paths.base: manifest is not honored for workflows: — bundled workflows only resolve from repo root, blocking self-contained subdir layouts (sibling to #459)

swamp workflow approve and swamp workflow resume both report "No suspended runs found" for a workflow that is clearly suspended according to workflow history search and workflow history get.

Steps to Reproduce

Run a workflow with a manual_approval step:

swamp workflow run approve-s3-check --json

Workflow suspends at the approval gate (status: "suspended")

Verify it's suspended:

swamp workflow history search --json
# Shows: {"runId": "75736256-...", "status": "suspended"}
swamp workflow history get approve-s3-check --json
# Shows: {"status": "suspended", "runId": null}  (note: runId null here is also odd)

Try to approve:

swamp workflow approve approve-s3-check review-gate --json
# Error: "No suspended runs found for workflow "approve-s3-check""
swamp workflow approve approve-s3-check review-gate --run 75736256-c913-4662-ae8d-bd3d68408d3c --json
# Error: "Workflow run not found: 75736256-..."
swamp workflow resume approve-s3-check --json
# Error: "No suspended runs found for workflow "approve-s3-check""

Additional Observations

The run file exists at .swamp/repos/<repo-id>/workflow-runs/<wf-id>/workflow-run-<run-id>.yaml with status: suspended
swamp workflow history search finds the run and reports correct status
swamp workflow history get approve-s3-check returns runId: null but correct status
swamp workflow approvals returns empty {"approvals": []}
Two separate suspended runs exist, neither can be approved

Expected Behavior

swamp workflow approve approve-s3-check review-gate should find the suspended run and approve the step, allowing the workflow to continue.

Environment

swamp version: 20260530.005533.0-sha.1c117111
Platform: macOS Darwin 24.6.0
Datastore: @swamp/s3-datastore

02Bog Flow

Closed

5/31/2026, 9:08:26 PM

No activity in this phase yet.

03Sludge Pulse

stack72 assigned stack725/31/2026, 8:56:31 PM

webframp commented 5/30/2026, 10:02:28 PM

Additional context: the run file exists on disk at .swamp/repos/<repo-id>/workflow-runs/<wf-id>/workflow-run-<run-id>.yaml with correct status: suspended. The history search and history get commands both find and report the run correctly. Only approve, reject, and resume fail to locate it. This suggests the lookup path in those commands differs from the history commands.

Possibly related: workflow history get approve-s3-check --json returns runId: null for the same run that history search reports with a valid ID.

stack72 commented 5/31/2026, 9:08:25 PM

Closing as a duplicate of #493, which reports the same bug (workflow approve/resume/approvals cannot find a suspended run when a non-repo-local datastore is configured) with more detail. Tracking and fixing under #493.

Root cause (confirmed + reproduced): workflow approve, resume, approvals, and reject construct YamlWorkflowRunRepository(repoDir) without the datastore-resolved workflow-runs path, so they read repo-local .swamp/workflow-runs/ while the run state lives at <datastore>/workflow-runs/. The history commands pass the datastore path and so find the run. Reproduced without S3 using a filesystem datastore at an external path.

Should be able to see all the issues I created by a filter "submitted by me"

Ability to change the email address associated with my Swamp Club Account

feat: giga-swamp phase 5 — CLI output + namespace management commands

CI review jobs use two-dot diff that includes files the PR never touched

paths.base: manifest is not honored for workflows: — bundled workflows only resolve from repo root, blocking self-contained subdir layouts (sibling to #459)

Lab profanity filter rejects legitimate CLI flag tokens via substring match

Sign and notarize the swamp macOS binary

Add platform type to issue-lifecycle extension model Zod schema

fix: datastoreSetupExtension() ignores namespace config on initial migration push/pull

Remote execution: orchestrator/worker fan-out (replaces execution drivers)

swamp datastore sync --push creates global .datastore-index.json ignoring namespace config

feat: S3/GCS extension namespace-scoped sync support

Copy explicitGlobalArgs before mutation in resolveOrCreateDefinition

vault.get() expressions in extension model globalArguments are not resolved at runtime

swamp-issue skill should scrub secrets and org-specific data before submission

workflow validate: trim stale 'skipped' label from model_not_found warning

Add pi coding agent support

hashicorp-vault should read token from env

swamp-extension adversarial review skill needs mandatory mechanical verification checklist

feat: giga-swamp phase 6 — Namespace-scoped sync

swamp workflow validate emits misleading "Extension failed to load" warning when type resolves locally

Add issue search/list command to discover existing issues

Support vault-resolved private key content in transport auth (not just file paths)

Workflow engine resolves extension methods against base type, ignoring extension-registered methods

Per-model LockTimeoutError at 60s causes cascading failures under concurrent access

Persistent, queryable workflow runs (status / cancel from any shell)

swamp repo upgrade: ERR_SQLITE_ERROR 'attempt to write a readonly database' during extension catalog schema migration

workflow validate: fail on references to unknown model instances (typo'd modelIdOrName)

feat: giga-swamp phase 4 — CEL cross-namespace queries

Docs: document the extension push adversarial-review gate

vault://local_encryption token does not round-trip correctly for GCP OAuth2 access tokens

swamp issue: add ability to edit issue title and body after submission

@swamp/gcp/iam: add WIF pool, provider, service account, and binding support

Support vault-sourced identity keys

copy method reports success when scp exits non-zero (e.g. 255)

Docs: TLS behind inspecting proxies / private CAs (system trust store, DENO_CERT, SSL_CERT_FILE)

Extension quality/adversarial-review: add a 'published-surface hygiene' check for real infra identifiers

Feed-post scoring is a direct domain write, not a consumer of feed_post_approved telemetry

workflow validate silently PASSES steps whose model type is a pulled extension (step-inputs skipped = false pass)

extension quality fails to resolve bare specifiers — contradicts fmt no-import-prefix rule

Allow global arguments in direct type execution (workflow fan-out)

Bundled Deno does not honor the OS/system CA trust store

Gator-approved feed post did not trigger Discord activity or profile points

username_metrics projection backfill does not trigger re-scoring (stale UserScore for dormant users)

Enforce adversarial review gate before extension push

support git forge / web namespaces for collectives

Report type filtering in report search

extension search: empty results from CLI despite known extensions

workflow approve/resume cannot find suspended runs

vault annotate --url fails with query params on @swamp/aws-sm

datastore compact VACUUM fails with ERR_SQLITE_ERROR

workflow approve/resume cannot find suspended run when using S3 datastore

reindexByUsername re-strands pre-association history and wipes sign_in_dates

Telemetry never retroactively credits a device's pre-association history

Docs: document swamp doctor secrets in manual reference doctor.md

Docs: document 'swamp workflow resume --input' in manual reference

Cloudflare codegen: manifest version bumps on every regeneration (README not deno-fmt-clean)

Support dynamic host discovery from external sources

feat: giga-swamp phase 3 — Path resolver + per-namespace locking

@swamp/ssh exec: string host selector only matches 'all', ignores host names and tags

Add integration test for sensitive-arg guard on lazily-loaded extension types (follow-up to #480)

Remediate existing definitions holding cleartext sensitive global arguments (follow-up to #480)

Docs: document refusal of literal sensitive global arguments (follow-up to #480)

Docs: update extension-trust reference for swamp-only default + lockfile version pinning (swamp-club#465)

feat: giga-swamp phase 2 — Catalog schema v4 + repository interface

Support for Custom CA's

Cloudflare: support vault expressions for API credentials instead of env-var-only auth

GCP: support vault expressions for credentials instead of env-var-only auth

AWS: support vault expressions for credentials instead of env-var/SDK-chain-only auth

DigitalOcean: support vault expressions for the API token instead of DO_API_TOKEN env var

swamp model get does not redact `sensitive: true` fields (logs/reports/storage do)

Support vault expressions for API token instead of env var

UAT tests for manual_approval workflow commands

Document manual_approval workflow step type and suspend/approve/resume flow

Stale extension bundles break after swamp upgrade

Support --input flags on workflow resume for elevated permissions and runtime overrides

Add HTTP approval endpoints to swamp serve for manual_approval steps

feat: giga-swamp phase 1 — Namespace value object + config

swamp serve scheduled workflows do not load repo extension registries

ci: aws-check and gcp-check jobs take ~30min — rethink whether full model type-checking is needed per PR