Helpers and utils for egress implementation in Forge apps

shut your node.js apps more gracefully

An egress-bootstrap generator for Yeoman

Product-neutral model router, provider egress, wire dialect translation, streaming, catalog, and call provenance.

Outbound HTTP proxy helpers for routing fetch-based clients through the Introspection egress proxy or a standard forward proxy

A lightweight SDK for developing RoomComposite templates

@agentproto/egress — outbound traffic control for agent sandboxes. Mode registry (off / cooperative / strict / paranoid), provider allowlist, transport-agnostic proxy core, audit hooks. Cooperative mode delegates substitution to @agentproto/secrets so the

Launch pi inside a netcage: anonymized web egress through a socks5h proxy, one direct hole for a local model, seeded pi config on the host.

hotcell sandbox daemon: containers + Firecracker/Apple-VZ microVMs, egress credential gateway

Declaw provider for ComputeSDK - secure sandboxes with PII scanning, prompt-injection defense, and network egress filtering

Channels host connector for Agent Relay — bundles N lightweight egress adapters (ntfy, webhook, …) behind one agent-relay.connector.v1 channel connector. Core ships zero per-service transport.

Localhost HTTP/HTTPS egress proxy with hostname allow-listing, plus a macOS Safehouse integration for sandboxed agent processes.

Secure runtime for AI agents - isolated sandboxes with network isolation, PII scanning, prompt injection defense, and egress filtering.

Distributed egress proxy network for OpenCode Zen API rate-limit bypass

FullStack Nestjs server-side HTTP request forwarder (node egress, mihomo-aware)

Ingress Egress chart

code.ae CLI — a sovereign coding CLI: keyless OAuth, shared sessions, durable memory/floor, and data-residency egress control, with the code.ae engine.

Scriptable, CI-friendly harness for Claude Cowork's runtime contract for testing skills across scenarios — same agent, mounts, egress allowlist, permission protocol, and sandbox limitations.

Optional embedding-backed EgressMatcher — scores outbound payloads against tagged data-lineage by cosine similarity, so semantic (paraphrased / re-encoded) leakage is caught where the substring default would miss it. The default egress path never imports

Authenticated, pooled, metered LLM egress gateway for Sentropic (WP16 Layer B). Provider-compatible Anthropic/OpenAI wire over the @sentropic/llm-mesh account pool.