serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

31m ago

#3987

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

31m ago

#3985

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

36m ago

#3983

Extension dependencies: the shared import scan reads Babel syntax, not tokens (follow-up to #3969)

23m ago

#3980

Manual: the supported extension dependency categories, the canonical form and the lock rule, rewritten once against the final design

3h ago

#3973

Registry audits v2 extension archives as written, and a range costs the loose point only without a valid lock

3h ago

#3972

Extension consumers keep the publisher's bundle: pull, update and auto-resolve stop rebuilding (direction A for #3634)

3h ago

#3971

Extension push: inputs that open up (workspace root lock, ancestor config refused by name, JSR dist-tags) and the skill docs rewritten once

3h ago

#3970

Extension push ships the canonical form: every npm:/jsr: import pinned exact, and a v2 dependency-audit.json

3h ago

#3964

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

6h ago

#3963

A long-lived serve client for extensions, and a stable rate_limited error code

6h ago

#3962

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

7h ago

#3961

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

7h ago

#3957

Support creating 1Password vaults for new clients

11h ago

#3955

Filesystem datastore: an unclean shutdown leaves zero-byte data versions as the latest version, and `doctor datastores --repair` does not detect them

14h ago

#3953

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

20h ago

#3946

Generated state schemas require every child of nested objects, so normal resources warn on create/get

22h ago

#3930

Add LinkedIn as a login provider

1d ago

#3929

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

1d ago

#3928

Showcase editor: caption counter is not announced to screen readers

1d ago

#3927

Profile showcase read: approved list sorts on review.reviewedAt in memory

23h ago

#3926

Showcase countByStatus: $match live statuses before the $group

23h ago

#3925

Showcase admin queues: index-serve the updatedAt sort on approved/rejected

23h ago

#3914

Annotate and retain past workflow runs and data after the fact

Enterprise1d ago

#3913

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

22h ago

#3887

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

7h ago

#3885

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

2d ago

#3870

package.json mode: no loose-specifier warning for a range push ships as the exact installed version

3d ago

#3869

extension fmt (and any command) creates or rewrites deno.lock when the extension lives in the repo's loaded extensions/ dir

3d ago

#3865

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

3d ago

#3863

Registry rescore: secret-safe-docs passes a secret README line on versions whose stored metadata predates the sensitive flag (follow-up to #3783)

3d ago

#3855

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

3d ago

#3843

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

3d ago

#3841

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

2d ago

#3839

workflow validate/run say "Workflow not found" for a file that doctor workflows explains is misnamed

3d ago

#3833

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

3d ago

#3829

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

3d ago

#3825

Extension registry page: a supported way to include media (images) in the README

3d ago

#3816

CEL: data.latest(...).version is a double, but data.version() only accepts int, so "version - 1" fails at run time

3d ago

#3815

workflow resume --run refuses workflows with the same step name in two jobs, though validate and run accept them

3d ago

#3787

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

4d ago

#3705

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

5d ago

#3703

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

5d ago

#3702

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

5d ago

#3679

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

6d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

2d ago

#3663

vary/forEach object values with no key/name/id produce data names Windows refuses

6d ago

← Back to list

01Issue

BugShippedSwamp CLIPublic

Assigneesstack72

Relationships

#3956 `swamp issue` redaction treats a four-part version number as an IP address

Opened by anthony · 10/26/2026· Shipped 10/26/2026

PR #3381: https://github.com/swamp-club/swamp/pull/3381

Description

swamp issue bug redacts IP addresses from the issue body before it submits the issue. The redaction also matches four-part version numbers that are not IP addresses. It replaces them with [IP-n]. A bug report then loses the environment data that the maintainers need.

Example from #3955. The body contained:

- Linux 6.18.33.2-microsoft-standard-WSL2 (WSL2), filesystem datastore

The CLI filed:

- Linux [IP-1]-microsoft-standard-WSL2 (WSL2), filesystem datastore

The output of uname -r on WSL2 always has this four-part form. Other version strings can have it too, for example .NET assembly versions and Windows build numbers.

The CLI shows the redaction in its JSON output after it submits the issue, but it does not ask first. To correct the text, the user must run swamp issue edit with --title, --body and --no-redact.

Steps to reproduce

Run swamp issue bug --title "test" --body "Kernel: 6.18.33.2-microsoft-standard-WSL2" --json.
Result: the output shows "redacted": "Kernel: [IP-1]-microsoft-standard-WSL2". The filed body contains [IP-1].

Expected result

The redaction does not replace a dotted number that is part of a larger token, for example a number followed by - and a letter. Or the CLI shows the redactions and asks for confirmation before it submits the issue.

Environment

swamp 20261022.021804.0-sha.983e2929
Linux 6.18.33.2-microsoft-standard-WSL2 (WSL2)

02Bog Flow

Shipped

10/26/2026, 6:12:54 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack7210/26/2026, 5:11:35 PM

stack72 commented 10/26/2026, 6:12:58 PM

Thanks @anthony for reporting this! We shipped: Stop the issue redactor reading a dotted quad that continues as a version string as an IPv4 address. A lookahead on IPV4_RE refuses a match followed by a hyphen and a letter (WSL2 kernel releases such as 6.18.33.2-microsoft-standard-WSL2) or by a dot and a digit (a fifth version group or an OID), and the step 13 callback keeps quads with a group above 255. Address ranges, wildcard DNS names and sentence-ending addresses stay redacted.. The fix has been merged and a release is on its way. We appreciate your contribution to swamp.

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

Extension dependencies: the shared import scan reads Babel syntax, not tokens (follow-up to #3969)

Rescore every extension's current version under rubric v5

Extension scoring queue: two replicas can claim the same pending event

Scheduled flaky-test detection is failing

Manual: the supported extension dependency categories, the canonical form and the lock rule, rewritten once against the final design

Registry audits v2 extension archives as written, and a range costs the loose point only without a valid lock

Extension consumers keep the publisher's bundle: pull, update and auto-resolve stop rebuilding (direction A for #3634)

Extension push: inputs that open up (workspace root lock, ancestor config refused by name, JSR dist-tags) and the skill docs rewritten once

Extension push ships the canonical form: every npm:/jsr: import pinned exact, and a v2 dependency-audit.json

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

A long-lived serve client for extensions, and a stable rate_limited error code

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

Support creating 1Password vaults for new clients

Filesystem datastore: an unclean shutdown leaves zero-byte data versions as the latest version, and `doctor datastores --repair` does not detect them

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

Generated state schemas require every child of nested objects, so normal resources warn on create/get

Add LinkedIn as a login provider

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

Showcase editor: caption counter is not announced to screen readers

Profile showcase read: approved list sorts on review.reviewedAt in memory

Showcase countByStatus: $match live statuses before the $group

Showcase admin queues: index-serve the updatedAt sort on approved/rejected

Annotate and retain past workflow runs and data after the fact

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

package.json mode: no loose-specifier warning for a range push ships as the exact installed version

extension fmt (and any command) creates or rewrites deno.lock when the extension lives in the repo's loaded extensions/ dir

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

Registry rescore: secret-safe-docs passes a secret README line on versions whose stored metadata predates the sensitive flag (follow-up to #3783)

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

workflow validate/run say "Workflow not found" for a file that doctor workflows explains is misnamed

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

Extension registry page: a supported way to include media (images) in the README

CEL: data.latest(...).version is a double, but data.version() only accepts int, so "version - 1" fails at run time

workflow resume --run refuses workflows with the same step name in two jobs, though validate and run accept them

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

vary/forEach object values with no key/name/id produce data names Windows refuses

Relationships

#3956 `swamp issue` redaction treats a four-part version number as an IP address

Description

Steps to reproduce

Expected result

Environment

Shipped