Swift Warden 22

Sync state of secrets and credentials against a desired-state YAML. Diffs are previewed before any mutation.

Quick start

Add @bog_shade/swift-warden-22 to your repo's extensions list, then reference its model in your swamp.yaml:

extensions:
  - @bog_shade/swift-warden-22

workflows:
  - name: swift-warden-22-run
    jobs:
      - name: main
        steps:
          - name: run
            model: bog_shade/swift-warden-22
            method: run

Run with swamp workflow run swift-warden-22-run. The first invocation prints what it would change; pass --apply to commit.

What's inside

• Drivers — bounded concurrency, structured retries, and CloudWatch / OpenTelemetry-friendly tags.
• Vault provider — encrypted secret storage with audit trail and cross-region replication.
• Datastore provider — collection-level Zod schemas, change-stream subscriptions, TTL indexes.

Configuration

Configure via ~/.swamp/config.yaml or environment variables. The full method reference and rubric format live in the package's manual/ directory.

Labels: secrets enterprise self-hosted