Intent-only multi-repo orchestration. Git owns facts; xen owns intent.
Lightweight SSH server with SOCKS5 proxy, shell emulation, and ACL
Terminal environment variable manager with TUI and CLI
An SSH honeypot server with AI-generated shell responses for security research and monitoring
Async SSH CLI scraper library for network device automation
Usermode tools for Drawbridge. A Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)
A secure, drop-in Rust replacement for sshpass with macOS Keychain and 1Password integration
Per-IP + per-(IP, username) failed-auth counter with exponential-backoff lockout. IPv6 normalized to /64 prefix. Sharded DashMap; allocation-free on the success path.
A small Rust CLI that strips secrets and PII from the clipboard on demand via a global hotkey
Lightweight per-user terminal multiplexer with auto-reconnecting sessions tunneled over plain SSH — preserves the local terminal's native scrollback (unlike mosh) and requires no system-wide daemon (unlike Eternal Terminal).
cellctl — kubectl-style CLI for CellOS execution cells and formations. Thin HTTP client over cellos-server with apply/get/describe/logs/events/webui.
Real-time terminal UI for monitoring network ports — interactive alternative to lsof/ss with alerts, firewall blocking, strace, container awareness and process trees