doctor datastores --repair --json prints two JSON documents instead of one

36m ago

#4010

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

59m ago

#4009

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

1h ago

#4008

access can-i: evaluate a local grants file without --server

1h ago

#4007

Show each method's kind in type describe --json

1h ago

#4006

Team mode: serve sends the compacted base, so a serve-mode checkout can catch up past compaction

1h ago

#3999

Support search and filters as URL query parameters on /extensions

2h ago

#3998

bundleExtension same-cache test can pass with a broken first-bundle gate under CPU load

2h ago

#3995

Registry: bump @swamp-club/extension-scoring to the version carrying #3983 (and #3845) before the v5 rescore

9m ago

#3994

Five Mongo queues can hand the same row to two replicas

7h ago

#3993

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

7h ago

#3992

Collective invite shows "This invitation has expired or has already been used" after a successful join via Google sign-in

15h ago

#3991

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

16h ago

#3988

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

17h ago

#3987

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

17h ago

#3980

Rescore every extension's current version under rubric v5

18h ago

#3974

Manual: the supported extension dependency categories, the canonical form and the lock rule, rewritten once against the final design

20h ago

#3973

Registry audits v2 extension archives as written, and a range costs the loose point only without a valid lock

20h ago

#3972

Extension consumers keep the publisher's bundle: pull, update and auto-resolve stop rebuilding (direction A for #3634)

20h ago

#3971

Extension push: inputs that open up (workspace root lock, ancestor config refused by name, JSR dist-tags) and the skill docs rewritten once

20h ago

#3964

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

1d ago

#3963

A long-lived serve client for extensions, and a stable rate_limited error code

1d ago

#3962

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

1d ago

#3961

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

1d ago

#3957

Support creating 1Password vaults for new clients

1d ago

#3953

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

1d ago

#3946

Generated state schemas require every child of nested objects, so normal resources warn on create/get

1d ago

#3930

Add LinkedIn as a login provider

1d ago

#3929

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

1d ago

#3928

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

1d ago

#3887

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

1d ago

#3885

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

2d ago

#3870

package.json mode: no loose-specifier warning for a range push ships as the exact installed version

3d ago

#3865

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

3d ago

#3855

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

3d ago

#3843

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

3d ago

#3841

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

3d ago

#3839

workflow validate/run say "Workflow not found" for a file that doctor workflows explains is misnamed

3d ago

#3833

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

3d ago

#3829

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

3d ago

#3825

Extension registry page: a supported way to include media (images) in the README

3d ago

#3816

CEL: data.latest(...).version is a double, but data.version() only accepts int, so "version - 1" fails at run time

4d ago

#3815

workflow resume --run refuses workflows with the same step name in two jobs, though validate and run accept them

4d ago

#3787

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

4d ago

#3705

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

6d ago

#3703

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

6d ago

#3702

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

6d ago

#3679

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

6d ago

#3674

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

3d ago

#3663

vary/forEach object values with no key/name/id produce data names Windows refuses

7d ago

#3651

issue-lifecycle start drops issue comments: context.comments is always empty

7d ago

#3647

swamp core: a non-string sensitive value reads back as a JSON string

7d ago

#3641

Generated vault keys carry raw data-name and vary characters that strict vault providers reject

7d ago

#3634

extension install and extension pull leave different bundles for the same extension version

7d ago

#3608

Registry drops contentMetadata.extensions (method grafts) at confirm-push

7d ago

#3603

Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)

s7d ago

#3600

local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)

7d ago

#3580

Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition

Team10d ago

#3579

Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support

Team10d ago

#3578

workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)

Team10d ago

#3554

issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream

10d ago

#3523

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

11d ago

#3514

swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)

7d ago

#3483

Workflow run cancellation on concurrency-key conflict

12d ago

#3480

Read non-string sensitive resource fields back with their type

12d ago

#3470

Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds

12d ago

#3408

Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them

12d ago

#3401

A global argument that evaluates to swamp-namespace expression text is silently dropped, and literal() cannot pass it through

13d ago

#3399

serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other

11d ago

← Back to list

01Issue

BugShippedExtensionsPublic

Assigneesskunk-ape

Relationships

#3770 @swamp/cve/php-rce-2026-10 follow-ups: dry-run heading, command spelling, Debian 12 fix, podman image scan

Opened by skunk-ape · 10/22/2026· Shipped 10/22/2026

PR #540: https://git.swamp-club.com/swamp-club/swamp-extensions/pulls/540

Summary

Follow-up to #3711. Five issues in @swamp/cve/php-rce-2026-10, found while building the #3712 advisory page by running the extension (branch head 11a408772) from source through the installed swamp CLI.

Findings

Dry-run mitigate titled APPLIED. A mitigate dry run (dryRun defaults to true) against an unreachable target printed # PHP RCE Mitigation: APPLIED with Outcome ERROR and Action unreachable. The target was a dockerContainer that had been removed. The heading should say DRY RUN or report the error. Its "Verify with:" line also suggested scanFleet --input hosts=docker-<name>, which cannot work for a container target.
Old command spelling in the report. The scan "Next Step" and the mitigate "Verify with" lines print swamp model method run php-rce-scanner …, and the README uses swamp model create / swamp model method run throughout. The primary spelling is now swamp behavior create / swamp behavior run, which the /cve/php-rce-2026-10 page uses.
Debian 12 is fixed. The Debian security tracker for CVE-2026-109618 lists bookworm php8.2 fixed in 8.2.35-1~deb12u1 under DLA-4848-1, a Debian LTS advisory rather than a DSA. DISTRO_FIXES and the README still say Debian 12 has no fix, and the README's Debian 12 sample (8.2.34-1~deb12u1 reported as check-vendor) depends on that.
Layout key leaks into a recommendation. A container scan of the official php:8.2.34-apache image prints "Until upgraded, the advisories' partial mitigations for official are session.upload_progress.enabled=0, memory_limit=-1 …". "official" is the ini-layout key and reads as if it were a product name.
dockerImage scan fails under rootless podman. With DOCKER_HOST set to the podman socket, a dockerImage=php:8.2.34-apache scan started the container, stopped it, then failed: "can only create exec sessions on running containers: container state improper". Starting the same image by hand with --pids-limit=-1 and scanning it as a dockerContainer worked. This is likely podman's default pids limit killing Apache, but the image path could pass the flag or report why the container exited.

Impact on swamp.club

The /cve/php-rce-2026-10 page (#3712) shows the scan and dry-run mitigate output of a real dockerContainer scan of php:8.2.34-apache. Fixes 2 and 4 change that output, so the page's sample needs a refresh once they ship.

02Bog Flow

Shipped

10/22/2026, 2:21:22 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

skunk-ape assigned skunk-ape10/22/2026, 1:41:19 PM

system commented 10/22/2026, 1:13:26 PM

Classified automatically when this issue was filed.

Source: Extensions

If you feel this classification is incorrect, add a ripple to tell us so.

skunk-ape commented 10/22/2026, 1:14:07 PM

Diagnosis from the #3711 session (extension PR 539, still open at 11a408772), for whoever picks this up:

Finding 3 (Debian 12): confirmed for both CVEs, bookworm php8.2 is fixed in 8.2.35-1deb12u1 (DLA-4848-1). Adding a DISTRO_FIXES entry alone is not enough. verdictFor trusts a tracker entry only for builds of the same upstream version, which keeps Sury 8.3.35+[HOST-1] from matching the Ubuntu 8.3.6 backport, so 8.2.34-1deb12u1 would stay check-vendor. Trust the entry when the upstream version matches OR the installed build sorts below the fixed build. That also closes the open review finding on older Debian 13 php8.4 builds. Expect test fixtures (bookwormVm assumes no fix) and the README Debian 12 sample to flip from check-vendor to update-available.
Finding 1 (dry run titled APPLIED): the mitigate error path builds errorStatus with mitigation null and inContainer false, so the heading falls back to APPLIED and Verify suggests scanFleet. Carry dryRun and inContainer into the error status.
Finding 2 (command spelling): the installed CLI has swamp behavior create/run and prefers it over model, so the report and README can switch.
Finding 5 (podman): the dockerImage path starts the image with an entrypoint of sh -c "sleep 3600", so Apache is not involved. Under podman the probe fails its first fork ("Cannot fork") unless the container has --pids-limit=-1, so passing that flag in startDockerImage is the likely fix.

These change the report text, so the /cve/php-rce-2026-10 sample (#3712) needs a refresh after this lands. This should get its own session.

doctor datastores --repair --json prints two JSON documents instead of one

judgeRunRecord lets a forged record settle a waiting approval gate to skipped without an approve

Claude audit hook misses PowerShell tool calls and sessions started above the swamp repo

access can-i: evaluate a local grants file without --server

Show each method's kind in type describe --json

Team mode: serve sends the compacted base, so a serve-mode checkout can catch up past compaction

Support search and filters as URL query parameters on /extensions

bundleExtension same-cache test can pass with a broken first-bundle gate under CPU load

Registry: bump @swamp-club/extension-scoring to the version carrying #3983 (and #3845) before the v5 rescore

Five Mongo queues can hand the same row to two replicas

Docs: run-workflows-on-a-schedule tells readers to curl /health for queue state, which no longer lists schedules

Collective invite shows "This invitation has expired or has already been used" after a successful join via Google sign-in

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

Rescore every extension's current version under rubric v5

Manual: the supported extension dependency categories, the canonical form and the lock rule, rewritten once against the final design

Registry audits v2 extension archives as written, and a range costs the loose point only without a valid lock

Extension consumers keep the publisher's bundle: pull, update and auto-resolve stop rebuilding (direction A for #3634)

Extension push: inputs that open up (workspace root lock, ancestor config refused by name, JSR dist-tags) and the skill docs rewritten once

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

A long-lived serve client for extensions, and a stable rate_limited error code

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

Support creating 1Password vaults for new clients

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

Generated state schemas require every child of nested objects, so normal resources warn on create/get

Add LinkedIn as a login provider

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

Showcase editor: caption counter is not announced to screen readers

Profile showcase read: approved list sorts on review.reviewedAt in memory

Showcase countByStatus: $match live statuses before the $group

Showcase admin queues: index-serve the updatedAt sort on approved/rejected

Annotate and retain past workflow runs and data after the fact

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

package.json mode: no loose-specifier warning for a range push ships as the exact installed version

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

workflow validate/run say "Workflow not found" for a file that doctor workflows explains is misnamed

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

Extension registry page: a supported way to include media (images) in the README

CEL: data.latest(...).version is a double, but data.version() only accepts int, so "version - 1" fails at run time

workflow resume --run refuses workflows with the same step name in two jobs, though validate and run accept them

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

vary/forEach object values with no key/name/id produce data names Windows refuses

issue-lifecycle start drops issue comments: context.comments is always empty

swamp core: a non-string sensitive value reads back as a JSON string

Generated vault keys carry raw data-name and vary characters that strict vault providers reject

extension install and extension pull leave different bundles for the same extension version

Registry drops contentMetadata.extensions (method grafts) at confirm-push

Multi-model skill eval: gpt-5.4 and gemini jobs fail preflight every run (OpenAI credits exhausted, Google API key invalid)

local_source_failed drops the indexing error: a transient local extension failure leaves no cause (follow-up to 1672)

Finer-grained method locking: a long-running method on one definition blocks unrelated objects managed by the same definition

Surface (or warn about) values a model method returns besides dataHandles, with sensitive-field support

workflow placement: run a workflow transparently on a specified host, local or via swamp workers (incl. nested child workflows)

issue-lifecycle: pr_merged and ship report success and advance the phase when swamp-club is unreachable, writing nothing upstream

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

swamp-extensions CI: Review Integrity explains a stalled or failed audit (streamed progress, timeout, did-not-finish comment)

Workflow run cancellation on concurrency-key conflict

Read non-string sensitive resource fields back with their type

Run index repair-by-stat misses an in-place, same-size record rewrite that restores mtime within the same second as its entry: ctime is reported in whole seconds

Configurable storage tiers: runs, outputs, data versions and audit move through an ordered list of user-defined tiers, and stay queryable across them

A global argument that evaluates to swamp-namespace expression text is silently dropped, and literal() cannot pass it through

serve: the per-IP WebSocket burst limit can't be configured, so workers behind one NAT IP throttle each other

Relationships

#3770 @swamp/cve/php-rce-2026-10 follow-ups: dry-run heading, command spelling, Debian 12 fix, podman image scan

Summary

Findings

Impact on swamp.club

Shipped