EXTENSIONS
Slack
Send Markdown messages to Slack channels via the Slack Web API
Homekit
Discover, pair with, and read sensors from HomeKit accessories — pure TypeScript HAP protocol implementation
Tailnet Healthcheck
Tailnet health reporting — find devices running outdated Tailscale clients and alert via Slack
Photos
Directory-watch photo pipeline — scan for new images, process with sips, stage in Glass via Safari
Zfs
ZFS pool management for swamp — import/export pools, sync health status, snapshot datasets, prune retention, scrub, and TRIM
Tailscale Community
Community add-ons for @swamp/tailscale, gathered from other swamp extensions with their prior art recorded. Adds read-only ACL drift detection and GitOps change proposals to @swamp/tailscale/policy-file.
K8s/exec
Execute commands in Kubernetes pods via the Kubernetes API — single pod exec and fleet-wide parallel exec with label selectors
Invariant Encoding Check
Fail CI when a changed swamp extension model file leaves a known invariant unencoded in its zod schema — the mechanizable subset of 'make illegal states unrepresentable', plus a set of shared zod schemas for the shapes it enforces (Sha256Digest, Platform, SshFingerprint)
Honeycomb
Manage Honeycomb resources (environments, API keys, datasets) via the Honeycomb Management and Configuration APIs
Github
GitHub resource models (repos, issues, PRs, members) using Octokit REST SDK
Github Security
GitHub repository security auditing with support for native features and third-party tool detection
Fanboat
Skim over the surface of your swamp and enjoy the view.
Cull
Cull a Canon R5 II card (or ingest folder): score by sharpness + in-camera rating, copy keepers
Wheelshop
Trust-gate auditor for npm/jsr packages used inside swamp extension models, plus survey, smoosh and prior-art attribution for building extensions from parts of community swamp extensions
Plt1364 Repro
Throwaway extension for PLT-1364 hot-reload reproduction
Container
Swamp execution driver that routes every model method through Apple's `container` CLI (macOS 15+). Each execution runs in its own Virtualization-framework microVM — a stronger isolation boundary than Docker's shared-kernel containers, and the right default for agentic or LLM-driven workloads. Two modes, matching swamp's built-in `docker` driver: bundle mode (self-contained JS bundle in a Deno-capable image) and command mode (`sh -c "<run>"` inside the image). Opt in via `defaultDriver: "@bixu/container"` in `.swamp.yaml`, or per workflow/job/step/model. Requires `/usr/local/bin/container` (Apple's container CLI 1.0+).
Macos Keychain
macOS Keychain vault for swamp — stores and retrieves secrets via the security CLI with key enumeration support
Mudroom
Run Claude Code (and other workloads) inside a macOS apple/container sandbox.
Github/actions
Track GitHub Actions workflow runs for a pull request — list latest runs and watch until completion via Octokit REST SDK
Launchd
Manage macOS launchd daemons: lifecycle, observability, plist management, discovery, and reporting