serve: let methods act on swamp-club as the user who started the run (on-behalf-of token exchange)

1d ago

#4690

@swamp/video: generate intro and bed music sized to the take (ElevenLabs first; Suno once its API is open)

1d ago

#4686

@swamp/video/obs: add the brand stage to an existing OBS scene, with the webcam ring and mask optional

1d ago

#4678

swamp behavior type rename: move a behavior type's data, outputs and catalog rows to a new type name

1d ago

#4672

swamp issue: choose the target collective and control issue visibility -- at filing time and afterward -- from the CLI (with a settable default)

Team1d ago

#4669

Render <details>/<summary> in serve's report view

1d ago

#4659

stagecraft DESIGN.md: say the stored-as-received check catches only a redacted secret, and --literal-inputs is what stops evaluation

2d ago

#4657

Lazy loading: delete compile.ts --no-bundle once a Deno version bump has shipped bundled

2d ago

#4653

stagecraft: dispatch prompts read injected products by latest record, not the version the run indexed

2d ago

#4644

Respect dependency versions pinned with extension pull dep@version

2d ago

#4632

Find a working-directory Swamp repo even with `SWAMP_SERVE_URL` in the environment

2d ago

#4603

Scheduled flaky-test detection is failing

4h ago

#4598

datastore setup extension over serve: resolve --config expressions with per-caller authorization

3d ago

#4594

serve: add a fitness test so no serve route is added under the /hooks/ webhook route-file prefix

3d ago

#4586

Audit OAuth client deletion

3d ago

#4585

Collective-registered OAuth clients can't complete authorization_code: redirect URIs are stored as a JSON array string

3d ago

#4575

software-factory: a work item whose slug extends another's reads the other's records

Team1d ago

#4564

Extension versions: print one spelling in log output (drop the v prefix in list, outdated, update, search)

4d ago

#4540

Ambient tags: set tags once per repo/worktree (env or .swamp), add them to every run and everything downstream, filter run history by tag

4d ago

#4538

Allow editing recent feed submissions

Team4d ago

#4524

No way to add or switch to password login on an account created with SSO

5d ago

#4523

Native interactive report views in the dashboard, with scoped workflow refresh

Team4d ago

#4493

Expose a manual_approval gate's decision identity (decidedBy) to workflow expressions

Team6d ago

#4490

data query rejects CEL list macros: exists(c, ...) fails with Unknown field "c"

6d ago

#4477

A workflow run keeps every step's resource contents in memory, so a large forEach fan-out can exhaust the heap

7d ago

#4476

Image factory: golden GCE and Docker base images built on ops

6d ago

#4467

swamp data get and data versions report Behavior not found for data whose behavior definition was deleted

7d ago

#4466

Workflow-scoped data get reports the behavior id as modelName once the behavior definition is deleted

8d ago

#4459

Slackwater: let customers build integrations that drive workflows securely and auditably

1d ago

#4451

Container run inspection and isolation metadata for audited recovery tests

8d ago

#4439

swamp serve: apply config changes without failed requests (full reload, vault-backed webhook secrets, harmless restarts)

8d ago

#4433

stagecraft tracker: tidy up external relations (duplicate entries, id case, second lookup)

6d ago

#4430

SWAMP_SERVER_TOKEN does not authenticate with --server, while --token and SWAMP_SERVER_TOKEN_FILE do

8d ago

#4420

Terminal title should be conversation summary

3d ago

#4414

@swamp/issue-lifecycle: collapse the verification_passed, post_attestation, link_pr sequence

8d ago

#4413

@swamp/issue-lifecycle: one-call verification

8d ago

#4410

audit: register legitimate non-swamp commands as approved bypasses

9d ago

#4385

Let a serve:* collective key look up usernames, so a recreated swamp serve does not need oauth:manage at runtime

9d ago

#4384

aws-sm vault: optional secret_prefix to scope secrets within an AWS account and region

9d ago

#4381

swamp skill: add a workspace guide and routing-table entry

Enterprise9d ago

#4373

serve: a capability probe answered by a follower does not speak for the leader that handles the forwarded request

10d ago

#4372

serve OAuth client reuse: remaining review findings from swamp-club#4264

10d ago

#4367

serve: the cron-fire dedup claim has no deadline, so a hung control plane stalls every scheduled fire

10d ago

#4365

serve: take a rotated OAuth client secret without a restart, and say when swamp-club refuses its client

3d ago

#4359

Work-item commands run from the wrong repo report the work item as not started

10d ago

← Back to list

01Issue

BugOpenSwamp CLIPublic

AssigneesNone

Relationships

#4734 vault: legacy type deprecation warning wraps names in doubled quotes

Opened by stack72 · 11/13/2026

When swamp loads a vault config whose type is a legacy name (aws-sm here), the warning from src/domain/vaults/vault_service.ts:165 prints each value with doubled quotes:

[WRN] vaults: Vault '"legacy-secrets"' uses deprecated type '"aws-sm"'. Automatically remapping to '"@swamp/aws-sm"'. Update your vault config to use type: "@swamp/aws-sm"

Expected: Vault 'legacy-secrets' uses deprecated type 'aws-sm'. Automatically remapping to '@swamp/aws-sm'. ...

The logtape template literal already quotes interpolated strings, and the message adds its own single quotes around them. Reproduce with swamp 20261113.201711.0-sha.9c9e0ef0: create vaults/aws-sm/.yaml with type: aws-sm, then run swamp vault list-keys default. The manual quotes this warning verbatim in reference/vaults.md (swamp-club#4726), so it needs updating when this is fixed. Found while working swamp-club#4727.

02Bog Flow

Open

11/13/2026, 10:10:02 PM

No activity in this phase yet.

03Sludge Pulse

vault: legacy type deprecation warning wraps names in doubled quotes

Support image attachments in issues (Lab and CLI)

Lab issues page: toolbar overflows and clips controls when list pane narrows

Docs: dashboard and history get name who started and decided a run by username

ABAC support in @swamp/aws-sm

serve: let methods act on swamp-club as the user who started the run (on-behalf-of token exchange)

@swamp/video: generate intro and bed music sized to the take (ElevenLabs first; Suno once its API is open)

@swamp/video/obs: add the brand stage to an existing OBS scene, with the webcam ring and mask optional

swamp behavior type rename: move a behavior type's data, outputs and catalog rows to a new type name

swamp issue: choose the target collective and control issue visibility -- at filing time and afterward -- from the CLI (with a settable default)

Render <details>/<summary> in serve's report view

stagecraft DESIGN.md: say the stored-as-received check catches only a redacted secret, and --literal-inputs is what stops evaluation

Lazy loading: delete compile.ts --no-bundle once a Deno version bump has shipped bundled

stagecraft: dispatch prompts read injected products by latest record, not the version the run indexed

Respect dependency versions pinned with extension pull dep@version

Find a working-directory Swamp repo even with `SWAMP_SERVE_URL` in the environment

Scheduled flaky-test detection is failing

datastore setup extension over serve: resolve --config expressions with per-caller authorization

serve: add a fitness test so no serve route is added under the /hooks/ webhook route-file prefix

Audit OAuth client deletion

Collective-registered OAuth clients can't complete authorization_code: redirect URIs are stored as a JSON array string

software-factory: a work item whose slug extends another's reads the other's records

Extension versions: print one spelling in log output (drop the v prefix in list, outdated, update, search)

Ambient tags: set tags once per repo/worktree (env or .swamp), add them to every run and everything downstream, filter run history by tag

Allow editing recent feed submissions

No way to add or switch to password login on an account created with SSO

Native interactive report views in the dashboard, with scoped workflow refresh

Expose a manual_approval gate's decision identity (decidedBy) to workflow expressions

data query rejects CEL list macros: exists(c, ...) fails with Unknown field "c"

A workflow run keeps every step's resource contents in memory, so a large forEach fan-out can exhaust the heap

Image factory: golden GCE and Docker base images built on ops

swamp data get and data versions report Behavior not found for data whose behavior definition was deleted

Workflow-scoped data get reports the behavior id as modelName once the behavior definition is deleted

Slackwater: let customers build integrations that drive workflows securely and auditably

Container run inspection and isolation metadata for audited recovery tests

swamp serve: apply config changes without failed requests (full reload, vault-backed webhook secrets, harmless restarts)

stagecraft tracker: tidy up external relations (duplicate entries, id case, second lookup)

SWAMP_SERVER_TOKEN does not authenticate with --server, while --token and SWAMP_SERVER_TOKEN_FILE do

Terminal title should be conversation summary

@swamp/issue-lifecycle: collapse the verification_passed, post_attestation, link_pr sequence

@swamp/issue-lifecycle: one-call verification

audit: register legitimate non-swamp commands as approved bypasses

Let a serve:* collective key look up usernames, so a recreated swamp serve does not need oauth:manage at runtime

aws-sm vault: optional secret_prefix to scope secrets within an AWS account and region

swamp skill: add a workspace guide and routing-table entry

serve: a capability probe answered by a follower does not speak for the leader that handles the forwarded request

serve OAuth client reuse: remaining review findings from swamp-club#4264

serve: the cron-fire dedup claim has no deadline, so a hung control plane stalls every scheduled fire

serve: take a rotated OAuth client secret without a restart, and say when swamp-club refuses its client

Work-item commands run from the wrong repo report the work item as not started

Relationships

#4734 vault: legacy type deprecation warning wraps names in doubled quotes

Open