Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds

13m ago

#3469

Docs: add PowerShell to Set Up Shell Completions

16m ago

#3466

Docs: private extension entitlement messages and whoami --json privateExtensions (follows swamp-club#3311)

39m ago

#3464

extension quality --json reports status "failed" when a rubric factor is missing, though the exit code is 0

52m ago

#3463

auth whoami: log mode labels collectives Free and shows trial expired for a superseded trial

s3m ago

#3453

Docs: extension quality now reports repository-verified for private source hosting (swamp-club#3406)

1h ago

#3439

Extension push: a range dependency is sent to OSV as the range, not a version

s1m ago

#3417

Datastore rework Phase 4: real-endpoint check of Phase 4A's replication figures on a hosted S3-compatible service (spike)

20h ago

#3408

Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them

21h ago

#3404

A manual worker verify racing an enrollment probe can leave a healthy worker unverified until it reconnects

21h ago

#3402

literal() output in a step's inputs logs repeated Refusing to evaluate expression warnings

22h ago

#3401

A global argument that evaluates to swamp-namespace expression text is silently dropped, and literal() cannot pass it through

22h ago

#3399

serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other

12h ago

#3395

Datastore rework Phase 4 G: S3 and GCS implement the writable datastore-wide control plane and keep _control/writer/ at the bucket root

20h ago

#3392

Registry scorecard: dependency licenses follow the CLI's SPDX rules

23h ago

#3391

extension push: read dependency licenses with the shared SPDX parser (OR, AND, WITH)

s20h ago

#3390

@swamp/aws/ec2 has not published since 2026.09.29.1: its 23.4MB archive's publish job is killed after ~14 minutes

23h ago

#3385

bundle freshness ignores local modules outside the kind directory

1d ago

#3383

extension pull: safety analysis scans the bundle the extension runs

1d ago

#3382

Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it

1d ago

#3378

verification: run the upgrade-path test in parallel, and skip the dynamic test for no-op bumps

1d ago

#3377

S3/GCS datastores: write data version files create-only so a second writer cannot overwrite an existing version

1d ago

#3367

codegen: AWS models emit CloudFormation patterns JavaScript cannot compile, so @swamp/aws/chime, glue and transfer fail to import

1d ago

#3361

S3-backed serve: a poll that pulls one file invalidates the whole data catalog, so the next query re-reads every version

1d ago

#3354

extension push: pinned deprecated and unpinned or range dependency specifiers become errors (after the two-week window)

1d ago

#3353

Registry scorecard: audit the dependency version that ships, and JSR dependencies

1d ago

#3352

extension push: audit the dependency versions the bundle actually ships (pinned facts, deno info resolution, JSR existence)

1d ago

#3349

swamp-extensions: CI check that every manifest declares license: and ships a LICENSE file

23h ago

#3344

extensions_search index is never created if the first attempt fails, until the process restarts

1d ago

#3313

extension pull: answering y to a dependency's overwrite prompt silently skips that dependency

1d ago

#3305

S3/GCS datastore sync: shared sync service lets one sync clear another's dirty marks and pull over unpushed files

2d ago

#3298

swamp-uat: the SIGTERM drain test does not check that the run succeeded

1d ago

#3297

stagecraft: a factory-wide read of work items waiting on a person (no studio, no per-item status loop)

2d ago

#3292

stagecraft: rebind a work item to another tracker (mirrored built-in tickets to Jira)

2d ago

#3280

s3-datastore: first push on a fresh cache prints 'Index merge failed' for a missing local .datastore-index.json

2d ago

#3272

swamp-extensions: use explicit npm:/jsr: specifiers in root extensions/models

2d ago

#3231

vercel/projects update: always resends the unchanged project name, which Vercel rejects with 409 "already exists"

4d ago

#3229

stagecraft: studio state_test 'after its event stream reconnects' is timing-flaky under load

3d ago

#3214

Show wait keys and pending signals to remote clients and the dashboard

5d ago

#3208

Activity projector fails with ZooKeeper "Bad version" error on swamp.score_grants during keeper instability

5d ago

#3204

@swamp/s3-datastore and @swamp/gcs-datastore: implement datastoreControlPlaneStore() for the format marker read

5d ago

#3198

s3-datastore: model-scoped pullChanged lists and walks the whole namespace

5d ago

#3193

Datastore sync: a no-op push after a model-scoped pull arms the remote commitSeq, hiding other hosts' commits until the next commit

5d ago

#3169

extension safety analyzer does not warn on node:child_process or cluster subprocess spawning

6d ago

#3153

extension push: a swamp-quality-ignore directive after a comment holding an apostrophe is silently ignored

6d ago

#3133

Model types: decide whether names like @/@x/y or a+b/c should be legal (type grammar)

7d ago

#3103

seed:collective cannot produce a superseded personal trial or a returned trial, so the UAT cannot cover them

7d ago

#3073

serve HA: pull a token's definition on an auth miss so a peer accepts a new token at once

8d ago

#3065

extension push: accept attestation-backed adversarial-review evidence (lookup by extension and content hash), generated provenance, and carry the evidence to the registry at confirm (design: Lab #3023)

8d ago

#3060

Decide a stricter naming rule for workflow step and job names

7d ago

← Back to list

01Issue

FeatureOpenSwamp CLIPublic

AssigneesNone

Relationships

#3453 Docs: extension quality now reports repository-verified for private source hosting (swamp-club#3406)

Opened by stack72 · 10/14/2026

What changed

swamp CLI PR swamp-club/swamp#3107 (swamp-club#3406) makes swamp extension quality reach the registry's repository-verified verdict for private source hosting (#3396), using whoami's collectiveSourceHosting field (#3440):

When the collective has private source hosting and the extension will publish private, the factor is provisional locally, labelled "Private repository (collective attested)", whatever the repository URL (or none).
"Will publish private" follows the registry: a republish keeps the published visibility; a first publish is private when the manifest says visibility: private or the collective's namespace is private.
Otherwise the URL is scored as before: provisional for an HTTPS URL on github.com, gitlab.com, codeberg.org or bitbucket.org, missing for anything else, with a remediation that says why (public extension, collective without private source hosting, or could not be checked).
If quality cannot get an answer (not logged in, key rejected, Swamp Club unreachable, or nothing reported for the collective) it scores the URL alone and says private source hosting could not be checked. The lookup is bounded at 5 seconds.

Pages to update (after the CLI release)

content/manual/reference/extensions/publishing.md (around line 259): "repository-verified is provisional locally when the URL is well-formed and on an allowlisted host, and missing otherwise" — add the private-source-hosting route above.
content/manual/how-to/extensions/improve-score.md (the repository-verified section, around line 231 and the "Private or self-hosted source" subsection): say the CLI now shows the factor as provisional for a private extension in a private-source-hosting collective, so a local 100% gate passes for those collectives.
content/manual/reference/extensions/scorecard-rubric.md (around line 55): the CLI provisional paragraph should mention the collective-attested case.

02Bog Flow

Open

10/14/2026, 5:29:23 PM

No activity in this phase yet.

03Sludge Pulse