SWAMP_EXTENSIONS

@swamp/s3-datastore

Store data in an Amazon S3 bucket with local cache synchronization. Provides distributed locking via S3 conditional writes and bidirectional sync between a local cache directory and S3. ## Authentication Uses the default AWS credential chain — no credentials in config. Provide credentials via one of: - Environment variables: `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY` - AWS profile: `~/.aws/credentials` - IAM role attached to the instance or task ## Required IAM Permissions - `s3:HeadBucket` - `s3:GetObject` - `s3:PutObject` - `s3:DeleteObject` - `s3:ListBucket` - `s3:HeadObject` ## Usage ```bash swamp datastore setup @swamp/s3-datastore \ --config '{"bucket": "my-bucket", "prefix": "swamp", "region": "us-east-1"}' --json ``` ## S3-Compatible Endpoints Supports S3-compatible services (MinIO, DigitalOcean Spaces, etc.) via the `endpoint` and `forcePathStyle` config options.

@swamp/gcs-datastore

Store data in a Google Cloud Storage bucket with local cache synchronization. Provides distributed locking via GCS generation-based preconditions and bidirectional sync between a local cache directory and GCS. ## Authentication Uses Google Cloud Application Default Credentials (ADC) — no credentials in config. Provide credentials via one of: - Environment variable: `GOOGLE_APPLICATION_CREDENTIALS` pointing to a service account key JSON file - User credentials: `gcloud auth application-default login` - Attached service account on GCE, Cloud Run, or GKE ## Required IAM Permissions - `storage.buckets.get` - `storage.objects.create` - `storage.objects.get` - `storage.objects.delete` - `storage.objects.list` The predefined role `roles/storage.objectAdmin` covers all of these. ## Usage ```bash swamp datastore setup @swamp/gcs-datastore \ --config '{"bucket": "my-bucket", "prefix": "swamp"}' --json ```

@hivemq/honeycomb

Manage Honeycomb SLOs and SLI derived columns via the v1 Configuration API

@dougschaefer/appspace

Appspace Cloud v3 API administration toolkit — devices, reservations, users, visitors, and the custom card development lifecycle (scaffold, pull existing, validate, package, register instances). Walk-in workflows fire DropIn invitations through Appspace's native notification routing (Teams Passport, in-app push, Concierge) with no external webhook required.

@keeb/mms

Media management system — content discovery, deduplication, download protocol handling, LLM-powered file organization, and subtitle extraction

@dougschaefer/opnsense-firewall

Full OPNsense management via REST API — system status, interfaces, DNS, tunables, services, firmware/plugins, firewall states, DHCP leases, ARP table, Tailscale, WireGuard, and raw API passthrough. Replaces MCP server.

@dougschaefer/eero-network

Eero mesh WiFi management via cloud API — network health, per-node status, per-client band/signal/channel diagnostics, speed tests, settings management, and raw API passthrough. Reverse-engineered from the eero mobile app API.

@dougschaefer/writing-voice

Organizational writing voice management — tone tiers, audience targeting, document type templates, anti-patterns, and kill-list enforcement for consistent client-facing communications.

@dougschaefer/webflow

Webflow Data API v2 extension — site publishing, CMS collection schema discovery, CMS item CRUD with batch create/delete/publish, and page metadata with SEO/Open Graph management. Shared API client handles pagination and OAuth bearer auth via vault credentials.

@dougschaefer/utelogy

Utelogy AV monitoring platform — rooms with CLM status and metrics, assets with driver/feature inventory, alerts with acknowledgement, and Global Device Library search. REST API integration with vault-based credentials.

@dougschaefer/pexip-infinity

Pexip Infinity v39 management and development — conference lifecycle, node deployment, platform administration, integrations, policy server development, event-driven automation, branding, client API, auth/RBAC, network infrastructure, licensing, recording, diagnostics, and Exchange calendar connectors.

@dougschaefer/openai-image

OpenAI image generation and editing via gpt-image-1 and DALL-E 3 — text-to-image generation, image editing with reference images, model selection, and configurable size and quality. Vault-based API key.

@dougschaefer/image-tools

Image manipulation via ImageMagick and potrace — recolor, resize, format conversion, vector tracing, SVG rasterization, and compositing. Requires ImageMagick and potrace installed locally.

@dougschaefer/openai-document

OpenAI-powered document processing for .pptx and .docx — analyze structure, enhance text while preserving formatting, generate from templates, and design pixel-perfect PDFs from natural-language instructions via headless Chromium. Vault-based API key.

@dougschaefer/google-meet-hardware

Google Meet hardware device monitoring via Workspace Admin Reports API. Tracks device online/offline state, peripheral attach/detach (camera, mic, speaker, display, touch controller), call state (Meet, Teams, Webex, Zoom), power state, firmware updates, and restarts. Uses service account with domain-wide delegation — no interactive auth required.

@dougschaefer/cisco-collaboration-endpoints

Cisco RoomOS device and macro management via Webex Control Hub — device inventory, health checks, workspace management, xAPI command execution, status queries, configuration management, macro lifecycle (save, activate, deploy, fleet push), and MTR-aware operations. Vault-based credential resolution.

@dougschaefer/azure

Azure infrastructure management via az CLI — 23 model types covering compute, networking, data, security, identity, monitoring, DNS, DevOps, and subscription-wide topology with Mermaid diagrams and cost estimation.

@ulfamansson/pulumi

Read Pulumi stack state via CLI and marshal into swamp data keyed by URN for CEL consumption in workflows and reports.

@hivemq/slack

@hivemq/jenkins

@hivemq/http-poll

@hivemq/gcp/iam

@keeb/prometheus

Monitoring agent install/config + Prometheus target registration (https://github.com/keeb/swamp-prometheus)

@keeb/mongodb-datastore

MongoDB-backed swamp datastore — distributed locks with TTL, heartbeat, and nonce fencing, plus GridFS-backed byte sync of the datastore tier between a local cache and MongoDB. Scoped by tenant + repo namespace. Requires MongoDB 4.0+ as a replica set.