Sandboxed, subset JavaScript runtime for Node services.

Platform binaries for aube — do not install directly, see @endevco/aube.

Platform binaries for aube — do not install directly, see @endevco/aube.

Backend-isolated install auditor for npm/pnpm/yarn lifecycle scripts.

lemonldap-ng safe library

Shared policy evaluation engine for node9 — DLP, smart rules, AST shell parsing, shields, loop detection. Pure functions, no I/O. Used by both node9-proxy and the node9 SaaS firewall.

Sandboxed filesystem/terminal tools for agents, exposed both as a real MCP stdio server and as a human-relay TUI (copy/paste bridge) for agents with no direct tool access.

Shared sandbox-validation primitives for BonkLM e2b-adapter + daytona-adapter — validateCode, validatePath, wrapStream. EXPERIMENTAL flag (Story 3.5 graduation gates flag removal at v0.7).

Backend-isolated install auditor for npm/pnpm/yarn lifecycle scripts.

Atbash CLI — control boundary before the last irreversible step in an agent workflow

Reusable, safe-by-default tool implementations for the Marshall coding assistant. Provides Agention `Tool` instances for file operations, shell execution, a private scratch area, and GitHub — all scoped to a workspace directory with a human-in-the-loop ap

Launch pi inside a netcage: anonymized web egress through a socks5h proxy, one direct hole for a local model, seeded pi config on the host.

Daytona Workspace wrapper for BonkLM. Proxies process.* + fs.* with code-injection + path-traversal validation. EXPERIMENTAL (Story 3.5).

Bundle an already-built npm package into a self-contained copy with its dependencies inlined

Headless coding-agent runtime for unattended, host-scheduled use: zero-dependency, dual-protocol streaming, tool loop, context compaction, checkpoint/resume. The CLI is a verifier/debugger.

Delegate bulk/parallel coding to Cursor Composer 2.5 from Claude Code — spend both subscriptions in parallel.

E2B Sandbox wrapper for BonkLM. Proxies commands.run / runCode / files.* with code-injection + path-traversal validation. EXPERIMENTAL (Story 3.5).

A high-security prison for your application code

Monopoly discord bot.

Rewind CLI + stdio MCP server: whole-workspace checkpoint/rewind, a refuse-and-record effect barrier on a tamper-evident chain, and a token-saving record/replay proxy — for Claude Code, Cursor, and Codex CLI. Run with `npx @agent-rewind/mcp`.