#1794
--ca-cert / SWAMP_CA_CERT are ignored when serve runs --auth-mode token — only DENO_CERT reaches the connection's TLS config (found validating #1748)
#1789
Only documented non-interactive auth puts the password in argv; the safe SWAMP_API_KEY path is undocumented
#1737
Retyping a model instance strands catalog rows no command can reclaim — prune matches on model_id, delete resolves the current type (follow-up to #1009)
#1741
Docs: update cancel endpoint response statuses in REST API reference and workflows page
#1764
docs: update vault audit trail reference for write operation support
#1778
docs: document --dashboard flag for swamp serve
#1744
ExtensionWorkflowRepository scans manifest.yaml as a workflow, emitting 'Unknown key manifestVersion' warning
#1765
Relative path for custom agent skills setup doesn't provision skills
#1793
swamp serve daemon enable: add --dashboard flag
#1792
CLI writes runtime state (lastStalenessWarning) into tracked .swamp.yaml, dirtying a committed config file
#1791
extension install serializes files[] in readdir order, producing machine-dependent reorder diffs in upstream_extensions.json
#1790
Workflow YAML rewritten in place: block-scalar description truncated, file left unparseable, and validate still reports PASSED
#1788
workflow validate does not resolve modelType on factory-pattern steps — a non-existent extension validates clean
#1786
vault.get() arguments are verbatim, so a per-target secret cannot be expressed in workflow YAML
#1785
Cancellation/--timeout skips remaining steps including `completed`/`always` branches; --timeout waits for the in-flight subprocess
#1784
Remote "write-bearing" classification is inferred from data-plane writes, not declared; external side effects can be re-executed on worker disconnect (docs say the opposite)
#1783
Audit timeline is not populated by swamp CLI commands unless the AI-tool hook fires (manual says recording is automatic)
#1782
manual_approval suspends the run while parallel sibling jobs are mid-flight; in-flight steps are torn down and left `running`
#1781
`workflow resume --from` does nothing for forEach steps whose template name contains `${{ }}`
#1780
Step-level dependsOn on a forEach step never evaluates true (except `always`)
#1779
rum/site-info: lookup GETs a non-existent endpoint, always 405
#1768
vault read-secret appends a newline to piped output
#1748
wss:// direct to serve's own TLS listener still fails on 20260817 — client ALPN lands on h2, WS-over-h2 unimplemented (follow-up to #1363)
#1767
serve: vault audit repository not wired up — audit trail always empty
#1777
Support Jira webhooks with X-Hub-Signature HMAC-SHA256 verification
#1775
Add typed read-only remote ref lookup to @swamp/git
#1771
pullChanged skips same-size updated files — size-only change detection ignores the index sha256
#1770
A run's terminal status reaches the shared datastore only when a later run happens to push it
#1769
workflow cancel --all on the serve host shuts down the serve process
#1766
Readability of tables in documentation
#1754
repo init/upgrade --tool kiro references .kiro/skills/ but installs skills to ~/.kiro/skills/
#1745
vault: audit trail should record put, delete, and annotate operations
#1761
data.findBySpec() returns only the first in-run record, not all of them, so an .all() assert silently checks one element
#1763
repo upgrade --tool kiro reports wrong changedFiles paths
#1762
Suppress boot-time "pulled extension(s) have missing source files" WRN when invoked command is `swamp extension install`
#1760
s3-datastore: a stale machine's sync pushes its old 'latest' pointer over the newer remote one, and the rollback is permanent
#1759
`search` → `list` aliases are hand-rolled Command clones, not aliases: 10 of 11 have drifted from their parent's option set
#1756
Make official Docker image OCI-compliant
#1734
Method-name collision between a base model type and an extending extension silently drops the whole extension file — no error, doctor reports pass
#1749
data prune still misclassifies live records as orphans on 20260820 (after #1396) — serve-minted token/grant records, and report data of every live workflow
#1755
vault put prompts for the secret before validating the vault name exists
#1751
workflow validate: false 'Missing required inputs' for CEL-templated globalArgs (${{ inputs.* }})
#1753
Add SWAMP_CLI_OUTPUT env var to control default output mode (plaintext/tui/json)
#1752
@swamp/git fetch: support local path as remote
#1750
Dispatched steps over 15 minutes cannot write results: dispatch credentials expire and never refresh
#1747
Concurrent pushes to one namespace fail with HTTP 409 ConditionalRequestConflict — the conditional PUT is never retried
#1740
serve: triggerSource not persisted to workflow run summary
#1743
dataOutputOverrides not applied during remote execution — ephemeral resources GC'd before override takes effect
#1736
extension rm also deletes the lockfile entry, and install on an empty lockfile is a silent success — rm/install is not a round trip
#1718
--max-run-duration only applies to detached runs, not attached runs
#1738
Cancel endpoint reports status: cancelled for runs it did not actually cancel
#1739
@swamp/git: no way to amend a commit, but push can --force
#1742
Installation with new account creation times out
#1721
pre-flight checks run on orchestrator, not on worker — breaks remote execution with filesystem-dependent checks
#1712
docs: document --remote-only flag for swamp serve
#1726
Swamp serve daemon doesn't run with --hot-reload
#1722
serve: include workflowName in HealthSnapshotSchedule
#1735
knowledge-base retrieve persists query output into the state resource, with lifetime infinite and the query text in the instance name
#1733
Skip 50MB monolithic index rewrite on v2 shard-first path
#1732
Share single AwsS3Client instance across lock, sync, and verifier
#1731
Double shard assembly per command lifecycle (pull + push both read all shards)
#1730
pullChanged never records commitSeq for shard-first (v2) index
#1729
localHasAllRemoteEntries() permanently blocks sidecar update on partial caches
#1723
serve: workflow.history.get cannot find CLI-created runs or look up by run ID
#1728
"TRIAL ENDED" modal shown to team plan user when toggling extension visibility
#1727
Concurrent suspended workflow runs can't be disambiguated from 'approvals'; fresh runs should supersede matching-input suspended runs
#1725
I _think_ I might like a guard in the trigger yaml
#1724
swamp cmds don't realise the user is sshed into the system
#1711
serve dashboard: add cluster.instances and serve.config endpoints
#1720
CEL expressions have timestamp/duration but no current-time value, so no guard can express "older than N"
#1719
Support direct type execution (@type) with --server
#1717
access token mint writes to user vault, not serve's _token-secrets control plane in HA mode
#1716
Generic OTLP endpoint appends signal path after query or fragment
#1715
Issue lifecycle start drops top-level issue comments
#1710
serve dashboard: add instanceId, triggerSource, and step progress to WorkflowRunSummary
#1714
Document worker affinity (affinity: true) for workflows and jobs
#1709
Datastore MongoDB driver leaks connections — 5960 accumulated over 8 days
#1705
workflow approvals displays the latest run's prompt for every suspended run
#1708
@swamp/git: add a read-only working-tree diff for pre-commit review
#1704
docs: document --oauth-client-name flag for swamp serve
#1699
Docs: update workflow reference to include trigger in JSON output shapes
#1701
@swamp/git branch and push methods fail data naming when branch contains '/'
#1689
Docs: update workflow-placement.md for job/workflow-level placement inheritance
#1691
feat(serve): use identifiable OAuth client_name instead of random UUID
#1695
@swamp/git does not pass AbortSignal to Git subprocesses
#1694
Global Secret Manager methods build an invalid regional parent
#1687
Document model.method() support in assert expressions
#1703
No way to store code-review results — verdicts, findings, and cost are not persisted for any repo
#1702
Redaction regex boundary bug: label_base64 secrets with an unrecognized label pass through unredacted (e.g. swamp_ API keys)
#1700
User token page (/u/<user>) shows only "swamp_..." for every API key, making leaked-key identification impossible
#1692
upstream_state treats sparse-fetch branches as having no upstream
#1697
Add native support for the Pi coding harness
#1696
Cloud Build create supplies project instead of required projectId path parameter
#1685
workflows: support labels/target/platform at job and workflow level
#1682
swamp access grant create never registers the grant — a --deny created this way silently fails open
#1686
Support credentials in datastore config (vault-resolvable)
#1684
swamp serve OOMs on repos with 2000+ model definitions
#1679
Serve telemetry attribution for collectives
#1633
Extension workflows: no way to override trigger configuration
#1637
Add a list/discover method to the generated @swamp/aws types — no way to enumerate resources in a region
#1677
Document @vault= prefix for webhook secrets in serve.yaml
#1676
swamp access grant create installs an unrelated extension from the registry
#1675
docs: document SWAMP_API_KEY headless OAuth bootstrap for swamp serve
#1678
workflow-succeeded selects the globally-latest run, so siblings block each other under parallel use
#1632
swamp serve: webhook secrets should support @vault= resolution
#1672
Misleading collective_not_trusted auto-resolve error when a local source extension transiently fails to index during workflow validate
#1670
datastore setup: symlinks not counted in bytesCopied, causing misleading '(0B)' output
#1671
vault.get() CEL error embeds raw newline when wrapped by model resolver, producing broken output
#1674
Feature: user-configurable redaction rules (.swamp/redaction.yaml)
#1673
Fatal JavaScript out of memory: Ineffective mark-compacts near heap limit
#1665
Sync every signup to Attio, and backfill the existing population (#809 follow-up)
#1669
@swamp/issue-lifecycle probes /api/health, which swamp-club stopped serving when the Fresh scaffold stubs were removed
#1668
Lab lifecycle POST rejects any payload string that starts with a dollar sign, not just operator keys
#1138
Feed: detect and gracefully handle dead (404) post links (link rot)
#1137
/feed: per-post unread indicators and mark-as-read to track reading progress
#1147
/feed: filter and search by author, title/text, and topic
#1333
Add a :micdrop: emoji / reaction shortcode (swamp-native art included)
#1497
Push down the two cheap leaderboard scans: ghost-gate dictionary and eventCounts owner filter
#967
$identify events are never consumed — anonymous web history never binds to the account
#1667
Finish the swamp_* attribute set on Attio users, and settle the two unprefixed ones (#809 follow-up)
#1666
aria-expanded is a raw boolean in 12 places — collapsed state is unannounced to screen readers
#1658
One standing read: every scalar score consumer reads board_totals, not the ledger
#1657
Profile Edit trigger is a fire-and-forget island: no aria-expanded, and a silent no-op if the editor island does not hydrate
#1654
Profile XP bar jumps ~25px on fill, and pays the full cumulative walk for two numbers board_totals already holds
#929
Incremental activity projector + swamp.events username bloom index (spun off #925, stages 5+7)
#1254
Telemetry stats consumer: insert_id dedup commits before the write it guards — any upsert failure is silently swallowed on retry
#1598
score-rollup projector runs N× per cadence — the run gate is per-replica memory, not shared state
#1579
Leaderboard board windows re-anchor on wall-clock while the rest of the view is frozen at asOf
#1365
Collective management API for extension-based automation
#1663
swamp CLI: surface the audience and resolvedInVersion fields swamp-club now serves
#1652
Docs: document swamp workflow trigger set/get/remove commands
#1659
serve reload should pick up trigger override changes from serve.yaml
#1638
Catalog write-lock contention during extension load leaves a partial registry; auto-resolve fabricates 'local edits' and suggests a destructive --force re-pull
#1352
Website extension search ignores API relevance — exact name match "good-planning" ranks #10 (API ranks it #1)
#1510
Operatives button on Collectives page does nothing
#1662
ApiKeyManager's collapsed trigger points aria-controls at an element it never renders
#1661
A boolean aria-expanded renders as no aria-expanded: two disclosure widgets report no state to a screen reader
#1042
Collective leaderboard: activity metrics aggregated by identity group
#1651
Ripple redaction rewrites HTTP status-code runs as phone numbers, silently corrupting evidence
#1655
@adam/cfgmgmt/directory: uses GNU stat -c, silently non-compliant on FreeBSD and macOS targets
#1644
CLI: swamp workflow trigger set/get/remove commands
#1503
Profile score section blocks the render on a ClickHouse read
#1474
Plus-addressed emails stripped on invite acceptance, breaking collective join and quest reward
#1348
It is possible for a member to be a member of a collective twice
#1139
Lab: URLs inside list items aren't clickable (linkified) in rendered issue bodies/summaries
#1204
Collective invite emailed-link return path is dropped: /accept-invite sends ?returnUrl= but /login reads ?redirect=
#1211
Season Journey card shows "Claim Now" when there are no unclaimed tiers
#1210
Clicking username on a quest page opens profile preview modal instead of navigating to the profile
#1653
Tell the inviter when a collective invite mis-lands, instead of leaving it pending forever
#1504
Ghost profile bypasses the score-read seam and 500s on a slow ledger
#1589
A ledger read failure still renders as 'no activity': loadProfileScore swallows to an empty standing behind HTTP 200
#1642
Docs: document health monitoring endpoints for swamp serve
#1650
Remote trigger override management via --server
#1649
feat(serve): headless OAuth client bootstrap via SWAMP_API_KEY
#1648
Trigger overrides: observability and cleanup follow-ups
#1646
Make model output retention fields optional with sensible defaults
#1645
Docs: document trigger overrides in swamp-club manual
#1643
Smoke test: gated lab issue lifecycle workflow
#1613
Cluster health snapshots with SSE streaming for swamp serve
#1640
Docs: document auto-raise of open-file limit in swamp serve reference
#1641
Quality rubric + push gate for version upgrade chain correctness
#1639
workflow resume truncates the run's log file, losing every earlier attempt's records
#1634
Add an upstream-state method: status cannot answer whether commits are pushed
#1630
swamp serve dies of descriptor exhaustion on an ordinary workload, having warned about it at startup
#1636
extension quality awards repository-verified 2/2 for a nonexistent or private GitHub repo
#1635
extension/guide.md quick reference uses -j, which no swamp command accepts
#1628
serve: stale empty directories in active-runs/ never cleaned up
#1615
WebSocket auth rate limiter blocks legitimate users when sharing IP with a failing client
#1631
Failing on claude validate
#1614
GC expired OAuth server tokens and control plane secrets
#1618
Client shows 'Authentication failed' when actually rate-limited
#1627
serve: cron ticks leak pending-run records, replaying every past tick on restart
#1617
Workers retry forever on permanent auth failures instead of backing off
#1629
Remote execution has no working network configuration: off-loopback serve requires TLS, but worker connect cannot connect over TLS
#1608
Support --grants-dir for loading grants from a directory
#1626
migrate-index still drops shallow-path entries on 2026.08.07.1 — #1584 marked shipped but no released version carries the fix (self-contained repro)
#1616
Server token definitions and encryption keys are not durable across pod restarts
#1621
data.latest() is memoized per run, contradicting the documented "sees current-run data" contract
#1620
Model lookup misreports EMFILE (too many open files) as a broken definition file and dumps a raw stacktrace
#1619
Lab Insights not publicly available
#1612
Docs: add swamp access group list-idp to access commands reference
#1605
serve telemetry identity warnings are diagnostic but not actionable — say how to fix them
#1588
swamp quest: drop the heartbeat field the server no longer sends
#1610
--grant-reload auto does not detect filesystem changes — blind to ConfigMap updates
#1571
Add native Bedrock Knowledge Base Retrieve support
#1584
migrate-index silently drops entries with shallow paths — all of workflows-evaluated/ and any root-level file
#1611
Add swamp access group list-idp to enumerate IdP groups seen by the server
#1609
Grants directory loader skips symlinks — breaks Kubernetes ConfigMap mounts
#1604
Daemon telemetry flush: stop() can skip its final flush when a timer drain is already in flight
#1601
Docs: `swamp compile` subcommand doesn't exist
#1607
Guard the projector's full rewrites against the fail-open lease (ADV-6 from #1575/#1576)
#1606
Projector write amplification: board_totals/owner_devices full rewrites are owners × runs/day
#1576
Profile candidateIds prune costs a full ledger scan to build itself — 42.88M rows for one keyed read
#1575
Leaderboard phase 3: owner-grain board_totals so a cache miss is survivable at 10B
#1591
swamp serve is telemetry-dark: scheduled workflow runs never reach /ingest, and the daemon never flushes
#1603
CLI has never sent insert_id: retried telemetry batches are double-counted into cli_daily, inflating XP in an append-only ledger
#1581
Catalog backfill reconciles against the local cache, not the datastore
#1602
Extension bundle cache not invalidated when an imported sibling module changes (entry-file fingerprint only)
#1600
swamp serve: data.query fails permanently with "UNIQUE constraint failed: catalog.*" — one duplicate catalog 5-tuple aborts every catalog rebuild
#1599
dailyHistory range pushdown — deferred from #1576, and the measurement says why
#1597
Docs: manual never mentions telemetry, and the serve/scheduling pages imply automated runs are visible when they are not
#1596
Explore: CLI binary update integrity lacks independent verification
#1574
Leaderboard phase 2: take score_grants off the board read path — read today from score_daily
#1595
Explore: reconcile quality rubric's dormant provenance factor
#1594
Explore: pull-time signature verification for extensions
#1593
Explore: transparency-log integration (Rekor) for extension signatures
#1592
Explore: publish-time artifact signing for extensions (cosign keyless)
#1586
Profile day drill-down returns 0 entries at the 5s ClickHouse ceiling for every operative
#1582
reconcile_from_disk_bench.ts fails deno check (stale DenoRuntime stub)
#1563
Improve multi-word search query handling and guidance
#1573
Leaderboard phase 1: cache the board read and bust it on tier crossings (no schema change)
#1580
Catalog backfill deletes rows for any model whose data names are numeric
#1583
Docs: document catalog completeness check and --repair in doctor reference
#1577
Leaderboard phase 5: score-rollup-projector write cost at 10B — ~430M rows scanned per 60s tick
#1572
Epic: /leaderboard and /u/{username} do not survive 10B events — measured audit + phased plan
#1569
Datastore-managed configuration for multi-instance serve deployments
#1568
Ghosts on the leaderboard 500
#1561
swamp command doesn't check cwd
#1560
swamp auth login process fails when run remotely
#1558
serve boot OOM: findAllGlobalSince loads all workflow runs as full aggregates during reconciliation
#1555
extension search: channel-filtered results carry null version fields, and multiple --channel values collapse instead of unioning
#1556
s3-datastore: localHasAllRemoteEntries uses bare rel instead of localRelPath, always returns false in namespaced mode
#1559
datastoreSetupExtension migrates .swamp/ to cache root instead of namespace directory
#1557
swamp serve writes outputs/ outside the bound namespace — silently never persisted to the remote datastore
#1554
s3-datastore: bulk pull writes to cache root instead of the namespace, wedging push and arming a full-datastore delete
#1551
git: add pull, fetch --tags, and cherry-pick methods
#1552
Workflow runs with wide dataArtifact fan-out (~400/run) OOM both workflow history get and swamp serve boot, crash-looping the scheduler; rollback doesn't help (state-triggered, not release-triggered)
#1547
Show user:<name> instead of user:<id> in grant list output
#1553
Reusable long-lived invite link: one URL to bring people into the swamp
#1546
Exclude swamp internal model types from model list output
#1550
Skill docs use invalid two-argument 'vault get' form
#1549
access token mint prints an invalid retrieval command (vault get, not vault read-secret)
#1548
serve reload and model edit timeout over --server in Kubernetes
#1544
swamp auth whoami should report paid tier and trial status
#1545
Use whoami entitlement to explain private-extension push refusals
#1542
Document --restricted-commands flag for swamp serve
#1534
vault put: pass tags through to extension provider CreateSecret/setSecret calls
#1538
Docs: update manual for 23 new --server commands
#1541
Update VaultProvider interface in @systeminit/swamp-testing to support optional tags in put()
#1539
Docs: document --grants-file flag for swamp serve
#1540
Docs: document --server support for serve reload
#1535
Docs: add --tag flag to vault put reference
#1523
Docs: update manual for --detach-runs deprecation and HA auto-detection
#1526
Document the Codex plugin in swamp docs
#1531
Add --server support to CLI commands missing it
#1527
Document the swamp Claude Code plugin in the swamp documentation
#1537
Make --server a global CLI option
#1536
Add --server support to model cancel (server-side run cancellation)
#1530
Load grants from external source on swamp serve startup
#1529
swamp vault put should support tags for secret governance
#1533
Improve hot reload of the deamon, include extension source/bundle changes
#1528
Authenticated users must re-login after swamp serve restart
#1532
Add --server support to serve reload
#1525
Harden queue claim semantics: atomic claims + status-guarded markDelivered/markFailed across app queues
#1505
Auto-detect HA mode and deprecate --detach-runs flag
#1367
version-drift check (from #236) is a raw string-inequality, false-positives on multi-model manifests and metadata-only bumps
#1524
Resend newsletter audience sync: contacts, segments, backfill, unsubscribe sync-back
#1511
Move per-login token secrets from vault to encrypted control-plane store
#1520
Docs: document macOS TLS trust limitation and SSL_CERT_FILE workaround
#1488
Validate swamp serve deployment stack on startup
#1519
Docs: serve config file (.swamp/serve.yaml) and --config flag
#1517
Serve config file — read swamp serve configuration from YAML
#1518
Deno runtime does not trust ISRG Root YR — extensions fail with valid Let's Encrypt certs
#1508
Docs: update hot-reload reference to include trust list refresh
#1514
Cross-instance client re-attach for multi-instance swamp serve
#1512
vercel codegen: inline rawSyncResult in non-unwrap sync path
#1515
vercel codegen: unused listAll import blocks extension publish for 4 models
#1513
vercel codegen: add round-trip idempotency test for the pipeline
#1507
Track active runs in the control-plane store for cross-instance visibility
#1509
validateGlobalArgInputRefs checks step-level inputs but step schema rejects 'inputs' key
#1506
Docs: document continuous reconciliation and multi-instance serve flags
#1492
Docs: update workflow guard skip output to include guardExpression and guardResult
#1499
Make it aware hot reload on the deamon does not take into account trust list changes, or do take into account the trust list for the hot reload.
#1500
workflow validate: new 'GlobalArgument input references' check resolves model-definition ${{ inputs.* }} against workflow inputs, false-failing steps that supply the input
#1493
Continuous reconciliation for multi-instance swamp serve
#1496
Split the score-read circuit breaker so leaderboard pressure can't blank profile scores
#1475
oauth_sign_in telemetry records provider as the literal ":id" for every event
#881
Council: set the scoring balance — command tiers, farm-decay parameters, cross-category ratio
#880
Scoring coverage gaps: instrument drop-off, score ripples/mentions, reward invite-converts
#1495
Materialize an active-days-by-id table for the streak board
#1494
score-rollup-projector: O(all-time ledger) closure + per-pod fan-out saturates prod ClickHouse CPU
#1491
Startup cache hydration for swamp serve instance replacement
#1489
Output a log line for steps skipped due to guards
#1490
extension quality scorer misreads a template-literal import specifier in generated code as an unresolvable bare import, hard-erroring the whole extension as UNSCORABLE
#1315
Add @swamp/kubernetes/statefulset model type
#1472
Docs: access token commands reference says plaintext is 'shown once'
#1485
Document --restricted-model-types flag for swamp serve
#1486
swamp auth server-login ignores SWAMP_SERVE_URL
#1483
s3-datastore extension: pullChanged writes namespace-stripped paths to local cache
#1478
serve oauth: an unrecognized device-token error kills the whole serve process instead of the bootstrap
#1458
s3-datastore: bidirectional sync pull writes namespace-stripped copies to cache root, wedging push with no supported recovery
#1482
CLI reports 'HTTP/2 not supported by this client' when the server actually returned 401 — masks auth failures as a transport error
#1471
access token mint: allow reusing a revoked token name
#1481
extension quality --json exits 1 with 'rubric factors missing' even when a full score was computed (unearned factor, not uncomputable)
#1477
serve oauth: startDeviceGrant discards the OAuth error field, making device-code failures undiagnosable
#1470
access token rotate: add --vault flag to override inherited vault
#1479
Extensions without a repository can't receive issues — including the issue asking them to add one
#1476
serve oauth bootstrap: device flow rate-limited to a 45-second window by validateClient counter, shared globally across tenants
#1468
workflow edit: after saving an invalid workflow, re-running edit reports "Workflow not found"
#1459
Authentication via Google Broken
#1473
Profile edit broken on Safari
#1469
Configurable write paths for object-creating commands (repo-relative swamp root)
#1464
Docs: document rollbackOnFailure with safety guidance for external-dependency models
#1465
Remote execution tutorial: sample runner output is missing the stdout line that #1462 restored
#1467
seadex-latent-bugs: latent product bugs pinned by the wave-2b test backfill
#1462
Remote step stdout is not streamed to the workflow runner (log artifact is transferred correctly)
#1463
Redactor false positives: HH:MM:SS timestamps masked as IPs, SHA-256 digests masked as secrets (both inside code fences)
#1461
Remote execution tutorial: worker token list output and inline workflow-summary block no longer match CLI output
#1451
Add rollbackOnFailure for method-level write atomicity
#1460
docs: working-with-data tutorial uses removed depends_on step key, blocking the tutorial
#1457
Document --server support for extension pull/update, datastore setup, and vault migrate
#1453
model validate: transport-reachable preflight sends unresolved vault CEL expression as credential
#1452
Add `amp` (Amp Code) as a built-in --tool for repo init/upgrade/audit
#1401
Expose resource attributes in DataHandle for workflow report stepExecutions
#1448
Make swamp serve durable and highly available
#1446
Docs: document guard and resume --from in workflows reference
#1439
.swamp.yaml rewritten with quote style change + lastSkillMigrationWarning on read-only operations
#1444
Add --from flag to workflow resume for DAG re-entry on failed runs
#1440
data delete removes data locally but push reports 'no changes' — next datastore sync restores everything
#1443
Empty report returns persist 0-byte versions that mask the real report — and `swamp data gc` then deletes the real version, keeping the empties
#1438
Docs: document guard field for workflow steps
#1442
First-class scheduled garbage collection policy per datastore namespace
#1437
Add guard field to workflow steps for idempotent execution
#1402
--quiet mode does not suppress in-process extension logger output
#1423
tailscale transport hangs indefinitely on Tailscale SSH check-mode auth; never surfaces the login URL
#1431
Concurrent @type auto-creation races: N simultaneous runs create N definitions sharing one name, and only one is reachable
#1336
Worker queries need a safe connected-worker filter for fleet fan-out
#1432
Extension docs still ship the Driver extension type, which the binary refuses (rejectRemovedDriverFields) after #535
#1429
Docs: document vault selection for sensitive fields (defaultVault, per-resource vaultName)
#1407
azure-kv error wrapping loses original error type — ERROR_TYPE always 'Error' in traces
#1430
writeResource commits per-call: a method that fails midway leaves its earlier outputs persisted, with no marker that the run failed
#1422
Docs: document workflow-scope ReportContext fields in extension report reference
#1421
Cloudflare: expose GraphQL Analytics API (httpRequestsAdaptiveGroups / client-IP request analytics)
#1406
aws-sm deleteAnnotation removes all non-aws: tags, not just swamp-specific ones
#1420
No way to select which vault receives a sensitive-marked field's value
#1428
aws-sm: namespace annotation labels with swamp:label: prefix
#1427
workflow assert: a step whose CEL expression fails to evaluate is omitted from --junit output, so the XML reports a clean pass
#1418
Documentation for workflow assert steps and JUnit output
#1400
Expose workflow inputs in WorkflowReportContext
#1417
Teach swamp skill how to write assert workflow steps
#1415
Include a workflow's declared `inputs` in `workflow get --json` (and a `hasInputs` hint in `workflow search --json`)
#1416
Docs: add how-to guide for running swamp serve/worker in daemon mode
#1414
worker daemon enable: relative/missing --cache-dir fails launchd EX_CONFIG while daemon status reports running
#1419
swamp doctor extensions: nondeterministic BundleBuildFailed for local extensions on an unchanged tree
#1404
Docs: document datastore directory relocation during setup
#1405
vault extensions: emit OTel spans for vault operations (AWS SM, Azure KV, 1Password)
#1392
Issue redactor corrupts reports: dotted code identifiers masked as hostnames, loopback and RFC 5737 documentation IPs masked, angle-bracket placeholders half-eaten
#1396
data prune resolves auto-definitions at the local path, not the datastore path — deletes live models' data (verified: destroyed a working server token and an active grant)
#1398
workflow/job-lifetime data is never reclaimed — expiry check requires an ownerDefinition.workflowId that step execution never sets
#1399
runModel breadth limit (MAX_INVOCATION_BREADTH=100) is never enforced — tracking object is never written back to the caller context; verified 150/150 calls succeeded
#1391
serve daemon enable is ungated — it reports success, then the account gate fires inside the detached daemon, which crash-loops invisibly
#1390
Purely local operations require a swamp-club account: local-token serve is gated while deprecated --auth-mode none is not, third-party OIDC is gated, and 'Local_Encryption' is paywalled by capitalization
#1389
A collective token stored in auth.json (rather than SWAMP_API_KEY) is permanently scope-less — resolution only runs for the env var, and scopes are never persisted for collective tokens
#1388
An empty stored apiKey counts as authenticated — saveIdentityCache writes apiKey:'' on a virgin machine, permanently satisfying the mandatory-account gate with no credential
#1387
Account/scope gates fire before argument, type and repo validation — 'swamp vault create env my-vault' (the command's own example, an invalid type) returns a paywall instead of 'Unknown vault type'
#1386
auth token create advertises a 'collective:write' scope that does not exist, and following its advice hits 'collective tokens cannot create other collective tokens'
#1385
requireScope does exact string matching — fine-grained scopes fail gates that demand the literal wildcard, and minted scopes are never validated or normalized
#1384
Collective-token scope cache never expires, is never refreshed by whoami, and cannot be cleared via the CLI — scope changes and revocations never take effect
#1382
Collective-token scope cache is keyed on a 12-char token prefix — only 2 chars distinguish org tokens, so a rotated token silently inherits another token's scopes
#1381
Misleading 'Your collective token lacks the X scope' when scope resolution failed — startup whoami errors are silently swallowed
#1380
Community points / reputation: award points for upvoting extensions, feature requests, comments, and feed posts
#1364
globalArgs fields leak into method arguments when a method's arguments schema is a bare z.record()
#1379
swamp serve --auth-mode oauth: crash during first-run admin resolution discards the OAuth token, forcing full device-flow re-registration
#1378
Docs: document extension runtime permissions and device I/O workaround in user manual
#1302
datastore setup extension drops 'namespace' from --config, making extensions that require it impossible to configure
#1377
Kiro CLI v3 permissions: no capability covers disclose_context (skill loading)
#1376
CLI: swamp invite <email> to drive the platform-invite API
#1374
api-key-scoping explanation doc contradicts shipped fine-grained scopes
#960
Fine-grained scopes for swamp.club access tokens
#1375
End-to-end UAT for fine-grained collective token scopes (#960)
#1373
Docs: document swamp auth token create command for collective tokens
#1339
open method fails for password-auth hosts: SSHPASS env set but ssh call never wrapped in sshpass
#1356
docs: update swamp skills for setup extension --namespace
#1344
apps sync/lookup fail with 'partial() cannot be used on object schemas containing refinements'
#1332
Docs: update autoGc documentation to reflect write-time version pruning
#1370
model search/list doesn't enumerate auto-created definitions under .swamp/auto-definitions/
#1372
CLI command to create scoped collective tokens (phase 8 of #960)
#1368
docs: document auth gates for team features (datastores, vaults, serve)
#1271
`datastore setup filesystem` never transfers content when leaving a sync-based (remote) datastore — copies only the catalog and hardcodes `filesPulled: 0`
#1369
Workflow/CLI output uses red text for non-error/informational lines, contradicting standard error-color convention
#1361
Support end-user timezones on https://swamp-club.com/u/shelson/activity
#1353
Document doctor datastores --repair for namespace contamination cleanup
#1362
Pre-flight checks receive unresolved vault.get() expression text, not the resolved secret
#1366
Invite people who have never used swamp to a collective (email invite flow)
#1357
docs: update giga-swamp manual pages for setup extension --namespace
#1360
Docs: update extension push output examples to include channel and visibility
#1363
Remote --server wss:// fails through an HTTP/2 TLS reverse proxy (WS client ALPN is h2-only)
#1358
uat: add namespace isolation and shard resilience test coverage
#1355
docs: update giga-swamp guides and skills for setup extension --namespace
#1354
Quest page: all leaderboard usernames show 'Swamp Baby' title
#1349
Extension/type search at method granularity — find capabilities, not just packages
#1335
data query and data get return the same payload under different keys
#1334
forEach leaves self.* unresolved in target
#1346
swamp-club: score-reads tierTotals GET overflows URL with inline param_ownerIds (Invalid URL, mislabeled clickhouse-network-error) for large collectives
#1340
Docker-related model types/workflows would benefit from first-class dry-run/plan support
#1337
Hide enterprise (SSO) operatives from announcements and leaderboard by default
#1326
Published extension scores dependency-trust as "missing" (0/2) while client `extension quality` earns it (2/2); no verdict exposed
#1304
namespace unset --migrate silently deletes artifact history via catalog-rebuild GC (~484k files lost)
#1310
serve: workflow.approvals and workflow.run.search still full-scan the workflow-run store after the #1284 data.query pushdown
#1327
Bugs filed by a team-subscription user are not tagged "team" in the Lab
#1324
Bundled extension model cannot deserialize AWS SDK S3 XML that works in direct Deno
#1322
gcp/sheets spreadsheets-values: batch_get crashes with "Request with GET/HEAD method cannot have body"
#1299
Token creation API and UI scope selector for collective tokens (phase 4 of #960)
#1293
Make Cloudflare CRUD methods factory-aware so list-discovered resources can be managed in-place
#1317
[sc] quest-grant Mongo ops (recentHeartbeat/signalCounts/countIssueShipped) regressed to ~5s timeouts — missing index
#1280
Sync guard skips bound namespace directory during push — 0 files pushed after namespace migrate
#1307
Flaky #1052 preparePush test: mtime-granularity race on Linux tmpfs
#1301
command/shell renders JSON-object stdout lines as the literal string 'undefined'
#1303
Issue redactor treats the MongoDB authSource parameter as a secret, corrupting reproduction steps
#1292
Docs: document repo root resolution from subdirectories
#1294
Expose the swamp.club feed as an RSS feed
#1287
Email invitation is not linked to account created from invite URL
#1300
Add serve, datastore, vault, and worker wildcard scopes to token registry (phase 4 prep, #960)
#1290
Docs: update manual to document --yes/-y as the standard confirmation-skip flag
#1291
Docs: update data.query and CEL expressions references for SQL pushdown
#1267
Docs: document collective token CLI usage in API key authentication pages
#1298
Add a --release-notes option to `swamp update` (or even make it the default)
#1246
Docs: manual should state workflow unknown keys are rejected and placement is step-only (follow-up to #1240)
#442
Make GCP CRUD methods factory-aware so list-discovered resources can be managed in-place
#1284
serve: read ops (data.query, workflow.approvals, workflow run.search) linearly scan the whole datastore — ~350–600ms floor regardless of match count
#1286
Running "swamp workflow run ..." in a subdir of the swamp repo fails
#1219
Guide agents to inspect reports after failed model and workflow runs
#1285
serve: main JS thread holds ~40–70% of a core while idle (no clients, no runs, --no-schedule)
#1253
Search box collapses to near-zero width on mobile on the Extensions page
#1283
Extensions page: Search bar missing on mobile
#1274
spreadsheets-values: every method fails with 'Missing required path parameter: spreadsheetId' — implementation reads a global argument the schema does not declare
#1265
namespace migrate/set workflow broken for extension datastores: migrate skipped by sync guard, set not idempotent, migrate-index empties shards
#1276
ExtensionInfo.latestVersion typed 'string' but registry returns null; harden pull/resolve for prerelease-only extensions
#1282
workflow.run: relay a custom model method's output as method_output (command steps already do)
#1281
promptChoice infinite-loops on non-interactive stdin
#1275
gcp _lib: unconditional x-goog-user-project header causes USER_PROJECT_DENIED (403) for service accounts without the serviceUsageConsumer role
#1273
extension push: issue-verdict review is indistinguishable from missing/stale
#1272
swamp extension version crashes with 'Invalid CalVer version: "null"' when only a prerelease (beta/rc) version is published
#1269
Pushing an extension after creating a public git repo that is the same as other previously pushed extensions doesn't update the "Verified public repository"
#1268
Scaleway models: create methods should not require the resource ID they generate (ipId/gatewayId/serverId/...)
#1238
gcp/calendar events.list reads wrong array field ('defaultReminders' not 'items') → always returns 0 events
#1237
provisioner.provision fails with 'Cannot read properties of undefined (reading trim)' at method_execution_service.ts:852
#1266
method_execution_service.ts:852 crashes on undefined.trim() when writeResource receives undefined instance name
#1264
CLI support for collective API tokens (phase 3 of #960)
#1231
@swamp/gcp/calendar: service-account & ADC auth mint cloud-platform-scoped tokens → 403 on Calendar API
#1261
Scope enforcement and whoami introspection for collective tokens (phase 2 of #960)
#1262
fix(software-factory): DeclaredSchemaSchema.enum rejects boolean literals
#1259
Surface cloud-provider labels (scaleway, digitalocean, oracle/oci) as first-class search/filter facets on the Extensions page
#1258
Profile link in genesis subdirectory does not navigate back to main profile
#1256
Profile stats: per-user daily rollup table + MV in ClickHouse
#1255
Reconcile collective-token CLI activity to members (attribute → bonus → stamp → even-split)
#1249
Telemetry stats consumer: unsanitized subcommand in Mongo update path drops user metrics silently
#1240
Job-level labels: block is silently ignored, not rejected
#1241
Issue submission redactor silently corrupts report bodies
#1235
CLI telemetry: fold third-level verbs into subcommand + canonicalize aliases
#1234
Docs: update extension info reference to document extensions (type grafts) in content metadata
#1229
Docs: swamp skill repo-structure reference still documents repo-local .swamp/telemetry/ as live
#1183
Add safe adoption and lifecycle methods for existing Hetzner resources
#1233
Docs: update manual telemetry reference for user-global spool and telemetry.yaml opt-out
#1101
export const extension can graft methods onto foreign-collective types, undisclosed in extension info / contentMetadata
#1142
Add lookup support to the Cloudflare DNS records model
#1232
Expand token scope registry to full taxonomy (phase 1 addendum, #960)
#1129
Docs: document user-global telemetry (telemetry.yaml opt-out, spool location, telemetry stats behavior)
#1082
score_daily rollup strands stale grains when a day-less grant re-stamps onto a later day
#1093
swamp-club: global rate limiter runs pre-auth and collapses all direct clients into one per-IP bucket — 429s authenticated CLI traffic
#1228
Collective API token scopes: domain, persistence, and auth threading (phase 1 of #960)
#1214
Telemetry migration from ~/.swamp/telemetry should auto-detect home-as-repo
#958
feed_post_score_events queue grows unboundedly (no TTL, no delete-on-delivery)
#1105
Issue-filing skill should require ownership classification before submitting a bug
#1221
Interactive finder silently drops the preview pane on narrower terminals, and layout selection is unstable
#954
@-mention autocomplete for users when writing lab ripples
#959
Remove comments from /feed and redesign the page
#1220
Interactive finder preview corrupts: overlapping/stale lines when preview content overflows the pane
#875
Score-refresh consumer: harden coalescing against a diverse backlog (bistability)
#844
Remove feed comments — consolidate discussion in Discord
#933
Add a 'my collective extensions' filter to extensions page
#956
Relax the profanity filter
#736
Extension search returns edit-distance noise for short queries ("asdl" → "AWS DEADLINE")
#828
Telemetry recoverOrphaned startup race with multiple replicas (created_at-based)
#827
Telemetry retry/failed path has the same non-atomic claim as #820
#591
Option to change email in your Swamp Club profile or delete account
#1226
Embeddable operative profile cards (iframe + oEmbed)
#1224
vault edit resolves wrong path (.swamp/vault/ instead of repo-root vaults/)
#1213
Grant *revoke* is never applied to the running server — under `--grant-reload auto` and `manual` alike, a revoked grant stays in force until an explicit `access reload`
#1201
Docs: update auth login examples for username support and piped passwords
#1200
Docs: add reference page for swamp run gc
#1207
Streamline user invitation to swamp.club without requiring collective membership
#1206
Unable to link account
#1203
Could not start dynamically linked executable: /home/sven/.swamp/bin/swamp
#1186
Collective invite is never claimed when the invitee registers via Google with the invited address — stays pending forever, invisible to the invitee
#1187
/orgs shows no pending collective invitations to the invitee — no list, banner, or accept affordance anywhere in the product
#1196
Cannot subscribe: personal collective has 0 operatives (owner missing from own roster) — payment returns Forbidden, while whoami and extension push both grant the collective
#1198
`models.md` says the `latest` marker is a symlink but it's a plain text file now
#1202
ln: failed to create symbolic link '/usr/local/bin/swamp': No such file or directory
#1205
Dead code: CollectivesSection island (pending-invite prompt) is never mounted; listPendingInvitationsByEmail has no production consumer
#1194
swamp auth login prompts are confusing — "username" only accepts email, and --username is re-prompted
#1172
No retention/prune for .swamp/workflow-runs and .swamp/outputs
#1191
swamp issue get exposes commentCount but no way to read ripple bodies
#1197
Add a command to re-trigger repository verification (repositoryVerified)
#1189
quest: 'Case Closed' (issue_shipped) does not fire when an issue you filed ships — #1181 shipped, challenge still 0/1 (bug_hunter fired for the same issue)
#1178
Unclear whether SWAMP_API_KEY auth claims a device's banked "ghost" reputation, or only swamp auth login does
#1195
Re-publish of an existing extension succeeds but latestVersion/pull never advances to it
#1193
No way to log in on a headless host or with an OIDC-only account — please allow an API key
#1190
Genesis Pass tier 14 (Halogen Saint) shows claimed 260 XP before its own threshold, contradicting the same page's progress tracker
#1184
Quest XP milestones reference 'swamp extension publish' but the command is 'swamp extension push'
#1173
swamp workflow history search OOMs on workflows with large run history
#1181
Unreachable path in .swamp-sources.yaml is fatal to every command, including 'swamp version'
#1188
Bind ghost device reputation on whoami when Swamp-Distinct-Id header is present
#1180
swamp quest: deeds credit XP on command invocation, not success — failed commands still award full XP
#1185
extension pull fails permanently when a pinned exact-version dependency is removed from the registry
#1177
swamp serve `--grant-reload auto` never reloads
#1182
Quest points are awarded for actions that are usage errors.
#1179
Quests can be farmed by repeating the same command in a loop
#1174
Committed .swamp-sources.yaml relative paths resolve against worktree cwd, not the main checkout — and missing sources are now skipped silently
#1169
readResource + vaulted sensitive fields: cross-run reads return the unresolved ref, and per-instance vault keys appear to collide
#1171
Docs: add IdP group refresh and deprovisioning details to swamp-serve manual pages
#1156
Blocked model methods are uninterruptible: SIGINT/SIGTERM don't force-exit; no cancellation signal for execute()
#1166
Document IdP group-based access control in serve guide
#1170
SSO admin setup guide for swamp-club
#1167
Surface the bundled deno path in the first-loaded extension guide + expose it via CLI
#1162
Docs: document the OTel logs signal in the swamp-club manual (opentelemetry.md)
#1163
OTel setup manual example (OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317) cannot work — exporter is OTLP/HTTP-only, needs port 4318
#1168
Pin the deno runtime for extension checks — bare `deno` is a PATH-hijack surface for the test/lint runtime
#1165
swamp extension update doesn't migrate existing model instances to the new typeVersion — new methods are 'Unknown' (persists after #869)
#1164
Configure the OTLP trace exporter (endpoint/service/headers) in .swamp.yaml, not only via OTEL_ env vars
#1153
SSO + IdP group federation for swamp-club
#1152
Docs: add workflow blocking semantics and lock concurrency to manual
#1151
Docs: add CEL run.* and webhook.* context variables to manual expressions reference
#1149
Hot-reload finds 0 types for large pulled extensions (empty extension_name in catalog rows)
#1143
UAT Phase 2: auth and agent commands
#1155
[@adam/cfgmgmt] ssh-exec models uninterruptible: SIGINT/SIGTERM ignored, child ssh not aborted (only SIGKILL works)
#1154
Parse IdP groups from userinfo and wire into grant enforcement
#1148
How-to guide: How can I collaborate in the Swamp?
#1150
Stripe checkout product description says '2–20 portable seats' but platform allows 1–20 for Team
#1146
vault skill docs don't mention --refresh-from/--refresh-ttl auto-refresh or that 'vault inspect' shows refresh-hook status
#1145
Docs: add --timeout to workflow resume reference
#1132
Harden the CLI update path so a future artifact-host migration can't strand clients again
#1128
UAT Phase 2: source commands and completions extension
#1125
Telemetry silently dropped outside a swamp repo — lost events + undercounted scores
#1124
UAT Phase 2: doctor install, secrets, and workflows
#1126
Docs: update --server support tables for extension and doctor commands
#1122
Docs: document WebSocket Bearer header and Sec-WebSocket-Protocol auth transports
#1127
New Release Discord notification links to GitHub Actions run instead of swamp changelog/release notes
#1076
serve: extension and doctor extension handlers return not_implemented
#1119
WS handshake accepts the token **only** as a URL query parameter
#1120
serve: create*Deps() factories leak file-based catalog stores (3 FDs) per API request
#1121
flaky test: manual_approval suspension test leaks 3 timers (OTel InMemorySpanExporter setTimeout)
#1117
Document vault read-access audit trail
#1123
flaky test: serve OAuth client tests leak unconsumed fetch response bodies (+ connection_test readDir leak)
#1111
UAT Phase 2: telemetry, update --check, version/help
#1118
serve leaks file descriptors (EMFILE) — runFileSink.unregister runs after yield, not in finally
#1115
Docs: document instructionsMode for custom AI agent tools
#1109
Vault: native secret-read access audit trail
#1106
agent setup silently selects a destructive overwrite mode, with no way to choose otherwise and no documentation
#1116
Vault audit trail: wire audit through model resolver, serve, and token paths
#1113
Docs: document --hot-reload flag and swamp serve reload subcommand
#1104
Add a 'verify capability exists before relying on it' rule to repo-init CLAUDE.md
#1103
Architecture guide decision tree omits partial-match extend and package-granularity guidance
#1102
Main page stats discrepancy
#1099
UAT Phase 2: run history and run doctor
#1100
Missing reference files from bundled swamp skill
#1098
UAT Phase 1f: alias-parity micro-suite
#1096
UAT Phase 1e: report family verb gap-fill
#1095
Docs: add OTEL_RESOURCE_ATTRIBUTES to OpenTelemetry reference
#1084
Tracing ignores OTEL_RESOURCE_ATTRIBUTES — only service.name reaches the Resource
#1080
runModel(): options.arguments never reach the child's per-method arguments — merged into globalArgs, then dropped or rejected
#1092
swamp-club: /api/whoami 500s on fresh install — ensureIndexes {id:1} conflicts with migration 012 id_lookup index
#1091
data prune --json omits reclaimedModels[].modelName when a report entry is grouped first
#1094
swamp serve leaks esbuild bundler subprocesses as zombies (reparented to PID 1, never reaped)
#1083
One-time prod data checks: github:-authored lab issues blast radius + legacy uppercase extension names
#1079
UAT Phase 1d: data family verb gap-fill
#1078
Improve skills and documentation to guide agents toward correct swamp patterns
#1077
runModel(): nested outputs record triggeredBy "manual" with no parentOutputId — docs promise model-trigger lineage
#1081
workflow history logs --follow for live-tailing running workflows
#1072
UAT Phase 1c: vault family verb gap-fill
#1074
--skip-reports (and --report/--skip-report*) hard-fails with --server
#1073
vault list-keys no-arg form errors despite help text suggesting it works
#1056
extension pull only materializes skills for the primary tool, deletes other enrolled tools' copies
#1075
Add swamp straitjacket: opt-in, binary-shipped agent guardrail hooks
#1070
UAT Phase 1b: workflow family verb gap-fill
#1062
Nested workflow invocation does not apply the child workflow's input defaults
#1071
Slow Mongo: subscription.findByCollectiveId N+1 fan-out inflates p95 (lab issue list)
#720
#welcome channel references "System Initiative" instead of "Swamp"
#1065
Self-update changes catalog source naming; stale rows trip I-Repo-1 and brick every CLI command
#1061
allowFailure not honored on workflow-task steps - parent run aborts, downstream steps stay pending
#1068
UAT Phase 1a: model family verb gap-fill
#1063
workflow validate treats defaulted model-method inputs as required (validate fails, run succeeds)
#1058
Serve leaderboard locate ('find yourself') live, retiring its per-replica standings cache
#1059
UAT Phase 8a: CI guard + adversarial tier-6 catch-all
#1060
Document context.runModel() model-to-model invocation
#1055
Serve leaderboard live from the score_daily rollup — retire per-pod snapshot & campaign-blind board fallback
#1057
i should be bull gator on discord
#1052
commitPush no-op verification fetches the full monolithic index instead of the v2 shard/commitSeq fast-path (follow-up to #1034)
#1048
skill: add serve, grants, and access control guidance to the swamp skill
#1054
GCS datastore has same v1/v2 monolith-fetch paths as S3 (follow-up to #1052)
#1051
Regression: swamp update syncs global skills to unconfigured agent directories
#1047
Share skill: guided solo-to-team promotion
#1053
Make PR links in Labs details clickable
#1049
Catalog export re-uploads the full monolithic object every sync, even with zero changes (sibling to #1034)
#1035
Adversarial-review recording under-communicates its contract (no dimension definitions, undocumented verdict enum, silent failure on invalid verdict)
#1050
Native FreeBSD build for swamp CLI
#1044
extension push 'credentials-sensitive-field' flags z.number() counts + type-aliases as secrets
#1045
repo upgrade fatally aborts on a yanked pinned dependency (HTTP 410) instead of forward-resolving
#1046
docs: declarative grants directory how-to and reference updates
#1034
Shard-first v2 still re-uploads the full monolithic index + catalog export every commit; silent writeback failure above the 30s request timeout
#1037
serve-auth: declarative grants directory with validate-and-reconcile on reload
#1038
Docs: document per-invocation traceparent/tracestate support
#1043
work-item-summary report renders zero rows despite work items existing
#1036
Monolithic index warning prints wrong command
#1041
repo-indexer: search fails immediately after index completes
#1040
repo-indexer: SQL TRACE logs dominate search output
#1039
repo-indexer: add list-indexed method
#1033
S3 datastore push walks the entire cache root — nested/foreign namespace dirs become doubled index keys (recurring)
#1012
Docs: document swamp data prune (orphaned-data reclamation)
#1027
CI: review jobs check stale global state, causing cross-reviewer blocking
#1032
Docs: document CEL grant condition cost limits
#1029
serve-auth: CEL cost-bounding for grant conditions
#1030
swamp serve crashes with JavaScript heap OOM while running scheduled workflows
#1031
fix(access): align model RESOURCE_FIELDS between validation and runtime
#1020
swamp serve startup/shutdown is very slow on large repo and lacks diagnostics
#904
Automated activity channel does not post on issue reopen — only open and close events are surfaced
#1019
Vault push log overstates what left the machine: Pushed N vault file(s) to datastore counts every dirty file, not just vault files
#1026
docs: OAuth authentication how-to and explanation guides for swamp serve
#1016
serve-auth: mode: oauth — device grant client + collective-based admission
#1021
extension update/install reports new version while on-disk pulled files stay old
#1025
Scorecard: beta/rc-only extensions show "not scored" despite successful scoring (GET /score resolves only latestVersion)
#1024
`swamp extension search --channel beta|rc|stable` ignores the filter — all channels + the no-flag default return an identical result set
#1023
Beta-channel extensions are never scored — perpetual 'Scoring is taking longer than expected'
#1022
feat: allow models to call other models mid-execution via context.runModel()
#1015
swamp-club: enable OAuth provider for swamp serve collective-based admission
#1013
command/shell: step with timeout + a surviving child process reports exit -1 despite command exiting 0
#1014
serve-auth: enable OIDC Provider + Device Authorization plugins in swamp-club
#1009
Orphaned data (migrated-away/deleted model) can't be GC'd or deleted
#1011
UAT: CLI coverage for swamp data prune (orphaned-data reclamation)
#1010
Session credential revocation scans entire credential map on every dispatch completion
#1006
Docs: update worker-commands.md for --all flag and JSON output change
#1008
datastore migrate-index aborts on hardcoded 30s S3 requestTimeout for large shards
#1000
swamp worker list: hide disconnected workers by default, add --all flag
#1001
swamp serve should survive bad extension failures
#1002
Worker fleets phase 7: how-to guides and explanation docs
#1003
swamp serve: catch unhandled promise rejections from extensions
#999
[@adam/cfgmgmt] SSH helper can crash swamp serve via unhandled finally() rejection
#998
Docs: add --server-token flag to worker connect reference
#996
Add --server-token to worker connect for authenticated orchestrators
#997
Docs: document --trusted-hosts flag for swamp serve
#995
Document SWAMP_SERVE_EXTRA_HEADERS for reverse proxy/tunnel setups
#994
Add --trusted-hosts flag to swamp serve for Docker/Kubernetes worker connections
#990
Allow swamp clients to send custom headers when connecting to swamp serve
#993
Docs: update serve-flags.md default queue timeout from 60s to 10m
#992
Worker fleets phase 6: raise default queue timeout to 10 minutes
#989
Worker fleets phase 4b: capacity slots and concurrent dispatch
#984
MethodContext docs/comments mention context.putSecret but runtime exposes vaultService.put
#991
Docs: add --concurrency flag and SLOTS column to worker-commands reference
#983
install.sh still points users to systeminit/swamp
#988
Support user systemd units for 'swamp serve daemon enable'
#974
swamp serve scheduled execution runs steps in an isolated data scope: readResource sees empty state, writeResource never reaches the model-scope chain — stateful scheduled workflows duplicate instead of deduplicating
#982
Support installing swamp via mise GitHub backend
#981
Worker fleets phase 4a: dispatch runner extraction — child process per dispatch
#980
Docs: add swamp worker daemon enable/disable/status to worker-commands reference
#979
Worker fleets phase 3 PR2: swamp worker daemon enable
#977
Docs: add drain, lifecycle policies, and exit-code contract to references
#976
Worker fleets phase 3 PR1: drain state machine, lifecycle policies, signal handling
#978
Leaderboard search excludes ghosts — a visible ghost can't be found by its alias
#973
issue-lifecycle: plan lifecycle entry silently dropped when summary exceeds 1000 chars
#975
Docs: add worker verify, --verify-on-enroll, and env-var config to references
#940
Labs - Filters do not apply to Blocked status and Billing Tier category
#969
Worker fleets phase 2 PR2: env-var config, swamp worker verify, --verify-on-enroll
#970
Docs: add --type flag to issue edit reference and how-to
#972
Docs: update manual with whole-field expression syntax for workflow task inputs/globalArgs
#963
Allow changing an existing issue to security/confidential after submission
#932
Allow dynamic object expressions for workflow task inputs/globalArgs
#968
Docs: update enrollment token references for fleet tokens (--max-enrollments)
#966
Worker fleets phase 2 PR1: fleet tokens (--max-enrollments, bindings, worker naming)
#952
Worker fleets phase 1 PR3: boot reconciliation and integration test
#961
Login success still shows login tip
#964
Support confidential visibility for non-security issues
#945
Add associative info to user profiles: collective membership + collaborative contributions
#957
Make paid subscribers visually stand out (badge, profile popup summary)
#955
Giphy integration via /giphy command
#949
Worker fleets phase 1 PR2: step_queued events, pending-dispatch model, queue introspection
#953
Docs: add swamp worker queue to worker-commands reference
#950
/lab shipped list is sorted by issue number, not ship date
#951
Docs: update manual for ephemeral data and step-output dependency deferral
#948
Docs: update remote execution references for elastic queueing
#947
Worker fleets phase 1: elastic queueing
#919
catalog backfill should support scoped population for targeted lookups
#946
Docs: document global skill sync behavior for custom tools in manual
#943
swamp update syncs global skills to default agent directories instead of configured custom Pi skillsDir
#941
coerceToSuffix does not sanitize path-unsafe characters, causing forEach items and vary dimensions with / to produce invalid data instance names
#944
Badge for activity on other people's issues
#938
swamp serve: add @keychain=<service>/<account> indirection for secret args on macOS
#937
swamp serve: eliminate wrapper scripts via @vault= secret refs and native startup hooks
#936
Automate mechanical frontmatter fixes in the fixing stage
#935
duplication criterion scores same-content skills as 100% duplicate when skill appears in multiple plugins
#934
spell-grammar false positives on CLI flag/placeholder patterns
#924
Collscan/index-gap pack: unindexed $or id branches (every registry request), computed-field sort kills extension browse indexes, $expr blocks pull counts, apikey.userId, workflow_runs, 1100-doc profile fetch
#663
Implement ephemeral data as in-memory repository
#926
Request-path external fetches with no timeout / no negative cache: profile GitHub/Discord resolution and landing-page total count (30s → 504 mechanism)
#921
Auth hot path: 7 serial Atlas round trips per API-key request; session cookie cache dies after 5 min; session/apikey lookups unindexed
#923
Leaderboard: window boards are unindexed full-collection aggregations ×4 per locate miss; locate fetches 4×10k rows to rank one user; search() has O(sum-of-ranks) lookup fan-out
#922
/lab loads every issue with full markdown bodies on every request (incl. detail pages) + ~12 serial DB waves — the 3.4s avg / 30s tail
#928
doctor extensions reports source-mounted bundles as unreferenced after repair
#931
Agent setup suggests repo init in already initialized repos
#920
repo upgrade reports success but extension commands still warn about pending migration
#927
Activity projector runs on both telemetry replicas — same-day chunks can double-grant (grant_id collides but granted_at differs, ReplacingMergeTree never dedups)
#915
Clicking on any region in the Execution Records eventually breaks the pie graph
#918
model evaluate is slow resolving data.latest expressions in large datastores
#914
swamp serve: model resource vault-backed sensitive fields resolve empty during served/workflow execution (readResource)
#917
Add SSH host public key collection for host certificate workflows
#913
datastore migrate-index ignores the repo's configured namespace (migrates bucket-root index instead)
#916
Driving agent can wedge a workflow-stage run irrecoverably (workflow-succeeded vs dispatch limit); skill should prevent it
#893
refactor: decompose connection.ts server handlers into domain-aligned modules
#908
Leaderboard profile popover stuck on skeleton loader on second open
#912
Document the run tracker across all four diataxis verticals
#911
Add swamp datastore sync --migrate-index CLI command to trigger shard-first migration
#910
Add how-to guides for core operations and operational tasks
#906
Shard-first index: eliminate monolithic .datastore-index.json from commitPush critical section
#909
Add core-concept explanation pages to the manual
#655
SQLite run tracker subsystem for in-flight run lifecycle
#907
Add comprehensive CLI command reference documentation to the manual
#902
swamp audit record --from-hook exits non-zero as Claude Code PostToolUse hook despite internal try/catch design
#903
Local extension files (export const extension) are indexed but methods not merged into target types
#901
doctor extensions --repair should remove stale bundle entries for deleted source files
#898
repo upgrade shadowing warning should list all shadowed skills by name
#829
Intra-namespace write concurrency: whole-index sync under the lock serializes fan-out workloads (split from shipped #666)
#872
Activity heatmap clips the current UTC day — uses local browser time for "today" but snapshots are UTC-keyed
#876
hello-world tutorial: "use workflow inputs to pass..." misleads — should name CEL data.latest
#892
docs: update swamp-serve manual reference for phase 2 --server commands
#883
Extension skill should explicitly prohibit bare 'zod' imports (scorer sandbox fails)
#711
serve-auth: --server support for remaining remote-capable commands (phase 2)
#890
swamp serve --auth-mode token: redeem reads token-main as null → every valid token rejected 'Authentication failed' (real error hidden at debug)
#867
Pre-sync pull aborts the whole command when an index entry's S3 object is missing — no built-in way to recover
#891
GCS pushChanged bulk-walk deletion gate uses bulkInvalidated instead of dirtyPathsOverflowed, diverging from S3
#852
Global skills should auto-sync when binary version advances
#889
swamp serve: hardcoded WebSocket host allowlist makes it unusable behind a reverse proxy (no --trusted-hosts/--allowed-origins)
#887
Extension detail page shows deno doc module-not-found failure for published extension
#886
swamp serve writes grant model files to ./models/swamp/grant/ instead of .swamp/
#869
Local model source edit may not change the bundle cache key — rebuilt bundle shadowed by an older same-hash copy on a shared S3 datastore
#884
serve: catalog backfill is unbounded and unsafe on large repos
#882
serve: V8 out-of-memory crash during catalog init on large repos (regression from #841)
#851
autoGc emits auto_gc_completed event on --json stdout, breaking single-parse consumers
#845
copy/rsync ignores transport extraOptions (and proxyCommand), unlike exec/script
#871
Model method execution overhead: 10s+ per trivial operation, global lock prevents concurrency
#854
Epic #847 · Unit 2: score_grants append-only ledger write-model in Mongo (shadow, no read flip)
#862
feat(clickhouse): tracked archive→CH backfill tooling (backfill.sql)
#861
feat(clickhouse): idempotent DDL migration path for running prod (#859 deliverable 2)
#860
chore(clickhouse): retire S3-backed v1 + s3 objects after #859 cutover
#859
Decouple prod ClickHouse from S3 (drop storage_policy=s3_main) + add a DDL migration path
#853
Epic #847 · Unit 1: Land the ClickHouse projection foundation (schema + init SQL + compose service)
#850
Extension publish score is non-monotonic: yanking versions lowers a user's score
#848
Docs: add --ws-idle-timeout to serve flags reference
#849
Live Swamp Club event console on /feed — scrolling stream of all non-sensitive events
#843
Make serve WebSocket idle/keepalive timeout configurable (untunable default aborts runs when serve's loop briefly blocks)
#841
serve startup time regression: synchronous catalog init delays WebSocket listener by ~4.5 minutes
#842
Docs: update extension info reference with content metadata output
#825
Surface extension type+method detail in CLI to eliminate expensive discovery loops
#840
Expose run/job/step identifiers as SWAMP_* env vars + CEL values, and template placement selectors (extends #331's run.id)
#835
Docs: document @env= and @file= webhook secret indirection in swamp-serve reference
#839
fix: add .namespace.json to isInternalCacheFile() in datastore extensions
#834
fix: datastore sync --push deletes the namespace registration manifest (canonical namespace flow un-registers itself)
#838
docs: document swamp serve daemon enable/disable/status subcommands
#837
docs: document execution cancellation commands and cancelled status
#833
docs: bundled swamp agent skill lacks datastore-namespace guidance (giga-swamp)
#826
Batch / prefix delete for swamp data delete (single lock acquisition)
#836
docs: document autoGc config option for automatic garbage collection
#830
data query --select crashes on BigInt: "Do not know how to serialize a BigInt" when CEL size() reaches the JSON renderer
#823
Opt-in automatic garbage collection for datastore data
#820
Telemetry watcher has no replica coordination: N replicas double-process the same batch (non-atomic find→updateMany claim)
#824
Skill guides lack progressive reveal boundaries — agents over-read by 4x
#808
Execution cancellation: abort stuck workflow runs and model method runs, bulk cleanup, and daemon-restart reaping
#712
swamp repo upgrade should check git status and commit (or surface) the files it changes
#822
UAT: swamp workflow evaluate/run with forEach dynamic workflowIdOrName targets
#814
Resolve dynamic workflow task targets inside forEach
#819
Telemetry drain still capped ~80-100/s in prod: per-username full-history re-aggregate is O(users) sequential per batch (deferred #817 fix #4)
#817
Telemetry ingest is consumer-bound: counter & stats dedup via O(N) sequential insertOne, throughput stuck ~20 events/s regardless of BATCH_SIZE
#813
Leaderboard and profile streak not reporting
#812
Same-namespace writers fully serialize on the per-namespace lock — could maintenance/append writes avoid holding it?
#811
Could method-summary report artifacts get a default retention cap? They grow to dominate the datastore manifest
#807
Docs: document .? optional select for null-safe CEL data access
#810
Docs: update vault inspect output in manual reference
#803
Datastore should fail fast on unresolvable credentials instead of stalling on the AWS provider chain
#806
Optional scheduled / automatic datastore GC (retention-policy-driven pruning)
#805
Notify issue author/participants on ripples & status changes — with Discord bot DM as a delivery channel
#804
Batch step 2 of enrichAuthorPlans (per-collective subscription reads)
#520
Per-model LockTimeoutError at 60s causes cascading failures under concurrent access
#666
Single __global__ datastore lock serializes unrelated writes across all repos/namespaces
#802
Add SWAMP CLUB wordmark logo next to sc-mark.png in TRADEMARKS.md
#801
Add SWAMP CLUB wordmark logo next to sc-mark.png in TRADEMARKS.md
#798
pushChanged does not implement absence-on-disk deletion (markDirty contract rule #2)
#797
pushChanged does not implement absence-on-disk deletion (markDirty contract rule #2)
#788
swamp data gc prunes the catalog but never deletes objects from S3 datastores (markDirty hook not wired) — sync manifest never shrinks
#790
Add `vault delete` support to @swamp/1password extension
#791
Add `vault delete` support to @swamp/azure-kv extension
#792
Add `vault delete` support to @swamp/aws-sm extension
#719
Docs: document trigger.inputs for scheduled/webhook workflows in the manual
#729
serve --webhook usage string makes <header> look optional for generic scheme
#789
Leaderboard window baseline: 90-day cutoff zeroes returning-dormant users (latent, 0 impact today)
#778
SKILL.md Common Commands: model create uses wrong @<type> prefix
#779
SKILL.md Common Commands: model type search uses wrong command and syntax
#679
docs: swamp serve user guide
#737
Yank semantics inconsistent: all-versions-yanked acts as a free hidden/private extension; extension-level yank hard-blocks re-push
#742
swamp issue bug times out posting to the Lab while swamp-club.com returns HTTP 200
#741
telemetry stats fatally fails to load an installed datastore extension (auto-resolve path); all other commands load it fine
#724
extension source: install skills from source-path extensions
#728
serve: webhook scheme not surfaced in startup event, health endpoint, or log line
#739
Add deleteResource to MethodContext and document dataRepository.delete in skills
#732
Trajectory chart: current-day x-axis label is clipped at the right edge
#707
Docs: update Copilot how-to for audit hooks support
#740
tf plan: FETCH_BUNDLE PAGE_FETCH_ERR / NO_STATES on cleanup-only plan (no resource changes)
#726
Slack webhook pre-body gate only checks signature header, not timestamp
#713
Document model-method data-mutation surface (dataRepository.delete, findAllForModelSince, queryData)
#738
Homebrew formula
#725
Dead code: verifySignature in webhook.ts superseded by verifier abstraction
#734
workflow resume holds the global lock across the resumed step, deadlocking any datastore op the step performs
#710
serve-auth: add --server support to data, model, workflow, vault, audit, summary, and report commands
#731
Telemetry not synced to swamp-club: local queue accumulating ~3 days despite valid auth
#721
remote-execution.md tutorial claims hello-world repo already has a vault configured, but it doesn't
#730
extension pull serves a stale version that disagrees with search (honors a legacy per-extension serverUrl)
#723
Data-driven webhook signature verifiers (avoid a code change + release per provider)
#709
Replace third-party trademark symbol with Swamp Club (SC) mark in TRADEMARKS.md
#708
Eager render stack (Ink/yoga-layout + marked-terminal) adds ~540ms to every command's startup
#705
Update Copilot support
#694
serve-auth: swamp access token rotate command
#704
serve-auth: alias 'swamp access policy' as alternative to 'swamp access grant'
#706
No self-serve way to rename username (sntxrrgithub -> desired sntxrr) after GitHub SSO signup
#701
Tutorial 'Publish an extension': examples hardcode @stack72 collective, breaks copy-paste publish step
#703
serve-auth: add --server support to all read/query/operations commands
#699
Tutorial "Validate with a dry run" section shows stale extension push --dry-run output
#695
Extension dev workflow doc recommends `deno check` but deno isn't bundled or detected
#702
serve-auth: SWAMP_SERVE_URL env var as default for --server flag
#696
Tutorial extension search "entropy" zero-result example is now stale
#690
serve-auth: swamp access can-i — user self-service permission check
#689
serve-auth: hard refusals for off-loopback without TLS or auth
#688
serve-auth: wire AccessDecisionService into serve chokepoints for authorization enforcement
#685
serve-auth: mode: token — server token authentication on WebSocket connections
#684
sensitive-arg guard rejects an all-vault.get() record/map as a "literal", blocking definition migration
#683
serve-auth: mandatory admin materialization from config at startup
#682
serve-auth: auth config schema and mode flag for swamp serve
#681
serve-auth: remote grant management via swamp access --server
#680
serve-auth: declarative grants file with startup reconciliation
#678
serve-auth: swamp access CLI commands
#676
Docs: add server-side TLS reference for swamp serve --cert-file/--key-file
#675
serve-auth: static TLS for swamp serve
#677
docs: TLS setup guide for swamp serve (direct and reverse proxy)
#674
serve-auth: client-side server credential storage
#673
serve-auth: server token built-in model
#671
Telemetry flush blocks command exit, adding ~1.2s p50 to every invocation
#672
serve-auth: AccessDecisionService with in-memory policy snapshot
#670
serve-auth: sealed CEL grant-condition environment
#667
serve-auth: access bounded context — Grant, Group, and shared value objects
#665
data gc --dry-run ignores the flag and performs a destructive GC
#669
Private / org-scoped collectives with member ACLs
#668
serve-auth: Group aggregate + built-in model
#618
@swamp/aws/cloudformation: expose StackSet instances, drift, and operations (Cloud Control cannot)
#658
extension pull: detect ghost-row conflicts and suggest swamp doctor extensions
#662
Design: serve authentication & authorization (TLS, OAuth, access control)
#660
extension push: adversarial-review report hash is platform-dependent (macOS vs Linux), so committed reviews never match a cross-OS runner
#659
Can't click on repository from swamp extension search.
#656
Remote Execution tutorial
#657
`extension quality` false-positive bare-import detection on string literal "flexible"
#654
Honour AWS profile default region when 'region' globalArg is omitted
#629
Remote execution: comprehensive reference documentation
#650
datastore setup migration relocates and deletes repo-root .swamp/secrets, breaking all local_encryption vault.get
#642
model search --json returns a bare model object instead of {query, results} when exactly one model matches
#643
model delete --json output shape doesn't match the documented {deleted, modelId, modelName, artifactsDeleted}
#652
swamp serve does not open the UI
#649
Registry content-type search filter can match versions absent from the displayed extension
#651
Docs: document --compact flag for model type describe
#648
Docs: document reports.require failure semantics in the manual (unresolvable required report fails the run)
#645
Resource-leak test failures on main: extension_rubric_scorer_test and worker_gateway_test
#635
Tier-up announcements never fire for direct score contributions (badge awards, feed credits)
#615
model type describe --json: bloated output (40% duplicated specs, no compact mode) and lost method-to-output mapping drive agents to read extension source
#639
Yanked extension version still shown as active on swamp-club.com and in 'extension search'
#640
reports.require in workflow YAML does not auto-execute pulled extension reports
#638
Add deprecate/yank/unyank actions for own extensions on the web interface
#644
Landing page clips the curl install command instead of rendering the full text
#641
Extension author gitignore guidance: add .swamp.yaml and CLAUDE.md to recommended excludes
#631
Docs: document globalArgument input reference validation in workflow validate
#637
Expose per-run memory/CPU metrics for method & workflow executions
#636
model method run OOMs at 4GB V8 heap on long high-fan-out methods; non-configurable heap + crash leaves run stuck in "running"
#633
Discord role sync never assigns lower leaderboard tiers (Swamp Baby / Muck Runt / Sludge Whelp)
#622
workflow validate: resolve model globalArguments expressions against the calling workflow's declared inputs
#619
Extension API: allow export const extension to add resource specs, or document that it cannot
#630
Remote execution: UAT coverage for tokens, enrollment, and dispatch
#535
Remote execution: orchestrator/worker fan-out (replaces execution drivers)
#623
Docs: extension-publish skill guide doesn't cover release channels
#628
doctor extensions: pulled-extension source files reported as orphans that --repair can't evict (nested @swamp/aws/* sibling mis-attribution)
#626
Feature: make extension yank channel-scoped (--channel) so it doesn't nuke every channel
#621
Add a way to list registered report definitions (report search only lists results)
#617
workflow validate: method args with a Zod .default() are treated as required
#625
swamp update --setup-auto does not work with bluefin44 (crontab not found, should
#624
Feature: demote / withdraw an extension version from the stable channel
#620
Inconsistent resource-field accessor: data get returns content, data query and CEL use attributes
#616
Profile months overlap in trajectory
#155
audit record --from-hook silently drops input from kiro-cli postToolUse hooks
#609
correcting capitlization of Swamp, Swamp Club, and The Swamp on the swamp-club.com website
#613
Docs: Add release channel documentation to the manual
#614
UAT: Release channel CLI and adversarial tests
#608
API: Add release channel support for extension versions (beta, rc, stable)
#612
Test skill evals with Fable in multi-skill eval tests
#606
Resident/warm worker mode — `model method run` has ~6s fixed per-invocation overhead that rules out latency-sensitive use
#600
Local source-loading should discover a report co-located with its model in a paths.base:manifest extension
#602
extension quality scorer mis-detects quoted phrases in comments as bare imports
#601
extension push: credentials-sensitive-field false positive when .meta({ sensitive: true }) is on a continuation line
#507
Feed-post scoring is a direct domain write, not a consumer of feed_post_approved telemetry
#492
reindexByUsername re-strands pre-association history and wipes sign_in_dates
#599
extension push: optionally sync the published bundle to the manifest `repository:` (git mirror)
#597
Docs: vault refresh hooks (--refresh-from, --refresh-ttl, --clear-refresh)
#598
Add 'creek' extension kind for cross-querying external systems alongside swamp data
#595
Deprecate "No slow types" (fast-check) rubric factor on server-side scorer
#596
Support CI-friendly adversarial review artifacts for extension push
#572
Quality rubric: scope "No slow types" for model extensions (consumed via model+CEL, not type imports)
#505
extension quality fails to resolve bare specifiers — contradicts fmt no-import-prefix rule
#594
Registry scorer fails on bare specifiers — mirror CLI fix from #505
#543
Ability to change the email address associated with my Swamp Club Account
#541
CI review jobs use two-dot diff that includes files the PR never touched
#583
extension push --dry-run --json reports local helper imports as bogus model entries
#590
Docs: vault reference in manual promotes inline KEY=VALUE as primary example
#475
GCP: support vault expressions for credentials instead of env-var-only auth
#587
Extension model method execute lacks typed args/context — every author has to use ': any' to unblock tests
#584
model method run: cannot pass arrays, numbers, or booleans via --input
#585
workflow resume fails to register all extension model types (local and pulled) — "Unknown model type"
#477
Support for Custom CA's
#588
swamp help extension omits yank and unyank (machine-readable CLI schema misses real subcommands)
#586
@webframp/hashicorp-vault: empty KV engine causes 'data.data.keys is not iterable' on vault put
#474
AWS: support vault expressions for credentials instead of env-var/SDK-chain-only auth
#582
Extension source: direct-content export scan only reads first 64 KiB, silently drops exports beyond it
#571
data get/list --workflow and workflow history get/logs cannot resolve extension-delivered workflows (Workflow not found)
#573
extension search returns null repository fields that extension info populates
#580
Homepage install command: wrong domain and missing https:// protocol
#579
Homepage install command: wrong domain and missing https:// protocol
#560
fix: giga-swamp UAT failures — 9 bugs found during comprehensive testing
#570
Docs: add doctor secrets and doctor vaults to the troubleshooting how-to guide
#568
Docs: add doctor vaults subcommand and pre-flight vault validation
#567
gcs-datastore: registerNamespace does not detect conflicts with existing registrations
#561
Codegen: auto-merge resources across GCP API versions instead of manual ADDITIONAL_VERSION_RESOURCE_FILTER
#569
UAT: sensitive resource output without vault produces clear pre-flight error
#566
Validate vault availability when model has sensitive output fields
#565
Managed skills ship with dangling reference-doc links
#564
swamp-club: update skill references and CLAUDE.md after superskill consolidation
#563
swamp-uat: init_test.ts asserts old skill directory names after superskill consolidation
#559
fix: datastore setup extension with namespace config doesn't scope sync or register manifest
#557
fix: namespace set on default repo writes incomplete filesystem config (missing path)
#551
docs: giga-swamp user documentation — reference, how-to, and conceptual guide
#552
Inconsistent failures in swamp doctor extensions (database is locked, bundle build failed)
#555
feat: giga-swamp comprehensive UAT coverage
#548
feat: giga-swamp phase 7 — Data migration commands
#508
Extension quality/adversarial-review: add a 'published-surface hygiene' check for real infra identifiers
#547
feat: S3/GCS extension namespace manifest support (registerNamespace/listNamespaces)
#542
feat: giga-swamp phase 5 — CLI output + namespace management commands
#544
Should be able to see all the issues I created by a filter "submitted by me"
#526
swamp-extension adversarial review skill needs mandatory mechanical verification checklist
#540
paths.base: manifest is not honored for workflows: — bundled workflows only resolve from repo root, blocking self-contained subdir layouts (sibling to #459)
#533
feat: S3/GCS extension namespace-scoped sync support
#537
Add platform type to issue-lifecycle extension model Zod schema
#536
fix: datastoreSetupExtension() ignores namespace config on initial migration push/pull
#534
swamp datastore sync --push creates global .datastore-index.json ignoring namespace config
#531
vault.get() expressions in extension model globalArguments are not resolved at runtime
#532
Copy explicitGlobalArgs before mutation in resolveOrCreateDefinition
#525
feat: giga-swamp phase 6 — Namespace-scoped sync
#504
Allow global arguments in direct type execution (workflow fan-out)
#529
workflow validate: trim stale 'skipped' label from model_not_found warning
#517
workflow validate: fail on references to unknown model instances (typo'd modelIdOrName)
#528
Add pi coding agent support
#518
swamp repo upgrade: ERR_SQLITE_ERROR 'attempt to write a readonly database' during extension catalog schema migration
#509
Docs: TLS behind inspecting proxies / private CAs (system trust store, DENO_CERT, SSL_CERT_FILE)
#521
Workflow engine resolves extension methods against base type, ignoring extension-registered methods
#527
hashicorp-vault should read token from env
#524
swamp workflow validate emits misleading "Extension failed to load" warning when type resolves locally
#516
feat: giga-swamp phase 4 — CEL cross-namespace queries
#515
Docs: document the extension push adversarial-review gate
#519
Persistent, queryable workflow runs (status / cancel from any shell)
#510
copy method reports success when scp exits non-zero (e.g. 255)
#500
Enforce adversarial review gate before extension push
#503
Bundled Deno does not honor the OS/system CA trust store
#502
Gator-approved feed post did not trigger Discord activity or profile points
#495
vault annotate --url fails with query params on @swamp/aws-sm
#493
workflow approve/resume cannot find suspended run when using S3 datastore
#494
datastore compact VACUUM fails with ERR_SQLITE_ERROR
#498
Report type filtering in report search
#497
extension search: empty results from CLI despite known extensions
#501
username_metrics projection backfill does not trigger re-scoring (stale UserScore for dormant users)
#499
support git forge / web namespaces for collectives
#496
workflow approve/resume cannot find suspended runs
#491
Telemetry never retroactively credits a device's pre-association history
#490
Docs: document swamp doctor secrets in manual reference doctor.md
#489
Docs: document 'swamp workflow resume --input' in manual reference
#483
Remediate existing definitions holding cleartext sensitive global arguments (follow-up to #480)
#467
Support --input flags on workflow resume for elevated permissions and runtime overrides
#488
Cloudflare codegen: manifest version bumps on every regeneration (README not deno-fmt-clean)
#486
feat: giga-swamp phase 3 — Path resolver + per-namespace locking
#476
Cloudflare: support vault expressions for API credentials instead of env-var-only auth
#484
Add integration test for sensitive-arg guard on lazily-loaded extension types (follow-up to #480)
#482
Docs: document refusal of literal sensitive global arguments (follow-up to #480)
#463
swamp serve scheduled workflows do not load repo extension registries
#473
DigitalOcean: support vault expressions for the API token instead of DO_API_TOKEN env var
#479
feat: giga-swamp phase 2 — Catalog schema v4 + repository interface
#481
Docs: update extension-trust reference for swamp-only default + lockfile version pinning (swamp-club#465)
#472
swamp model get does not redact `sensitive: true` fields (logs/reports/storage do)
#469
Document manual_approval workflow step type and suspend/approve/resume flow
#470
UAT tests for manual_approval workflow commands
#466
Add HTTP approval endpoints to swamp serve for manual_approval steps
#464
feat: giga-swamp phase 1 — Namespace value object + config
#459
paths.base: manifest is not honored for skills: — bundled skills only resolve from repo root, blocking multi-extension repos
#400
Improve idempotency match field heuristic for auto-generated name resources (tagKeys, tagValues)
#460
Orphaned .swamp/ without .swamp.yaml marker is reported as plain 'Not a swamp repository' — partial/corrupt repo not detected
#461
swamp CLI: send user/device identity on extension-registry HTTP calls
#458
swamp data gc does not remove physical version directories from disk
#462
ci: aws-check and gcp-check jobs take ~30min — rethink whether full model type-checking is needed per PR
#425
Add extension deprecation support to CLI
#426
Display extension deprecation state on swamp-club pages
#456
Docs: update autoupdating how-to for Linux privileged schedulers
#452
Support privileged autoupdate schedulers for root-owned binaries on Linux
#448
Telemetry admin reindex endpoint is gated on a defunct @systeminit.com email domain — permanently 403
#455
How-to: Define custom AI agent tools
#451
Docs: document LaunchDaemon autoupdate for root-owned macOS binaries
#445
extension update/pull deadlocks when the repo's datastore is the extension being updated
#403
Add a list/discover method to dbcluster for enumerating clusters in a region
#450
Support deepAgents CLI/SDK as a target agent
#447
CLI telemetry forwards non-personally-resolvable identity for collective auth; distinct_id is per-machine, not per-repo
#446
Telemetry ingest only resolves personal API keys — collective-token events are unattributed, identity_map under-claims
#440
Datastore: lazy hydration with metadata-only setup and transparent content download
#444
Docs: update datastore reference for lazy hydration, SyncContext, and SyncCapabilities
#443
Default hydrationStrategy to lazy after soak period
#375
Add list/search as a factory method that produces many data artifacts (Drive files.list, gmail messages.list, etc.)
#430
--json output is polluted by non-JSON content, breaking machine parsing
#428
Add extension info command for registry metadata
#439
Slim down extension search output now that extension info exists
#436
Datastore extensions: only write dirty partition files on push
#438
exec fails on macOS: ControlPath exceeds 104-byte Unix socket limit
#435
Datastore extension benchmark suite for S3 and GCS
#437
CSS effects on swamp.club (any page) cause high CPU
#434
GCS datastore: dirty sidecar, partitioned index, content hashing, and scoped sync
#433
Direct execution @type prefix fails for repo-local extension model types
#379
S3 datastore: dirty sidecar, partitioned index, content hashing, and scoped sync
#432
Support GitHub username in swamp.club profile to fix PR attribution
#431
dataRepository.getContent() fails in workflow-scope reports with 'type.toDirectoryPath is not a function'
#429
Core repositories missing markDirty hook — scoped push only works on crash recovery
#427
Add extension transfer between collectives
#424
swamp serve: extension bundle failure at startup is silently pinned, breaking scheduled workflows with permanent 'Unknown model type'
#417
Docs: document VaultAnnotationProvider interface and extension opt-in pattern
#415
Add VaultAnnotationProvider support to @swamp/azure-kv
#421
Upgrade TUI graphics — better AI-generated ANSI or a Moebius hand-authored pipeline
#418
Vault annotations: --note/--notes flag inconsistency and UX improvements
#419
Add VaultAnnotationProvider conformance helpers to @systeminit/swamp-testing
#416
Add VaultAnnotationProvider support to @swamp/1password
#414
Add VaultAnnotationProvider support to @swamp/aws-sm
#236
Extension ecosystem: shared utility library, version sync tooling, and HTTP resilience patterns
#420
Add assertVaultAnnotationExportConformance to @systeminit/swamp-testing
#348
Scaffold new extensions to publish-ready quality (12/12) by default
#14
Add uniform bucket-level IAM support to @swamp/gcp/storage
#410
workflow-scope report's dataRepository.getContent returns null for data written in the same workflow run
#408
@swamp/digitalocean — add domain-records model for /v2/domains/{domain_name}/records
#404
dbcluster state schema is missing DBClusterMembers (writer/reader, instance class)
#411
workflow direct-execution inputs.* persist as globalArguments on auto-definitions and freeze on first run
#413
Harness detection invents env vars for kiro/opencode/codex
#393
Extension METHODS table truncates Method column; short names like apply/check wrap mid-word on /extensions/@swamp/ssh
#407
Docs: update extension scoring documentation for dependency-trust rubric factor
#401
cloudidentity API calls fail with 'requires a quota project' — bundle doesn't send x-goog-user-project header
#406
Warn when a ${{ }} secret expression is single-quoted in a command/shell run: script
#405
Workflow validation should resolve modelType for direct-execution steps
#402
Add dependency-trust rubric factor to server-side scorer (RUBRIC_VERSION 3)
#398
Add IAM policy management (setIamPolicy/getIamPolicy) on cloudresourcemanager resources; add custom-role CRUD to @swamp/gcp/iam
#392
swamp extension rm leaves empty <kind>-bundles/<hash>/ dirs behind
#378
Datastore sync: add SyncContext and SyncCapabilities framework contracts
#399
@swamp/gcp/cloudresourcemanager/folders: create method has 5 blocking bugs (missing parent in body, LRO detection, post-LRO state, idempotency, projectId requirement)
#386
issue-lifecycle: thank external contributors when issues are resolved
#391
Pre-flight checks cannot access method arguments (check context omits methodArgs/unresolvedMethodArgs)
#390
swamp audit record --from-hook creates a stray .swamp datastore in the process cwd instead of resolving the repo root
#389
extension push publishes model files ending in _test.ts that no consumer can load
#388
Docs: document --extensions-dir / SWAMP_EXTENSIONS_DIR for worktree workflows
#397
@swamp/ssh exec method fails with 'ctx.createCelEnvironment is not a function'
#383
`swamp extension rm` leaves empty scaffold dirs behind
#381
swamp CLI commands fail silently or hang when invoked from git worktrees via SWAMP_REPO_DIR
#387
No user feedback when model method run is waiting for lock acquisition
#382
Many CLI commands acquire global .datastore.lock unnecessarily, causing 60s LockTimeoutError under any concurrent writer
#385
Add swamp extension prune to clean up stale catalog entries
#384
identity_map row not updated when user renames
#376
Expose cel-js Environment to extensions for custom CEL evaluation
#314
swamp issue get should rate-limit unauthenticated users instead of blocking
#358
CEL and vault expressions not evaluated inside nested globalArguments fields
#380
Datastore: lazy hydration for fast cold-start on first clone
#336
Add --stdin support to method run and workflow run for Unix pipe composition
#374
files.get returns only minimal fields (id, name, kind, mimeType) because no 'fields' query parameter is sent
#377
Terminal rendering breaks at large font sizes
#373
ADC path uses wrong gcloud token store: 'gcloud auth print-access-token' instead of 'gcloud auth application-default print-access-token'
#372
Docs: update doctor reference and autoupdate how-to for new doctor install subcommand
#363
bucket-policy StateSchema.PolicyDocument declared z.string() but CloudControl returns it as a parsed object
#366
bucket-policy GlobalArgsSchema requires Bucket and PolicyDocument, blocking workflow-YAML direct execution of get
#367
Missing 'parent' field in GlobalArgsSchema for several @swamp/gcp/* models causes get to fail
#371
createModelTestContext: storedResources not used by readResource; readResource always returns null
#370
swamp-vault skill documents 'swamp vault read' but correct subcommand is 'read-secret'
#365
Report execute throws are advisory: workflow marked succeeded, exit 0, AND report output is discarded
#364
dataRepository.getContent rejects string type in production but docs and testing helper demonstrate strings
#357
@swamp/digitalocean: 30 of 33 model types fail with version mismatch error
#362
Unified login input that detects email vs username by presence of '@'
#361
Introduce `swampd`: long-running local daemon for shared cache, secrets, and extensions
#359
workflow validate: false "Missing required inputs" when method args are set in the model definition
#356
Add first-class Kilo Code tool support
#355
Partitioned index for S3/GCS datastores (Phase 3)
#354
Per-path dirty tracking in S3/GCS datastore extensions (Phase 2)
#350
Scoped sync and capability-gated concurrency for datastores (Phase 1)
#353
Docs: update doctor extensions JSON reference to include warnings[] field
#351
Surface type-extraction failures in doctor JSON output
#342
W7 — unify extension failure surfaces; collapse registries.failures[] into sourceDetails[]
#352
Doctor kind-completed events should carry correct per-registry status
#349
Direct type execution fails for locally-defined extension types with pulled duplicates
#340
Distinguish validation-throw from bundle-throw in reconcile catch; surface ValidationFailed in sourceDetails
#341
Surface Tombstoned transitions in doctor extensions output
#321
swamp issue: check if reporter is on an outdated binary before opening
#326
Detect stale skill directories and prompt for repo upgrade
#339
extension unyank needs -y/--yes flag for non-interactive use
#338
Step key parsing in execution_service uses naive split(":") and silently truncates colon-containing step names
#337
Workflow-scope report artifacts unreachable via `swamp data get --workflow`
#334
Fix invalidate-then-reconcile sequencing in doctor extensions; failure-mode RowStates unreachable in sourceDetails
#335
Docs: add run namespace to CEL expressions reference
#329
Add 'swamp issue comment' command for updating existing issues
#333
doctor extensions invalidateAll does not trigger fingerprint recheck for existing Indexed rows
#332
Extension failure recording has dual write paths (legacy buildIndex vs W3 reconcile)
#324
Add type search for driver, datastore, and report kinds
#291
Workflow-level runtime expressions (env.*, vault.*) not resolved in driverConfig — docker driver receives literal ${{ ... }} strings
#328
Close #327 — fixed in 20260511.160514.0-sha.9d03b09a
#327
Nested workflow task fails with 'Bad resource ID' when workflowIdOrName uses @collective/ prefix
#318
Investigate whether allExtensionMethodsAttached guard can be removed via registration-path consolidation
#325
Improve skill trigger routing for cross-model edge cases
#322
Docs: update doctor extensions reference for W6 aggregate-state rendering + repair flags
#320
Implement W6: swamp doctor extensions aggregate-state rendering + repair surface (extension catalog rearchitecture)
#323
Surface ReconcileFromDisk dryRun transitions in swamp doctor extensions
#290
Implement W5: Per-fingerprint import URLs + subprocess test harness (extension catalog rearchitecture)
#313
swamp issue get should not require authentication
#315
swamp model create --global-arg KEY=VALUE doesn't coerce strings to z.number() schemas
#306
Docs: Update model-definitions.md and workflows.md for direct type execution
#312
telemetry: emit child entries for follow-up action method invocations
#302
Direct type execution: collapse model create + method run into one command
#305
Docs: document binaries manifest field in extension-manifest.md
#303
Accept and display binaries field from extension push metadata
#301
Per-method telemetry events for workflow runs
#271
W3 sourceToRow writes empty source_mtime — should carry filesystem mtime through Source entity
#269
Implement W4: KindAdapter + unified loader (extension catalog rearchitecture)
#294
forEach self.* in modelIdOrName not resolved in runtime execution path
#297
Extension update rejects multiple .ts files extending the same target type within one local extension (regression)
#293
Award leaderboard points for referrals and collective invites
#292
Add agent harness detection and AiTool to telemetry
#285
Docs: How-to guide for background autoupdating
#288
datastore compact: VACUUM fails in compiled binary (SQLITE_LIMIT_ATTACHED=0)
#289
swamp config set crashes with YAML serialization error
#280
Missing unique indexes on user.email and user.username allow duplicate users
#284
Manifest version bumps silently ignored for existing local extension aggregates
#287
Repo-level version gating: minSwampVersion high-water mark for team consistency
#283
materialiseExtensions misclassifies pulled rows when manifest name collides with a pulled extension
#286
Docs: document self.* expressions in modelIdOrName during forEach
#279
Resolve self.* expressions in modelIdOrName during forEach expansion
#282
Local extension edits don't reliably trigger rebundle
#278
discord-bot double-sends sign_up notifications
#277
Discord bot sends duplicate signup notifications
#248
`swamp datastore setup` migration is not resumable / leaves the repo in a partial state on failure
#239
extension quality/fmt fail on pulled extensions (path mismatch)
#228
Detect AWS CredentialsProviderError in @swamp/aws-sm-vault and prepend SSO-expiration hint
#270
Warm-start rebundleAndUpdateCatalog should respect terminal RowStates set by reconcile
#268
Docs: add vault read-secret command to reference manual
#118
Add swamp issue get CLI command to fetch issue details
#252
Implement W3: ReconcileFromDisk + freshness-as-aggregate-query (extension catalog rearchitecture)
#238
vault: add read-secret CLI command for agent-driven secret retrieval
#266
Docs: document workflow concurrency limits in reference manual
#260
Configurable concurrency limits for workflow fan-out (forEach, parallel jobs/steps)
#267
Extension layer garbage collection: prune catalog rows + evict orphaned bundles
#263
Vault expressions silently deliver __SWAMP_VSEC__ sentinels under the docker driver
#254
Cross-process concurrency stress for W2 lifecycle services
#261
Local extension model bundles don't rebuild when source changes (no rebuild CLI; manual cache delete breaks the runner)
#249
Pre-existing TOCTOU windows in YAML repo walkers (findAll directory level + findById)
#231
Implement W2: Lifecycle services own the catalog write (extension catalog rearchitecture)
#241
performance degrades significantly with large SQLite catalog
#258
feat(security): redact sensitive method arg values from audit log
#257
docs: document swamp datastore compact and GC WAL behaviour
#256
UAT: swamp datastore compact reclaims WAL and catalog space
#255
Plan v4 step 9 literal test untestable under current catalog PK semantics
#253
UAT additions for W2 lifecycle services (Install/Remove/Upgrade)
#251
doctor extensions repair: clean catalog-only orphans
#240
summarise: timeout/hang on repos with many workflow runs
#235
Agentic CLI improvements: --json stdout isolation, array inputs, and --repo-dir consistency
#245
data search: surface jobTag alongside workflowTag and stepTag (follow-up to #237)
#247
Built-in models must honor AbortSignal so --timeout works in practice
#246
Reader-lock or lock-free read path for data list/get/search/query
#234
data delete fails with "Directory not empty (os error 39)" when concurrent writes are active
#237
data query: stepName and jobName fields always empty in CEL results
#242
redmine extension: adopt state machine patterns from @magistr for agent-driven workflows
#226
Detect AWS CredentialsProviderError in summarizeSyncError and prepend SSO-expiration hint
#232
Extend DatastoreSyncService.markDirty() with optional relPath argument
#233
Extract LockfileRepository (W2 prequel for swamp-club#231)
#229
DDD: refactor data services to depend on domain-side ports instead of infrastructure types
#223
Implement W1b: Repository and RowState (extension catalog rearchitecture)
#230
data·delete logger double-quotes the data name in log output
#181
Add swamp data delete command to remove a data artifact by model and name
#211
Implement W1: Repository and RowState (extension catalog rearchitecture)
#222
Redundant push after pullChanged: localMtime clobbered by pullIndex(forceRemote)
#221
Docs: update datastore-configuration manual after #220 setup-hydration fix lands
#217
swamp-extension-model skill: include description field in upgrades quickref
#172
Support multi-agent repo initialization (multiple --tool targets)
#216
swamp-extension-model skill: include field in upgrades quickref
#215
Adversarial UAT test: missing cached bundle with intact catalog should self-recover
#214
Port importBundleByPath ENOENT fallback to datastore/driver/vault/report loaders
#212
swamp model type describe fails with 'No such file' instead of rebundling when bundle is missing
#209
Schema-invalid extensions loop in rebundle path: catalog row never updates after first failed validation
#210
feat: swamp extension verify — opaque extension-lifecycle verification primitive
#208
swamp model type search is slow (~8s) and re-bundles all extensions on every call
#207
Per-extension layout migration drops Claude skill from @magistr/good-planning
#206
swamp extension outdated crashes on empty repo (Stream ended...)
#203
Docs: extension commands reference
#205
Docs: extension install/pull/update sync-to-manifest behaviour
#204
Add process-level install lock around installExtension
#198
Catalog retains stale source-file entries when extension version drops a file; no native prune/repair
#197
Document and surface a native cache-refresh path so agents stop doing cache surgery
#196
swamp should warn when installed extensions are outdated
#193
Re-enable Windows tests as deno compile for Windows lands
#192
swamp-club extension card no longer exposes @ns/slug as contiguous text
#191
Docs: multi-tool repo support
#180
add `swamp doctor extensions` subcommand for on-demand extension load diagnostics
#170
Docs: repository-configuration.md missing defaultDriver / defaultDriverConfig
#189
swamp model method run: --foreach to fan out across instances
#188
swamp workflow validate: actionable error messages and template scaffolds
#187
swamp CLI cold-start latency (~5–7 s per invocation) compounds in workflows that shell out
#186
Workflow tasks should support ephemeral model instances (modelType + globalArgs) so workflows are zero-prereq
#177
Local extension models in extensions/models are not discovered in fresh repo tutorial flow
#178
Better Auth rejects requests on hostnames not in hardcoded trustedOrigins (signup/signin broken on non-canonical hosts)
#176
ticket 1138 not clear - can we still use github?
#175
Drag Windows into the Swamp
#173
swamp repo init --tool kiro does not create .kiro/settings/cli.json
#171
CLI dumps 300-line Cliffy Command object on unknown flags / subcommands
#96
Persist lab filter selection in localStorage
#169
Server-side parse query params on /lab/all so refresh preserves multi-filter URLs
#168
fast-path sidecar TOCTOU: post-op HEAD can record generation from a concurrent writer's push, masking their data on next sync
#156
Add a preflight diagnostic for AI-tool audit integrations (so upstream CLI changes stop breaking us silently)
#166
@swamp/gcs-datastore: same minutes-slow zero-diff sync cliff as lab/164; mirror fingerprint fast path
#164
swamp datastore sync is minutes-slow at 4k-file scale even with zero-diff; outer 300s timeout fires
#167
Scorer should honour files/deno.json imports so bare specifiers resolve
#165
cleanup for repoDriver
#159
Add repo-level `defaultDriver` to `.swamp.yaml`
#158
User report extensions registered lazily are silently skipped during method execution
#157
swamp extension install: datastore push hangs ~8.5m then crashes with Deno TLS panic (tls_wrap.rs:1918 unwrap on None)
#41
deprovision: firewall deletion fails with resource_in_use immediately after server delete
#152
Trailing slash on /extensions/@<namespace>/ returns 404
#154
codegen pipelines don't detect _lib/*.ts changes so manifest CalVer never bumps
#153
Link to namespace extensions listing from profile pages
#150
DatastoreProvider.resolveCachePath declared optional but silently required at runtime
#146
additionalFiles flatten to basenames on push and lack a runtime access API, creating a source-vs-pulled layout mismatch
#4
Feature: swamp issue for extensions — bug reports, security disclosures, and author notifications
#147
Accept-invite link returns HTML instead of JSON, breaking collective join
#144
Docs: document jsr:/https: imports and non-local pinning convention in user-facing manual
#143
First-class jsr: specifier support in extension bundler
#97
Inline editing: click-to-edit fields instead of pencil icons
#142
Cross-extension code sharing via manifest exports field
#122
Footer floats when page content is shorter than viewport
#135
Datastore sync surfaces opaque errors from extensions verbatim — no status code or body preview
#133
Extension auto-resolve reports "already_installed" for truncated pulled-extension trees
#134
@swamp/s3-datastore: first-attempt 403 masked as "UnknownError" from AWS SDK deserializer
#128
Port bundle_freshness (content-fingerprint cache invalidation) to reports / drivers / datastores / vaults loaders
#127
Mentions and notifications system for issues
#129
open.ts web UI uses force:true pullExtension, same data-loss family as #126
#131
Email delivery for mention notifications
#126
Datastore auto-update in resolve_datastore.ts uses force:true, risking silent overwrite of local edits
#130
Auto-update WARN is silent in --json mode (logger suppresses non-fatal)
#123
User extensions silently dropped when base type not yet registered at scan time
#125
Per-repo user-extension bundle cache doesn't invalidate on source changes
#121
workflow validate can silently overwrite local edits to pulled extensions via force-pull in auto-resolver
#124
Adding methods to in-body `methods:{}` on `export const model` doesn't re-register
#120
Extension pull should namespace files by extension to prevent filename collisions
#110
Remove traffic lights in column 2 of /lab
#101
Flow modal: text rendering issues
#106
Bog flow: text rendering and layout issues
#109
Multi-select combo filtering on /lab
#112
Filter lab issues by author (opened by user)
#113
Usernames aren't linked to their profile pages
#114
Collapsible left rail and repositionable right rail in Lab
#117
swamp-club API: include issue author in GET /api/v1/lab/issues/{number} response
#116
Install command curl-pipe-sh overflows the component on swamp.club homepage
#115
'Assigned to me' overlaps 'Privacy policy' on short viewports
#66
Add GitHub Copilot IDE support
#119
Update CLAUDE.md co-author instructions to use swamp-club issue author lookup
#111
Add skills extension type for bundling agent/human guidance documents
#80
Improve skill trigger routing accuracy across models
#84
Consolidate MethodReportContext construction — manual and workflow report paths build contexts divergently
#108
data gc skips version-count GC when no lifetime-expired data exists
#98
Description 'Show more' button appears even when text fits
#99
Normalize text sizing across issue list and detail views
#95
Update how-to guide with swamp-extension-publish skill
#107
Content filter should identify the flagged word or phrase
#92
Extension skills missing repository initialization and publishing prerequisites
#94
Fix incorrect favicon in Google search results
#88
forEach.in with data.latest() throws misleading 'got: object' error for unresolved Promise
#90
Audit: modelRegistry.get() without ensureTypeLoaded() in YAML repository save() paths
#91
Vault CEL expressions replaced with VaultSecretBag sentinels after model type upgrade
#93
Missing section on user profile page for wendy
#86
issue-lifecycle models should support --assignee for swamp.club issues
#89
Cross-model expression validator fails on lazy-loaded types — modelRegistry.get() bypasses ensureTypeLoaded
#55
Score daily sign-in events with streak multiplier
#35
Consolidate method execution paths — workflow steps and manual runs build MethodContext divergently
#85
Driver capability registry: declare richer execution capabilities at driver design time
#59
Reindex path feeds error events to consumer, bypassing filtering
#83
Workflow-level workspace for docker driver: stateful multi-step workflows
#81
Workflow-scope user extension reports don't execute: getAll() excludes lazy-loaded reports
#82
"OG Swamper" badge inconsistent
#63
Architecture violation: search route imports directly from lib/infrastructure
#56
Score extension pull events for extension authors
#65
Phase 1: /feed — judge-gated content stream
#64
Add reactions and Giphy integration to comments
#62
Introduce domain events to formalize the telemetry-to-consumer pipeline
#61
Refactor: move telemetry track() calls from route handlers to application services
#58
Custom swamp-themed avatar generator with daily rerolls
#57
Profile content links with scoring for community contributions
#54
Score sign_up events in the telemetry pipeline
#53
Score extension publish events in the telemetry pipeline
#52
Add 'award' telemetry event type for arbitrary score grants
#51
Bug: authenticated pulls always shows 0 on profile page
#50
Decouple identity_map from main app: username renames via event, not shared DB
#49
Optimise MongoDB Search Queries
#48
Transactional emails on login with google/similar
#47
Add rate limiting to send-verification-email endpoint
#46
Add authentication or rate limiting to check-verified endpoint
#39
data.latest() returns null when new data written while _catalog.db is already marked populated
#38
Bundle cache fallback silently skipped when source and bundle have equal mtimes
#44
Document vault migrate command in reference docs
#43
Locks on long running actions
#45
swamp data query for morning-message in hello-world tutorial returns nothing.
#13
Expand DataRecord with first-class provenance fields; remove all hidden scoping from data access
#33
CatalogStore constructor runs createSchema before migrateIfNeeded; v1→v2 upgrade fails on existing repos
#37
Add vault migrate command to move secrets between vaults
#42
issue-lifecycle skill: improve resumption and close-out guidance
#40
swamp workflow validate should check step inputs against method's required arguments
#32
discord-bot poller double-processes events with >1 replica
#29
datastore sync --push fails on _catalog.db-wal: catalog SQLite DB lives inside the S3 sync cache
#31
datastore sync: clean up zombie _catalog.db* entries from remote index and S3 bucket
#30
datastore sync --push runs pushChanged() twice per invocation (coordinator dedup)
#26
Error when submitting a new issue manually
#25
Green text on issue details is a lot
#28
.swamp/datastore-bundles/ leaks into deno lint and deno fmt scans
#27
deno run audit task missing --allow-env flag
#24
evals/promptfoo: bump hono and @hono/node-server to clear 6 dependabot alerts
#21
issue-lifecycle: COMMENTED PR review can overwrite a prior decisive state in fetchPrReviews
#20
Add agent-constraints/ for issue-lifecycle skill
#19
@swamp/aws/ec2: auto-generated models lack list, tag, and factory-compatible update methods
#18
@swamp/digitalocean/space-key stores secret in plaintext - should mark as sensitive
#17
Add Azure provider pipeline to codegen
#16
feat: Namespace.so execution driver for remote workload execution
#15
Add macOS Keychain vault type
#12
feat: Private extensions
#11
Workflow execution repeats #1091: cross-model CEL expression validation fails for unresolved types
#10
context.readModelData returns different results depending on invocation context (manual vs workflow)
#9
Handle sensitive fields gracefully when no vault is configured
#8
Vault reads for model global arguments are cached at workflow start, making in-workflow token refresh ineffective
#7
feat: approval gates for workflow steps and jobs
#6
Install script: curl fails TLS verification for swamp.club (certificate chain)
#5
Extension Patches: contribution workflow for community extensions
#3
Support 'swamp <app> run' as containerized entrypoint for easy onboarding
#2
Persistent runner / server mode to eliminate per-invocation CLI startup overhead
#1