Lab #2203: Publishing manual contradicts registry omission defaults and supported visibility values

The swamp-club Publishing Commands manual contains a pre-existing paragraph at content/manual/reference/extensions/publishing.md:154-156 claiming that new extensions default to private and that visibility: public can be set in the manifest. The same page now documents the deployed optional registry API contract from Lab #2200: omitted visibility preserves collective-based defaults (public collective -> public; private collective -> private), and the only supported explicit API value is private. This is reproducible at https://swamp-club.com/manual/reference/extensions/publishing: compare the paragraph below successful push output with Registry publication API / Omission and confirmation. Reconcile the CLI-facing claims with the actual supported/released CLI behavior and CLI follow-up #2198; clearly distinguish any future CLI defaults from the backward-compatible server defaults. The stale paragraph predates PR https://github.com/swamp-club/swamp-club/pull/1215. This is a documentation follow-up, not a request to change the preserved service behavior.

Package everything on ops.swamp-club.com; stop direct server edits

artifacts.swamp-club.com unreachable in Spain during LaLiga matches (ISP blocking of Cloudflare IPs)

Shared dispatch bookkeeping queue delays completed worker results by up to 58 seconds

Serve globally scans definitions twice per new direct-type step, delaying worker dispatch by minutes

Serve: execute independent webhook-triggered workflows concurrently

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

serve/fleet: close OpenTelemetry attribution gaps across dispatch, data plane and worker lifecycle

serve: multi-minute write_resource latency during concurrent worker readiness

Installers intermittently fail resolving stable release: add bounded retries and actionable diagnostics

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

README.md needs updating with current language and content

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

Flaky test: lock hand-off timeout test times out in its own setup under load

Dashboard: a hidden tab keeps polling and re-rendering (health stream, live run page)

Registry client: retry transient upstream failures with bounded backoff and visible attempt progress

Pause and resume a scheduled workflow without editing or deleting its definition

Remote worker step marked failed ('aborted due to timeout') when the result report times out, though the method succeeded and its data was saved

Retention: one timeframe, enforced automatically, after which nothing older remains anywhere in the datastore

Workflow run cancellation on concurrency-key conflict

serve keeps a worker whose enroll finished after the worker timed out, then refuses the real worker as "already connected" and dispatches into the dead session

workflow run search / history search parse every run record on every call, so their cost grows with all history ever kept

Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them

Fleet visibility: live worker host map grouped by label, with slot-level lease state

Docs: dashboard reference needs the Workers view (/dashboard/workers)

serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other

swamp access check run locally ignores the named resource's stored type and tags

Activity projector fails with ZooKeeper "Bad version" error on swamp.score_grants during keeper instability

extension push: workflows listed with a shared directory prefix collapse into one workflows.yaml; all but the last are silently dropped

CLI tells signed-in callers to sign in when the registry rate-limits them

Add a subprocessors page at /subprocessors

Make Compute Routes list usable without create-only global arguments

Cloud Asset: complete metadata-only project search snapshot for lifecycle planning

Dashboard: deep links to a model's data item, data version and report

swamp report get --version N returns "Report not found" for any version older than the latest

serve: `serve reload` drops `export const extension` methods from a pulled package, while other extensions on the same type survive

serve: one unresolvable username in `auth.admins` stops the server from starting

control-plane vault init failures are swallowed; `access token reveal` says "Vault '_token-secrets' not found"

serve: boot token-secret migration deletes the source vault item

serve: boot hydration ignores `hydrationStrategy: lazy` and downloads every payload

Security Center: complete location-scoped finding snapshots for current-run reporting

IAM service accounts: verified deterministic-account lifecycle method with safe 404/409 handling

Secret Manager: complete metadata-only secret/version hygiene snapshot across projects

extension push: allow explicit private visibility in the manifest and at publish time, including public collectives

Swamp Club deno serve stays alive after SIGTERM because background loops are not stopped

Verification reviews infer pass from Claude usage-limit errors

Swamp Club fresh-database startup aborts migrations on missing deviceCode and concurrent replica markers

Logging sinks: convergent audit sink setup with typed writer identity and destination verification

Org Policy: typed batch effective-policy snapshots for baseline reports

Recommender: complete multi-scope recommendation snapshot for cost reports

Billing Budgets: convergent ensure-by-ID-or-unique-name method with etag and notification verification

Publishing manual contradicts registry omission defaults and supported visibility values

Service Usage: persist a complete paginated enabled-services snapshot for drift reports

Resource Manager: recursive caller-visible organisation hierarchy inventory with full pagination

Registry API: opt-in private visibility at publish time with fully backward-compatible defaults (prerequisite for CLI #2198)

BigQuery jobs: add a typed query method that polls, paginates and persists query results

Generic OTLP endpoint appends signal path after query or fragment

Cloud Build create supplies project instead of required projectId path parameter

Make official Docker image OCI-compliant

Issue lifecycle start drops top-level issue comments

Global Secret Manager methods build an invalid regional parent

No way to store code-review results — verdicts, findings, and cost are not persisted for any repo

Smoke test: gated lab issue lifecycle workflow

swamp-club: score-reads tierTotals GET overflows URL with inline param_ownerIds (Invalid URL, mislabeled clickhouse-network-error) for large collectives

[sc] quest-grant Mongo ops (recentHeartbeat/signalCounts/countIssueShipped) regressed to ~5s timeouts — missing index

Telemetry stats consumer: unsanitized subcommand in Mongo update path drops user metrics silently

Embeddable operative profile cards (iframe + oEmbed)

Harden the CLI update path so a future artifact-host migration can't strand clients again

swamp update silently reports 'up to date' forever if the stable pointer loses its redirect-location metadata

Slow Mongo: subscription.findByCollectiveId N+1 fan-out inflates p95 (lab issue list)

Scorecard: beta/rc-only extensions show "not scored" despite successful scoring (GET /score resolves only latestVersion)

Make serve WebSocket idle/keepalive timeout configurable (untunable default aborts runs when serve's loop briefly blocks)

Expose run/job/step identifiers as SWAMP_* env vars + CEL values, and template placement selectors (extends #331's run.id)

Workflow tasks should support ephemeral model instances (modelType + globalArgs) so workflows are zero-prereq

CLI dumps 300-line Cliffy Command object on unknown flags / subcommands

swamp datastore sync is minutes-slow at 4k-file scale even with zero-diff; outer 300s timeout fires

Relationships

#2203 Publishing manual contradicts registry omission defaults and supported visibility values

Shipped