EXTENSIONS

Drive a herdr terminal-agent runtime from swamp.

Harden a freshly provisioned Linux host over SSH in three phases: base packages and users, an nftables firewall rendered from inputs, and an SSH lockdown. The target and every phase input are method arguments, and the firewall and lockdown phases arm a host-side revert timer before they change anything unless commit cancels it.

Manage libvirt/KVM over SSH: define and undefine virtual networks including the default, clone a golden volume or zvol per node, define domains from a clone, control power, and capture the serial console. The SSH target, libvirt URI and every operand are method arguments, so one definition manages any hypervisor.

Turso (libSQL) datastore for swamp: query model for ad-hoc SQL against Turso edge databases, and a datastore backend that stores swamp runtime data in a remote Turso database with row-based distributed locking.