#3806
When the vault behind a stored sensitive-field reference cannot be read, swamp reports 'Refusing to evaluate expression … arrived as data content' instead of the vault error
7m ago
#3805
Repos without defaultVault: the fallback vault for sensitive outputs is not defined, changed between releases, and doctor vaults does not flag it
13m ago
#3804
Tier 15 capstone claimed but its banked 1,000,000 never granted (no badges source)
58m ago
#3800
Homepage club plate link has no visible keyboard focus
1h ago
#3795
forEachNameWithoutSecrets property test fails intermittently: an empty-string secret and an overlapping recorded value give different names
2h ago
#3793
extension push (package.json mode): two installed copies under one declared range are audited once, so the second shipped version goes unaudited
3h ago
#3792
Docs: dashboard Approvals view shows run context, reason and per-viewer decide state
1h ago
#3788
Scheduled flaky-test detection is failing
5h ago
#3787
Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)
5h ago
#3783
Registry scorecard: score secret-safe-docs (rubric v4) and keep sensitive on extracted arguments
7h ago
#3781
Share the extension quality rubric between the swamp CLI and swamp-club instead of mirroring it
8h ago
#3778
Registry dependency audit: audit the locked version push records in the archive, not the registry's newest match for a range specifier (swamp-club half of #3662)
10h ago
#3776
@swamp/cve/dirtyfrag: report and README print the old swamp model command spelling
10h ago
#3775
@swamp/cve/php-rce-2026-10: match RHEL fixes for the PHP RCEs
10h ago
#3772
cve/emudhra page: Windows and macOS support, and shared CVE layer fixes (follow-up to #3710 and #3766)
10h ago
#3771
Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS
9h ago
#3767
CVE pages: horizontally scrolling code blocks are not keyboard-reachable
21h ago
#3735
typed-secrets 4.6: turn the typed path on for every entry point, remove the internal option, and delete the regular-expression rewrite, the value search and the plaintext resolution of tagged fields
1d ago
#3734
typed-secrets 4.5: the inline resolutions refuse or mask: placement, task selectors, child references and deferred targets refuse secrets, assert messages mask them, and the deprecated resolvers go
1d ago
#3728
Docs: extension fmt never writes deno.lock and warns on a stale one (swamp-club#3717)
10h ago
#3725
Docs: extension manual pages describe push and quality resolving only the deno.json import map
10h ago
#3705
Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)
1d ago
#3703
Serve: delegate namespace-scoped extension pulls and reload without granting administrator access
1d ago
#3702
workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT
1d ago
#3679
Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches
2d ago
#3674
v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier
2d ago
#3663
vary/forEach object values with no key/name/id produce data names Windows refuses
2d ago
#3651
issue-lifecycle start drops issue comments: context.comments is always empty
3d ago
#3647
swamp core: a non-string sensitive value reads back as a JSON string
3d ago
#3641
Generated vault keys carry raw data-name and vary characters that strict vault providers reject
3d ago
#3639
bundleExtension 'bundles on different caches do not wait for each other' test fails under CPU load
3d ago
#3634
extension install and extension pull leave different bundles for the same extension version
3d ago
#3608
Registry drops contentMetadata.extensions (method grafts) at confirm-push
3d ago
#3603
Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)
s3d ago
#3600
local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)
3d ago
#3580
Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition
Team5d ago
#3579
Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support
Team5d ago
#3578
workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)
Team5d ago
#3554
issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream
6d ago
#3523
auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads
7d ago
#3514
swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)
3d ago
#3483
Workflow run cancellation on concurrency-key conflict
8d ago
#3480
Read non-string sensitive resource fields back with their type
8d ago
#3470
Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds
8d ago
#3408
Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them
8d ago
#3401
A global argument that evaluates to swamp-namespace expression text is silently dropped, and literal() cannot pass it through
9d ago
#3399
serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other
6d ago
#3383
extension pull: safety analysis scans the bundle the extension runs
9d ago
#3378
verification: run the upgrade-path test in parallel, and skip the dynamic test for no-op bumps
9d ago
#3361
S3-backed serve: a poll that pulls one file invalidates the whole data catalog, so the next query re-reads every version
9d ago
#3349
swamp-extensions: CI check that every manifest declares license: and ships a LICENSE file
9d ago
#3344
extensions_search index is never created if the first attempt fails, until the process restarts
9d ago
#3305
S3/GCS datastore sync: shared sync service lets one sync clear another's dirty marks and pull over unpushed files
10d ago
#3298
swamp-uat: the SIGTERM drain test does not check that the run succeeded
10d ago
#3297
stagecraft: a factory-wide read of work items waiting on a person (no studio, no per-item status loop)
10d ago
#3292
stagecraft: rebind a work item to another tracker (mirrored built-in tickets to Jira)
10d ago
#3280
s3-datastore: first push on a fresh cache prints 'Index merge failed' for a missing local .datastore-index.json
10d ago
#3272
swamp-extensions: use explicit npm:/jsr: specifiers in root extensions/models
10d ago
#3229
stagecraft: studio state_test 'after its event stream reconnects' is timing-flaky under load
12d ago
#3208
Activity projector fails with ZooKeeper "Bad version" error on swamp.score_grants during keeper instability
13d ago
#3198
s3-datastore: model-scoped pullChanged lists and walks the whole namespace
14d ago
#3169
extension safety analyzer does not warn on node:child_process or cluster subprocess spawning
14d ago
#3153
extension push: a swamp-quality-ignore directive after a comment holding an apostrophe is silently ignored
15d ago
← Back to list10/16/2026, 7:42:22 PM
01Issue
BugShippedSwamp CLIPublic
Assigneeszack
Relationships
#3559 MockVaultProvider.get and delete throw synchronously instead of rejecting
Opened by zack · 10/16/2026· Shipped 10/16/2026
src/domain/vaults/mock_vault_provider.ts declares get(secretKey): Promise and delete(secretKey): Promise as non-async functions, and for a missing key each throws synchronously instead of returning a rejected promise. A caller that awaits the call sees no difference, but one that chains .catch() on the returned promise gets an uncaught synchronous throw instead. Every other built-in provider rejects. Found while triaging swamp-club#3557; unrelated to that work, so filed separately. Fix: return Promise.reject(...) or mark the methods async, and add a unit test that the missing-key path rejects rather than throws.
02Bog Flow
Shipped
Click a lifecycle step above to view its details.
03Sludge Pulse