfWork port and legacy adapter (no behaviour change)

s24d ago

#2659

acquireModelLocks writes SWAMP_LOCK_HOLDER_PID to process-global env, so concurrent runs in one process clobber each other

z24d ago

#2954

verify-reviews reports provider-error when a passing review mentions swamp's own invalid_api_key error code

24d ago

#2953

Show the redaction diff and ask for confirmation before submitting an issue in log mode

24d ago

#2938

--json stderr mixes an offline auth-gate warning line with the pretty-printed error, so it can't be parsed

s25d ago

#2936

@swamp/tailscale: follow-ups from the initial release verification review

s25d ago

#2937

Scheduled flaky-test detection is failing

s24d ago

#2934

Docs: account-requirement manual page after the auth gate follow-ups (swamp-club#2916)

25d ago

#2916

Auth gate follow-ups: fail closed when the fail-open window can't be recorded, UX polish (swamp-club#2231)

s25d ago

#2644

Codegen/Vercel: create-only required fields block read methods in generated Vercel models

s25d ago

#2231

Auth gate: enforce authentication and add background proof refresh

s25d ago

#2890

Server fallback content extraction drops quoted method keys and lists nested objects as methods

s25d ago

#2902

Docs: account requirement and auth gate (swamp-club#2231)

s25d ago

#2861

Conformance: behavioural round-trip suite for DatastoreSyncService in packages/testing

25d ago

#2859

Tests: remote failures during sync keep local writes dirty and the next flush uploads them (every flush path)

25d ago

#2857

Tests: two repos on one remote datastore: writes, deletes, renames and gc propagate through the real flush path and catalog

25d ago

#2855

Tests: every file a datastore repository changes on disk is covered by a markDirty (pin today's unmarked paths)

s25d ago

#2887

Scheduled flaky-test detection is failing

s25d ago

#2862

Tests: property test for buildMarkDirtyHook path mapping

25d ago

#2860

Tests: characterise marks and pushes for every libswamp write use case via CLI and serve compositions

25d ago

#2858

Tests: characterise stale catalogs when two repos or serve nodes share a filesystem datastore

25d ago

#2856

Fitness: ratchet markDirty call sites, repository constructions outside the factory, and unhooked datastore writers

s25d ago

#2892

Extension datastore: query still returns an item after its delete is pulled

z17d ago

#2883

Docs: document serve and worker trace structure in the OpenTelemetry reference

25d ago

#2854

Test infra: shared in-memory remote datastore fake and recording sync service for pre-refactor datastore tests

s26d ago

#2851

CEL: an expression naming the identifier cel returns {} instead of the context value

s26d ago

#2500

Scheduled flaky-test detection is failing

s26d ago

#2866

Docs: SWAMP_API_KEY_FILE and serve --club-api-key-file

25d ago

#2865

Tracking: test baseline required before the datastore refactor (commit-log design)

13d ago

#2864

CI: run swamp-uat's datastore suite against the PR binary for PRs touching datastore code

s24d ago

#2853

Docs: document mount-independent file grant sources for --grants-dir and --grants-file

26d ago

#2745

serve reload keeps a removed extension's add-on methods on built-in and local model types

s26d ago

#2849

Docs: telemetry opt-out is user-level and applies everywhere (swamp-club#2831)

26d ago

#2783

Object-level refinements on globalArguments schemas are not enforced at execution time

s26d ago

#2784

Docs: remove stale Docker Execution Driver section from the extension model reference

s26d ago

#2787

Docs: authorization reference should say access-control records need admin, not a data grant (swamp-club#2756)

26d ago

#2764

Docs: use-the-audit-timeline should state the permission swamp audit --server needs

26d ago

#2763

issue-lifecycle triage fails with 422 when the primary issue is already in_progress in swamp-club

s25d ago

#2761

Docs: worker-fleets TLS one-liner fails with KeyMismatch on macOS LibreSSL

26d ago

#2759

Docs: sensitive values read through expressions are delivered like vault.get (swamp-club#2171)

26d ago

#2754

serve: define and supply the collective and owner grant condition variables

27d ago

#2752

managedConfig: most CLI config writes exit 0 when the push to the datastore fails, leaving the change unpublished

s27d ago

#2742

managedConfig: extension rm on one serve instance leaves the extension's types registered on its peers

s27d ago

#2741

PulledExtensionsLock timeout names the lock file with a forward slash on Windows; Windows CI fails on main

s27d ago

#2515

definitions: delete() silently leaves an auto-definition file unless an earlier lookup cached its path

s27d ago

#2740

Docs: describe how enrollment token revoke disconnects connected workers

27d ago

#2737

vault create/migrate --config help says local_encryption 'always uses' the server key source

s27d ago

#2733

Docs: local_encryption key-source fields are refused over --server

27d ago

#2728

Docs: serve authorizes requests by id against the resource's name

27d ago

#2700

issue-lifecycle: link issues that ship together and ship duplicates

s27d ago

#2705

serve audit: auth.token.used hardcodes principalKind user for worker tokens

s27d ago

#2716

serve: model.delete of a missing model replies with message [object Object]

s27d ago

#2720

deno task audit fails on main: new OSV advisories in locked dependencies block verify-build

27d ago

#2718

tests: extension_member_precedence_test fails on macOS (/var vs /private/var temp path)

s27d ago

#2715

tests: extension_member_precedence_test fails on macOS (tmp path vs /private realpath)

27d ago

#2693

vault edit cannot open a vault whose YAML no longer parses

s27d ago

#2642

Codegen/Hetzner: create-only required fields block list/get/delete in generated Hetzner models

s27d ago

#2682

Add a duplicate_of relationship type to lab issues

s27d ago

#2681

vault edit rename leaves local_encryption secrets under the old vault name

s27d ago

#2689

Windows compat CI red on main since #2644: extension_reload_test compares a raw path to the catalog's canonical path

s27d ago

#2571

Concurrent workflow runs race on extension auto-resolve: 'Unknown model type' in one of them

s27d ago

#2692

Docs: vault rename moves local_encryption secrets

27d ago

#2683

s3/gcs datastore: pullChanged overwrites dirty, unpushed cache files

27d ago

#2679

Docs: edit commands over --server take piped YAML on stdin

27d ago

#2629

GCP codegen: filtered generate:gcp <service> produces different output than a full generate:gcp run

s28d ago

#2658

Flaky test: resolve_datastore_test sets SWAMP_DATASTORE process-wide and breaks parallel workflow_recover_test

s28d ago

#2645

Codegen/Cloudflare: create-only required fields block read methods in generated Cloudflare models

s28d ago

#2661

Docs: document snapshot cleanup and the new snapshot fields in the swamp run gc reference

27d ago

#2660

GCP codegen: a same-surface merge that fails to parse drops the whole preferred document silently

27d ago

#2602

Reports from failed workflow steps are persisted but not recorded on the run

s28d ago

#2657

Codegen/GCP: PUT update fallback from stored state silently reverts out-of-band changes

27d ago

#2635

swamp writes .swamp/audit into the current directory when --repo-dir or SWAMP_REPO_DIR points elsewhere

s28d ago

#2656

Codegen: PUT updates clear optional fields that global arguments leave unset

27d ago

#2653

Docs: document health stream limits and narrowed snapshots in the swamp serve REST API reference

27d ago

#2647

GCP codegen: fetch-schema pulls preview API versions, so preview-only compute resources ship in @swamp/gcp/compute

27d ago

#2625

build-attestation cannot find workflow runs when run from a git worktree

s28d ago

#2624

issue-lifecycle approve logs a 422 from swamp-club: Cannot triage issue in status triaged

s28d ago

#2614

Dashboard live audit stream fails in auth mode none when a token is left in sessionStorage

s28d ago

#2628

GCP enrichment snapshots omit the name field their model StateSchema requires

28d ago

#2626

Docs: health endpoints need a valid token, not admin, and the stream ends on token revoke

27d ago

#2620

verify-build codegen group runs no tests, so GCP enrichment test suites are never gated

s28d ago

#2458

datastore config migrate skips setting managedConfig when the datastore is already migrated

s28d ago

#2623

Codegen/AWS: create-only required fields block list/get/delete in generated AWS models

28d ago

#2622

Docs: fix config migrate output and second-instance setup in enable-managed-config

28d ago

#2609

Dashboard never reconnects after the serve WebSocket closes

s28d ago

#2607

Dashboard JSON highlighter inserts spaces after colons inside string values

s28d ago

#2610

Dashboard Back button wraps onto two lines at phone width

s28d ago

#2601

Run-scoped data get/list return the latest version, not the version the run produced

s28d ago

#2561

ssh: host and per-call env is never forwarded for tailscale transport hosts

s28d ago

#2608

Docs: dashboard deep links for data items, versions and reports

28d ago

#2604

ssh: tailscale forward and sshExtraArgs fail - tailscale ssh rejects any flag before the destination

28d ago

#2577

Dashboard: sidebar navigation items are not keyboard-focusable

s28d ago

#2586

Run the web dashboard locally from the CLI without swamp serve

s28d ago

#2578

[Superseded by 2574] Dashboard: collapse the desktop sidebar to an icon-only rail

28d ago

#2570

extensions: cold start re-warns type extraction when the repo is reached under a different path spelling

s28d ago

#2569

Docs: document extension member collision precedence and local overrides of pulled methods

s28d ago

#2562

extensions: no defined winner when two extensions add the same method to a type; pulled beats local

s1mo ago

#2355

serve reload re-bundles and re-imports every pulled extension to find nothing new

s1mo ago

#2554

ssh: env-forwarded variables are dropped by sudo env_reset for script and for programs run under sudo exec

s1mo ago

#2560

extensions: cold-path catalog rebuild skips sources whose type is not a string literal, dropping them for one process lifetime

1mo ago

#2552

design/enablers/remote-execution.md says cluster.instances and serve.config need read; the code requires admin

s1mo ago

#2558

Post the attestation validation result as a PR comment (Forgejo does not render step summaries)

s1mo ago

#2445

Flaky test: otel worker correlation sees a fresh trace id under the full suite

z1mo ago

#2546

verify-reviews depends on an implicitly auto-installed @swamp/git; a broken local install fails the run with an opaque error

1mo ago

#2545

verify-build upgrade gate skips hand-written extensions but reports succeeded

1mo ago

#2544

Pulled extensions missing from the extension catalog cannot be resolved or auto-repaired, and doctor reports healthy

1mo ago

#2540

serve: rotate the external token-secrets key

1mo ago

#2539

Docs: serve token-secrets external key opt-in (swamp-club#2324)

28d ago

#2422

worker token create via serve always needs --vault: reserved _token-secrets makes the sole-vault default ambiguous

s1mo ago

#2512

serve: --group-refresh-interval warning fires on every non-OAuth boot even when the flag is unset

s1mo ago

#2516

Docs: document server token GC and --token-gc-interval / --token-gc-grace-period in serve-flags.md

28d ago

#2475

swamp run gc deletes output YAML but orphans every run .log file

s1mo ago

#2262

Step-lease and pending-dispatch records accumulate with no reaping mechanism

s1mo ago

#2381

Workflow runs write outputs and evaluated definitions to repo-local .swamp instead of the remote datastore

s1mo ago

#2462

Scheduled flaky-test detection is failing

s1mo ago

#2439

Unsupported --server scheme crashes with an uncaught TypeError and stack trace

s1mo ago

#2463

Windows: concurrent data save can fail with Access is denied renaming the latest marker

19d ago

#2397

Failing CEL expression in a method argument is silently passed through as literal text

s1mo ago

#2460

main fails type check: datastore_sync_rules_test.ts uses assertPinnedSet without importing it

s1mo ago

#2446

serve: make the datastore poll interval configurable (--datastore-poll-interval)

s1mo ago

#2459

Docs: document --datastore-poll-interval and the timer duration maximum in serve-flags.md

28d ago

#2452

Hide --vault on access token mint and rotate now that it always errors

s1mo ago

#2456

Docs: access token mint/rotate --vault removed (swamp-club#2452)

28d ago

#2442

vault not-found errors suggest 'vault create' for names vault create rejects (e.g. _token-secrets)

s1mo ago

#2455

self.globalArguments.X returns the unevaluated expression text when the global argument is itself an expression

1mo ago

#2453

Streamed process output renders curly braces doubled in log output

s1mo ago

#2451

Docs: access-commands manual page describes --vault and control-plane failures incorrectly after #2437

1mo ago

#2441

Docs: explain what swamp serve does with unknown usernames in auth.admins and auth.allowed-users

28d ago

#2440

serve: validate auth access lists without restarting (serve config check)

s1mo ago

#2410

Extension catalog caches a datastore bundle with an empty type, so the repo fails with Unknown datastore type when addressed by its realpath

1mo ago

#2396

Scheduled flaky-test detection is failing

s1mo ago

#2394

planning-conventions: docs gaps are filed with gh issue create on swamp-club/swamp-club, which has issues disabled

s1mo ago

#2402

Docs: CEL expressions manual page - document DataRecord.path and point model.*.file at data.latest().path

1mo ago

#2401

Docs: --principal valid kinds for access token mint, and the invalid-principal 401 reason

1mo ago

#2400

Windows compat CI is red on main: handleDataDelete markDirty relPath assertion fails on Windows

s1mo ago

#2399

Docs: document approve-requires-explicit-grant and the implied approve marker

1mo ago

#2398

Mark manual approval gates decided by a non-interactive principal

1mo ago

#2393

Docs: dashboard resume and opt-in auto-resume for manual approval gates (follow-up to #2377)

1mo ago

#2391

Docs: CEL expressions manual page - steps.<name>.outputs semantics and non-existent startedAt/completedAt fields

1mo ago

#2388

build-attestation hashes workflow files at the commit, not the workflow each run evaluated

1mo ago

#2385

Docs: workflow search --json example in the manual is stale

1mo ago

#2357

serve dashboard: Workflows view shows 0 steps for every workflow

s1mo ago

#2380

deno run build-dashboard fails locally: vite cannot resolve under deno task

1mo ago

#2375

Flaky test: resolveCachePath fails when parallel tests delete HOME

s1mo ago

#2372

design/primitives/extensions.md describes the pre-#2354 bundle-cache warning condition

s1mo ago

#2354

Pulled extensions log a false 'bundle could not be regenerated' warning on every load and serve reload

s1mo ago

#2371

s3 datastore: first run of a new model writes a monolithic .datastore-index.json into a shard-first (v2) bucket

1mo ago

#2370

s3 datastore: setup on an empty bucket never writes a local .datastore-index.json, so the push fast path never arms

1mo ago

#2369

datastore config migrate does not set managedConfig on a second repo that shares the datastore

1mo ago

#2368

s3/gcs datastore: pullChanged clears localDirty but keeps dirtyPaths, so a pending delete can be skipped by the push fast path

1mo ago

#2367

s3/gcs datastore: dirty-path overflow reconciliation can delete remote objects this mirror has not pulled yet

1mo ago

#2366

s3/gcs datastore: directory dirty paths map to the wrong index shard, so 3+ segment model types re-upload their whole history on every write

1mo ago

#2362

doctor datastores: report local mirror files the remote no longer has

1mo ago

#2352

manual: extension model reference documents context.runModel with the wrong signature, error shape and remote behavior

1mo ago

#2334

Docs: serve skill guide does not mention SWAMP_SERVER_URL is required with SWAMP_SERVER_TOKEN

s1mo ago

#2335

Docs: manual serve-flags page does not mention SWAMP_SERVER_URL is required with SWAMP_SERVER_TOKEN

1mo ago

#2330

issue-lifecycle: two ordering deadlocks — ad-hoc fast_forward is unreachable, and verify before conformance review parks the lifecycle

s1mo ago

#2331

Docs: daemon.md reference page does not mention SWAMP_HOME for extension loading

1mo ago

#2263

Docs: document swamp worker prune command in manual

1mo ago

#2244

VaultService.fromRepository ignores managedConfig vaultsDir across 15+ call sites

1mo ago

#2182

Auth gate: require authentication, fail open on outage

s1mo ago

#2224

Docs: update admin-only model type list in authorization reference

1mo ago

#2219

docs: webhook extension kind and Telegram webhook how-to

1mo ago

#2189

Auth gate: server-side Ed25519 key management and signed verification proofs

s1mo ago

#2205

Docs: document --server support for access token mint

1mo ago

#2153

Recover interrupted workflow runs from durable checkpoints

s1mo ago

#2185

Docs: document workflow checkpoint recovery

1mo ago

#2178

Windows: add printf shim to PowerShell compatibility prefix

s1mo ago

#2177

Docs: expand expression interpolation scope in datastore-configuration reference

1mo ago

#2099

aws-sm vault: support profile config key to select named AWS credential profiles

s1mo ago

#2156

Windows: model runtime shell execution produces wrong output encoding and arg splitting

s1mo ago

#2157

Windows: CLI resolves 8.3 short names to long names, breaking path comparisons

s1mo ago

#2137

Docs: daemon reference says 'restart automatically on reboot' for user services

s1mo ago

#2144

Show first-login guidance after swamp auth login

s1mo ago

#2143

Add swamp workflow history outputs CLI command

1mo ago

#2142

Update manual docs for workflow execution report expansion

1mo ago

#2141

UAT coverage for workflow history outputs and expanded JSON schema

1mo ago

#2140

Add external references field to workflow execution report

1mo ago

#2139

Cross-workflow step output passing (child→parent)

1mo ago

#2138

Document SWAMP_CLI_OUTPUT_JSON output-mode default

1mo ago

#2059

docs(cli): document run GC retention configuration

s1mo ago

#2127

Docs: access-commands.md still describes old vault-storage behavior for token mint

s1mo ago

#2128

access token mint --vault: surface the secure shared-vault handoff

s1mo ago

#2129

Docs: document dashboard URL routing for shareable deep links

s1mo ago

#2114

Extend --server-token-file to all --server subcommands

s1mo ago

#2115

Improve workflow authoring validation and recovery guidance

s1mo ago

#2134

Docs: add trigger override coverage to swamp-serve hot-reload manual page

s1mo ago

#2136

Docs: Correct server-token storage and document shared-vault handoff

1mo ago

#2135

Docs: document --token-file flag and SWAMP_SERVER_TOKEN_FILE env var

1mo ago

#2133

Docs: clarify trigger override reload semantics in design docs and manual

s1mo ago

#2132

Docs: update managed config and Kubernetes deployment guides for extension seeding workflow

1mo ago

#2130

serve vault.annotate does not publish managed configuration changes to the shared datastore

s1mo ago

#2131

Flaky test: otel_init_test.ts initTracing returns undefined when no traceparent

s1mo ago

#2103

Serve Audit Log - Phase 5: Extension sinks, alerting, compliance

s1mo ago

#2112

Serve Audit: Extension sink API — design and implementation

s24d ago

#2102

Serve Audit Log - Phase 6: Full documentation

24d ago

#2100

CI auto-merge broken: removed claude-review job was the PR approver

s1mo ago

#2074

Serve Audit Log - Phase 4: SIEM integrations, bulk export, HMAC

s1mo ago

#2097

docs: data.latest second argument matches name OR spec, not just spec

1mo ago

#2087

Simplify CI: remove redundant jobs, automerge only on security + attestation gates

s1mo ago

#2084

Unify serve config credential resolution via CEL expressions

1mo ago

#2075

Docs: Serve audit Phase 4 — SIEM sinks, HMAC, and export reference

1mo ago

#2043

managedConfig: cross-process sentinel disagreement between CLI and serve

s1mo ago

#2071

Expose swamp help to agents proactively in the swamp skill

s1mo ago

← Back to list

01Issue

FeatureShippedSwamp CLIPublic

Assigneesstack72

Relationships

#2114 Extend --server-token-file to all --server subcommands

Opened by stack72 · 9/11/2026· Shipped 9/14/2026

Currently --server-token-file / SWAMP_SERVER_TOKEN_FILE is only supported on worker connect and worker daemon. Regular --server subcommands authenticate via --token flag or SWAMP_SERVER_TOKEN env var. Extending --server-token-file everywhere lets operators avoid putting tokens in environment variables entirely, reducing the window where tokens exist in process memory. Complements the method→child env scrubbing in #2032. The ServerCredentialRepository already supports file-based tokens; extending resolveServerToken() in remote_run.ts would cover all --server commands.

02Bog Flow

Shipped

9/14/2026, 4:05:32 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack729/14/2026, 2:49:52 PM

Inbox notice policy and local inbox cache: when to poll, when the post-command notice shows and retires, and a cache file per API-key fingerprint, with no wiring yet

Scheduled flaky-test detection is failing

Inbox API contract and SwampClubClient inbox methods: summary, list, get and mark-read, pinned by a shared fixture and design/surfaces/inbox.md

Datastore rework Phase 5: content-level authorisation for forwarded definition and evaluated-file writes

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

v3 read model: guard against aliased key spellings on case-insensitive filesystems, without slowing replay

Scheduled flaky-test detection is failing

stagecraft remote studio: one long-lived connection to serve instead of a swamp process per read

stagecraft remote studio poll: follow-ups from #3658 review (flaky test, mid-poll first page, quiet-poll test)

docs(manual): the manual documents swamp subscription status and start — standings, call to action, flags and --json output

swamp subscription start opens the Swamp Club billing page, or a collective's with --collective, and status points its call to action at it

v3: the compaction policy bounds how much history a fresh clone replays (retainMs, minCommits, retainCommits) and the base load skips files the tail removes

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

v3 on S3/GCS: a replica restore yields a corrupt commits.db (fails SQLite's integrity check), so fresh clones and restores of the datastore fail; reproduces with Litestream alone from its first compacted L1 file (found by #3916)

swamp subscription status reports the plan and billing standing of the signed-in user and each collective, worded as auth whoami words it

/o/<slug>/billing sends a signed-out visitor to the collective page, or a 404 when private, instead of through login and back like /billing

swamp-extensions GCS storage test 'put: an abort mid-upload leaves no object and no resumable session' fails about 1 run in 5 (fixed 50 ms sleeps)

refactor(cli): share auth whoami's collective-standing helpers ahead of swamp subscription, and pin Personal License and Admin standings

@swamp/cve/tailworm: check the reachability matrix against a Tailscale-hosted tailnet

AWS codegen treats nested primaryIdentifier pointers as top-level fields

AWS codegen collapses nested createOnly/readOnly paths to their last segment

Generated state schemas require every child of nested objects, so normal resources warn on create/get

swamp-club.com/cve/tailworm states two things its sources do not say: finding 5's memory growth and no exploitation in the wild

cve/tailworm extension README says the findings were not seen in the wild, which no source states

Datastore rework Phase 5 (team mode) 1/3: serve's datastore API — commit, chunk and catch-up endpoints, authorisation on each op's intent, principal stamping and actionable conflicts

@swamp/cve/tailworm: reachability follow-ups from #3919 review

@swamp/cve/tailworm: opt-in reachability matrix from each node's packet filter

swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

@swamp/cve/tailworm: after mitigate caps headscale, the rescan still tells you to set MemoryMax and Restart=always

@swamp/cve/tailworm grade: unix serve targets the probe could not resolve are graded as ordinary sockets

kubernetes: externalsecret and normalizeMeta follow-ups from #3907

v3 crash recovery's progress line breaks --json stderr: a failing command that recovered prints text before its JSON error (regression from #3363 / #3893)

Docs: vaults reference should say a wide local_encryption key file gets a warning

Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint

Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

v3 long silent waits: crash recovery runs ~24 s with no output, data prune is silent 6-10 s in log mode, and a lagging read hangs ~112 s when Litestream's listing is cut (found by #3756)

Add @swamp/cve/http2shell: scan and mitigate the Brotli decoder RCE (CVE-2026-111497, Node2Shell/HTTP2Shell)

extension_tarball_analyzer_test fails on macOS: tar --mode is GNU-only

S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back

v2 S3: about 4-5% of serial workflow runs fail with datastore_unpublished_data_version ('a concurrent run or the serve poller synced') when nothing else is running (found by #3756)

Datastore rework Phase 4 I: dogfood and benchmark solo v3 (filesystem, S3, GCS) in a throwaway repo with the released binary, check the kill criteria, and decide whether to announce

v3 bucket outage: a command cut off while becoming the writer says its changes are saved locally when nothing was saved (workflow approve), and the suggested recover fails for a run cut mid-step (found by #3756)

auth login browser flow prints a fatal stack trace when swamp-club cannot be reached

Scheduled flaky-test detection is failing

v3 first clone and restore of a bucket datastore take 2.6-3x v2, missing #3418's 1.5x target (found by #3756)

CVE pages: horizontally scrolling code blocks are not keyboard-reachable

Homepage club plate link has no visible keyboard focus

Scheduled flaky-test detection is failing

swamp update downloads before failing in a sticky directory with another user's binary, and blames an immutable flag

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

Docs: install-swamp says SWAMP_HOME moves everything, but agent skill folders stay in the user's home folder

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

v3 bucket outage: a workflow run whose checkpoint committed is told nothing was committed, three outage errors have no stable code, and exit takes 15-60 s (found by #3756)

v3 identity on buckets: S3 checkouts with different endpoint spellings fork the datastore silently, and a hostname change blocks every write for ~5 minutes (found by #3756)

typed_workflow_passes_test child-sentinel case flakes under full-suite load: f.received.at(-1) reads the compare step's empty payload

extension push drops local modules when the repo under a node_modules folder is reached through a symlinked path (macOS /var, the swamp-club#3782 fix)

Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it

Docs: issue redaction keeps git ids and non-address colon runs, and asks before posting (swamp-club#3686)

Docs: worker daemon enable reference is missing --ca-cert, --concurrency and SWAMP_SERVE_EXTRA_HEADERS

v3 on S3/GCS: a write whose commit cannot reach the bucket prints "succeeded" on --json, exits 1, and is lost (confirm-before-output, found by #3756)

swamp-club /cve/dirtyfrag page shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects

v3: datastore config migrate skips every workflow that has run (name-committed), and they are then "not found" (found by #3756)

@swamp/cve/dirtyfrag report suggests commands for dirtyfrag-scanner whatever the model is named

v3 on a bucket: after a commit fails because the bucket is unreachable, the closing sync still waits its full 60 s before the command exits

Interactive history and output search pickers cannot open a run under a non-default datastore

v3 recovery sweep: dot-prefixed data names escape it, HFS+ non-ASCII names are deleted by it, and an old mtime keeps a dropped write's file (bug hunt group 8)

Source glob expansion crashes when a directory under the glob parent disappears mid-walk

v3 chunk barrier on macOS: use F_BARRIERFSYNC (ordering) instead of F_FULLFSYNC (full drive-cache flush), cutting ~10-25 ms (200 ms+ on a busy disk) per command

extension_source_add_test globs the real home directory and flakes when a file in ~ disappears mid-walk

v3 join check refuses a fresh managedConfig checkout on S3/GCS: the datastore extension's auto-install writes the managed lockfile first (regression of #3690)

Docs: doctor datastores reference for the v3 content check and lost format marker repair

Docs: step dataOutputOverrides vaultName and the field-by-field override merge (swamp-club#3606)

Docs: data name portability rule and warning

Docs: vault create and vault migrate refuse a local_encryption name with leftover storage

v3 namespaces: cross-namespace reads return the reader's own content, a namespaced local tier is overwritten by solo commits, and namespaces can collide with swamp's own .swamp/ directories (bug hunt group 7)

v3: a checkout holding v2 records joins a v3 datastore through .swamp.yaml unguarded, overwriting its records and diverging for good (bug hunt group 5)

v3 on S3/GCS: the namespace refusal names setup filesystem, and an unreadable marker on a format-3 repo says "will not open … as format 2" (found by swamp-uat#715)

v3 on S3/GCS: setup on a prefix holding only swamp's format-3 marker fails with "this swamp release can't open" format 3 (found by swamp-uat#715)