EXTENSIONS

Agent-friendly Software Development Lifecycle models

Peplink router management — WAN status, cellular signal diagnostics, band/carrier scanning, manual carrier steering (and revert to auto), SpeedFusion Connect monitoring, Starlink dish control, and raw API passthrough. Works with any Peplink router running firmware 8.5+.

Human-in-the-loop review canvas — serve a local web form the human gates while the agent keeps working. list mode renders a long candidate list as a curation grid (configurable option-scale + per-item comment) for migrations, triage, and cleanup approvals; doc mode is a pastebin-style markdown editor (editor left, live preview right, optional approve/revise/reject verdict) for reviewing generated docs and gating publishes. Detached serve / status / collect / stop lifecycle; every save dual-writes JSON + markdown + a timestamped append-log, and collect records the result into the data model for workflow consumption. Python-stdlib server bundled; private networks only (URL-token guarded).

FreeBSD system primitives via SSH — pkg(8) package management, sysrc(8) rc.conf key-value management, service(8) enable/disable + lifecycle, and kldload(8)/kldstat(8) kernel module management with /boot/loader.conf persistence.

Brownfield adoption of existing AWS infrastructure into swamp models.

Discover running AWS resources for cost estimation and inventory management.

Query AWS Cost Explorer for actual spend analysis by service, usage type,

AWS Pricing API model for looking up service costs.

macOS Keychain vault using the security CLI

RICE scoring methodology as an agent-guided framework.

Query and analyze CloudWatch Metrics for operational visibility and performance monitoring.

AWS Bedrock token usage monitoring — multi-account fan-out scanning of

Calculate AWS infrastructure costs from inventory data or planned specs.

Cloudflare management - zones, DNS records, WAF/firewall rules, Workers, and cache/CDN

Query and analyze CloudWatch Alarms for operational visibility and incident response.

Guides teams through applying Domain-Driven Design to existing projects.

Inspect VPC networking resources that commonly generate hidden costs:

Unified cross-provider AI token usage monitoring — workflow, model, and

GPG-encrypted password store using the pass CLI (passwordstore.org)

Query and manage AWS Security Hub findings from a delegated administrator

Query and analyze CloudWatch Logs for operational visibility and incident investigation.

gopass password manager (gopass.pw) - pass compatible with extra features

Query and monitor JFrog Artifactory from a package consumer perspective.

CloudWatch alarm investigation and triage model.