CapsCode architecture

CapsCode architecture An architecture diagram generated by Archify. Developer · terminal + project · Architecture component Developer terminal + project capscode CLI · create · resume · sync · rm · Architecture component capscode CLI create · resume · sync · rm OS keychain · provider keys · Architecture component OS keychain provider keys GitHub update channel · channel.json + attested assets · Architecture component GitHub update channel channel.json + attested assets Gateway container · broker · nftables · WireGuard · Docker / OrbStack — one box per project › shared netns · default DROP · only NET_ADMIN Gateway container broker · nftables · WireGuard only NET_ADMIN Capsule container · tmux keeper · AI tools · Docker / OrbStack — one box per project › shared netns · default DROP · no real keys Capsule container tmux keeper · AI tools no real keys Box volumes · /workspace · /cache · Docker / OrbStack — one box per project Box volumes /workspace · /cache AI provider APIs · Anthropic · OpenAI · … · Architecture component AI provider APIs Anthropic · OpenAI · … commands read keys verified updates keys via stdin snapshot in/out API via broker real key added mounts Docker / OrbStack — one box per project shared netns · default DROP Legend Backend Database Cloud Security External