When the vault behind a stored sensitive-field reference cannot be read, swamp reports 'Refusing to evaluate expression … arrived as data content' instead of the vault error

12m ago

#3805

Repos without defaultVault: the fallback vault for sensitive outputs is not defined, changed between releases, and doctor vaults does not flag it

18m ago

#3804

Tier 15 capstone claimed but its banked 1,000,000 never granted (no badges source)

1h ago

#3800

Homepage club plate link has no visible keyboard focus

1h ago

#3795

forEachNameWithoutSecrets property test fails intermittently: an empty-string secret and an overlapping recorded value give different names

2h ago

#3793

extension push (package.json mode): two installed copies under one declared range are audited once, so the second shipped version goes unaudited

3h ago

#3792

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

1h ago

#3788

Scheduled flaky-test detection is failing

5h ago

#3787

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

5h ago

#3783

Registry scorecard: score secret-safe-docs (rubric v4) and keep sensitive on extracted arguments

7h ago

#3781

Share the extension quality rubric between the swamp CLI and swamp-club instead of mirroring it

8h ago

#3778

Registry dependency audit: audit the locked version push records in the archive, not the registry's newest match for a range specifier (swamp-club half of #3662)

10h ago

#3776

@swamp/cve/dirtyfrag: report and README print the old swamp model command spelling

10h ago

#3775

@swamp/cve/php-rce-2026-10: match RHEL fixes for the PHP RCEs

10h ago

#3772

cve/emudhra page: Windows and macOS support, and shared CVE layer fixes (follow-up to #3710 and #3766)

10h ago

#3771

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

9h ago

#3767

CVE pages: horizontally scrolling code blocks are not keyboard-reachable

22h ago

#3735

typed-secrets 4.6: turn the typed path on for every entry point, remove the internal option, and delete the regular-expression rewrite, the value search and the plaintext resolution of tagged fields

1d ago

#3734

typed-secrets 4.5: the inline resolutions refuse or mask: placement, task selectors, child references and deferred targets refuse secrets, assert messages mask them, and the deprecated resolvers go

1d ago

#3728

Docs: extension fmt never writes deno.lock and warns on a stale one (swamp-club#3717)

10h ago

#3725

Docs: extension manual pages describe push and quality resolving only the deno.json import map

10h ago

#3705

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

1d ago

#3703

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

1d ago

#3702

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

1d ago

#3679

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

2d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

2d ago

#3663

vary/forEach object values with no key/name/id produce data names Windows refuses

2d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

3d ago

#3647

swamp core: a non-string sensitive value reads back as a JSON string

3d ago

#3641

Generated vault keys carry raw data-name and vary characters that strict vault providers reject

3d ago

#3639

bundleExtension 'bundles on different caches do not wait for each other' test fails under CPU load

3d ago

#3634

extension install and extension pull leave different bundles for the same extension version

3d ago

#3608

Registry drops contentMetadata.extensions (method grafts) at confirm-push

3d ago

#3603

Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)

s3d ago

#3600

local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)

3d ago

#3580

Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition

Team5d ago

#3579

Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support

Team5d ago

#3578

workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)

Team5d ago

#3554

issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream

6d ago

#3523

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

7d ago

#3514

swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)

3d ago

#3483

Workflow run cancellation on concurrency-key conflict

8d ago

#3480

Read non-string sensitive resource fields back with their type

8d ago

#3470

Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds

8d ago

#3408

Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them

8d ago

#3401

A global argument that evaluates to swamp-namespace expression text is silently dropped, and literal() cannot pass it through

9d ago

#3399

serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other

6d ago

#3383

extension pull: safety analysis scans the bundle the extension runs

9d ago

#3378

verification: run the upgrade-path test in parallel, and skip the dynamic test for no-op bumps

9d ago

#3361

S3-backed serve: a poll that pulls one file invalidates the whole data catalog, so the next query re-reads every version

9d ago

#3349

swamp-extensions: CI check that every manifest declares license: and ships a LICENSE file

9d ago

#3344

extensions_search index is never created if the first attempt fails, until the process restarts

9d ago

#3305

S3/GCS datastore sync: shared sync service lets one sync clear another's dirty marks and pull over unpushed files

10d ago

#3298

swamp-uat: the SIGTERM drain test does not check that the run succeeded

10d ago

#3297

stagecraft: a factory-wide read of work items waiting on a person (no studio, no per-item status loop)

10d ago

#3292

stagecraft: rebind a work item to another tracker (mirrored built-in tickets to Jira)

10d ago

#3280

s3-datastore: first push on a fresh cache prints 'Index merge failed' for a missing local .datastore-index.json

10d ago

#3272

swamp-extensions: use explicit npm:/jsr: specifiers in root extensions/models

10d ago

#3229

stagecraft: studio state_test 'after its event stream reconnects' is timing-flaky under load

12d ago

#3208

Activity projector fails with ZooKeeper "Bad version" error on swamp.score_grants during keeper instability

13d ago

#3198

s3-datastore: model-scoped pullChanged lists and walks the whole namespace

14d ago

#3169

extension safety analyzer does not warn on node:child_process or cluster subprocess spawning

14d ago

#3153

extension push: a swamp-quality-ignore directive after a comment holding an apostrophe is silently ignored

15d ago

← Back to list

01Issue

BugShippedSwamp CLIPublic

Assigneeszack

Relationships

#3561 VaultService capability errors label the vault instance name as its type

Opened by zack · 10/16/2026· Shipped 10/16/2026

PR #3173: https://github.com/swamp-club/swamp/pull/3173

The require* helpers in src/domain/vaults/vault_service.ts (requireDeleteProvider, requireAnnotationProvider, requireRefreshHookProvider, and requireExistenceProvider added for swamp-club#3557) throw messages of the form: Vault 'name' (type: X) does not support ... where X is provider.getName(). For local_encryption and mock, getName() returns the vault instance name, not the vault type, so the message reads Vault 'erp' (type: erp) and misleads the reader. The actual type is in the service's vaultTypes map. Found by the code review on swamp-club#3557; pre-existing in three siblings and copied by the fourth for consistency, so filed separately. Fix: read the type from the vaultTypes map (or drop the parenthetical) in all four helpers, with a test on the message.

02Bog Flow

Shipped

10/16/2026, 8:07:28 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

zack assigned zack10/16/2026, 7:39:16 PM