NOCTRODEX(GHOSTMASTER) SAST — War Room GUI. The scan engine runs on your own host and scans from your own IP.

Redact secrets & PII from strings and objects before logging — masks sensitive keys and patterns (JWTs, API keys, emails, Luhn-checked cards, SSNs, phones, IBANs, IPs, AWS/GitHub/Slack/Stripe keys, private keys). Deep, cycle-safe object redaction with par

The fleet's Node server kit — Hono static-asset handler, outbound HTTP cache policy, and MQTT cmd/resp.

LiveKit Agents (v1.x) wrapper for BonkLM — wires AudioStreamValidator into UserInputTranscribed + beforeLLMCallback + beforeTTSCallback + function_tools_executed hooks; interim-injection triggers session.interrupt() BEFORE the LLM call.

Three.js runtime for Umicat games: the scene3d design format, its loader with physics, a kinematic character controller, and the Umicat platform via @umicat/platform-sdk.

Explains why shorty is awesome

Opinionated GFM markdown → safe HTML utility. Pairs with Set's prose component.

nexSys4 system for Achaea on the Nexus client.

Runtime firewall for MCP and tool-augmented agents — descriptor integrity, static vetting, per-call policy, taint tracking, consent ledger

Loopback credential broker: keeps a managed inference credential out of the harness process that uses it.

LLM-assisted helpers for repo-aegis: prose extraction, token suggestion, embedding profiles. Off the deterministic gate path.

The most advanced code integrity engine on the market — for every kind of code debt. AI, human, or hybrid. Detect hallucinated APIs, ghost code, tech debt, and architecture drift. One command. Minimal dependencies.

Non-negotiable Organic Driven Development — the ODD protocol as runtime mechanism for pi: blocking gates, observed evidence, and promotion to /forge.

Active runtime protection for vibe-coded apps — drops in as Express middleware (web + AI layer), blocks prompt injection, PII leaks, and sensitive paths in real time. By Grovetech AI.

Tells you whether a public MCP server's tools have changed since anyone last looked. We continuously crawl the public MCP ecosystem — the official registry, Smithery and our own fleet — fetch each ser

Nightjar SDK — typed client for the /v1 REST + WS API (this build ships the typed surface + an in-memory mock; the phase-3 generated client replaces the mock). See ADR-016.

NOCTRODEX(GHOSTMASTER) DAST — War Room GUI. The scan engine runs on your own host and scans from your own IP.

Anthropic provider extension for pi, ported from omp (oh-my-pi). Registers a separate `pi-sub-anthropic` provider; pi's built-in anthropic provider is untouched.

See your website the way an AI agent does. Fetches a URL with no browser and no JavaScript, runs 70 checks across five pillars, and returns an Agent Experience score out of 100 with a prioritised fix list.

Discover the MCP servers, skills and plugins your agents have installed, and pin them with Small Print.