EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Ssh
Run commands, copy files, and open port forwards across a declared set of
Mise
Read-only sweep of mise toolchain state across a fleet. Records which tool versions each host is actually running and where that disagrees with the host's own config: requested but never installed, installed but not active, declared in a config that never took effect, or behind the latest. Installs nothing and upgrades nothing. mise already does that well. This one only wades through the fleet and writes down what it finds, including which hosts refused to answer, because a host that could not be measured is not a host that is clean.
Fleet Probe
Minimal probe for fleet testing — returns current time and hostname
Release Adoption
Deterministic release-adoption campaigns for swamp: capture release notes and CLI surfaces, diff upgrades, inventory repository fleets, and track adoption opportunities and outcomes in an agent-writable ledger.
K8s Fleet
Fleet-wide Kubernetes health across all kubeconfig contexts. Iterates every cluster in ~/.kube/config (or a specified subset) and produces per-cluster health snapshots plus an aggregated fleet summary. Best-effort — unreachable clusters are reported, not fatal.
Incontrol
Peplink InControl 2 cloud management for swamp — organization/device inventory (including offline devices), full Starlink dish telemetry (obstruction + physical alignment with computed aim-offset), GPS location, connected clients, bandwidth-usage history, and raw API passthrough. OAuth2 client-credentials auth against api.ic.peplink.com.
Inventory
A neutral, extensible fleet inventory record — the foundational "what exists and its declared attributes" model. Uniform core (id, purpose, components, relations) across atomic and composite items, with an open facet seam (access, power, network, config, management, firmware, interfaces, + custom) so new dimensions layer on without schema changes. Declarative: `apply` materialises one CEL-queryable `device` resource per id; `prune` soft-retires undeclared devices (status change, not deletion — version history preserves the lifecycle trend). Consumer abstractions (telemetry, management, config-drift) depend on it; it depends on nothing.
Syscheck
Fleet node verification framework. A catalog of tagged checks (category × cadence × scope) contributed by domains — host-OS/apt hygiene & fitness over scripts/host-probe.sh, plus a proxmox provider for PVE-scoped checks — run by the syscheck workflow and scored into a per-node pass/warn/fail verdict. Domains (proxmox, future @stateless/docker, …) plug in via a CheckProvider contract. Sits above the domains; results belong in @stateless/inventory.
Fleet
Cross-hypervisor fleet VM inventory report for swamp.