EXTENSIONS

Google Cloud admin infrastructure models

Migadu mailbox-admin REST API (v1) client for swamp. The third mail primitive

Administration of a TrueNAS SCALE host (25.04 or 25.10) through its JSON-RPC 2.0 WebSocket API (wss://, API-key auth). Reads apps and their port bindings, NFS/SMB shares and their host allowlists, services, network interfaces, and a summary of exposed app ports and shares. Makes a small set of changes: switch an app port between published and exposed, set a custom app's docker networks, set NFS networks/hosts and SMB hostsallow/hostsdeny, and delete an NFS or SMB share (the data is left alone). Rejects any non-TLS endpoint, because TrueNAS revokes an API key sent in cleartext. Verifies each target first. Does not manage pools, datasets, users, or service start/stop.

Control-plane administration of a Garage (S3-compatible object store) cluster through its Admin API v2 (bearer token). Reads cluster health, buckets, access keys, and the full key×bucket permission matrix. Creates, updates and deletes buckets; manages aliases; creates, imports, updates, rotates and deletes access keys; and grants or revokes read/write/owner permissions. Never touches S3 object data; delete and revoke methods verify the target by id first.

Non-destructive administration of a Stalwart mail server (v0.16+) over its JMAP-over-HTTP management API, authenticated with a scoped admin API key. Reads domains, accounts, aliases, groups, DMARC/TLS reports, the outbound queue and server health. Creates or updates accounts and aliases, groups, mailing lists and roles (idempotent); changes server settings; installs and reloads certificates; reloads config; and deactivates or reactivates domains and accounts. No hard deletes: the reversible set-state methods are the only way to disable anything. Secrets (account passwords, certificate keys) are sent once and never read back.

Administration of a Woodpecker CI server over its REST API, authenticated with a personal access token. Onboard and configure repositories (enable, mark trusted, set timeout/visibility/approval), copy shared CI credentials into org- or repo-scoped secrets (idempotent), inspect recent pipelines, and trigger runs. Changes are additive or reversible: re-running enable or set undoes a disable or a secret or cron delete. Secret values are write-only: supplied via a vault reference, sent once, and never read back or output.

Non-destructive administration of a Zitadel instance over its Management API (v1 REST), authenticated with a JWT private-key service account. Reads orgs, projects, applications, users and managers. Creates OIDC/API applications and machine (service) users (idempotent); manages project roles and user grants, including the role-assertion flag that puts roles in tokens; creates PATs and machine keys, rotates client secrets; and deactivates or reactivates objects. Creates machine identities only, never human users. Two methods delete, both verify-first: removing a project role (roles cannot be deactivated) and revoking a PAT. Secrets are output once and marked sensitive.

Administration of a Forgejo (or Gitea) server over its /api/v1 REST API, authenticated with a scoped access token. Find or create organizations and repositories and update their settings; run GitHub pull-mirrors (create via /repos/migrate, reconcile interval, visibility and description, queue immediate syncs); audit every mirror's sync health; manage pull requests (open, inspect mergeability and head CI state, merge); and audit or repoint repository webhooks so a hook pointing at an old CI target is reported. Changes are find-or-create or reversible (archive/unarchive), except the guarded pr_merge. There are no delete methods: an empty repository left by a failed migration is reported, not deleted. Secrets are never output: mirror source credentials are write-only, and webhook operations neither read nor write the hook secret.

Non-destructive PostgreSQL administration over a direct TCP connection (node-postgres). Reads databases, roles, permissions, tables, connections, and extensions. Runs admin DDL that does not touch data: create database/role, grant/revoke, rotate passwords, and an idempotent app_provision method that combines them. Never reads or writes table rows, never runs DROP or TRUNCATE, and does not accept arbitrary SQL.

Zitadel for swamp, over its API: seven model types, one per resource, with the whole life cycle of each.

A versitygw S3 gateway for swamp, read over its admin API and its S3 API. Read-only.

Full igor2 cluster-manager control via the REST API, split into five models: reservations (the reservation lifecycle), hosts (power, inventory, administration, host policies), boot (distros, profiles, images, kickstarts), identity (users, groups, privilege elevation), and server (clusters/MOTD, sync, stats, config, auth-reset, dashboard).