EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Koji
Swamp-native Koji client: speaks Koji's XML-RPC dialect and header-based session protocol, authenticating with Kerberos/GSSAPI (via @kneel/krb5) or an SSL client certificate. One model instance per Koji profile ("scope"); reads hosts, builds, tagged builds, and tasks, and writes host edits, enable/disable, tag/untag, promote, and build submission.
Krb5
GSSAPI initial-token producer (no mutual authentication or continuation): native-JS Kerberos 5 / SPNEGO client (no shell-out) — password → AS pre-auth → TGT → TGS → service ticket → SPNEGO `Negotiate` token, with session keys, tickets, and headers stored as vault-backed datastore resources (requires installing a vault named `krb5`; any backend). Drives GSSAPI-protected HTTP endpoints and hands single-use SPNEGO headers to other models via data + CEL. Pure WebCrypto + fetch over MS-KKDCP (works in a fetch-only sandbox); raw TCP/UDP KDC transports available where socket permissions allow.
Fasjson
Read-only Fedora Account System (FASJSON) identity inspection over the Kerberos-protected JSON API: your account, another user, your group memberships, and a single group's detail. Prefers a native SPNEGO Negotiate header (no shell-out — e.g. from @kneel/krb5) for a pure-fetch call; falls back to a kinit + curl --negotiate subprocess seam (vaulted-password headless or ambient ticket).