EXTENSIONS

Track a Domino's pizza order through its tracker stages (placed -> prep -> bake -> quality-check -> out-for-delivery | ready-for-pickup -> delivered -> complete). Read-only against Domino's public guest-tracker API (no auth); look up by phone number or by Store ID + Order Key, and persist a normalized order-status snapshot. The phone number is PII and is never stored or logged in full, only as last-4.

Drive a [Nextcloud](https://nextcloud.com/) instance from swamp over its

Read and write Baby Buddy baby-tracking data (feedings, diapers, sleep, pumping, weight, and more) with paginated sync, and generate a suite of analysis reports — a consolidated daily summary plus sleep (totals, longest stretch, feeding correlation, regression watch), feeding, diaper, pumping, temperature, tummy-time, medication, and weight-trend reports.

CentOS Cloud SIG dist-git tooling. The model is a read-only fan-out scan of a SIG dist-git group on gitlab.com: lists every project, fetches each <name>.spec at a branch, resolves its Version/Release/Epoch (expanding RDO %global upstream_version macros), reads the lookaside `sources` state, and persists per-package facts plus a scan-summary. Also ships the workflow-scope `sig-promote` report, which joins those spec versions with koji promotion-tag NVRs and upstream OpenStack releases into a per-package candidate→testing→release matrix with a build/promote action queue.

Read-only snapshot of upstream OpenStack release facts for one series: enumerates deliverables/<series>/*.yaml and deliverables/_independent/*.yaml on opendev.org, records each deliverable's newest version (rpmvercmp, with a file-order cross-check) and shipping repos — the upstream side of a SIG dist-git gap comparison.

Adds fork_project to @webframp/gitlab: fork an upstream GitLab project into your namespace via REST POST /projects/:id/fork (idempotent — an existing fork is detected via 409 and returned; optionally waits for the repo import to finish so the fork is push-ready). The missing first step of a fork->upstream merge-request flow the base model's GraphQL create_merge_request cannot do.

Swamp-native Koji client: speaks Koji's XML-RPC dialect and header-based session protocol, authenticating with Kerberos/GSSAPI (via @kneel/krb5) or an SSL client certificate. One model instance per Koji profile ("scope"); reads hosts, builds, tagged builds, and tasks, and writes host edits, enable/disable, tag/untag, promote, and build submission.

Make [JLCPCB](https://jlcpcb.com/) a node in the swamp automation graph —

Reusable hardware/EDA SDLC factory definition. A model-instance extension

Five adversarial EDA design-review prompts ("lenses") for an independent

Make [Super Productivity](https://super-productivity.com/) a node in the swamp

Make [KiCad 9](https://www.kicad.org/) a node in the swamp automation graph —

GSSAPI initial-token producer (no mutual authentication or continuation): native-JS Kerberos 5 / SPNEGO client (no shell-out) — password → AS pre-auth → TGT → TGS → service ticket → SPNEGO `Negotiate` token, with session keys, tickets, and headers stored as vault-backed datastore resources (requires installing a vault named `krb5`; any backend). Drives GSSAPI-protected HTTP endpoints and hands single-use SPNEGO headers to other models via data + CEL. Pure WebCrypto + fetch over MS-KKDCP (works in a fetch-only sandbox); raw TCP/UDP KDC transports available where socket permissions allow.

Wrap [plocate](https://plocate.sesse.net/) to build, refresh, query, and

Read-only Fedora Account System (FASJSON) identity inspection over the Kerberos-protected JSON API: your account, another user, your group memberships, and a single group's detail. Prefers a native SPNEGO Negotiate header (no shell-out — e.g. from @kneel/krb5) for a pure-fetch call; falls back to a kinit + curl --negotiate subprocess seam (vaulted-password headless or ambient ticket).

Read-only Fedora Packager Dashboard (Oraculum) inspection: for a set of users/groups/packages, snapshot every maintained package's ten actionable categories (bugs, PRs, Bodhi updates/overrides, Koschei, new releases, FTBFS, orphans, calendars, crashes) and compute a ranked 'what needs my attention' worklist. Public API, no auth.

Read-only Red Hat Bugzilla inspection for Fedora maintainers over the REST API: account lookup, bugs assigned to or reported by you, open bugs across the components you maintain, and single-bug + comment fetches. Header bearer-token auth (vaulted), no mutations.

Generate NTS Station Activity Report (SAR) radiograms from an RTC (Ready To Copy) DBF traffic log — Standard SAR to the STM plus an optional NTSD Digital SAR.