Datastore rework Phase 5: content-level authorisation for forwarded definition and evaluated-file writes

s2h ago

#3993

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

2h ago

#3990

Inbox API contract and SwampClubClient inbox methods: summary, list, get and mark-read, pinned by a shared fixture and design/surfaces/inbox.md

s1h ago

#3985

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

s2h ago

#3976

Scheduled flaky-test detection is failing

1h ago

#3939

v3 read model: guard against aliased key spellings on case-insensitive filesystems, without slowing replay

s7h ago

#3954

Scheduled flaky-test detection is failing

s7h ago

#3918

stagecraft remote studio: one long-lived connection to serve instead of a swamp process per read

9h ago

#3921

stagecraft remote studio poll: follow-ups from #3658 review (flaky test, mid-poll first page, quiet-poll test)

9h ago

#3965

docs(manual): the manual documents swamp subscription status and start — standings, call to action, flags and --json output

s10h ago

#3951

swamp subscription start opens the Swamp Club billing page, or a collective's with --collective, and status points its call to action at it

s1d ago

#3916

v3: the compaction policy bounds how much history a fresh clone replays (retainMs, minCommits, retainCommits) and the base load skips files the tail removes

s1d ago

#3953

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

1d ago

#3935

v3 on S3/GCS: a replica restore yields a corrupt commits.db (fails SQLite's integrity check), so fresh clones and restores of the datastore fail; reproduces with Litestream alone from its first compacted L1 file (found by #3916)

s1d ago

#3950

swamp subscription status reports the plan and billing standing of the signed-in user and each collective, worded as auth whoami words it

s1d ago

#3949

/o/<slug>/billing sends a signed-out visitor to the collective page, or a 404 when private, instead of through login and back like /billing

sk1d ago

#3942

swamp-extensions GCS storage test 'put: an abort mid-upload leaves no object and no resumable session' fails about 1 run in 5 (fixed 50 ms sleeps)

s1d ago

#3947

refactor(cli): share auth whoami's collective-standing helpers ahead of swamp subscription, and pin Personal License and Admin standings

s1d ago

#3924

@swamp/cve/tailworm: check the reachability matrix against a Tailscale-hosted tailnet

s1d ago

#3944

AWS codegen treats nested primaryIdentifier pointers as top-level fields

1d ago

#3943

AWS codegen collapses nested createOnly/readOnly paths to their last segment

1d ago

#3946

Generated state schemas require every child of nested objects, so normal resources warn on create/get

1d ago

#3901

swamp-club.com/cve/tailworm states two things its sources do not say: finding 5's memory growth and no exploitation in the wild

s1d ago

#3945

cve/tailworm extension README says the findings were not seen in the wild, which no source states

1d ago

#3915

Datastore rework Phase 5 (team mode) 1/3: serve's datastore API — commit, chunk and catch-up endpoints, authorisation on each op's intent, principal stamping and actionable conflicts

s1d ago

#3923

@swamp/cve/tailworm: reachability follow-ups from #3919 review

1d ago

#3919

@swamp/cve/tailworm: opt-in reachability matrix from each node's packet filter

s1d ago

#3920

swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

s1d ago

#3913

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

1d ago

#3900

@swamp/cve/tailworm: after mitigate caps headscale, the rescan still tells you to set MemoryMax and Restart=always

s1d ago

#3910

@swamp/cve/tailworm grade: unix serve targets the probe could not resolve are graded as ordinary sockets

s1d ago

#3909

kubernetes: externalsecret and normalizeMeta follow-ups from #3907

s1d ago

#3902

v3 crash recovery's progress line breaks --json stderr: a failing command that recovered prints text before its JSON error (regression from #3363 / #3893)

s1d ago

#3877

Docs: vaults reference should say a wide local_encryption key file gets a warning

2d ago

#3859

Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint

2d ago

#3821

Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

s2d ago

#3893

v3 long silent waits: crash recovery runs ~24 s with no output, data prune is silent 6-10 s in log mode, and a lagging read hangs ~112 s when Litestream's listing is cut (found by #3756)

s2d ago

#3889

Add @swamp/cve/http2shell: scan and mitigate the Brotli decoder RCE (CVE-2026-111497, Node2Shell/HTTP2Shell)

s2d ago

#3891

extension_tarball_analyzer_test fails on macOS: tar --mode is GNU-only

s2d ago

#2907

S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back

2d ago

#3860

v2 S3: about 4-5% of serial workflow runs fail with datastore_unpublished_data_version ('a concurrent run or the serve poller synced') when nothing else is running (found by #3756)

s2d ago

#3756

Datastore rework Phase 4 I: dogfood and benchmark solo v3 (filesystem, S3, GCS) in a throwaway repo with the released binary, check the kill criteria, and decide whether to announce

s2d ago

#3882

v3 bucket outage: a command cut off while becoming the writer says its changes are saved locally when nothing was saved (workflow approve), and the suggested recover fails for a run cut mid-step (found by #3756)

s2d ago

#3879

auth login browser flow prints a fatal stack trace when swamp-club cannot be reached

s3d ago

#3880

Scheduled flaky-test detection is failing

s3d ago

#3803

v3 first clone and restore of a bucket datastore take 2.6-3x v2, missing #3418's 1.5x target (found by #3756)

s3d ago

#3767

swamp update downloads before failing in a sticky directory with another user's binary, and blames an immutable flag

s3d ago

#3771

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

3d ago

#3823

Docs: install-swamp says SWAMP_HOME moves everything, but agent skill folders stay in the user's home folder

3d ago

#3792

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

s3d ago

#3802

v3 bucket outage: a workflow run whose checkpoint committed is told nothing was committed, three outage errors have no stable code, and exit takes 15-60 s (found by #3756)

s3d ago

#3801

v3 identity on buckets: S3 checkouts with different endpoint spellings fork the datastore silently, and a hostname change blocks every write for ~5 minutes (found by #3756)

s4d ago

#3811

typed_workflow_passes_test child-sentinel case flakes under full-suite load: f.received.at(-1) reads the compare step's empty payload

4d ago

#3794

extension push drops local modules when the repo under a node_modules folder is reached through a symlinked path (macOS /var, the swamp-club#3782 fix)

4d ago

#3382

Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it

s4d ago

#3695

Docs: issue redaction keeps git ids and non-address colon runs, and asks before posting (swamp-club#3686)

4d ago

#3599

Docs: worker daemon enable reference is missing --ca-cert, --concurrency and SWAMP_SERVE_EXTRA_HEADERS

s4d ago

#3759

v3 on S3/GCS: a write whose commit cannot reach the bucket prints "succeeded" on --json, exits 1, and is lost (confirm-before-output, found by #3756)

s4d ago

#3761

swamp-club /cve/dirtyfrag page shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects

s4d ago

#3760

v3: datastore config migrate skips every workflow that has run (name-committed), and they are then "not found" (found by #3756)

s5d ago

#3762

@swamp/cve/dirtyfrag report suggests commands for dirtyfrag-scanner whatever the model is named

s5d ago

#3763

v3 on a bucket: after a commit fails because the bucket is unreachable, the closing sync still waits its full 60 s before the command exits

4d ago

#3743

Interactive history and output search pickers cannot open a run under a non-default datastore

s5d ago

#3736

v3 recovery sweep: dot-prefixed data names escape it, HFS+ non-ASCII names are deleted by it, and an old mtime keeps a dropped write's file (bug hunt group 8)

s5d ago

#3738

Source glob expansion crashes when a directory under the glob parent disappears mid-walk

s5d ago

#3737

v3 chunk barrier on macOS: use F_BARRIERFSYNC (ordering) instead of F_FULLFSYNC (full drive-cache flush), cutting ~10-25 ms (200 ms+ on a busy disk) per command

s5d ago

#3694

extension_source_add_test globs the real home directory and flakes when a file in ~ disappears mid-walk

s5d ago

#3696

v3 join check refuses a fresh managedConfig checkout on S3/GCS: the datastore extension's auto-install writes the managed lockfile first (regression of #3690)

s6d ago

#3675

Docs: doctor datastores reference for the v3 content check and lost format marker repair

6d ago

#3678

Docs: step dataOutputOverrides vaultName and the field-by-field override merge (swamp-club#3606)

6d ago

#3622

Docs: data name portability rule and warning

6d ago

#3623

Docs: vault create and vault migrate refuse a local_encryption name with leftover storage

s6d ago

#3691

v3 namespaces: cross-namespace reads return the reader's own content, a namespaced local tier is overwritten by solo commits, and namespaces can collide with swamp's own .swamp/ directories (bug hunt group 7)

s6d ago

#3690

v3: a checkout holding v2 records joins a v3 datastore through .swamp.yaml unguarded, overwriting its records and diverging for good (bug hunt group 5)

s6d ago

#3644

v3 on S3/GCS: the namespace refusal names setup filesystem, and an unreadable marker on a format-3 repo says "will not open … as format 2" (found by swamp-uat#715)

6d ago

#3643

v3 on S3/GCS: setup on a prefix holding only swamp's format-3 marker fails with "this swamp release can't open" format 3 (found by swamp-uat#715)

s6d ago

#3680

Workflow runs ignore defaultVault: step sensitive outputs land in the first vault, and validate predicts a vault the run doesn't use

s6d ago

#3617

v3 local durability: chunks aren't fsynced before the commit naming them, so a power cut can wedge every checkout; torn writer and format markers don't heal (bug hunt group 4)

s6d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

3d ago

#3653

Scheduled flaky-test detection is failing

s6d ago

#3652

ssh: follow-ups from #3581 review — master rekey vs per-call known_hosts, settle error handling, atomic new-file mode

s7d ago

#3642

v3 on S3/GCS: a fresh checkout whose restore from the replica fails reports an empty datastore and exits 0 (found by swamp-uat#715)

s7d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

7d ago

#3624

swamp CLI: revokeCollectiveToken should tell an unknown token from an unknown collective once swamp-club answers 404

s7d ago

#3615

Dev stack serves corrupted gzip under Vite: browsers fail with ERR_CONTENT_DECODING_FAILED

s7d ago

#3604

worker daemon enable: an unreadable --ca-cert passes enable, and SWAMP_SERVE_EXTRA_HEADERS is silently dropped under sudo

s7d ago

#3587

v3: a crashed workflow run and its completed steps' data are deleted by recovery before workflow recover or serve's reaper can see them (bug hunt group 6)

s7d ago

#3588

Scheduled flaky-test detection is failing

s7d ago

#3586

v3 outbox: a reported failure can land, a commit can name a deleted chunk, and a fenced writer is told nothing landed when it did (bug hunt group 3)

s7d ago

#3564

v3: writer liveness is judged wrong: a same-hostname container takes over a live writer, a stalled writer's file is reverted then committed, and a fenced retention pass rewinds the new writer (bug hunt group 1)

s9d ago

#3572

agent-runner and deno-runner: support Windows (both refuse to start: Unsupported operating system)

s10d ago

#3565

v3 replication: check a possible S1 in serve's retake, fix serve wedging on a retake mid-replacement, and stop 'the next write replicates them' being false (bug hunt group 2)

s10d ago

#3567

Enforce the minimum S3/GCS extension version for v3 bucket datastores from the lockfile

s10d ago

#3534

Datastore rework Phase 4 E: v3 on S3 and GCS (solo mode): setup --format 3 on buckets, replication as a datastore property, end to end

s10d ago

#3566

doctor datastores decides v3 from the format key, so an override pointed at a v3 bucket runs the v2 contamination check and repair

s10d ago

#3535

Retention under serve load: measure and fix automatic passes against #3518's busy-serve contention, and the large-backlog first pass

s10d ago

#3556

Scheduled flaky-test detection is failing

s10d ago

#3549

S3/GCS datastores: keep v2 sync off v3 buckets (exclude _litestream/, refuse a format-3 marker) for swamp releases before v20261009.154711.0

s10d ago

#3553

v3: a refused commit leaves its staged files in the checkout for good, so that checkout shows data the datastore doesn't hold (exposed by #3532; swamp-uat breakglass test failing)

s10d ago

#3193

Datastore sync: a no-op push after a model-scoped pull arms the remote commitSeq, hiding other hosts' commits until the next commit

s10d ago

#3550

Regression from #3546: legacy (hashless) cache files lose their mtime trust, so a peer's deletion can be undone and untouched files are re-uploaded (seed the own record once)

s10d ago

#3546

@swamp/s3-datastore and @swamp/gcs-datastore: pull's same-size fast path trusts the pushing machine's mtime, so a conflicting local file can be kept

s10d ago

#3541

Scheduled flaky-test detection is failing

s10d ago

#3508

Datastore rework Phase 4 G: S3 and GCS extensions implement replicaTarget() for v3 Litestream replication

s10d ago

#3532

v3: a data name emptied of every version restarts at version 1, reusing a number for different content (use the partition's highWater; refuse a reused version)

s10d ago

#3537

Docs: garbageCollection retention — per-kind keys, automatic passes, and what is never removed

10d ago

#3531

Datastore rework Phase 4: a provider capability to remove abandoned Litestream lineage paths on buckets (replicaPaths), so chunk GC isn't deferred forever

s11d ago

#3533

In-memory remote: model create-only data version writes so core tests can pin them (follow-up to swamp-club#3377)

10d ago

#3507

Datastore rework Phase 4: a provider-supplied replica target (replicaTarget()) so v3 replicates to the datastore's own bucket, plus conformance

s11d ago

#3506

v3 commit outbox: a discarded entry is removed without fsync, so after a power cut recovery can land a commit whose command reported failure

s11d ago

#3492

Datastore rework Phase 4 G: S3 and GCS extensions implement storage/1 chunk storage for v3

11d ago

#3395

Datastore rework Phase 4 G: S3 and GCS implement the writable datastore-wide control plane and keep _control/writer/ at the bucket root

s11d ago

#3494

Scheduled flaky-test detection is failing

s11d ago

#3490

Datastore rework Phase 4 F: a durable outbox for v3 commits, the post-commit chunk check on recovery, and pruning compacted_txns

s11d ago

#3501

swamp worker list shows a worker as idle while its verify-on-enroll probe is still pending

s11d ago

#3505

Docs: say what the first run after a typeVersion upgrade writes to the definition file

10d ago

#3491

Datastore rework Phase 4: close D2 follow-ups before v3 replication is switched on (lineage, messages, migration, chunk GC)

s12d ago

#3489

Datastore rework Phase 4: serve confirms each v3 write request is replicated before it answers (group commit)

s12d ago

#3493

@swamp/gcs-datastore: GcsLock.inspect() reports a failed read as no lock, so a GCS outage looks like a lost model lock

11d ago

#3482

Datastore rework Phase 4 D2: restore, refresh and takeover from the v3 replica, with a checkout-local commits.db (dormant)

s12d ago

#3485

S3/GCS: a run refused for losing its model lock keeps its write dirty when the refresh can't reach the datastore, so a later sync pushes it

s12d ago

#3469

Docs: add PowerShell to Set Up Shell Completions

s12d ago

#3471

Add Windows installer to the homepage and manual

s12d ago

#3476

CopyCommand's clipboard fallback selects the wrong command on pages with several copies

s12d ago

#3475

README: add Windows to the supported platforms and its installer

12d ago

#3474

install.ps1 closes the user's PowerShell window on failure when run via irm | iex

s12d ago

#3418

v3 first clone on Linux is 2.6x slower than v2: batch the catalog refresh during catch-up

s12d ago

#3459

Windows: no PowerShell completions subcommand

s12d ago

#3458

Windows: extension yank fails with API key auth despite extensions:* scope

s12d ago

#3457

Windows: registry rejects windows-x86_64 as a valid platform

s12d ago

#3460

Windows: update --check reports no binary available for windows/x86_64

s12d ago

#3456

Windows: extension push type field shows file path instead of exported type name

s10d ago

#3453

Docs: extension quality now reports repository-verified for private source hosting (swamp-club#3406)

10d ago

#3448

Docs: choosing where a new workspace is created (--path, start page Location field, workspaces.dir)

12d ago

#3433

Manual: broken anchor and tutorials teach deprecated swamp data get

s12d ago

#3446

Docs: serve-flags.md admin/allowed-user resolution is stale (pinned names, oauth:manage for lookups, plain usernames only)

12d ago

#3428

swamp update --check fails with a raw [FTL] TimeoutError when the artifacts host takes over 5s

s12d ago

#3440

whoami reports each collective's private source hosting and namespace privacy, so the CLI quality rubric can match the registry's repository-verified verdict

s12d ago

#3445

Manual: working-with-data copy button copies a truncated data query

12d ago

#3437

Error and help messages still say model under swamp behavior commands (follow-up to #3431)

s12d ago

#3431

CLI output still says model under swamp behavior commands

s12d ago

#3429

Manual: make behavior the primary term and command spelling

s12d ago

#3273

Docs: Layout Migration says repo upgrade deletes gen-2 files without re-pulling

s12d ago

#3426

Scheduled flaky-test detection is failing

s12d ago

#3416

Datastore rework Phase 4 D1: Litestream sidecar for v3 writers, and a write command waits for replication before it reports success (dormant)

s13d ago

#3123

Accept usernames for user subjects in grant files

s13d ago

#3427

Docs: swamp workspace commands and workspaces in the manual (swamp-club#3424)

12d ago

#3423

Docs: document swamp start onboarding and the local dashboard

12d ago

#3419

Docs: grant-file username: subjects in the swamp serve manual

12d ago

#3414

Datastore rework Phase 4: the v3 writer lease requires an extension's explicit declaration that it keeps _control/writer/ at the root, not just a writable store's shape

s13d ago

#3417

Datastore rework Phase 4: real-endpoint check of Phase 4A's replication figures on a hosted S3-compatible service (spike)

12d ago

#3364

Datastore rework Phase 4 E/G: a writable datastore-wide control plane so the v3 writer lease binds at the bucket root

s13d ago

#3413

Docs: serve-flags check-config row for bare restricted-model-types entries

12d ago

#3357

Datastore rework Phase 4: measure Litestream replication on real S3 and GCS buckets (spike: per-command vs idle sidecar, cost of waiting for replication)

s13d ago

#3375

v3 writer lease: a stray or unpadded fence key under _control/writer/ wedges the lease

s13d ago

#3372

datastore lock status reports held: false for model locks on S3 and GCS datastores

s13d ago

#3338

Extensions accept export const behavior, extensions/behaviors/ and a behaviors: manifest key alongside model

s13d ago

#3387

Docs: grant and revoke changes reach every serve instance within one poll interval (S3/GCS and v2 filesystem)

13d ago

#3373

S3/GCS: a run whose model lock was force-released still pushes, and one run's write is lost

s13d ago

#3255

rollbackOnFailure methods fail when run as a workflow step

sz13d ago

#3381

Registry UI and manual say Behaviors, keeping the stored models content type

12d ago

#3377

S3/GCS datastores: write data version files create-only so a second writer cannot overwrite an existing version

s10d ago

#3359

Datastore rework Phase 4: a fenced writer lease for v3 datastores, replacing Phase 3's writer lock

s13d ago

#3334

Workflow YAML, extension exports and serve grants accept the behavior spelling alongside model

s13d ago

#3358

Datastore rework Phase 4: download, verify and cache a pinned Litestream binary on first v3 use (dormant)

s13d ago

#3333

Serve dashboard uses behavior terminology, with old routes kept

s13d ago

#3362

Docs: Claude Code page says swamp always writes CLAUDE.md (changed by swamp-club#3346)

13d ago

#2746

A pulled extension can shadow a built-in type, and removing it leaves serve without the built-in

s13d ago

#3332

Skills and generated agent guidance use behavior and swamp behavior commands

s13d ago

#3345

Docs: state the OpenCode version requirement for the swamp audit plugin

13d ago

#3331

swamp behavior is the full preferred command group, with every swamp model spelling kept

s14d ago

#3315

DispatchService two-slot worker test assigns disabled Object.prototype.proto

s14d ago

#2563

Partial extension catalog saves delete rows for sources mounted from outside the repo

s14d ago

#3337

Datastore rework: a fresh v3 checkout is slow because catch-up fsyncs every file one at a time (27 s vs 1.1 s for 1,000 items on macOS)

s14d ago

#3330

Build each swamp model command from a factory so behavior can share it (no visible change)

s14d ago

#3329

Design record: behavior is the product term for models, with model kept working

s14d ago

#3336

Docs: show the full --literal-inputs warning, including Raw:, in the model definitions reference

13d ago

#3321

model method run --literal-inputs: the warning's Raw: text drops a brace from the expression

s14d ago

#3322

repo init --help omits pi and antigravity from the built-in --tool list

s14d ago

#3302

swamp model edit silently renames the target when the piped body's name differs

z14d ago

#3265

Add swamp behaviour run as the preferred model-method command

z14d ago

#3299

Datastore rework: on v3, an interrupted method run's outputs never reach other clones (SIGTERM should commit; SIGKILL must be visible)

s14d ago

#3300

Datastore rework: on v3, turning managedConfig on hides existing config (the default vault); give v3 its own config migrate

s14d ago

#3301

Datastore rework: on v3, namespace set before setup --format 3 fails without --skip-migration, and namespace list shows no namespaces

s14d ago

#3305

S3/GCS datastore sync: shared sync service lets one sync clear another's dirty marks and pull over unpushed files

14d ago

#3304

Docs: --literal-inputs and data that never evaluates as authored (swamp-club#3205)

14d ago

#3296

Docs: say that validation applies the upgrade chain before checking global arguments

14d ago

#3281

datastore setup strands repo-local audit history and run logs in the new datastore

s14d ago

#3279

Datastore rework Phase 3: opt in to v3 for new filesystem datastores (single writer), and wire v3 into CLI and serve (no v2 behaviour change)

s14d ago

#3276

classifyConnectionError mislabels non-auth connection failures as auth failures

s14d ago

#3283

Docs: datastore reference says audit logs and telemetry live in the datastore

13d ago

#3278

Datastore rework Phase 3: a v3 home for audit, telemetry, logs and files, dormant (no behaviour change)

s14d ago

#3280

s3-datastore: first push on a fresh cache prints 'Index merge failed' for a missing local .datastore-index.json

14d ago

#3258

Datastore rework Phase 3: history compaction so superseded chunks can be reclaimed, dormant (no behaviour change)

s15d ago

#3271

Windows: extension install legacy migration finds zero files

s15d ago

#3269

Windows: worker daemon status reports not installed (no systemd/launchd)

s15d ago

#3270

Windows: extension rm joins repo dir with already-absolute bundle path

s15d ago

#3257

Datastore rework Phase 3: workflow run and vault config repositories stage typed changes on v3 (no v2 behaviour change)

s15d ago

#3267

Windows: cancelled step records error suffix that POSIX does not

s15d ago

#3266

Run GC never removes run logs when a non-default datastore is configured

s15d ago

#3268

Windows: check-config --grants-file and --grants-dir still output backslash absolute paths

s15d ago

#3256

Datastore rework Phase 3: definition, workflow and evaluated repositories stage typed changes on v3 (no v2 behaviour change)

s15d ago

#3264

Windows: datastore compact fails with database is not open

s15d ago

#3259

repo init: create a default local_encryption vault, and stop persisting absolute base_dir in vault configs

s15d ago

#3260

Docs: default vault at repo init, --no-vault, and base_dir no longer persisted (swamp-club#3259)

14d ago

#3250

Datastore rework Phase 3: shared typed staging route, and data and output repositories stage typed changes on v3 (no v2 behaviour change)

s15d ago

#3246

Extension auto-resolution installs an unrelated extension when a registry search guess does not provide the type

s15d ago

#3249

Datastore rework Phase 3: chunk garbage collection for unreferenced chunks, dormant (no behaviour change)

s15d ago

#3245

Windows: check-config grant error messages use backslash paths

s15d ago

#3248

Windows: workflow run --input does not honour \@ escape in k=v value

s15d ago

#3247

Windows: model run with vault secret containing $ exits 1 silently

s15d ago

#3239

Datastore rework Phase 3: the v3 read model, dormant (no behaviour change)

s15d ago

#3241

Windows: workflow cancel and model cancel do not kill the step process tree

s15d ago

#3243

Extension auto-resolution reports a registry timeout as "no extension publishes this type"

s15d ago

#3240

Datastore rework Phase 3: the commit-log unit of work and binding registry (no v2 behaviour change)

s15d ago

← Back to list

01Issue

BugClosedSwamp ClubPublic

AssigneesNone

Relationships

#3283 Docs: datastore reference says audit logs and telemetry live in the datastore

Opened by stack72 · 10/12/2026

After swamp-club#3281, datastore setup leaves audit/, telemetry/, logs/, files/ and run .log files in the repo's .swamp; they were never read from the datastore (see design/enablers/datastores.md, v3 stream directories). content/manual/reference/datastore-configuration.md is stale: the intro (line ~9) says the datastore holds audit logs and telemetry, and the setup --json example's directoriesMigrated lists audit. Update the intro to say audit logs, the telemetry spool and run logs stay with the checkout, and drop audit from the directoriesMigrated example.

02Bog Flow

Closed

10/14/2026, 12:48:21 AM

No activity in this phase yet.

03Sludge Pulse

system commented 10/12/2026, 2:08:32 PM

Classified automatically when this issue was filed.

Type: Bug

If you feel this classification is incorrect, add a ripple to tell us so.

stack72 commented 10/14/2026, 12:48:21 AM

Fixed in swamp-club#1339: reference/datastore-configuration now says audit logs, the telemetry spool and run logs stay in the checkout's .swamp/, and audit/telemetry are gone from the directoriesMigrated example and the list of directories setup moves.

Datastore rework Phase 5: content-level authorisation for forwarded definition and evaluated-file writes

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

Inbox API contract and SwampClubClient inbox methods: summary, list, get and mark-read, pinned by a shared fixture and design/surfaces/inbox.md

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

Scheduled flaky-test detection is failing

v3 read model: guard against aliased key spellings on case-insensitive filesystems, without slowing replay

Scheduled flaky-test detection is failing

stagecraft remote studio: one long-lived connection to serve instead of a swamp process per read

stagecraft remote studio poll: follow-ups from #3658 review (flaky test, mid-poll first page, quiet-poll test)

docs(manual): the manual documents swamp subscription status and start — standings, call to action, flags and --json output

swamp subscription start opens the Swamp Club billing page, or a collective's with --collective, and status points its call to action at it

v3: the compaction policy bounds how much history a fresh clone replays (retainMs, minCommits, retainCommits) and the base load skips files the tail removes

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

v3 on S3/GCS: a replica restore yields a corrupt commits.db (fails SQLite's integrity check), so fresh clones and restores of the datastore fail; reproduces with Litestream alone from its first compacted L1 file (found by #3916)

swamp subscription status reports the plan and billing standing of the signed-in user and each collective, worded as auth whoami words it

/o/<slug>/billing sends a signed-out visitor to the collective page, or a 404 when private, instead of through login and back like /billing

swamp-extensions GCS storage test 'put: an abort mid-upload leaves no object and no resumable session' fails about 1 run in 5 (fixed 50 ms sleeps)

refactor(cli): share auth whoami's collective-standing helpers ahead of swamp subscription, and pin Personal License and Admin standings

@swamp/cve/tailworm: check the reachability matrix against a Tailscale-hosted tailnet

AWS codegen treats nested primaryIdentifier pointers as top-level fields

AWS codegen collapses nested createOnly/readOnly paths to their last segment

Generated state schemas require every child of nested objects, so normal resources warn on create/get

swamp-club.com/cve/tailworm states two things its sources do not say: finding 5's memory growth and no exploitation in the wild

cve/tailworm extension README says the findings were not seen in the wild, which no source states

Datastore rework Phase 5 (team mode) 1/3: serve's datastore API — commit, chunk and catch-up endpoints, authorisation on each op's intent, principal stamping and actionable conflicts

@swamp/cve/tailworm: reachability follow-ups from #3919 review

@swamp/cve/tailworm: opt-in reachability matrix from each node's packet filter

swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

@swamp/cve/tailworm: after mitigate caps headscale, the rescan still tells you to set MemoryMax and Restart=always

@swamp/cve/tailworm grade: unix serve targets the probe could not resolve are graded as ordinary sockets

kubernetes: externalsecret and normalizeMeta follow-ups from #3907

v3 crash recovery's progress line breaks --json stderr: a failing command that recovered prints text before its JSON error (regression from #3363 / #3893)

Docs: vaults reference should say a wide local_encryption key file gets a warning

Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint

Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

v3 long silent waits: crash recovery runs ~24 s with no output, data prune is silent 6-10 s in log mode, and a lagging read hangs ~112 s when Litestream's listing is cut (found by #3756)

Add @swamp/cve/http2shell: scan and mitigate the Brotli decoder RCE (CVE-2026-111497, Node2Shell/HTTP2Shell)

extension_tarball_analyzer_test fails on macOS: tar --mode is GNU-only

S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back

v2 S3: about 4-5% of serial workflow runs fail with datastore_unpublished_data_version ('a concurrent run or the serve poller synced') when nothing else is running (found by #3756)

Datastore rework Phase 4 I: dogfood and benchmark solo v3 (filesystem, S3, GCS) in a throwaway repo with the released binary, check the kill criteria, and decide whether to announce

v3 bucket outage: a command cut off while becoming the writer says its changes are saved locally when nothing was saved (workflow approve), and the suggested recover fails for a run cut mid-step (found by #3756)

auth login browser flow prints a fatal stack trace when swamp-club cannot be reached

Scheduled flaky-test detection is failing

v3 first clone and restore of a bucket datastore take 2.6-3x v2, missing #3418's 1.5x target (found by #3756)

CVE pages: horizontally scrolling code blocks are not keyboard-reachable

Homepage club plate link has no visible keyboard focus

Scheduled flaky-test detection is failing

swamp update downloads before failing in a sticky directory with another user's binary, and blames an immutable flag

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

Docs: install-swamp says SWAMP_HOME moves everything, but agent skill folders stay in the user's home folder

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

v3 bucket outage: a workflow run whose checkpoint committed is told nothing was committed, three outage errors have no stable code, and exit takes 15-60 s (found by #3756)

v3 identity on buckets: S3 checkouts with different endpoint spellings fork the datastore silently, and a hostname change blocks every write for ~5 minutes (found by #3756)

typed_workflow_passes_test child-sentinel case flakes under full-suite load: f.received.at(-1) reads the compare step's empty payload

extension push drops local modules when the repo under a node_modules folder is reached through a symlinked path (macOS /var, the swamp-club#3782 fix)

Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it

Docs: issue redaction keeps git ids and non-address colon runs, and asks before posting (swamp-club#3686)

Docs: worker daemon enable reference is missing --ca-cert, --concurrency and SWAMP_SERVE_EXTRA_HEADERS

v3 on S3/GCS: a write whose commit cannot reach the bucket prints "succeeded" on --json, exits 1, and is lost (confirm-before-output, found by #3756)

swamp-club /cve/dirtyfrag page shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects

v3: datastore config migrate skips every workflow that has run (name-committed), and they are then "not found" (found by #3756)

@swamp/cve/dirtyfrag report suggests commands for dirtyfrag-scanner whatever the model is named

v3 on a bucket: after a commit fails because the bucket is unreachable, the closing sync still waits its full 60 s before the command exits

Interactive history and output search pickers cannot open a run under a non-default datastore

v3 recovery sweep: dot-prefixed data names escape it, HFS+ non-ASCII names are deleted by it, and an old mtime keeps a dropped write's file (bug hunt group 8)

Source glob expansion crashes when a directory under the glob parent disappears mid-walk

v3 chunk barrier on macOS: use F_BARRIERFSYNC (ordering) instead of F_FULLFSYNC (full drive-cache flush), cutting ~10-25 ms (200 ms+ on a busy disk) per command

extension_source_add_test globs the real home directory and flakes when a file in ~ disappears mid-walk

v3 join check refuses a fresh managedConfig checkout on S3/GCS: the datastore extension's auto-install writes the managed lockfile first (regression of #3690)

Docs: doctor datastores reference for the v3 content check and lost format marker repair

Docs: step dataOutputOverrides vaultName and the field-by-field override merge (swamp-club#3606)

Docs: data name portability rule and warning

Docs: vault create and vault migrate refuse a local_encryption name with leftover storage

v3 namespaces: cross-namespace reads return the reader's own content, a namespaced local tier is overwritten by solo commits, and namespaces can collide with swamp's own .swamp/ directories (bug hunt group 7)

v3: a checkout holding v2 records joins a v3 datastore through .swamp.yaml unguarded, overwriting its records and diverging for good (bug hunt group 5)

v3 on S3/GCS: the namespace refusal names setup filesystem, and an unreadable marker on a format-3 repo says "will not open … as format 2" (found by swamp-uat#715)

v3 on S3/GCS: setup on a prefix holding only swamp's format-3 marker fails with "this swamp release can't open" format 3 (found by swamp-uat#715)

Workflow runs ignore defaultVault: step sensitive outputs land in the first vault, and validate predicts a vault the run doesn't use