Docs: dashboard and history get name who started and decided a run by username

28m ago

#4729

GCP Drive files enrichment: download_content can overwrite the state written by upload

30m ago

#4702

Team mode: a member's or serve's copy is never slow to become usable (recovery, serve boot, catch-up after idle or compaction, login reset) — cost proportional to change, never to datastore size

17m ago

#4700

ABAC support in @swamp/aws-sm

22h ago

#4692

serve: let methods act on swamp-club as the user who started the run (on-behalf-of token exchange)

23h ago

#4690

@swamp/video: generate intro and bed music sized to the take (ElevenLabs first; Suno once its API is open)

1d ago

#4686

@swamp/video/obs: add the brand stage to an existing OBS scene, with the webcam ring and mask optional

1d ago

#4678

swamp behavior type rename: move a behavior type's data, outputs and catalog rows to a new type name

1d ago

#4672

swamp issue: choose the target collective and control issue visibility -- at filing time and afterward -- from the CLI (with a settable default)

Team1d ago

#4669

Render <details>/<summary> in serve's report view

1d ago

#4659

stagecraft DESIGN.md: say the stored-as-received check catches only a redacted secret, and --literal-inputs is what stops evaluation

2d ago

#4657

Lazy loading: delete compile.ts --no-bundle once a Deno version bump has shipped bundled

2d ago

#4653

stagecraft: dispatch prompts read injected products by latest record, not the version the run indexed

2d ago

#4644

Respect dependency versions pinned with extension pull dep@version

2d ago

#4632

Find a working-directory Swamp repo even with `SWAMP_SERVE_URL` in the environment

2d ago

#4603

Scheduled flaky-test detection is failing

1h ago

#4598

datastore setup extension over serve: resolve --config expressions with per-caller authorization

3d ago

#4594

serve: add a fitness test so no serve route is added under the /hooks/ webhook route-file prefix

3d ago

#4586

Audit OAuth client deletion

3d ago

#4585

Collective-registered OAuth clients can't complete authorization_code: redirect URIs are stored as a JSON array string

3d ago

#4575

software-factory: a work item whose slug extends another's reads the other's records

Team1d ago

#4564

Extension versions: print one spelling in log output (drop the v prefix in list, outdated, update, search)

3d ago

#4540

Ambient tags: set tags once per repo/worktree (env or .swamp), add them to every run and everything downstream, filter run history by tag

4d ago

#4538

Expose a manual_approval gate's decision identity (decidedBy) to workflow expressions

Team6d ago

#4490

data query rejects CEL list macros: exists(c, ...) fails with Unknown field "c"

6d ago

#4477

A workflow run keeps every step's resource contents in memory, so a large forEach fan-out can exhaust the heap

7d ago

#4476

Image factory: golden GCE and Docker base images built on ops

5d ago

#4467

swamp data get and data versions report Behavior not found for data whose behavior definition was deleted

7d ago

#4466

Workflow-scoped data get reports the behavior id as modelName once the behavior definition is deleted

7d ago

#4459

Slackwater: let customers build integrations that drive workflows securely and auditably

1d ago

#4451

Container run inspection and isolation metadata for audited recovery tests

7d ago

#4439

swamp serve: apply config changes without failed requests (full reload, vault-backed webhook secrets, harmless restarts)

8d ago

#4433

stagecraft tracker: tidy up external relations (duplicate entries, id case, second lookup)

5d ago

#4430

SWAMP_SERVER_TOKEN does not authenticate with --server, while --token and SWAMP_SERVER_TOKEN_FILE do

8d ago

#4420

Terminal title should be conversation summary

3d ago

#4414

@swamp/issue-lifecycle: collapse the verification_passed, post_attestation, link_pr sequence

8d ago

#4413

@swamp/issue-lifecycle: one-call verification

8d ago

#4410

audit: register legitimate non-swamp commands as approved bypasses

8d ago

#4385

Let a serve:* collective key look up usernames, so a recreated swamp serve does not need oauth:manage at runtime

9d ago

#4384

aws-sm vault: optional secret_prefix to scope secrets within an AWS account and region

9d ago

#4381

swamp skill: add a workspace guide and routing-table entry

Enterprise9d ago

#4373

serve: a capability probe answered by a follower does not speak for the leader that handles the forwarded request

9d ago

#4372

serve OAuth client reuse: remaining review findings from swamp-club#4264

9d ago

#4367

serve: the cron-fire dedup claim has no deadline, so a hung control plane stalls every scheduled fire

10d ago

#4365

serve: take a rotated OAuth client secret without a restart, and say when swamp-club refuses its client

3d ago

#4359

Work-item commands run from the wrong repo report the work item as not started

10d ago

#4334

cfgmgmt firewall (ufw): an input for rule position (insert before/after)

Team10d ago

← Back to list

01Issue

BugTriagedSwamp ClubPublic

AssigneesNone

Relationships

↔ sibling #4727

#4726 Docs: vault manual says legacy vault type names are automatically mapped, but vault create and migrate refuse them

Opened by zack · 11/13/2026

content/manual/reference/vaults.md (around lines 309-310) says legacy type names (aws, aws-sm, azure, azure-kv, 1password) are automatically mapped to their scoped equivalents. That is true only when an already-stored vault config is loaded (vault_service.ts remaps it with a warning). vault create refuses a legacy name with: The type aws-sm has been renamed to @swamp/aws-sm. Use type @swamp/aws-sm instead (src/libswamp/vaults/create.ts). vault migrate refuses one as well (src/libswamp/vaults/migrate.ts), which the same page already states in its migrate table.

Suggested wording: new vaults must use the scoped type name; vault create and vault migrate reject a legacy name with a message naming the scoped type; an existing vault config that still uses a legacy name keeps working and logs a deprecation warning when it loads. Found while triaging swamp-club#4721.

02Bog Flow

Triaged

11/13/2026, 8:07:36 PM

No activity in this phase yet.

03Sludge Pulse

stack72 linked sibling of #472711/13/2026, 8:06:36 PM

system commented 11/13/2026, 6:27:02 PM

Classified automatically when this issue was filed.

Type: Bug

If you feel this classification is incorrect, add a ripple to tell us so.

Docs: dashboard and history get name who started and decided a run by username

GCP Drive files enrichment: download_content can overwrite the state written by upload

Team mode: a member's or serve's copy is never slow to become usable (recovery, serve boot, catch-up after idle or compaction, login reset) — cost proportional to change, never to datastore size

ABAC support in @swamp/aws-sm

serve: let methods act on swamp-club as the user who started the run (on-behalf-of token exchange)

@swamp/video: generate intro and bed music sized to the take (ElevenLabs first; Suno once its API is open)

@swamp/video/obs: add the brand stage to an existing OBS scene, with the webcam ring and mask optional

swamp behavior type rename: move a behavior type's data, outputs and catalog rows to a new type name

swamp issue: choose the target collective and control issue visibility -- at filing time and afterward -- from the CLI (with a settable default)

Render <details>/<summary> in serve's report view

stagecraft DESIGN.md: say the stored-as-received check catches only a redacted secret, and --literal-inputs is what stops evaluation

Lazy loading: delete compile.ts --no-bundle once a Deno version bump has shipped bundled

stagecraft: dispatch prompts read injected products by latest record, not the version the run indexed

Respect dependency versions pinned with extension pull dep@version

Find a working-directory Swamp repo even with `SWAMP_SERVE_URL` in the environment

Scheduled flaky-test detection is failing

datastore setup extension over serve: resolve --config expressions with per-caller authorization

serve: add a fitness test so no serve route is added under the /hooks/ webhook route-file prefix

Audit OAuth client deletion

Collective-registered OAuth clients can't complete authorization_code: redirect URIs are stored as a JSON array string

software-factory: a work item whose slug extends another's reads the other's records

Extension versions: print one spelling in log output (drop the v prefix in list, outdated, update, search)

Ambient tags: set tags once per repo/worktree (env or .swamp), add them to every run and everything downstream, filter run history by tag

Allow editing recent feed submissions

No way to add or switch to password login on an account created with SSO

Native interactive report views in the dashboard, with scoped workflow refresh

Expose a manual_approval gate's decision identity (decidedBy) to workflow expressions

data query rejects CEL list macros: exists(c, ...) fails with Unknown field "c"

A workflow run keeps every step's resource contents in memory, so a large forEach fan-out can exhaust the heap

Image factory: golden GCE and Docker base images built on ops

swamp data get and data versions report Behavior not found for data whose behavior definition was deleted

Workflow-scoped data get reports the behavior id as modelName once the behavior definition is deleted

Slackwater: let customers build integrations that drive workflows securely and auditably

Container run inspection and isolation metadata for audited recovery tests

swamp serve: apply config changes without failed requests (full reload, vault-backed webhook secrets, harmless restarts)

stagecraft tracker: tidy up external relations (duplicate entries, id case, second lookup)

SWAMP_SERVER_TOKEN does not authenticate with --server, while --token and SWAMP_SERVER_TOKEN_FILE do

Terminal title should be conversation summary

@swamp/issue-lifecycle: collapse the verification_passed, post_attestation, link_pr sequence

@swamp/issue-lifecycle: one-call verification

audit: register legitimate non-swamp commands as approved bypasses

Let a serve:* collective key look up usernames, so a recreated swamp serve does not need oauth:manage at runtime

aws-sm vault: optional secret_prefix to scope secrets within an AWS account and region

swamp skill: add a workspace guide and routing-table entry

serve: a capability probe answered by a follower does not speak for the leader that handles the forwarded request

serve OAuth client reuse: remaining review findings from swamp-club#4264

serve: the cron-fire dedup claim has no deadline, so a hung control plane stalls every scheduled fire

serve: take a rotated OAuth client secret without a restart, and say when swamp-club refuses its client

Work-item commands run from the wrong repo report the work item as not started

cfgmgmt firewall (ufw): an input for rule position (insert before/after)

Relationships

#4726 Docs: vault manual says legacy vault type names are automatically mapped, but vault create and migrate refuse them

Triaged