EXTENSIONS

New Relic entity model types backed by the NerdGraph GraphQL API

Manage Honeycomb resources via the v1 Configuration API: @hivemq/honeycomb covers SLOs, SLI derived columns, burn alerts, queries, query annotations, and triggers; @hivemq/honeycomb/datasets covers dataset discovery and cleanup

Datadog Logs — log search, aggregation, and analytics

Datadog Monitors — monitor definitions, muting, status, and downtime management

Datadog Metrics — metric queries, submissions, tag configurations, and metadata

Datadog SLOs — service level objective definitions, status, and history

Datadog Events — event search and submission

Google Cloud observability infrastructure models

Polycom VVX phone control + real-data idle display. One model type (@shrug/polycom-vvx/phone) with typed methods 1:1 to the verified REST/push surface (discover, dial, call-forward, config get/set, UI drive, screen capture, reboot) — serialized, dry-run-by-default writes, cert-pinned TLS — plus composeIdleSnapshot, a typed-primitive interpreter that turns declarative providers + recorded Grafana data into the {tiles,rows} snapshot the render daemon serves. Ships its companion render/serve daemon (display plane the phone polls) with token-auth'd endpoints. Vaulted Basic/Digest creds; single injectable fetch seam.

AWS Operations Toolkit - Unified incident investigation and daily operational visibility.

Unified drift detection surface that composes observations from existing

CloudWatch alarm investigation and triage model.

Observe AWS Config compliance evaluations as typed queryable data.

Query and analyze CloudWatch Logs for operational visibility and incident investigation.

Query and analyze X-Ray distributed traces for incident investigation and performance analysis.

Query and analyze CloudWatch Metrics for operational visibility and performance monitoring.

Observe Route53 hosted zones, record sets, and detect orphaned DNS records

Query and analyze CloudWatch Alarms for operational visibility and incident response.

Stores swamp runtime data in AWS DynamoDB with conditional-write distributed locking (fencing tokens + TTL-as-defense-in-depth) and chunked blob storage for items exceeding DynamoDB's 400KB size limit. Emits OpenTelemetry spans for DynamoDB operations, lock acquisition/release, and push/pull sync so datastore activity is visible in traces when a TracerProvider is configured.

gopass password manager (gopass.pw) - pass compatible with extra features. Emits OpenTelemetry spans for get, put, and list so vault reads are visible in traces, including reads during model and workflow runs where the host emits nothing. Span attributes carry the vault name, key name, and backend only — never secret values or error messages.

macOS Keychain vault using the security CLI. Emits OpenTelemetry spans for get, put, and list so vault reads are visible in traces, including reads during model and workflow runs where the host emits nothing. Span attributes carry the vault name, key name, and keychain service only — never secret values, argv, or error messages.

GPG-encrypted password store using the pass CLI (passwordstore.org). Emits OpenTelemetry spans for get, put, and list so vault reads are visible in traces, including reads during model and workflow runs where the host emits nothing. Span attributes carry the vault name, key name, and backend only — never secret values or error messages.

HashiCorp Vault secrets management via REST API (KV v1 and v2). Emits OpenTelemetry spans for get, put, and list, with one child span per request in the recursive list walk, so vault reads are visible in traces including reads during model and workflow runs where the host emits nothing. Span attributes carry the vault name, key name, and KV version only — never secret values, tokens, or error messages.

SRE Health Check - Unified site reliability health check workflow with report.