swamp issue: file bugs, features and security reports against the platform source

50m ago

#4238

artifacts.swamp-club.com unreachable in Spain during LaLiga matches (ISP blocking of Cloudflare IPs)

48m ago

#4236

Failed remote methods lose named command-result output handles at Serve

Team5h ago

#4235

Whole run-index rewrites block serve dispatch as retained inputs grow

Team6h ago

#4234

Worker control WebSocket reports Frame too large and aborts small native dispatches

Team6h ago

#4233

Supported binary file ingestion for remote members of swamp serve, without the bytes landing in run history

8h ago

#4232

Worker queryData fails at the fixed 30 s RPC limit while it waits for a full catalog rebuild

17h ago

#4230

swamp serve exhausts its heap when a workflow's run history carries large inputs: every run save parses and rewrites the whole .runs-index.json

8h ago

#4223

Hot reload can keep an old local behavior registry and memoized bundle after external catalog indexing (1602; e459 regression passes)

Team1d ago

#4222

Add expiring service-account token requests and authorization checks to RBAC

Team1d ago

#4221

Flaky: v3 replica check stall test reads restore.pid before the stub writes it

1d ago

#4217

Reads other than findById still treat a lapsed temporary ban as active until the operative next signs in

1d ago

#4215

verify-build upgrade gate silently skips models whose version is a constant

1d ago

#4213

@swamp/agent-sessions: explore a decision model (TypeSafe Jev) for call labelling

1d ago

#4212

agent-sessions: follow-ups from the 4211 reviews (repo resolution cache and edge cases)

1d ago

#4210

agent-sessions: revisit the import's remaining review findings (redaction edge cases, import robustness)

1d ago

#4208

Docs: document the datastore durable setting and its macOS ordering in the manual

1d ago

#4203

Docs: working offline against swamp serve (leases, outbox, flush, quarantine) for swamp-club#4195

1d ago

#4202

Swamp Club collective GUI: show the swamp serve instances currently connected to a collective

Enterprise1d ago

#4200

Docs: swamp data query --sort, --cursor and nextCursor in the data reference

1d ago

#4199

A malformed --ca-cert file is reported as an unreadable OS certificate store

1d ago

#4198

TLS hint blames a missing root CA and macOS for every invalid peer certificate failure

1d ago

#4196

workflow cancel --server does not send SWAMP_SERVE_EXTRA_HEADERS

1d ago

#4193

S3/GCS repairUnpushedFiles: the pull it asks for after a lost last-synced index does not stop it re-uploading copies a peer deleted

1d ago

#4190

swamp-uat private-registry tests leave npm/<port> dirs in the shared Deno cache

1d ago

#4188

Read-model catch-up of many data versions slows sharply under load

1d ago

#4187

swamp serve --groups-field help says group/collective memberships; it names only the collectives field

1d ago

#4186

A resume runs settled work after the teardown gated on it has already run, and nothing tears that work down

1d ago

#4184

A step settled after the abort overwrites the expression-context entry of a same-named step that ran in another job

1d ago

#4183

The extractContentMetadata property test generates invalid source and fails at random

1d ago

#4181

A limited model.output.search copies and sorts the whole listing on the event loop for each request, so that step still scales with the window

2d ago

#4180

Flaky test: access_poll_phase_telemetry_test sees grants_active 1 where the snapshot build read 2 records

2d ago

#4179

A lone step in a job still starts under the aborted signal when another job has suspended the run

2d ago

#4170

CLI command to change an existing extension's visibility (private → public)

Team2d ago

#4169

Docs: team-mode model leases (swamp behavior lease, lease status in datastore lock status)

1d ago

#4165

serve (token mode): --admins accepts idp-group entries that can never match

2d ago

#4163

build-swamp-extension example: code-review isn't given the quality evidence, so the reviewer reports quality as missing

Team2d ago

#4162

Filesystem control-plane put races empty-parent cleanup (cron pending-run ENOENT)

Team2d ago

#4161

deployment: getLogs method (deployment-aware pod log tailing)

2d ago

#4158

Agent sessions extension: import Codex sessions

2d ago

#4147

model.output.search response phase takes 3.9s for 5,000 items with no attribution (redaction vs serialization vs send)

2d ago

#4132

Docs: v3 serve team mode, followers forward writes and the advertise-address and ca-cert serve flags (swamp-club#4120)

2d ago

#4131

Skill/docs: document registry listing limits, static-extraction rules, and splitting large APIs by domain

2d ago

#4130

Check registry listing limits in extension quality/push and suggest splitting into per-domain extensions

2d ago

#4129

Over-limit contentMetadata publishes a blank extension page; archive fallback extracts nothing

2d ago

#4127

swamp inbox: with a filter active, sitting on the last row pages through the whole inbox in the background

2d ago

← Back to list

01Issue

FeatureOpenSwamp CLIPublic

AssigneesNone

Relationships

#4239 swamp issue: file bugs, features and security reports against the platform source

Opened by stack72 · 11/1/2026

Problem

swamp-club now has a platform issue source (swamp-club PR #1466), so bugs, features and security reports can be raised against the platform. The CLI has no way to file one.

The API already accepts it: POST /api/v1/lab/issues takes source: "platform" from any signed-in operative.

Proposed solution

Let swamp issue bug, swamp issue feature and swamp issue security file an issue with the platform source, for any logged-in user rather than only admins.

The exact flag spelling is open.
Without it, the commands keep filing with the source they use today.
It cannot be combined with --extension, which routes a report elsewhere.

Behaviour to keep

Visibility follows the type: Platform bugs and features are public, and security reports stay restricted to admins and the author.
This adds no way to file the admin-only platform type, which the Lab now labels Internal. The platform source and the platform type are separate fields that share a name, so help text and docs should keep them distinct.
The classifier does not rewrite the platform source, so an explicit choice sticks.

Out of scope

swamp issue search --source platform already passes through as a filter, and --type platform keeps its current meaning.

Docs

Update the swamp issue manual page and the issue guide in the swamp skill.

02Bog Flow

Open

11/1/2026, 4:34:13 PM

No activity in this phase yet.

03Sludge Pulse

swamp issue: file bugs, features and security reports against the platform source

artifacts.swamp-club.com unreachable in Spain during LaLiga matches (ISP blocking of Cloudflare IPs)

Failed remote methods lose named command-result output handles at Serve

Whole run-index rewrites block serve dispatch as retained inputs grow

Worker control WebSocket reports Frame too large and aborts small native dispatches

Supported binary file ingestion for remote members of swamp serve, without the bytes landing in run history

Worker queryData fails at the fixed 30 s RPC limit while it waits for a full catalog rebuild

cfgmgmt firewall: match rules by destination and comment

Align Caddy reverse-proxy TLS documentation with Kubernetes proxy guidance

Scheduled flaky-test detection is failing

vault put --server: accept the value on stdin (keep secrets out of argv)

swamp serve exhausts its heap when a workflow's run history carries large inputs: every run save parses and rewrites the whole .runs-index.json

Hot reload can keep an old local behavior registry and memoized bundle after external catalog indexing (1602; e459 regression passes)

Add expiring service-account token requests and authorization checks to RBAC

Flaky: v3 replica check stall test reads restore.pid before the stub writes it

Reads other than findById still treat a lapsed temporary ban as active until the operative next signs in

verify-build upgrade gate silently skips models whose version is a constant

@swamp/agent-sessions: explore a decision model (TypeSafe Jev) for call labelling

agent-sessions: follow-ups from the 4211 reviews (repo resolution cache and edge cases)

agent-sessions: revisit the import's remaining review findings (redaction edge cases, import robustness)

Docs: document the datastore durable setting and its macOS ordering in the manual

Docs: working offline against swamp serve (leases, outbox, flush, quarantine) for swamp-club#4195

Swamp Club collective GUI: show the swamp serve instances currently connected to a collective

Docs: swamp data query --sort, --cursor and nextCursor in the data reference

A malformed --ca-cert file is reported as an unreadable OS certificate store

TLS hint blames a missing root CA and macOS for every invalid peer certificate failure

workflow cancel --server does not send SWAMP_SERVE_EXTRA_HEADERS

S3/GCS repairUnpushedFiles: the pull it asks for after a lost last-synced index does not stop it re-uploading copies a peer deleted

swamp-uat private-registry tests leave npm/<port> dirs in the shared Deno cache

Read-model catch-up of many data versions slows sharply under load

swamp serve --groups-field help says group/collective memberships; it names only the collectives field

A resume runs settled work after the teardown gated on it has already run, and nothing tears that work down

A step settled after the abort overwrites the expression-context entry of a same-named step that ran in another job

The extractContentMetadata property test generates invalid source and fails at random

A limited model.output.search copies and sorts the whole listing on the event loop for each request, so that step still scales with the window

Flaky test: access_poll_phase_telemetry_test sees grants_active 1 where the snapshot build read 2 records

A lone step in a job still starts under the aborted signal when another job has suspended the run

CLI command to change an existing extension's visibility (private → public)

Docs: team-mode model leases (swamp behavior lease, lease status in datastore lock status)

serve (token mode): --admins accepts idp-group entries that can never match

build-swamp-extension example: code-review isn't given the quality evidence, so the reviewer reports quality as missing

Filesystem control-plane put races empty-parent cleanup (cron pending-run ENOENT)

deployment: getLogs method (deployment-aware pod log tailing)

Agent sessions extension: import Codex sessions

model.output.search response phase takes 3.9s for 5,000 items with no attribution (redaction vs serialization vs send)

Docs: v3 serve team mode, followers forward writes and the advertise-address and ca-cert serve flags (swamp-club#4120)

Skill/docs: document registry listing limits, static-extraction rules, and splitting large APIs by domain

Check registry listing limits in extension quality/push and suggest splitting into per-domain extensions

Over-limit contentMetadata publishes a blank extension page; archive fallback extracts nothing

swamp inbox: with a filter active, sitting on the last row pages through the whole inbox in the background

Relationships

#4239 swamp issue: file bugs, features and security reports against the platform source

Problem

Proposed solution

Behaviour to keep

Out of scope

Docs

Open