On Windows, extension_assets_dispatch_test compares a normalized lower-case path against the native one

3h ago

#4398

On Windows, refreshLocalModels warns twice for a broken repo-local model instead of once

3h ago

#4397

On Windows, removeStaleOutputSummaries warns when two clears race, failing output_summary_index_test intermittently

z1m ago

#4393

model output logs shows the latest log version instead of the output's own artifact version

4h ago

#4392

Manual: Sensitive Method Arguments claims a literal value is refused, but a method run accepts it

20m ago

#4391

workflow run: show artifact attributes for runs through serve, and let a run leave out the "Data produced" box

4h ago

#4386

Docs: what serve instances must not share, flat AWS Secrets Manager names, and where OAuth values are stored

4m ago

#4385

Let a serve:* collective key look up usernames, so a recreated swamp serve does not need oauth:manage at runtime

3h ago

#4384

aws-sm vault: optional secret_prefix to scope secrets within an AWS account and region

6h ago

#4383

@swamp/cve http2shell, php-rce-2026-10 and tailworm: scan fails with 'Duplicate data instance name' (log and status share a name)

7h ago

#4381

swamp skill: add a workspace guide and routing-table entry

Enterprise20h ago

#4376

stagecraft tracker: relate tickets across trackers (another repo's tracker)

20h ago

#4373

serve: a capability probe answered by a follower does not speak for the leader that handles the forwarded request

22h ago

#4372

serve OAuth client reuse: remaining review findings from swamp-club#4264

22h ago

#4371

Agents.md: consider not using H1 'Project' inside managed block

23h ago

#4367

serve: the cron-fire dedup claim has no deadline, so a hung control plane stalls every scheduled fire

1d ago

#4365

serve: define what swamp serve does when its OAuth client is deleted at swamp-club

1d ago

#4360

Docs: schedule catch-up and missed-fire tracking for scheduled workflows

1d ago

#4359

Work-item commands run from the wrong repo report the work item as not started

1d ago

#4358

Docs: step concurrency caps only that step's forEach iterations, not its whole dependency level

1d ago

#4353

Package everything on ops.swamp-club.com; stop direct server edits

22h ago

#4347

workflow run: let a run skip the "Data produced" box, or make it show what each artifact holds

4h ago

#4342

Shorten swamp serve's token session re-check so revocation takes effect sooner

1d ago

#4336

@swamp/cve/emudhra: Ubuntu's pip vendored certifi reported as exposed although pip uses the OS store

1d ago

#4334

cfgmgmt firewall (ufw): an input for rule position (insert before/after)

Team1d ago

#4330

@swamp/video: informal demos — join multiple takes into one video, and a full-length background music bed

1d ago

#4329

agent-sessions: lockfile test helper silently depends on the captured @swamp/git key

1d ago

#4328

agent-sessions: low-severity edge cases from the Codex importer reviews (#4158)

1d ago

#4325

Team mode manual pages: swamp-serve and remote-execution for leader/follower, member checkouts, offline work, run control and known limits

1d ago

#4323

Agent session record: four questions from the Codex importer (#4158)

1d ago

#4318

@swamp/video: upload workflow to publish a take to YouTube (video, description, chapters, captions, thumbnail)

2d ago

#4315

@swamp/video/brand: customizable outro card (next steps, headline, per-video CTA)

2d ago

#4314

data prune through serve deletes data of an auto-definition whose declared type is invalid

2d ago

#4310

serve: give the definition index a change signal (file watcher with a sync barrier) so a write to a definitions directory costs O(1), not a stat of every file in it

2d ago

#4308

Warn when a grant with a methods list is a deny: it also refuses requests that name no method

2d ago

#4306

serve reload reports 0 types reloaded when it replaced edited repo-local behaviors

2d ago

#4305

@swamp/video/brand: cap each Chromium stderr line kept for errors

2d ago

#4301

serve resolves realpath for thousands of files under .swamp/outputs/swamp/worker/set_status

2d ago

#4299

Retention or GC for auto-definitions whose runs and data are gone

2d ago

#4293

S3 and GCS: after a real commit by another writer, a serve stays off the pull fast path until it restarts

2d ago

#4275

Licence header check only compares the first line of a file

2d ago

#4256

CI: an accepted attestation approves the PR, and anything else fails the attestation job

2d ago

#4238

artifacts.swamp-club.com unreachable in Spain during LaLiga matches (ISP blocking of Cloudflare IPs)

3d ago

#4233

Supported binary file ingestion for remote members of swamp serve, without the bytes landing in run history

3d ago

#4232

Worker queryData fails at the fixed 30 s RPC limit while it waits for a full catalog rebuild

3d ago

#4222

Add expiring service-account token requests and authorization checks to RBAC

Team4d ago

#4217

Reads other than findById still treat a lapsed temporary ban as active until the operative next signs in

4d ago

#4215

verify-build upgrade gate silently skips models whose version is a constant

4d ago

#4213

@swamp/agent-sessions: explore a decision model (TypeSafe Jev) for call labelling

1d ago

#4212

agent-sessions: follow-ups from the 4211 reviews (repo resolution cache and edge cases)

4d ago

← Back to list

01Issue

BugOpenExtensionsPublic

AssigneesNone

Relationships

#4383 @swamp/cve http2shell, php-rce-2026-10 and tailworm: scan fails with 'Duplicate data instance name' (log and status share a name)

Opened by mtaylor · 11/4/2026

scan fails on every target in three @swamp/cve extensions, because each writes its log file and its status resource under the same data name. Since #3700, swamp refuses the second write in one run:

Duplicate data instance name 'localhost' (already written as file 'log' in this run)
code: method_execution_failed

Affected (latest versions, swamp 20261103.172234.0-sha.b94358f0, Ubuntu 24.04 runner):

@swamp/cve/http2shell 2026.11.02.2: models/http2shell.ts:361 creates the log as createFileWriter("log", instanceName(t.label)), then :381 writes status under the same instanceName(t.label). scanFleet does the same per host (:436, :475), and so does mitigate (:557).
@swamp/cve/php-rce-2026-10 2026.10.24.2: models/php_rce_2026_10.ts:3229 and :3244; per host in scanFleet at :3285 and :3323; and :3412.
@swamp/cve/tailworm 2026.10.25.6: models/tailworm.ts:3647 and :3670; per host in scanFleet at :3720 and :3762; and :3510.

This happens in every mode, local and SSH, because the log and the status share the target's label. @swamp/cve/dirtyfrag and @swamp/cve/emudhra name their log <label>-log and work.

Repro

swamp extension pull @swamp/cve/tailworm
swamp model method run @swamp/cve/tailworm scan tailworm-local

It fails with the error above, and no status record is written. The same happens with http2shell and php-rce-2026-10 (scan), and with targetHost set.

Suggested fix

Name the log as dirtyfrag and emudhra do, for example createFileWriter("log", \${instanceName(label)}-log`), in scan, scanFleet (per host) and mitigate. Anything that reads the old log name needs the same change. A test that runs scan` against a fake target through a context that refuses duplicate names would catch it.

Related: #3700 (refuses a name written as two kinds in one run) and #4302 (the same check across runs).

Upstream repository: https://github.com/swamp-club/swamp-extensions

Environment

Extension: @swamp/cve/http2shell@2026.11.02.2
swamp: 20261103.172234.0-sha.b94358f0
OS: windows (x86_64)
Deno: 2.9.8
Shell: C:\Program Files\Git\usr\bin\bash.exe

02Bog Flow

Open

11/4/2026, 2:22:57 PM

No activity in this phase yet.

03Sludge Pulse

system commented 11/4/2026, 2:22:57 PM

Classified automatically when this issue was filed.

Source: Extensions

If you feel this classification is incorrect, add a ripple to tell us so.