Inbox API contract and SwampClubClient inbox methods: summary, list, get and mark-read, pinned by a shared fixture and design/surfaces/inbox.md

s36m ago

#3985

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

1h ago

#3976

Scheduled flaky-test detection is failing

3h ago

#3939

v3 read model: guard against aliased key spellings on case-insensitive filesystems, without slowing replay

s3h ago

#3954

Scheduled flaky-test detection is failing

s4h ago

#3918

stagecraft remote studio: one long-lived connection to serve instead of a swamp process per read

5h ago

#3921

stagecraft remote studio poll: follow-ups from #3658 review (flaky test, mid-poll first page, quiet-poll test)

5h ago

#3965

docs(manual): the manual documents swamp subscription status and start — standings, call to action, flags and --json output

s6h ago

#3951

swamp subscription start opens the Swamp Club billing page, or a collective's with --collective, and status points its call to action at it

s21h ago

#3916

v3: the compaction policy bounds how much history a fresh clone replays (retainMs, minCommits, retainCommits) and the base load skips files the tail removes

s21h ago

#3953

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

21h ago

#3935

v3 on S3/GCS: a replica restore yields a corrupt commits.db (fails SQLite's integrity check), so fresh clones and restores of the datastore fail; reproduces with Litestream alone from its first compacted L1 file (found by #3916)

s21h ago

#3950

swamp subscription status reports the plan and billing standing of the signed-in user and each collective, worded as auth whoami words it

s21h ago

#3949

/o/<slug>/billing sends a signed-out visitor to the collective page, or a 404 when private, instead of through login and back like /billing

sk21h ago

#3942

swamp-extensions GCS storage test 'put: an abort mid-upload leaves no object and no resumable session' fails about 1 run in 5 (fixed 50 ms sleeps)

s22h ago

#3947

refactor(cli): share auth whoami's collective-standing helpers ahead of swamp subscription, and pin Personal License and Admin standings

s22h ago

#3924

@swamp/cve/tailworm: check the reachability matrix against a Tailscale-hosted tailnet

s23h ago

#3944

AWS codegen treats nested primaryIdentifier pointers as top-level fields

23h ago

#3943

AWS codegen collapses nested createOnly/readOnly paths to their last segment

23h ago

#3946

Generated state schemas require every child of nested objects, so normal resources warn on create/get

23h ago

#3901

swamp-club.com/cve/tailworm states two things its sources do not say: finding 5's memory growth and no exploitation in the wild

s1d ago

#3945

cve/tailworm extension README says the findings were not seen in the wild, which no source states

1d ago

#3915

Datastore rework Phase 5 (team mode) 1/3: serve's datastore API — commit, chunk and catch-up endpoints, authorisation on each op's intent, principal stamping and actionable conflicts

s1d ago

#3923

@swamp/cve/tailworm: reachability follow-ups from #3919 review

1d ago

#3919

@swamp/cve/tailworm: opt-in reachability matrix from each node's packet filter

s1d ago

#3922

Datastore rework Phase 5: content-level authorisation for forwarded definition and evaluated-file writes

s4m ago

#3920

swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

s1d ago

#3913

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

23h ago

#3900

@swamp/cve/tailworm: after mitigate caps headscale, the rescan still tells you to set MemoryMax and Restart=always

s1d ago

#3910

@swamp/cve/tailworm grade: unix serve targets the probe could not resolve are graded as ordinary sockets

s1d ago

#3909

kubernetes: externalsecret and normalizeMeta follow-ups from #3907

s1d ago

#3902

v3 crash recovery's progress line breaks --json stderr: a failing command that recovered prints text before its JSON error (regression from #3363 / #3893)

s1d ago

#3877

Docs: vaults reference should say a wide local_encryption key file gets a warning

1d ago

#3859

Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint

1d ago

#3821

Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

s1d ago

#3893

v3 long silent waits: crash recovery runs ~24 s with no output, data prune is silent 6-10 s in log mode, and a lagging read hangs ~112 s when Litestream's listing is cut (found by #3756)

s1d ago

#3889

Add @swamp/cve/http2shell: scan and mitigate the Brotli decoder RCE (CVE-2026-111497, Node2Shell/HTTP2Shell)

s1d ago

#3891

extension_tarball_analyzer_test fails on macOS: tar --mode is GNU-only

s1d ago

#2907

S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back

2d ago

#3860

v2 S3: about 4-5% of serial workflow runs fail with datastore_unpublished_data_version ('a concurrent run or the serve poller synced') when nothing else is running (found by #3756)

s2d ago

#3756

Datastore rework Phase 4 I: dogfood and benchmark solo v3 (filesystem, S3, GCS) in a throwaway repo with the released binary, check the kill criteria, and decide whether to announce

s2d ago

#3882

v3 bucket outage: a command cut off while becoming the writer says its changes are saved locally when nothing was saved (workflow approve), and the suggested recover fails for a run cut mid-step (found by #3756)

s2d ago

#3879

auth login browser flow prints a fatal stack trace when swamp-club cannot be reached

s2d ago

#3880

Scheduled flaky-test detection is failing

s2d ago

#3803

v3 first clone and restore of a bucket datastore take 2.6-3x v2, missing #3418's 1.5x target (found by #3756)

s2d ago

#3767

swamp update downloads before failing in a sticky directory with another user's binary, and blames an immutable flag

s3d ago

#3771

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

3d ago

#3823

Docs: install-swamp says SWAMP_HOME moves everything, but agent skill folders stay in the user's home folder

3d ago

#3792

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

s3d ago

#3802

v3 bucket outage: a workflow run whose checkpoint committed is told nothing was committed, three outage errors have no stable code, and exit takes 15-60 s (found by #3756)

s3d ago

#3801

v3 identity on buckets: S3 checkouts with different endpoint spellings fork the datastore silently, and a hostname change blocks every write for ~5 minutes (found by #3756)

s3d ago

#3811

typed_workflow_passes_test child-sentinel case flakes under full-suite load: f.received.at(-1) reads the compare step's empty payload

3d ago

#3794

extension push drops local modules when the repo under a node_modules folder is reached through a symlinked path (macOS /var, the swamp-club#3782 fix)

3d ago

#3382

Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it

s4d ago

#3695

Docs: issue redaction keeps git ids and non-address colon runs, and asks before posting (swamp-club#3686)

4d ago

#3599

Docs: worker daemon enable reference is missing --ca-cert, --concurrency and SWAMP_SERVE_EXTRA_HEADERS

s4d ago

#3759

v3 on S3/GCS: a write whose commit cannot reach the bucket prints "succeeded" on --json, exits 1, and is lost (confirm-before-output, found by #3756)

s4d ago

#3761

swamp-club /cve/dirtyfrag page shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects

s4d ago

#3760

v3: datastore config migrate skips every workflow that has run (name-committed), and they are then "not found" (found by #3756)

s4d ago

#3762

@swamp/cve/dirtyfrag report suggests commands for dirtyfrag-scanner whatever the model is named

s4d ago

#3763

v3 on a bucket: after a commit fails because the bucket is unreachable, the closing sync still waits its full 60 s before the command exits

4d ago

#3743

Interactive history and output search pickers cannot open a run under a non-default datastore

s5d ago

#3736

v3 recovery sweep: dot-prefixed data names escape it, HFS+ non-ASCII names are deleted by it, and an old mtime keeps a dropped write's file (bug hunt group 8)

s5d ago

#3738

Source glob expansion crashes when a directory under the glob parent disappears mid-walk

s5d ago

#3737

v3 chunk barrier on macOS: use F_BARRIERFSYNC (ordering) instead of F_FULLFSYNC (full drive-cache flush), cutting ~10-25 ms (200 ms+ on a busy disk) per command

s5d ago

#3694

extension_source_add_test globs the real home directory and flakes when a file in ~ disappears mid-walk

s5d ago

#3696

v3 join check refuses a fresh managedConfig checkout on S3/GCS: the datastore extension's auto-install writes the managed lockfile first (regression of #3690)

s5d ago

#3675

Docs: doctor datastores reference for the v3 content check and lost format marker repair

5d ago

#3678

Docs: step dataOutputOverrides vaultName and the field-by-field override merge (swamp-club#3606)

5d ago

#3622

Docs: data name portability rule and warning

5d ago

#3623

Docs: vault create and vault migrate refuse a local_encryption name with leftover storage

s5d ago

#3691

v3 namespaces: cross-namespace reads return the reader's own content, a namespaced local tier is overwritten by solo commits, and namespaces can collide with swamp's own .swamp/ directories (bug hunt group 7)

s5d ago

#3690

v3: a checkout holding v2 records joins a v3 datastore through .swamp.yaml unguarded, overwriting its records and diverging for good (bug hunt group 5)

s5d ago

#3644

v3 on S3/GCS: the namespace refusal names setup filesystem, and an unreadable marker on a format-3 repo says "will not open … as format 2" (found by swamp-uat#715)

6d ago

#3643

v3 on S3/GCS: setup on a prefix holding only swamp's format-3 marker fails with "this swamp release can't open" format 3 (found by swamp-uat#715)

s6d ago

#3680

Workflow runs ignore defaultVault: step sensitive outputs land in the first vault, and validate predicts a vault the run doesn't use

s6d ago

#3617

v3 local durability: chunks aren't fsynced before the commit naming them, so a power cut can wedge every checkout; torn writer and format markers don't heal (bug hunt group 4)

s6d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

2d ago

#3653

Scheduled flaky-test detection is failing

s6d ago

#3652

ssh: follow-ups from #3581 review — master rekey vs per-call known_hosts, settle error handling, atomic new-file mode

s6d ago

#3642

v3 on S3/GCS: a fresh checkout whose restore from the replica fails reports an empty datastore and exits 0 (found by swamp-uat#715)

s6d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

6d ago

#3624

swamp CLI: revokeCollectiveToken should tell an unknown token from an unknown collective once swamp-club answers 404

s7d ago

#3615

Dev stack serves corrupted gzip under Vite: browsers fail with ERR_CONTENT_DECODING_FAILED

s7d ago

#3604

worker daemon enable: an unreadable --ca-cert passes enable, and SWAMP_SERVE_EXTRA_HEADERS is silently dropped under sudo

s7d ago

#3587

v3: a crashed workflow run and its completed steps' data are deleted by recovery before workflow recover or serve's reaper can see them (bug hunt group 6)

s7d ago

#3588

Scheduled flaky-test detection is failing

s7d ago

#3586

v3 outbox: a reported failure can land, a commit can name a deleted chunk, and a fenced writer is told nothing landed when it did (bug hunt group 3)

s7d ago

#3564

v3: writer liveness is judged wrong: a same-hostname container takes over a live writer, a stalled writer's file is reverted then committed, and a fenced retention pass rewinds the new writer (bug hunt group 1)

s9d ago

#3572

agent-runner and deno-runner: support Windows (both refuse to start: Unsupported operating system)

s9d ago

#3565

v3 replication: check a possible S1 in serve's retake, fix serve wedging on a retake mid-replacement, and stop 'the next write replicates them' being false (bug hunt group 2)

s9d ago

#3567

Enforce the minimum S3/GCS extension version for v3 bucket datastores from the lockfile

s9d ago

#3534

Datastore rework Phase 4 E: v3 on S3 and GCS (solo mode): setup --format 3 on buckets, replication as a datastore property, end to end

s9d ago

#3566

doctor datastores decides v3 from the format key, so an override pointed at a v3 bucket runs the v2 contamination check and repair

s9d ago

← Back to list

01Issue

FeatureShippedSwamp ClubPublic

AssigneesNone

Relationships

↔ sibling #3623

#3622 Docs: data name portability rule and warning

Opened by stack72 · 10/19/2026· Shipped 10/21/2026

PR #1389: https://github.com/swamp-club/swamp-club/pull/1389

swamp-club#3568 adds a Windows portability check for data names written by writeResource and createFileWriter. content/manual/reference/data.md currently says only that the name latest is reserved. Suggested addition to that page, next to the reserved-name note: a data name containing one of the characters < > : (double quote) | ? * or a control character is refused on a Windows host (Windows cannot store it as a file name) and produces a warning on Linux and macOS; a Windows reserved device name (CON, PRN, AUX, NUL, COM1-9, LPT1-9, with or without an extension) or a name ending in a dot or space produces a warning on every platform. The warning appears as a Warning line in log mode and as a JSON line on stderr with warning data_name_portability in --json mode. Nothing about stored paths changes. Recommend joining name parts with - rather than :.

02Bog Flow

Shipped

10/21/2026, 1:17:38 AM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 linked sibling of #362310/21/2026, 12:33:43 AM

Inbox API contract and SwampClubClient inbox methods: summary, list, get and mark-read, pinned by a shared fixture and design/surfaces/inbox.md

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

Scheduled flaky-test detection is failing

v3 read model: guard against aliased key spellings on case-insensitive filesystems, without slowing replay

Scheduled flaky-test detection is failing

stagecraft remote studio: one long-lived connection to serve instead of a swamp process per read

stagecraft remote studio poll: follow-ups from #3658 review (flaky test, mid-poll first page, quiet-poll test)

docs(manual): the manual documents swamp subscription status and start — standings, call to action, flags and --json output

swamp subscription start opens the Swamp Club billing page, or a collective's with --collective, and status points its call to action at it

v3: the compaction policy bounds how much history a fresh clone replays (retainMs, minCommits, retainCommits) and the base load skips files the tail removes

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

v3 on S3/GCS: a replica restore yields a corrupt commits.db (fails SQLite's integrity check), so fresh clones and restores of the datastore fail; reproduces with Litestream alone from its first compacted L1 file (found by #3916)

swamp subscription status reports the plan and billing standing of the signed-in user and each collective, worded as auth whoami words it

/o/<slug>/billing sends a signed-out visitor to the collective page, or a 404 when private, instead of through login and back like /billing

swamp-extensions GCS storage test 'put: an abort mid-upload leaves no object and no resumable session' fails about 1 run in 5 (fixed 50 ms sleeps)

refactor(cli): share auth whoami's collective-standing helpers ahead of swamp subscription, and pin Personal License and Admin standings

@swamp/cve/tailworm: check the reachability matrix against a Tailscale-hosted tailnet

AWS codegen treats nested primaryIdentifier pointers as top-level fields

AWS codegen collapses nested createOnly/readOnly paths to their last segment

Generated state schemas require every child of nested objects, so normal resources warn on create/get

swamp-club.com/cve/tailworm states two things its sources do not say: finding 5's memory growth and no exploitation in the wild

cve/tailworm extension README says the findings were not seen in the wild, which no source states

Datastore rework Phase 5 (team mode) 1/3: serve's datastore API — commit, chunk and catch-up endpoints, authorisation on each op's intent, principal stamping and actionable conflicts

@swamp/cve/tailworm: reachability follow-ups from #3919 review

@swamp/cve/tailworm: opt-in reachability matrix from each node's packet filter

Datastore rework Phase 5: content-level authorisation for forwarded definition and evaluated-file writes

swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

@swamp/cve/tailworm: after mitigate caps headscale, the rescan still tells you to set MemoryMax and Restart=always

@swamp/cve/tailworm grade: unix serve targets the probe could not resolve are graded as ordinary sockets

kubernetes: externalsecret and normalizeMeta follow-ups from #3907

v3 crash recovery's progress line breaks --json stderr: a failing command that recovered prints text before its JSON error (regression from #3363 / #3893)

Docs: vaults reference should say a wide local_encryption key file gets a warning

Docs: manual states the old pre-flight check rule and scores fast-check by deno doc --lint

Docs: define the sensitive-output fallback vault order and document the doctor vaults fallback warning

v3 long silent waits: crash recovery runs ~24 s with no output, data prune is silent 6-10 s in log mode, and a lagging read hangs ~112 s when Litestream's listing is cut (found by #3756)

Add @swamp/cve/http2shell: scan and mitigate the Brotli decoder RCE (CVE-2026-111497, Node2Shell/HTTP2Shell)

extension_tarball_analyzer_test fails on macOS: tar --mode is GNU-only

S3/GCS datastore: a push that fails after uploading drops its recorded deletes, so the retry brings deleted data back

v2 S3: about 4-5% of serial workflow runs fail with datastore_unpublished_data_version ('a concurrent run or the serve poller synced') when nothing else is running (found by #3756)

Datastore rework Phase 4 I: dogfood and benchmark solo v3 (filesystem, S3, GCS) in a throwaway repo with the released binary, check the kill criteria, and decide whether to announce

v3 bucket outage: a command cut off while becoming the writer says its changes are saved locally when nothing was saved (workflow approve), and the suggested recover fails for a run cut mid-step (found by #3756)

auth login browser flow prints a fatal stack trace when swamp-club cannot be reached

Scheduled flaky-test detection is failing

v3 first clone and restore of a bucket datastore take 2.6-3x v2, missing #3418's 1.5x target (found by #3756)

CVE pages: horizontally scrolling code blocks are not keyboard-reachable

Homepage club plate link has no visible keyboard focus

Scheduled flaky-test detection is failing

swamp update downloads before failing in a sticky directory with another user's binary, and blames an immutable flag

Docs: extra-headers how-to systemd snippet puts a path in SWAMP_SERVE_EXTRA_HEADERS

Docs: install-swamp says SWAMP_HOME moves everything, but agent skill folders stay in the user's home folder

Docs: dashboard Approvals view shows run context, reason and per-viewer decide state

v3 bucket outage: a workflow run whose checkpoint committed is told nothing was committed, three outage errors have no stable code, and exit takes 15-60 s (found by #3756)

v3 identity on buckets: S3 checkouts with different endpoint spellings fork the datastore silently, and a hostname change blocks every write for ~5 minutes (found by #3756)

typed_workflow_passes_test child-sentinel case flakes under full-suite load: f.received.at(-1) reads the compare step's empty payload

extension push drops local modules when the repo under a node_modules folder is reached through a symlinked path (macOS /var, the swamp-club#3782 fix)

Teach defineBehavior in the extension skill now that swamp-testing 0.20261013.52 exports it

Docs: issue redaction keeps git ids and non-address colon runs, and asks before posting (swamp-club#3686)

Docs: worker daemon enable reference is missing --ca-cert, --concurrency and SWAMP_SERVE_EXTRA_HEADERS

v3 on S3/GCS: a write whose commit cannot reach the bucket prints "succeeded" on --json, exits 1, and is lost (confirm-before-output, found by #3756)

swamp-club /cve/dirtyfrag page shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects

v3: datastore config migrate skips every workflow that has run (name-committed), and they are then "not found" (found by #3756)

@swamp/cve/dirtyfrag report suggests commands for dirtyfrag-scanner whatever the model is named

v3 on a bucket: after a commit fails because the bucket is unreachable, the closing sync still waits its full 60 s before the command exits

Interactive history and output search pickers cannot open a run under a non-default datastore

v3 recovery sweep: dot-prefixed data names escape it, HFS+ non-ASCII names are deleted by it, and an old mtime keeps a dropped write's file (bug hunt group 8)

Source glob expansion crashes when a directory under the glob parent disappears mid-walk

v3 chunk barrier on macOS: use F_BARRIERFSYNC (ordering) instead of F_FULLFSYNC (full drive-cache flush), cutting ~10-25 ms (200 ms+ on a busy disk) per command

extension_source_add_test globs the real home directory and flakes when a file in ~ disappears mid-walk

v3 join check refuses a fresh managedConfig checkout on S3/GCS: the datastore extension's auto-install writes the managed lockfile first (regression of #3690)

Docs: doctor datastores reference for the v3 content check and lost format marker repair

Docs: step dataOutputOverrides vaultName and the field-by-field override merge (swamp-club#3606)

Docs: data name portability rule and warning

Docs: vault create and vault migrate refuse a local_encryption name with leftover storage

v3 namespaces: cross-namespace reads return the reader's own content, a namespaced local tier is overwritten by solo commits, and namespaces can collide with swamp's own .swamp/ directories (bug hunt group 7)

v3: a checkout holding v2 records joins a v3 datastore through .swamp.yaml unguarded, overwriting its records and diverging for good (bug hunt group 5)

v3 on S3/GCS: the namespace refusal names setup filesystem, and an unreadable marker on a format-3 repo says "will not open … as format 2" (found by swamp-uat#715)

v3 on S3/GCS: setup on a prefix holding only swamp's format-3 marker fails with "this swamp release can't open" format 3 (found by swamp-uat#715)

Workflow runs ignore defaultVault: step sensitive outputs land in the first vault, and validate predicts a vault the run doesn't use

v3 local durability: chunks aren't fsynced before the commit naming them, so a power cut can wedge every checkout; torn writer and format markers don't heal (bug hunt group 4)