Lab #3920: swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

Summary

Update the swamp-club.com/cve/tailworm page (#3895) for what @swamp/cve/tailworm has shipped since the page was built. The page should drive the extension as it is now, and its commands and sample output must match the current release.

What changed in the extension

2026.10.25.2 (#3908): probeScript stores the probe, compressed and as one sh command line. grade grades probe output the caller collected through another exec channel (KubeVirt / Harvester guest agent, kubectl exec), into the same status and report as scan. Statuses carry externalProbe: true.
2026.10.25.3 (#3910): serve targets the probe could not follow are reported as unverified in the localapi column, with a recommendation to check them by hand. CRLF output (kubectl exec -t) is read as is.
2026.10.25.4 (#3912): gradeFleet grades many hosts' output in one call (outputs: a list of {target, output, encoding?}) and gives one fleet report. In a workflow, outputs can be built from an earlier exec step's data with a CEL map. A host named fleet is refused by gradeFleet and scanFleet.
2026.10.25.5 (#3919, PR #568): opt-in includeReachability on scan and scanFleet. It reads each node's compiled packet filter (the PacketFilter of tailscale debug netmap, nothing else) and the report adds a Reachability section: a source-by-destination matrix between scanned hosts (allowed ports or denied) and a per-host inbound list. Port 22 is marked when Tailscale SSH is on, and serve ports that reach the localapi are marked too. A rule admitting the whole tailnet (the default allow-all policy) reads as any tailnet device. Needs root or the operator user; without it, or without the node's own addresses, a host reads as unknown, never as unreachable. It is the compiled policy, not a live test. grade and gradeFleet do not collect it.

Scope

Add a section for hosts the model cannot reach: run probeScript, run its command on each host as root through your own channel, then grade one host or gradeFleet the fleet. Show the input-file example and the workflow step from the extension README (cve/tailworm/README.md, "Scan hosts the model cannot reach" and "Grade a fleet"). Note that the CEL expression must be quoted in YAML.
Show sample results for graded hosts: mitigate cannot reach them, so the report suggests applying the fixes through the same exec channel, then probing and grading again.
Mention the unverified localapi cell and what to do about it.
Add a "Check your policy" section after the SSH-policy advice: the page tells readers to rewrite Tailscale SSH rules as per-pair grants, and scanFleet --input includeReachability=true is how they check the rewrite worked. Show the before/after matrices: the allow-all policy, then a tagged policy. Sample output and a recording come from the demo in the extension README ("Who can reach what"). Say what it does not show: subnet-route and exit-node traffic, app capability grants, and live reachability.
Check every command and sample output on the page against 2026.10.25.5 once PR #568 is released.

Extension: @swamp/cve/tailworm (cve/tailworm/ in swamp-club/swamp-extensions). Page: #3895. Extension issues: #3908, #3910, #3912, #3919 (follow-ups #3923).

Move the Zod argument-field extractor into @swamp-club/extension-scoring so the CLI and registry read schemas alike

Docs: extension quality scores with the registry formula and reports grade (swamp-club#3845)

serve: dispatch to an idle worker waits for its worker_busy write on the shared gateway transition tail

serve: worker enrollment resolves and creates the worker definition inside the serialized gateway transition tail

Datastore rework Phase 5 (team mode) 2/3: the CLI's serve upstream — with serverAddress, a v3 checkout commits, reads chunks and catches up through serve's datastore API, with no storage credentials

Extension dependencies: the shared import scan reads Babel syntax, not tokens (follow-up to #3969)

Rescore every extension's current version under rubric v5

Extension scoring queue: two replicas can claim the same pending event

Scheduled flaky-test detection is failing

Manual: the supported extension dependency categories, the canonical form and the lock rule, rewritten once against the final design

Registry audits v2 extension archives as written, and a range costs the loose point only without a valid lock

Extension consumers keep the publisher's bundle: pull, update and auto-resolve stop rebuilding (direction A for #3634)

Extension push: inputs that open up (workspace root lock, ancestor config refused by name, JSR dist-tags) and the skill docs rewritten once

Extension push ships the canonical form: every npm:/jsr: import pinned exact, and a v2 dependency-audit.json

stagecraft studio ticket columns: round-5 review lows from #3828 (source watch cost, relationText lookup, cross-instance claim)

A long-lived serve client for extensions, and a stable rate_limited error code

swamp serve on a v3 datastore never settles a workflow run left running by a stopped instance: boot reaper skips it as belonging to a remote instance

swamp serve on a v3 datastore: a run interrupted at a clean shutdown is never committed when the bucket is slow, and stays running for every other checkout

Support creating 1Password vaults for new clients

Filesystem datastore: an unclean shutdown leaves zero-byte data versions as the latest version, and `doctor datastores --repair` does not detect them

datastore_v3_replica_verify_test stall case flakes under the full integration run: restore.pid is read before the stub writes it

Generated state schemas require every child of nested objects, so normal resources warn on create/get

Add LinkedIn as a login provider

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

Showcase editor: caption counter is not announced to screen readers

Profile showcase read: approved list sorts on review.reviewedAt in memory

Showcase countByStatus: $match live statuses before the $group

Showcase admin queues: index-serve the updatedAt sort on approved/rejected

Annotate and retain past workflow runs and data after the fact

Docs: --trusted-hosts accepts host:port for public addresses on non-default ports

A workflow step's method output is invisible to `data query` and `data list`, and the method summary's retrieval command returns an older run's data

Skill propulsion rule is silent when no transition is satisfied because stage work is outstanding

package.json mode: no loose-specifier warning for a range push ships as the exact installed version

extension fmt (and any command) creates or rewrites deno.lock when the extension lives in the repo's loaded extensions/ dir

serve shutdown does not wait for worker status writes, and its listener accepts workers after the gateway is disposed

stagecraft: rename work mode `method` to `behavior`, matching swamp's rename of models to behaviors

auth token create --json fields key and signinToken are undocumented; no token-mode service setup page

trigger.schedule is evaluated in the serve host's local time zone, with no zone field and no doc saying so

workflow validate/run say "Workflow not found" for a file that doctor workflows explains is misnamed

telemetry stats says "No telemetry data found" right after successful sends; say the spool is empty because it flushed

Docs: publish typed-secrets Phase 4.6 expression and delivery semantics

Extension registry page: a supported way to include media (images) in the README

CEL: data.latest(...).version is a double, but data.version() only accepts int, so "version - 1" fails at run time

workflow resume --run refuses workflows with the same step name in two jobs, though validate and run accept them

Update public OpenTelemetry manual for remote waterfalls and execution metrics (#3786)

Server-driven warning and info messages to CLI users, targeted by swamp version (exploration)

Serve: delegate namespace-scoped extension pulls and reload without granting administrator access

workflow cancel --server ignores --ca-cert and SWAMP_CA_CERT

Preserve active worker execution across serve restarts and upgrades; reconnect and reattach dispatches

v3: chunk durability barrier costs a full drive-cache flush per command on macOS; use an ordering barrier

vary/forEach object values with no key/name/id produce data names Windows refuses

issue-lifecycle start drops issue comments: context.comments is always empty

swamp core: a non-string sensitive value reads back as a JSON string

Relationships

#3920 swamp-club.com/cve/tailworm: cover grade, probeScript, gradeFleet and the reachability matrix (extension 2026.10.25.5)

Summary

What changed in the extension

Scope

Related

In Progress