#3922
Datastore rework Phase 5: content-level authorisation for forwarded definition and evaluated-file writes
s50m ago
#3993
Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules
1h ago
#3990
Inbox API contract and SwampClubClient inbox methods: summary, list, get and mark-read, pinned by a shared fixture and design/surfaces/inbox.md
s17m ago
#3985
Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials
s47m ago
#3976
Scheduled flaky-test detection is failing
5h ago
#3939
v3 read model: guard against aliased key spellings on case-insensitive filesystems, without slowing replay
s6h ago
#3954
Scheduled flaky-test detection is failing
s6h ago
#3918
stagecraft remote studio: one long-lived connection to serve instead of a swamp process per read
8h ago
#3921
stagecraft remote studio poll: follow-ups from #3658 review (flaky test, mid-poll first page, quiet-poll test)
8h ago
#3965
docs(manual): the manual documents swamp subscription status and start — standings, call to action, flags and --json output
s8h ago
#3951
swamp subscription start opens the Swamp Club billing page, or a collective's with --collective, and status points its call to action at it
s23h ago
#3916
v3: the compaction policy bounds how much history a fresh clone replays (retainMs, minCommits, retainCommits) and the base load skips files the tail removes
s23h ago
#3953
datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it
23h ago
#3935
v3 on S3/GCS: a replica restore yields a corrupt commits.db (fails SQLite's integrity check), so fresh clones and restores of the datastore fail; reproduces with Litestream alone from its first compacted L1 file (found by #3916)
s1d ago
#3950
swamp subscription status reports the plan and billing standing of the signed-in user and each collective, worded as auth whoami words it
s1d ago
#3949
/o/<slug>/billing sends a signed-out visitor to the collective page, or a 404 when private, instead of through login and back like /billing
sk1d ago
#3942
swamp-extensions GCS storage test 'put: an abort mid-upload leaves no object and no resumable session' fails about 1 run in 5 (fixed 50 ms sleeps)
s1d ago
#3947
refactor(cli): share auth whoami's collective-standing helpers ahead of swamp subscription, and pin Personal License and Admin standings
s1d ago
#3924
@swamp/cve/tailworm: check the reachability matrix against a Tailscale-hosted tailnet
s1d ago
#3944
AWS codegen treats nested primaryIdentifier pointers as top-level fields
1d ago
#3943
AWS codegen collapses nested createOnly/readOnly paths to their last segment
1d ago
#3946
Generated state schemas require every child of nested objects, so normal resources warn on create/get
1d ago
#3901
swamp-club.com/cve/tailworm states two things its sources do not say: finding 5's memory growth and no exploitation in the wild
s1d ago
#3945
cve/tailworm extension README says the findings were not seen in the wild, which no source states
1d ago
#3915
Datastore rework Phase 5 (team mode) 1/3: serve's datastore API — commit, chunk and catch-up endpoints, authorisation on each op's intent, principal stamping and actionable conflicts
s1d ago
#3923
@swamp/cve/tailworm: reachability follow-ups from #3919 review
1d ago
#3919
@swamp/cve/tailworm: opt-in reachability matrix from each node's packet filter
s1d ago
#3920
swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)
s1d ago
#3913
Docs: --trusted-hosts accepts host:port for public addresses on non-default ports
1d ago
#3900
@swamp/cve/tailworm: after mitigate caps headscale, the rescan still tells you to set MemoryMax and Restart=always
s1d ago
#3910
@swamp/cve/tailworm grade: unix serve targets the probe could not resolve are graded as ordinary sockets
s1d ago
#3909
kubernetes: externalsecret and normalizeMeta follow-ups from #3907
s1d ago
#3902
v3 crash recovery's progress line breaks --json stderr: a failing command that recovered prints text before its JSON error (regression from #3363 / #3893)
s1d ago
#3877
Docs: vaults reference should say a wide local_encryption key file gets a warning
1d ago
#3859
Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint
1d ago
#3821
Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning
s1d ago
#3893
v3 long silent waits: crash recovery runs ~24 s with no output, data prune is silent 6-10 s in log mode, and a lagging read hangs ~112 s when Litestream's listing is cut (found by #3756)
s1d ago
#3889
Add @swamp/cve/http2shell: scan and mitigate the Brotli decoder RCE (CVE-2026-111497, Node2Shell/HTTP2Shell)
s2d ago
#3891
extension_tarball_analyzer_test fails on macOS: tar --mode is GNU-only
s2d ago
#2907
S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back
2d ago
#3860
v2 S3: about 4-5% of serial workflow runs fail with datastore_unpublished_data_version ('a concurrent run or the serve poller synced') when nothing else is running (found by #3756)
s2d ago
#3756
Datastore rework Phase 4 I: dogfood and benchmark solo v3 (filesystem, S3, GCS) in a throwaway repo with the released binary, check the kill criteria, and decide whether to announce
s2d ago
#3882
v3 bucket outage: a command cut off while becoming the writer says its changes are saved locally when nothing was saved (workflow approve), and the suggested recover fails for a run cut mid-step (found by #3756)
s2d ago
#3879
auth login browser flow prints a fatal stack trace when swamp-club cannot be reached
s2d ago
#3880
Scheduled flaky-test detection is failing
s2d ago
#3803
v3 first clone and restore of a bucket datastore take 2.6-3x v2, missing #3418's 1.5x target (found by #3756)
s2d ago
#3767
CVE pages: horizontally scrolling code blocks are not keyboard-reachable
3d ago
#3800
Homepage club plate link has no visible keyboard focus
s3d ago
#3788
Scheduled flaky-test detection is failing
s3d ago
#3822
swamp update downloads before failing in a sticky directory with another user's binary, and blames an immutable flag
s3d ago
#3771
Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS
3d ago
#3823
Docs: install-swamp says SWAMP_HOME moves everything, but agent skill folders stay in the user's home folder
3d ago
#3792
Docs: dashboard Approvals view shows run context, reason and per-viewer decide state
s3d ago
#3802
v3 bucket outage: a workflow run whose checkpoint committed is told nothing was committed, three outage errors have no stable code, and exit takes 15-60 s (found by #3756)
s3d ago
#3801
v3 identity on buckets: S3 checkouts with different endpoint spellings fork the datastore silently, and a hostname change blocks every write for ~5 minutes (found by #3756)
s3d ago
#3811
typed_workflow_passes_test child-sentinel case flakes under full-suite load: f.received.at(-1) reads the compare step's empty payload
3d ago
#3794
extension push drops local modules when the repo under a node_modules folder is reached through a symlinked path (macOS /var, the swamp-club#3782 fix)
4d ago
#3382
Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it
s4d ago
#3695
Docs: issue redaction keeps git ids and non-address colon runs, and asks before posting (swamp-club#3686)
4d ago
#3599
Docs: worker daemon enable reference is missing --ca-cert, --concurrency and SWAMP_SERVE_EXTRA_HEADERS
s4d ago
#3759
v3 on S3/GCS: a write whose commit cannot reach the bucket prints "succeeded" on --json, exits 1, and is lost (confirm-before-output, found by #3756)
s4d ago
#3761
swamp-club /cve/dirtyfrag page shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects
s4d ago
#3760
v3: datastore config migrate skips every workflow that has run (name-committed), and they are then "not found" (found by #3756)
s4d ago
#3762
@swamp/cve/dirtyfrag report suggests commands for dirtyfrag-scanner whatever the model is named
s4d ago
#3763
v3 on a bucket: after a commit fails because the bucket is unreachable, the closing sync still waits its full 60 s before the command exits
4d ago
#3743
Interactive history and output search pickers cannot open a run under a non-default datastore
s5d ago
#3736
v3 recovery sweep: dot-prefixed data names escape it, HFS+ non-ASCII names are deleted by it, and an old mtime keeps a dropped write's file (bug hunt group 8)
s5d ago
#3738
Source glob expansion crashes when a directory under the glob parent disappears mid-walk
s5d ago
#3737
v3 chunk barrier on macOS: use F_BARRIERFSYNC (ordering) instead of F_FULLFSYNC (full drive-cache flush), cutting ~10-25 ms (200 ms+ on a busy disk) per command
s5d ago
#3694
extension_source_add_test globs the real home directory and flakes when a file in ~ disappears mid-walk
s5d ago
#3696
v3 join check refuses a fresh managedConfig checkout on S3/GCS: the datastore extension's auto-install writes the managed lockfile first (regression of #3690)
s5d ago
#3675
Docs: doctor datastores reference for the v3 content check and lost format marker repair
5d ago
#3678
Docs: step dataOutputOverrides vaultName and the field-by-field override merge (swamp-club#3606)
5d ago
#3622
Docs: data name portability rule and warning
5d ago
#3623
Docs: vault create and vault migrate refuse a local_encryption name with leftover storage
s5d ago
#3691
v3 namespaces: cross-namespace reads return the reader's own content, a namespaced local tier is overwritten by solo commits, and namespaces can collide with swamp's own .swamp/ directories (bug hunt group 7)
s6d ago
#3690
v3: a checkout holding v2 records joins a v3 datastore through .swamp.yaml unguarded, overwriting its records and diverging for good (bug hunt group 5)
s6d ago
#3644
v3 on S3/GCS: the namespace refusal names setup filesystem, and an unreadable marker on a format-3 repo says "will not open … as format 2" (found by swamp-uat#715)
6d ago
#3643
v3 on S3/GCS: setup on a prefix holding only swamp's format-3 marker fails with "this swamp release can't open" format 3 (found by swamp-uat#715)
s6d ago
#3680
Workflow runs ignore defaultVault: step sensitive outputs land in the first vault, and validate predicts a vault the run doesn't use
s6d ago
#3617
v3 local durability: chunks aren't fsynced before the commit naming them, so a power cut can wedge every checkout; torn writer and format markers don't heal (bug hunt group 4)
s6d ago
#3674
v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier
3d ago
#3653
Scheduled flaky-test detection is failing
s6d ago
#3652
ssh: follow-ups from #3581 review — master rekey vs per-call known_hosts, settle error handling, atomic new-file mode
s6d ago
#3642
v3 on S3/GCS: a fresh checkout whose restore from the replica fails reports an empty datastore and exits 0 (found by swamp-uat#715)
s7d ago
#3651
issue-lifecycle start drops issue comments: context.comments is always empty
7d ago
#3624
swamp CLI: revokeCollectiveToken should tell an unknown token from an unknown collective once swamp-club answers 404
s7d ago
#3615
Dev stack serves corrupted gzip under Vite: browsers fail with ERR_CONTENT_DECODING_FAILED
s7d ago
#3604
worker daemon enable: an unreadable --ca-cert passes enable, and SWAMP_SERVE_EXTRA_HEADERS is silently dropped under sudo
s7d ago
#3587
v3: a crashed workflow run and its completed steps' data are deleted by recovery before workflow recover or serve's reaper can see them (bug hunt group 6)
s7d ago
#3588
Scheduled flaky-test detection is failing
s7d ago
#3586
v3 outbox: a reported failure can land, a commit can name a deleted chunk, and a fenced writer is told nothing landed when it did (bug hunt group 3)
s7d ago
#3564
v3: writer liveness is judged wrong: a same-hostname container takes over a live writer, a stalled writer's file is reverted then committed, and a fenced retention pass rewinds the new writer (bug hunt group 1)
s9d ago
#3572
agent-runner and deno-runner: support Windows (both refuse to start: Unsupported operating system)
s10d ago
#3565
v3 replication: check a possible S1 in serve's retake, fix serve wedging on a retake mid-replacement, and stop 'the next write replicates them' being false (bug hunt group 2)
s10d ago
#3567
Enforce the minimum S3/GCS extension version for v3 bucket datastores from the lockfile
s10d ago
#3534
Datastore rework Phase 4 E: v3 on S3 and GCS (solo mode): setup --format 3 on buckets, replication as a datastore property, end to end
s10d ago
#3566
doctor datastores decides v3 from the format key, so an override pointed at a v3 bucket runs the v2 contamination check and repair
s10d ago
#3535
Retention under serve load: measure and fix automatic passes against #3518's busy-serve contention, and the large-backlog first pass
s10d ago
#3556
Scheduled flaky-test detection is failing
s10d ago
#3549
S3/GCS datastores: keep v2 sync off v3 buckets (exclude _litestream/, refuse a format-3 marker) for swamp releases before v20261009.154711.0
s10d ago
#3553
v3: a refused commit leaves its staged files in the checkout for good, so that checkout shows data the datastore doesn't hold (exposed by #3532; swamp-uat breakglass test failing)
s10d ago
#3193
Datastore sync: a no-op push after a model-scoped pull arms the remote commitSeq, hiding other hosts' commits until the next commit
s10d ago
#3550
Regression from #3546: legacy (hashless) cache files lose their mtime trust, so a peer's deletion can be undone and untouched files are re-uploaded (seed the own record once)
s10d ago
#3546
@swamp/s3-datastore and @swamp/gcs-datastore: pull's same-size fast path trusts the pushing machine's mtime, so a conflicting local file can be kept
s10d ago
#3541
Scheduled flaky-test detection is failing
s10d ago
#3508
Datastore rework Phase 4 G: S3 and GCS extensions implement replicaTarget() for v3 Litestream replication
s10d ago
#3532
v3: a data name emptied of every version restarts at version 1, reusing a number for different content (use the partition's highWater; refuse a reused version)
s10d ago
#3537
Docs: garbageCollection retention — per-kind keys, automatic passes, and what is never removed
10d ago
#3531
Datastore rework Phase 4: a provider capability to remove abandoned Litestream lineage paths on buckets (replicaPaths), so chunk GC isn't deferred forever
s11d ago
#3533
In-memory remote: model create-only data version writes so core tests can pin them (follow-up to swamp-club#3377)
10d ago
#3507
Datastore rework Phase 4: a provider-supplied replica target (replicaTarget()) so v3 replicates to the datastore's own bucket, plus conformance
s11d ago
#3506
v3 commit outbox: a discarded entry is removed without fsync, so after a power cut recovery can land a commit whose command reported failure
s11d ago
#3492
Datastore rework Phase 4 G: S3 and GCS extensions implement storage/1 chunk storage for v3
11d ago
#3395
Datastore rework Phase 4 G: S3 and GCS implement the writable datastore-wide control plane and keep _control/writer/ at the bucket root
s11d ago
#3494
Scheduled flaky-test detection is failing
s11d ago
#3490
Datastore rework Phase 4 F: a durable outbox for v3 commits, the post-commit chunk check on recovery, and pruning compacted_txns
s11d ago
#3501
swamp worker list shows a worker as idle while its verify-on-enroll probe is still pending
s11d ago
#3505
Docs: say what the first run after a typeVersion upgrade writes to the definition file
10d ago
#3491
Datastore rework Phase 4: close D2 follow-ups before v3 replication is switched on (lineage, messages, migration, chunk GC)
s11d ago
#3489
Datastore rework Phase 4: serve confirms each v3 write request is replicated before it answers (group commit)
s11d ago
#3493
@swamp/gcs-datastore: GcsLock.inspect() reports a failed read as no lock, so a GCS outage looks like a lost model lock
11d ago
#3482
Datastore rework Phase 4 D2: restore, refresh and takeover from the v3 replica, with a checkout-local commits.db (dormant)
s12d ago
#3485
S3/GCS: a run refused for losing its model lock keeps its write dirty when the refresh can't reach the datastore, so a later sync pushes it
s12d ago
#3469
Docs: add PowerShell to Set Up Shell Completions
s12d ago
#3471
Add Windows installer to the homepage and manual
s12d ago
#3476
CopyCommand's clipboard fallback selects the wrong command on pages with several copies
s12d ago
#3475
README: add Windows to the supported platforms and its installer
12d ago
#3474
install.ps1 closes the user's PowerShell window on failure when run via irm | iex
s12d ago
#3418
v3 first clone on Linux is 2.6x slower than v2: batch the catalog refresh during catch-up
s12d ago
#3459
Windows: no PowerShell completions subcommand
s12d ago
#3458
Windows: extension yank fails with API key auth despite extensions:* scope
s12d ago
#3457
Windows: registry rejects windows-x86_64 as a valid platform
s12d ago
#3460
Windows: update --check reports no binary available for windows/x86_64
s12d ago
#3456
Windows: extension push type field shows file path instead of exported type name
s10d ago
#3453
Docs: extension quality now reports repository-verified for private source hosting (swamp-club#3406)
10d ago
#3448
Docs: choosing where a new workspace is created (--path, start page Location field, workspaces.dir)
12d ago
#3433
Manual: broken anchor and tutorials teach deprecated swamp data get
s12d ago
#3446
Docs: serve-flags.md admin/allowed-user resolution is stale (pinned names, oauth:manage for lookups, plain usernames only)
12d ago
#3428
swamp update --check fails with a raw [FTL] TimeoutError when the artifacts host takes over 5s
s12d ago
#3440
whoami reports each collective's private source hosting and namespace privacy, so the CLI quality rubric can match the registry's repository-verified verdict
s12d ago
#3445
Manual: working-with-data copy button copies a truncated data query
12d ago
#3437
Error and help messages still say model under swamp behavior commands (follow-up to #3431)
s12d ago
#3431
CLI output still says model under swamp behavior commands
s12d ago
#3429
Manual: make behavior the primary term and command spelling
s12d ago
#3273
Docs: Layout Migration says repo upgrade deletes gen-2 files without re-pulling
s12d ago
#3426
Scheduled flaky-test detection is failing
s12d ago
#3416
Datastore rework Phase 4 D1: Litestream sidecar for v3 writers, and a write command waits for replication before it reports success (dormant)
s12d ago
#3123
Accept usernames for user subjects in grant files
s12d ago
#3427
Docs: swamp workspace commands and workspaces in the manual (swamp-club#3424)
12d ago
#3423
Docs: document swamp start onboarding and the local dashboard
12d ago
#3419
Docs: grant-file username: subjects in the swamp serve manual
12d ago
#3414
Datastore rework Phase 4: the v3 writer lease requires an extension's explicit declaration that it keeps _control/writer/ at the root, not just a writable store's shape
s13d ago
#3417
Datastore rework Phase 4: real-endpoint check of Phase 4A's replication figures on a hosted S3-compatible service (spike)
12d ago
#3364
Datastore rework Phase 4 E/G: a writable datastore-wide control plane so the v3 writer lease binds at the bucket root
s13d ago
#3413
Docs: serve-flags check-config row for bare restricted-model-types entries
12d ago
#3357
Datastore rework Phase 4: measure Litestream replication on real S3 and GCS buckets (spike: per-command vs idle sidecar, cost of waiting for replication)
s13d ago
#3375
v3 writer lease: a stray or unpadded fence key under _control/writer/ wedges the lease
s13d ago
#3372
datastore lock status reports held: false for model locks on S3 and GCS datastores
s13d ago
#3338
Extensions accept export const behavior, extensions/behaviors/ and a behaviors: manifest key alongside model
s13d ago
#3387
Docs: grant and revoke changes reach every serve instance within one poll interval (S3/GCS and v2 filesystem)
13d ago
#3373
S3/GCS: a run whose model lock was force-released still pushes, and one run's write is lost
s13d ago
#3255
rollbackOnFailure methods fail when run as a workflow step
sz13d ago
#3381
Registry UI and manual say Behaviors, keeping the stored models content type
12d ago
#3377
S3/GCS datastores: write data version files create-only so a second writer cannot overwrite an existing version
s10d ago
#3359
Datastore rework Phase 4: a fenced writer lease for v3 datastores, replacing Phase 3's writer lock
s13d ago
#3334
Workflow YAML, extension exports and serve grants accept the behavior spelling alongside model
s13d ago
#3358
Datastore rework Phase 4: download, verify and cache a pinned Litestream binary on first v3 use (dormant)
s13d ago
#3333
Serve dashboard uses behavior terminology, with old routes kept
s13d ago
#3362
Docs: Claude Code page says swamp always writes CLAUDE.md (changed by swamp-club#3346)
13d ago
← Back to list10/14/2026, 3:50:28 AM
01Issue
BugShippedSwamp CLIPublic
Assigneesstack72
Relationships
#3273 Docs: Layout Migration says repo upgrade deletes gen-2 files without re-pulling
Opened by stack72 · 10/12/2026· Shipped 10/14/2026
design/primitives/extensions.md, section Layout Migration, gen-2 bullet: it says repo upgrade deletes each gen-2 entry's tracked files and leaves the lockfile unchanged, and the next extension install re-pulls. The code no longer works that way. repoUpgrade in src/libswamp/repo/init.ts runs an extensionInstall pass that re-pulls any gen-1 or gen-2 entry into the per-extension subtree and then sweeps the legacy paths (needsInstallOrMigration and sweepLegacyPaths in src/libswamp/extensions/install.ts), the same as gen-1. Nothing in the repo-upgrade path deletes gen-2 files on its own. The PULLED_TYPE_DIRS doc comment in src/libswamp/extensions/layout.ts also still mentions a phase-two migration in RepoService that no longer uses it. Fix: rewrite the gen-2 bullet to describe the re-pull and sweep, and update the PULLED_TYPE_DIRS comment. Found while working on swamp-club#3271.
02Bog Flow
Shipped
Click a lifecycle step above to view its details.
03Sludge Pulse