EXTENSIONS

Read a running n8n deployment and report how far its pinned version has drifted behind the channel n8n itself calls stable, and which active workflows have no usable error workflow attached. All three methods are strictly read-only — this extension never upgrades n8n, edits a workflow, touches a credential, or restarts a container; it tells you an update exists and stops there. `audit_error_workflows` takes an optional n8n API key (used by no other method), because n8n has no instance-wide default error workflow and only the authenticated public API discloses each workflow's `settings.errorWorkflow`; it flags missing or wrong handlers and a handler that is inactive or archived, and never attaches one. `drift` takes the running version as an argument rather than reading it, because n8n does not disclose one: its `/rest/settings` answers 200 unauthenticated but with `settingsMode: public`, a reduced payload carrying no version field at all, and `versionCli` reaches authenticated callers only — so the version comes from the pinned image tag on the host, which is what the deployment actually is rather than what a process predating the current pin believes itself to be. The upgrade target is npm's dist-tag, never the newest published release: n8n ships its in-progress minor into the same GitHub release namespace flagged `prerelease: true` and promotes that line later, so on 2026-09-05 the newest release was 2.38.3 while stable was 2.37.10, and the 2.37 line had itself been prerelease through 2.37.6. GitHub releases are still read, but only to enumerate the stable releases that were missed and to link the notes, since the `prerelease` flag is the historical record of which line was stable when and dist-tags do not retain it. Image existence is verified against `registry-1.docker.io` rather than the `docker.n8n.io` mirror the pin names: that mirror 404s its own token endpoint, delegates auth to Docker Hub, and then answers 429 to every manifest request for tags that exist and tags that do not alike, so it cannot return a usable answer — and a 429 is raised as indeterminate rather than folded into `absent`, which would suppress every update forever while the check looked healthy. An exhausted GitHub rate limit, an unreachable registry, and an unparseable running version are all raised as errors rather than reported as a reassuring `current`.

Git repository operations for swamp workflows. Wraps the git CLI

Snyk Service Accounts — automated access management for CI/CD

Run the pi coding agent from swamp workflows via its in-process TypeScript SDK — no subprocess, no terminal scraping.

Extension repository maintenance model. Observes a multi-extension repo,

Kanban Orchestrator — creates kanban tasks via `hermes kanban create` and

GitHub issue lifecycle tracker for swamp. Drives issues from open through

AI-assisted GitLab merge request code review with human approval gate.

One-shot bootstrap for @webframp/gitlab-datastore. Validates access to a

An autonomous, driver-free development loop for coding agents. You hand it an

Headphones music-download automation API for swamp — manage artists, albums,

Drive a ComfyUI server over its HTTP API from swamp. Ships three bundled

Summarize recent Claude Code session transcripts and distill reusable agent skills, proposed as a pull request against a skills repository.

Dry-run-first GitHub pull request lifecycle methods for agent workflows.

Auto-applier for docker image updates — pulls + restarts compose stacks with deny lists, cooling periods, and a per-run cap.

Zo Computer MCP + Ask: access every Zo tool (89+ tools) via MCP JSON-RPC and Zo's conversational AI via /zo/ask — all through a single swamp model. Includes convenience wrappers for web_search, read_file, generate_image, and full generic mcp_call_tool for any tool in the Zo surface.

GitHub management — create repositories, releases, and pull requests via the GitHub REST API (Octokit). Read-only sync plus idempotent ensureRepo / ensureRelease / openPr, each dryRun by default.

Home Assistant REST-API wrapper — automation lifecycle CRUD plus a generic service-call actuator for any HA domain.