Follow-ups from the swamp-eval migration (swamp-club#4403)
model output logs shows the latest log version instead of the output's own artifact version
Manual: Sensitive Method Arguments claims a literal value is refused, but a method run accepts it
workflow run: show artifact attributes for runs through serve, and let a run leave out the "Data produced" box
Docs: what serve instances must not share, flat AWS Secrets Manager names, and where OAuth values are stored
Let a serve:* collective key look up usernames, so a recreated swamp serve does not need oauth:manage at runtime
aws-sm vault: optional secret_prefix to scope secrets within an AWS account and region
@swamp/cve http2shell, php-rce-2026-10 and tailworm: scan fails with 'Duplicate data instance name' (log and status share a name)
swamp skill: add a workspace guide and routing-table entry
stagecraft tracker: relate tickets across trackers (another repo's tracker)
serve: a capability probe answered by a follower does not speak for the leader that handles the forwarded request
serve OAuth client reuse: remaining review findings from swamp-club#4264
Agents.md: consider not using H1 'Project' inside managed block
serve: the cron-fire dedup claim has no deadline, so a hung control plane stalls every scheduled fire
serve: define what swamp serve does when its OAuth client is deleted at swamp-club
Docs: schedule catch-up and missed-fire tracking for scheduled workflows
Work-item commands run from the wrong repo report the work item as not started
Docs: step concurrency caps only that step's forEach iterations, not its whole dependency level
Package everything on ops.swamp-club.com; stop direct server edits
workflow run: let a run skip the "Data produced" box, or make it show what each artifact holds
Shorten swamp serve's token session re-check so revocation takes effect sooner
@swamp/cve/emudhra: Ubuntu's pip vendored certifi reported as exposed although pip uses the OS store
cfgmgmt firewall (ufw): an input for rule position (insert before/after)
@swamp/video: informal demos — join multiple takes into one video, and a full-length background music bed
agent-sessions: lockfile test helper silently depends on the captured @swamp/git key
agent-sessions: low-severity edge cases from the Codex importer reviews (#4158)
Team mode manual pages: swamp-serve and remote-execution for leader/follower, member checkouts, offline work, run control and known limits
Agent session record: four questions from the Codex importer (#4158)
@swamp/video: upload workflow to publish a take to YouTube (video, description, chapters, captions, thumbnail)
@swamp/video/brand: customizable outro card (next steps, headline, per-video CTA)
data prune through serve deletes data of an auto-definition whose declared type is invalid
serve: give the definition index a change signal (file watcher with a sync barrier) so a write to a definitions directory costs O(1), not a stat of every file in it
Warn when a grant with a methods list is a deny: it also refuses requests that name no method
serve reload reports 0 types reloaded when it replaced edited repo-local behaviors
@swamp/video/brand: cap each Chromium stderr line kept for errors
serve resolves realpath for thousands of files under .swamp/outputs/swamp/worker/set_status
Retention or GC for auto-definitions whose runs and data are gone
S3 and GCS: after a real commit by another writer, a serve stays off the pull fast path until it restarts
Licence header check only compares the first line of a file
CI: an accepted attestation approves the PR, and anything else fails the attestation job
artifacts.swamp-club.com unreachable in Spain during LaLiga matches (ISP blocking of Cloudflare IPs)
Supported binary file ingestion for remote members of swamp serve, without the bytes landing in run history
Worker queryData fails at the fixed 30 s RPC limit while it waits for a full catalog rebuild
Add expiring service-account token requests and authorization checks to RBAC
Reads other than findById still treat a lapsed temporary ban as active until the operative next signs in
verify-build upgrade gate silently skips models whose version is a constant
@swamp/agent-sessions: explore a decision model (TypeSafe Jev) for call labelling
agent-sessions: follow-ups from the 4211 reviews (repo resolution cache and edge cases)
agent-sessions: revisit the import's remaining review findings (redaction edge cases, import robustness)
Swamp Club collective GUI: show the swamp serve instances currently connected to a collective
A malformed --ca-cert file is reported as an unreadable OS certificate store
TLS hint blames a missing root CA and macOS for every invalid peer certificate failure
workflow cancel --server does not send SWAMP_SERVE_EXTRA_HEADERS
S3/GCS repairUnpushedFiles: the pull it asks for after a lost last-synced index does not stop it re-uploading copies a peer deleted
swamp-uat private-registry tests leave npm/<port> dirs in the shared Deno cache
A resume runs settled work after the teardown gated on it has already run, and nothing tears that work down
serve (token mode): --admins accepts idp-group entries that can never match
build-swamp-extension example: code-review isn't given the quality evidence, so the reviewer reports quality as missing
deployment: getLogs method (deployment-aware pod log tailing)
model.output.search response phase takes 3.9s for 5,000 items with no attribution (redaction vs serialization vs send)
Skill/docs: document registry listing limits, static-extraction rules, and splitting large APIs by domain
Check registry listing limits in extension quality/push and suggest splitting into per-domain extensions
Relationships
#4293 S3 and GCS: after a real commit by another writer, a serve stays off the pull fast path until it restarts
Opened by zack · 11/2/2026
Split from #4102, which fixes this for commits a service made itself.
Model-scoped and subdir-scoped pulls never re-arm the sidecar commitSeq, because neither has read the whole index (#2246), and the runs and pollers of a serve only make those pulls. So one commit by another writer (a peer, or a CLI push) leaves that serve on the slow path until a full pull, which in practice means a restart.
After #4102 this state no longer overwrites other models unpushed files, and scoped pulls list only their own entries, but each poll still reads every shard and lists the datastore. Deployments with real peers keep that cost. Related to #2998.
Wanted: a way to re-arm without reading every shard on every miss.
Open
No activity in this phase yet.
Sign in to post a ripple.