Open-source building blocks for the modern workplace — from the Terraform plan all the way down to the Win32 syscall.

Terraform · macOS · Windows · Device Management · Microsoft 365 · Entra ID

Who it's for — Workplace and EUC platform teams who want to manage devices the way software teams ship code: versioned, tested, reviewed and automated.

We started with Terraform providers for Jamf Pro and Microsoft 365. Today we're provide full-stack Go tools, libraries and bindings for endpoint management, covering every layer between your pipeline and the operating system.

Device management has historically been written in whatever language the vendor shipped an SDK in (if one even exists). PowerShell here, Bash there, Swift or .Net when you need to touch the OS. This fragments tooling, testing and hiring. We have picked one language and stuck with it for every project.

• One static binary, covers every platform. Cross-compile from CI, ship a single artifact to macOS, Windows and Linux. No runtime, no interpreter, no dependency chain on the endpoint.

Status labels used throughout: production-ready, stable API  ·  usable now, API may still move  ·  early, spec-complete or lightly exercised

Manage your modern workplace estate as version-controlled, peer-reviewed, pipeline-deployed code.

Repository	Reach for it when	Status
terraform-provider-jamfpro	The community Jamf Pro tf provider for classic and Jamf Pro APIs
terraform-provider-microsoft365	The community M365 tf provider for Graph v1.0 and beta APIs

Learn and copy: terraform-training-jamfpro — hands-on Terraform + GitOps course for workplace engineers · terraform-demo-jamfpro-v2 — reference GitHub Actions + Terraform Cloud pipeline · terraform-demo-microsoft365 — reference GitLab branching + Terraform pipeline

Typed, idiomatic clients for the tools that run the modern workplace — the layer the providers and CLIs are built on.

Repository	Reach for it when	Status
go-sdk-jamfpro-v2	You're writing Go against Jamf Pro and want the full API surface — 700+ functions
go-sdk-appleservices	You need Apple enterprise services — ABM, DDM, MDM, notarization, iTunes
go-sdk-sofa	You need to know what Apple shipped, when, and which CVEs it closed
go-sdk-thousandeyes	You want the ThousandEyes v7 API with retries, throttling and pagination handled
go-sdk-workbrew	You manage Homebrew across a fleet
go-sdk-nexthink	You're pulling digital-experience telemetry into your own tooling
go-sdk-virustotal	You're screening binaries or hashes before they reach the fleet
go-lib-winget-pkgs	You want WinGet package metadata from a local clone, with no API calls

Idiomatic Go generated from vendor metadata — the whole OS API surface, typed and callable. This is the foundation for building native Windows and macOS applications in Go, work that normally requires C, Swift or .NET.

Repository	Reach for it when	Status
go-bindings-macosplatform	You need macOS frameworks from Go, over a purego/cgo Objective-C bridge
go-bindings-win32	You need any Win32 API — every function, struct, enum and COM interface, from win32metadata
go-bindings-winrt	You need modern Windows features — toasts, Bluetooth LE, Windows Hello, MDM/provisioning
go-bindings-wmi	You want typed WMI / CIM classes instead of hand-rolled COM plumbing
go-bindings-wdk	You're working against the Windows Driver Kit surface (Windows.Wdk.*)
go-bindings-windowsappsdk	You're building a modern Windows desktop app in Go
go-winmd	You're generating your own bindings — this is the shared metadata parser underneath all of the above

Where the bindings get used: filesystems, firmware, provisioning and install media.

Repository	Reach for it when	Status
go-apfs-v2	You need to read, mount or write APFS and HFS+ volumes without macOS
go-sdk-vtpm2	You need a software TPM 2.0 for measured boot, BitLocker sealing or attestation
go-sdk-winmediafoundry	You're acquiring or building Windows install media in a pipeline
go-sdk-windowscsp	You need typed Configuration Service Provider operations with OMA-DM SyncML
go-macos-sandbox	You need to run or inspect code under the macOS sandbox
go-appdeploymenttoolkit	You want PSADT-style app deployment without a PowerShell dependency
go-settings-catalog	You're working with the Intune settings catalog programmatically

Repository	Reach for it when	Status
windows-mcp-server	You want an AI agent to drive Windows through the accessibility tree — UI automation, input, registry, PowerShell, no vision model