EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Tailscale Acl Drift
Drift detection and change proposal for GitOps-managed Tailscale ACLs. Extends @john/tailscale-acl with `drift` (compare the live tailnet policy against a policy.hujson file, ignoring comments and key ordering) and `propose` (stage an ACL change as a reviewable pull request, writing HuJSON verbatim so comments survive). Neither method writes to the tailnet — the GitOps pipeline stays the sole writer.
Tailscale External Acl Management
Sets aclsExternallyManagedOn on a Tailscale tailnet and verifies the change applied. The base @john/tailscale-settings update method strips this field via its zod schema and sends an empty PATCH, reporting success without changing anything; this method sends it explicitly and asserts the read-back value.