#3733
typed-secrets 4.4: persistence and resume hold references: rehydration stops reading the vault, every persisted copy uses the persisted form, and run events are masked
z1m ago
#3798
data_writer_property_test: a secret holding a newline and a literal backslash-n escapes the persisted-content property (seed 1648929202)
z1m ago
#3785
typed-secrets: the accessor adapter reads a legacy row stamped with the empty namespace as foreign, so its tagged fields stay reference text on the typed path
z2h ago
#3790
typed-secrets query view: route a row's JSON content by whether the adapter adapted the record, not by the service's namespace rule
z2h ago
#3789
flaky: for_each_name_property_test lets the text around a sentinel equal the secret's value, so the untyped value search replaces both and the property fails by seed
z2h ago
#3732
typed-secrets 4.3: the expression-facing query view registers Secret in DataQueryService
z3h ago
#3791
flaky: LitestreamReplicator 'a failed launch releases its lock probe, so the next acquire starts a sidecar' fails by timing in verify-build
s20m ago
#3714
CEL duration arithmetic is off by a second when a duration has negative nanos (cel-js 7.6.1)
s5h ago
#3731
typed-secrets 4.2: live and reconstructed step outputs and child outputs return references through the accessor adapter
z6h ago
#3773
A coded UserError a model method throws reaches a workflow step without its code, because InProcessExecutor keeps only the message
z8h ago
#3779
Dashboard Workflows page takes ~19s on a serve with many extension workflows: workflow.search resolves each workflow's owner with a full extension-workflow scan
z8h ago
#3670
codegen: BROKEN_REGEXES override for the @swamp/aws/invoicing InvoiceUnit name lacks the u flag, so it rejects ordinary names
s22h ago
#3742
dashboard: run page polling stacks history.get and history.logs requests while serve is slow
z1d ago
#3741
serve: add child spans and attributes to workflow.history.get (and run_summary/run_search) to diagnose slow dashboard loads
z1d ago
#3740
serve: webhook-triggered workflow runs can't be cancelled — cancel can't find them, so it reports serve's own pid as "the process running it is still alive"
z1d ago
#3726
A workflow step fails on a static validation error in a method it does not invoke, where swamp behavior run of the same method succeeds
z1d ago
#3739
serve: a run orphaned by a container restart can't be cancelled — the restarted serve reuses the dead owner's pid, so cancel reports the owner still alive
z9h ago
#3735
typed-secrets 4.6: turn the typed path on for every entry point, remove the internal option, and delete the regular-expression rewrite, the value search and the plaintext resolution of tagged fields
1d ago
#3734
typed-secrets 4.5: the inline resolutions refuse or mask: placement, task selectors, child references and deferred targets refuse secrets, assert messages mask them, and the deprecated resolvers go
1d ago
#3730
typed-secrets 4.1: workflow passes bind sentinels as Secrets: typed guards and asserts, forEach items and identities, child bindings, webhook inputs, and the synchronous authorization step
z9h ago
#3628
typed-secrets 3.5: local entry points, validation diagnostics, context.runModel and model.method delivery
z1d ago
#3708
model.method in a workflow guard fails with 'Do not know how to serialize a BigInt' when its inputs hold an int
z1d ago
#3706
data query: filter on data lifecycle so deleted resources can be excluded
z1d ago
#3713
CEL expression results that hold a timestamp, duration or uint become an empty object
z1d ago
#3707
Catalog rebuild restores pre-rename versions of a name renamed away and written again
z1d ago
#3529
Remote resolveSecret allowlist is always empty for workflow steps that use vault.get
z1d ago
#3686
swamp issue redacts git commit SHAs as secrets and fast-check replay paths as IP addresses
s1d ago
#3627
typed-secrets 3.4: destination refusals, identifier stand-ins, shell safety and masking
z2d ago
#3530
Remote readResource does not apply the legacy schema fallback for untagged sensitive records
z2d ago
#3685
Flaky: datastore_v3_outbox_model_property_test throws MayLandLaterError on a random seed (aged commit, failed discard-and-mark checkpoint, power cut)
z2d ago
#3645
v3 outbox model property test fails: a commit dropped after a failed append-discard-and-mark reports MayLandLaterError instead of the expected outcome
2d ago
#3606
Workflow step dataOutputOverrides vaultName is accepted but silently dropped
s2d ago
#3626
typed-secrets 3.3: sensitive-field accessors, data-origin sentinels and reference validation
z2d ago
#3641
Generated vault keys carry raw data-name and vary characters that strict vault providers reject
3d ago
#3625
typed-secrets 3.2: vault.get as a CEL function, bare-token rewriting, AST extraction and up-front existence checks
z3d ago
#3619
typed-secrets 3.1: the production Secret, its refusals, the fault context, the container rule and the boundary conversion, behind the internal option
z3d ago
#3620
Flaky test: extension_pull_dependency_conflict_test fails with 'failed to copy esbuild binary' during deno bundle
3d ago
#3609
Extension tarball analyzer ignores webhook entry points
3d ago
#3608
Registry drops contentMetadata.extensions (method grafts) at confirm-push
3d ago
#3041
digitalocean codegen leaves an orphaned security_secret.ts model file after its endpoint left the spec
s6d ago
#3552
A --repo-dir or SWAMP_REPO_DIR through a symlink fails with 'unable to open database file'
s6d ago
#3543
@swamp/1password: vault delete of a missing item probably fails instead of being a no-op
6d ago
#3544
@swamp/1password: item or vault names containing 'authorization' are misreported as auth failures
s6d ago
#3558
typed-secrets 2.2: VaultSecretBag entries hold references, one registry per run, 128-bit sentinels
z6d ago
#3214
Show wait keys and pending signals to remote clients and the dashboard
z6d ago
#3560
Flaky: LitestreamReplicator.acquire 'concurrent acquires in one process share one sidecar and one hold' fails 'no hold leaked' under full-suite load
z6d ago
#3563
VaultService.requireExistenceProvider labels the vault instance name as its type
z6d ago
#3561
VaultService capability errors label the vault instance name as its type
z6d ago
#3557
typed-secrets 2.1: VaultExistenceProvider, its conformance suite, and has on the built-in providers
z6d ago
#3559
MockVaultProvider.get and delete throw synchronously instead of rejecting
z6d ago
#3551
typed-secrets 1.2: pin the Secret Proxy, refusal set and container rule on cel-js 7.6.1
z6d ago
#3554
issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream
6d ago
#3548
serve check-config crashes with a TypeError when a list-valued auth key is a string
z6d ago
#3547
access grant list --server shows user subjects as user:user:<name>
z6d ago
#3524
Flaky: process_bundle_prober_test 'stopping a host that has already exited lists no children under its pid' fails under full-suite load
z6d ago
#3512
typed-secrets 0.4: characterize worker secret authorization and control-plane secret traffic
z7d ago
#3513
issue-lifecycle: an approved plan cannot be sent back to planning
z7d ago
#3517
typed-secrets 1.2: minimal opaque Secret, CelVaultNamespace receiver, policy inventory and evaluation frame
6d ago
#3510
typed-secrets 1.1: commit the cel-js 7.6.1 probe harness as pinned behavior tests
z7d ago
#3509
typed-secrets 0.1: land the typed-secrets plan as a design enabler doc
z7d ago
#3504
swamp update: a slicker, colorful download progress bar that ends with a newline
z7d ago
#2333
gcs-datastore: a failed lock read is reported as "unlocked" — #2298 in the GCS backend
s7d ago
#3404
A manual worker verify racing an enrollment probe can leave a healthy worker unverified until it reconnects
s7d ago
#3487
bundle freshness: a one-off deno info failure leaves a source on the in-directory fallback for good
z7d ago
#3472
serve shutdown waits for an unsignalled run index rebuild: the continuation sweep's boot pass and request-led rebuilds cannot be stopped by SIGTERM
z8d ago
#3465
serve: handlers that sanitize an error for the client never log the original, so path-bearing failures are undiagnosable
z8d ago
#3402
literal() output in a step's inputs logs repeated Refusing to evaluate expression warnings
z8d ago
#3480
Read non-string sensitive resource fields back with their type
8d ago
#3468
serve and swamp dashboard shutdown waits seconds for the run index warm-up: the plain index parse is not abortable, and the warm-up waits on request-led loads it joined (regression from #3105)
z8d ago
#3467
Run index snapshot cache keeps serving a stale run status: ctime is only second-resolution so in-place same-size rewrites alias the stamp, and snapshots are cached even when repair could not write the index (regression from #3105)
z8d ago
#3461
Flaky: serve_v3_extension_lockfile_test 'serve extension.pull commits the new entry' fails under full-suite load with extension_pull_failed
z8d ago
#3470
Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds
8d ago
#3450
Dashboard: an idle, visible tab keeps counting runs that have aged out of a preset time range
z8d ago
#3449
Dashboard: Models and a model's page re-send model.output.search every minute on a preset time range
z8d ago
← Back to list10/16/2026, 7:42:22 PM
01Issue
BugShippedSwamp CLIPublic
Assigneeszack
Relationships
#3559 MockVaultProvider.get and delete throw synchronously instead of rejecting
Opened by zack · 10/16/2026· Shipped 10/16/2026
src/domain/vaults/mock_vault_provider.ts declares get(secretKey): Promise and delete(secretKey): Promise as non-async functions, and for a missing key each throws synchronously instead of returning a rejected promise. A caller that awaits the call sees no difference, but one that chains .catch() on the returned promise gets an uncaught synchronous throw instead. Every other built-in provider rejects. Found while triaging swamp-club#3557; unrelated to that work, so filed separately. Fix: return Promise.reject(...) or mark the methods async, and add a unit test that the missing-key path rejects rather than throws.
02Bog Flow
Shipped
Click a lifecycle step above to view its details.
03Sludge Pulse