Thomas Sprayberry

dario. Your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, Agent SDK — at subscription pricing, not per-token bills. One local endpoint that replays Claude Code's wire shape so your traffic stays in the subscription pool.

askalf. AI tools that put you in control.

browser-bridge. Stealth headless Chromium in a container. Exposes Chrome DevTools Protocol on 9222. Connect from Playwright, Puppeteer, MCP browser tools, or any agent that wants a remote browser without bundling one.

hybrid. Local-first LLM router: answer the easy majority on a small local model, escalate only the hard queries to any OpenAI-compatible frontier endpoint. ~160 lines, stdlib-only.

deepdive. Local research agent. One command, cited answer. Plan → search → headless browser fetch → extract → synthesize. Every LLM call goes through your own router (dario / Anthropic-compat). Zero hosted dependencies.

hands. Cross-platform computer-use agent. Your LLM on your mouse, keyboard, and screen. Windows (PowerShell), macOS (open + osascript), Linux (xdotool / ydotool). Voice optional, safety guardrails. Routes through dario or any Anthropic-compat endpoint.

agent-security-stack. The open-source agent-security stack — warden + canon + keeper — composed into one layered defense. Vet the tool, contain the call, give it a key it never holds. Part of Own Your Stack.

warden. A deterministic, offline firewall for AI-agent tool calls — green/yellow/red/black risk tiers, secret-exfil & prompt-injection blocking, tamper-evident audit. Runs as a Claude Code hook or MCP proxy.

.github. Deprecated mirror — the live profile is github.com/askalf (askalf/askalf). Archived.

install-kit. A curl-pipe-bash template for self-hosted Docker apps. Banner, prerequisite probes, .env scaffolding with crypto-rand secrets, healthcheck wait loop, browser auto-open. Fork it, edit a handful of CONFIGURE blocks, and ship a one-line installer for your own project.

redisflex. One Redis API. Two modes. ioredis for production, in-process Map+EventEmitter for standalone / dev. Also ships a BullMQ-shaped in-memory queue so you can drop the Redis dep entirely when you don't need it.

git-providers. One GitProvider interface for GitHub + GitLab + Bitbucket Cloud (user info, list repos, list branches, OAuth config). Plus a 44-entry api-key-provider taxonomy for cloud / CI / PM / monitoring / e-commerce / marketing / social / productivity / analytics / finance. Zero runtime deps.

pgflex. One Postgres API. Two modes. Real PostgreSQL (pg) for production, PGlite (in-process WASM) for standalone / dev. Same SQL, same query shape, drop the server when you don't need it.

claude-bridge. Bridge Claude Code sessions to Discord. Stay in sync on the go.

brio. The capability layer for AI workloads — semantic cache, cost-aware tiering, structured cost reporting, policy enforcement. Sits in front of any Anthropic-compat endpoint (dario, api.anthropic.com, OpenRouter, vLLM, Ollama). MIT, runs on your laptop.

arnie. Portable IT troubleshooting companion powered by Claude — networking, AD, Windows Update, package managers, log triage, hardware checks, dev environments. Routes through dario for subscription billing.

claude-sync. Sync Claude Code sessions across machines. Pack a local CC session into a portable .ccsync file, ship it via Dropbox / iCloud / Syncthing / USB stick, unpack on the other side. Path-hash mismatches solved via git-remote-url as canonical project key. Zero runtime deps.

whisper.cpp. Port of OpenAI's Whisper model in C/C++

checkout-with-retry. Composite GitHub Action: wraps actions/checkout with auto-retry on transient credential failures (3 attempts, exponential backoff). Used across askalf/* repos to eliminate ephemeral-runner 401 false positives.

mux. Sealed-sender overflow protocol for Claude capacity sharing — trust-group lending with cryptographic unlinkability (RSA blind signatures).

agent. Connect any device to the askalf fleet. WebSocket bridge that dispatches autonomous agent tasks to your machine.

amnesia. Search the web. Remember nothing. 155 engines, zero tracking, VPN-tunneled. Self-hosted privacy search via SearXNG. Live at amnesia.tax

casey. AI IT service-desk CSR — Tier-1 intake + triage. Resolves Tier-1, routes Tier-3 to arnie. Pairs with arnie + dario.

keeper. own your agent secrets — an encrypted vault that hands agents scoped, short-lived, single-use leases instead of raw keys, and audits every access. Completes the agent-security stack (warden · canon · keeper). Part of Own Your Stack.

picket. own your agent browser — an indirect-prompt-injection firewall + action gate for any CDP browser

cordon. PII-redacting LLM compliance gateway — own your prompts; PII never leaves your perimeter

canon. own your agent skills — vet, sign & pin every skill & MCP server before it runs. The supply-chain gate for AI agents (pairs with warden's runtime firewall). Part of Own Your Stack.