Lab #4124: @swamp/video/brand: follow-ups from the initial review (render hang, odd sizes, Chromium errors)

Non-blocking findings from the verify-reviews run on the initial @swamp/video/brand PR (swamp-club #4104, commit 8a6d98e67):

medium: scene.ts waits for Chromium's page-load event with no timeout and nothing watching the socket close; if the browser dies after accepting the page but before it loads, cards or stage never returns, and cancelling the run does not reach that wait.
low: the 16:9 check rounds, so an odd size such as 1919x1079 passes and the H.264 encode fails only after every frame is captured; require even width and height up front.
low: Chromium's stderr is discarded, so a failed launch shows only a generic 15s DevTools timeout; keep its tail for the error.
low: a very long campaignUrl past QR capacity (about 2.3 KB) surfaces the QR library's error without naming campaignUrl.
low: with a 1s intro the thumbnail still is taken at t=0, while the intro is still black.
low (core @swamp/video): every .webm overlay is forced through the libvpx-vp9 decoder, so VP8 WebM overlays in custom cards will not decode.

Supported binary file ingestion for remote members of swamp serve, without the bytes landing in run history

Worker queryData fails at the fixed 30 s RPC limit while it waits for a full catalog rebuild

cfgmgmt firewall: match rules by destination and comment

Align Caddy reverse-proxy TLS documentation with Kubernetes proxy guidance

Scheduled flaky-test detection is failing

vault put --server: accept the value on stdin (keep secrets out of argv)

swamp serve exhausts its heap when a workflow's run history carries large inputs: every run save parses and rewrites the whole .runs-index.json

Hot reload can keep an old local behavior registry and memoized bundle after external catalog indexing (1602; e459 regression passes)

Add expiring service-account token requests and authorization checks to RBAC

Flaky: v3 replica check stall test reads restore.pid before the stub writes it

Reads other than findById still treat a lapsed temporary ban as active until the operative next signs in

verify-build upgrade gate silently skips models whose version is a constant

@swamp/agent-sessions: explore a decision model (TypeSafe Jev) for call labelling

agent-sessions: follow-ups from the 4211 reviews (repo resolution cache and edge cases)

agent-sessions: revisit the import's remaining review findings (redaction edge cases, import robustness)

Docs: document the datastore durable setting and its macOS ordering in the manual

Docs: working offline against swamp serve (leases, outbox, flush, quarantine) for swamp-club#4195

Swamp Club collective GUI: show the swamp serve instances currently connected to a collective

Docs: swamp data query --sort, --cursor and nextCursor in the data reference

A malformed --ca-cert file is reported as an unreadable OS certificate store

TLS hint blames a missing root CA and macOS for every invalid peer certificate failure

workflow cancel --server does not send SWAMP_SERVE_EXTRA_HEADERS

S3/GCS repairUnpushedFiles: the pull it asks for after a lost last-synced index does not stop it re-uploading copies a peer deleted

swamp-uat private-registry tests leave npm/<port> dirs in the shared Deno cache

Read-model catch-up of many data versions slows sharply under load

swamp serve --groups-field help says group/collective memberships; it names only the collectives field

A resume runs settled work after the teardown gated on it has already run, and nothing tears that work down

A step settled after the abort overwrites the expression-context entry of a same-named step that ran in another job

The extractContentMetadata property test generates invalid source and fails at random

A limited model.output.search copies and sorts the whole listing on the event loop for each request, so that step still scales with the window

Flaky test: access_poll_phase_telemetry_test sees grants_active 1 where the snapshot build read 2 records

A lone step in a job still starts under the aborted signal when another job has suspended the run

CLI command to change an existing extension's visibility (private → public)

Docs: team-mode model leases (swamp behavior lease, lease status in datastore lock status)

serve (token mode): --admins accepts idp-group entries that can never match

build-swamp-extension example: code-review isn't given the quality evidence, so the reviewer reports quality as missing

Filesystem control-plane put races empty-parent cleanup (cron pending-run ENOENT)

deployment: getLogs method (deployment-aware pod log tailing)

Agent sessions extension: import Codex sessions

model.output.search response phase takes 3.9s for 5,000 items with no attribution (redaction vs serialization vs send)

Docs: v3 serve team mode, followers forward writes and the advertise-address and ca-cert serve flags (swamp-club#4120)

Skill/docs: document registry listing limits, static-extraction rules, and splitting large APIs by domain

Check registry listing limits in extension quality/push and suggest splitting into per-domain extensions

Over-limit contentMetadata publishes a blank extension page; archive fallback extracts nothing

swamp inbox: with a filter active, sitting on the last row pages through the whole inbox in the background

@swamp/video/brand: follow-ups from the initial review (render hang, odd sizes, Chromium errors)

@swamp/video: follow-ups from the initial review (card length, input validation, OCR frames on disk)

@swamp/video/hyprland: recording hotkeys, retake marker and phone-mirror window rules

@swamp/video/obs: optional OBS recording with per-person hardware config for @swamp/video

serve daemon enable: add Windows support (service or startup task)

swamp skill docs: publishing.md contradicts itself on dynamic imports, overstates where git dependencies are listed, and never says consumers keep the publisher's bundle

extension push: the dynamic import() refusal tells authors to run swamp extension fmt, and the archive-project-file fix names the kind directory push never filters

extension push: file:, link:, workspace: and git package.json dependencies are left out of the unaudited list when the project also has a deno.json

push (Apple Containers) makes an index whose platform manifest is unpullable on Forgejo

Streak projector: incremental runs instead of a full scan every minute

Studio board: "Show finished" / "Show claimed" are pushed off-screen, with no scroll, when a factory has many stages

datastore v3: a parent run recording its child's rejected approval on a nested step is judged as needing approve

Registry: detect code from outside npm and JSR in a v2 archive itself, not only from the author's dependency-audit.json

Scorecard: code past the analyzer's read caps, or unreadable, is skipped silently instead of counting as not audited

@swamp/cloudflare/analytics README documents CRUD methods the GraphQL analytics model does not have

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

access can-i: evaluate a local grants file without --server

Support search and filters as URL query parameters on /extensions

bundleExtension same-cache test can pass with a broken first-bundle gate under CPU load

Five Mongo queues can hand the same row to two replicas

Collective invite shows "This invitation has expired or has already been used" after a successful join via Google sign-in

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

Relationships

#4124 @swamp/video/brand: follow-ups from the initial review (render hang, odd sizes, Chromium errors)

Open