workflow validate derives required arguments from zod's JSON Schema, so zod 4.6.7 rejects workflows that omit optional preprocess and catch arguments

2m ago

#3870

package.json mode: no loose-specifier warning for a range push ships as the exact installed version

24m ago

#3869

extension fmt (and any command) creates or rewrites deno.lock when the extension lives in the repo's loaded extensions/ dir

24m ago

#3865

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

50m ago

#3863

Registry rescore: secret-safe-docs passes a secret README line on versions whose stored metadata predates the sensitive flag (follow-up to #3783)

1h ago

#3859

Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint

3h ago

#3855

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

3h ago

#3851

behavior validate gives pre-flight checks unparsed global arguments (no zod defaults), unlike behavior run

4h ago

#3846

invalid-acceptance refuses an apostrophe in a swamp-quality-ignore reason and leaves the finding unresolved

4h ago

#3845

extension quality --json reports percentage but not the grade that extension info and the registry show

4h ago

#3844

workflow validate passes a CEL behavior target with a resolvable default, so a misspelled method passes

4h ago

#3843

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

4h ago

#3841

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

4h ago

#3839

workflow validate/run say "Workflow not found" for a file that doctor workflows explains is misnamed

4h ago

#3833

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

4h ago

#3832

workflow validate reports a string-form dependsOn as an [FTL] error with a zod stack trace, not a validation failure

4h ago

#3831

auth login on a non-TTY stdin with no --username prompts, then fails with "Username and password are required"

4h ago

#3830

Homebrew tap README omits the brew trust step Homebrew 7 requires, so brew install swamp refuses the formula

4h ago

#3829

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

4h ago

#3825

Extension registry page: a supported way to include media (images) in the README

5h ago

#3821

Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

2h ago

#3818

scanFleet: support a different SSH user per host (user@host entries)

12h ago

#3816

CEL: data.latest(...).version is a double, but data.version() only accepts int, so "version - 1" fails at run time

12h ago

#3815

workflow resume --run refuses workflows with the same step name in two jobs, though validate and run accept them

12h ago

#3814

@swamp/cve/dirtyfrag: scan flags suspicious XFRM SAs on every unprivileged Linux scan (greps 'error' in /proc/net/xfrm_stat counter names)

12h ago

#3787

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

1d ago

#3781

Share the extension quality rubric between the swamp CLI and swamp-club instead of mirroring it

1d ago

#3776

@swamp/cve/dirtyfrag: report and README print the old swamp model command spelling

1d ago

#3775

@swamp/cve/php-rce-2026-10: match RHEL fixes for the PHP RCEs

1d ago

#3772

cve/emudhra page: Windows and macOS support, and shared CVE layer fixes (follow-up to #3710 and #3766)

1d ago

#3705

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

2d ago

#3703

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

2d ago

#3702

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

2d ago

#3679

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

3d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

3d ago

#3663

vary/forEach object values with no key/name/id produce data names Windows refuses

3d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

3d ago

#3647

swamp core: a non-string sensitive value reads back as a JSON string

3d ago

#3641

Generated vault keys carry raw data-name and vary characters that strict vault providers reject

3d ago

#3639

bundleExtension 'bundles on different caches do not wait for each other' test fails under CPU load

4d ago

#3634

extension install and extension pull leave different bundles for the same extension version

4d ago

#3608

Registry drops contentMetadata.extensions (method grafts) at confirm-push

4d ago

#3603

Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)

s4d ago

#3600

local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)

4d ago

#3580

Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition

Team6d ago

#3579

Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support

Team6d ago

#3578

workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)

Team6d ago

#3554

issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream

7d ago

#3523

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

7d ago

#3514

swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)

4d ago

← Back to list

01Issue

FeatureOpenSwamp ClubPublic

AssigneesNone

Relationships

#3829 Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

Opened by zack · 10/23/2026

Coordinate with https://swamp-club.com/lab/3735. Update content/manual/reference/cel-expressions.md, especially its vault section that currently says values are substituted before evaluation. Review reference/vaults.md, reference/workflows.md and extension behavior/check documentation for reference-only expressions, typed tagged-field reads, allowed operations/refusal codes, routing and shell restrictions, structured validation diagnostics, loaded context.vaultSecrets, resume/replay current-value semantics, the has/probe caveat and the Phase 5 remote exception. Publish the corrected design Section 10.1 compatibility table in release notes; type(Secret) remains a permitted type-name observation. Companion public docs should describe the released binary rather than the test-only internal option.

02Bog Flow

Open

10/23/2026, 5:11:59 PM

No activity in this phase yet.

03Sludge Pulse

system commented 10/23/2026, 5:12:00 PM

Classified automatically when this issue was filed.

Source: Swamp Club

If you feel this classification is incorrect, add a ripple to tell us so.