SWAMP_EXTENSIONS
Draw new abilities from the depths
@swampadmin/audit-reports
Compliance reporting suite for regulated environments. ## Frameworks - **SOC2** — Trust Services Criteria controls mapping - **HIPAA** — PHI safeguard audit trail - **PCI-DSS** — payment card data security scan - **Drift Detection** — baseline comparison for any model
@swampadmin/platform-ops
All-in-one platform operations toolkit. ## Included - **Infrastructure models** — provision and teardown with status tracking - **Compliance scanning** — automated audit with remediation - **SSH driver** — remote execution on provisioned hosts - **State persistence** — PostgreSQL-backed state store - **Secrets** — platform credential management - **Reports** — compliance and resource inventory > Depends on `@swampadmin/vault-secrets` and `@swampadmin/db-adapters`.
@swampadmin/monitor-stack
Monitoring stack with Prometheus and Grafana models
@swampadmin/finops-toolkit
Multi-cloud FinOps toolkit for cost visibility, trend analysis, and anomaly detection. ## Reports - **Cost by Service** — breakdown by cloud provider and service - **Cost Trend** — week-over-week and month-over-month timeseries - **Anomaly Detection** — ML-based spike detection with configurable thresholds
@swampadmin/remote-exec
Remote execution drivers for running commands on infrastructure targets. - **SSH** — key-based auth, jump host support, SCP file transfer - **WinRM** — NTLM and Kerberos auth for Windows targets - **AWS SSM** — Session Manager for EC2 instances without open ports
@swampadmin/vault-secrets
Pluggable secret providers for HashiCorp Vault, AWS Secrets Manager, and 1Password. All providers support **automatic rotation detection** and **lease renewal** where the backend supports it. Configuration is validated at startup with clear error messages for missing credentials.
@swampadmin/container-runtime
Container execution drivers for Docker and Podman with Compose-based orchestration. ## Drivers - **Docker Engine** — connects via `/var/run/docker.sock` - **Podman** — rootless containers, systemd integration Both drivers support `run`, `stop`, `logs`, `exec`, and `inspect` through a unified container model.
@swampadmin/llm-toolkit
End-to-end LLM fine-tuning pipeline with dataset preparation, distributed training, quantization, and automated evaluation. ## Supported runtimes | Runtime | Status | |---------|--------| | PyTorch | Stable | | JAX | Beta | | ONNX | Export only |
@swampadmin/db-adapters
Pluggable datastore backends for persisting model state across runs. ## Adapters - **SQLite** — zero-config local storage, great for development - **DynamoDB** — serverless key-value with automatic scaling - **TiKV** — distributed transactional key-value store All adapters implement the same `get`/`set`/`delete`/`list` interface.
@swampadmin/data-pipeline
ETL data pipeline with source connectors, S3 sinks, and integrated secret management. > **Note:** Requires `@swampadmin/vault-secrets` for database credential rotation. Supports incremental extraction, partitioned writes, and automatic compaction for cost-efficient storage.
@swampadmin/state-store
Persistent state management with PostgreSQL and Redis datastore providers
@swampadmin/hetzner-cloud
Manage Hetzner Cloud infrastructure including servers, networks, firewalls, and load balancers. ## Features - **Server lifecycle** — create, resize, rebuild, snapshot - **Network management** — VPCs, subnets, routing - **Firewall rules** — stateful rules with label selectors - **Load balancers** — HTTP/TCP with health checks
@swampadmin/deploy-pipeline
Reusable deployment workflows for staging and production environments. Includes **build → test → deploy** pipelines with manual approval gates for production, plus automated rollback on health check failure.
Showing 1–13 of 13 extensions