npxc 0.3.0

Sandboxed npm execution for MCP servers via Apple container
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

//! Userspace egress tunnel.
//!
//! Routes a sandboxed container's internet egress through npxc over `WireGuard`
//! so npxc can filter it. The container runs on a host-only (`--internal`)
//! network with no NAT route to the internet; its only path out is a `WireGuard`
//! tunnel terminated by npxc, which decrypts the traffic and forwards allowed
//! flows to real host sockets.
//!
//! Layers:
//! - [`keys`] — `WireGuard` key material (`Curve25519` keypairs, base64 encoding).
//! - [`wg`] — the `WireGuard` transport state machine over `boringtun`.
//! - [`device`] — an `ipstack` packet device backed by the tunnel over UDP.
//! - [`policy`] — the default-deny egress allowlist.
//! - [`peek`] — connection-time TLS SNI / HTTP `Host` extraction.
//! - [`dns`] — in-tunnel DNS pinning scoped to the allowlist.

pub mod device;
pub mod dns;
pub mod endpoint;
pub mod keys;
pub mod peek;
pub mod policy;
pub mod wg;

pub use device::WgDevice;
pub use endpoint::{Tunnel, TunnelSetup, establish};
pub use keys::WgKeypair;
pub use policy::{Decision, Policy};
pub use wg::WgTunnel;