Third_party on Alwaldend

Third party

Mon, 01 Jan 0001 00:00:00 +0000

This tree contains vendored and externally sourced code. All tracked content follows the repository’s public-source policy and retains its upstream license and provenance requirements.

Requirements

Bazel targets MUST use repository-internal visibility unless an owning toolchain contract requires otherwise.
Third-party content MUST NOT be represented or published as first-party source or artifacts.
Third-party content MAY be used in builds.
An explicit repackaging or mirroring target MAY publish an upstream artifact under its owner and license policy.

Publish vendored helm

This is a state-changing operator example. An agent needs explicit publication authority and must invoke the target through bazel_agent.

Mon, 01 Jan 0001 00:00:00 +0000

OpenSpec

The pinned OpenSpec CLI wrapper lives at //tools/openspec. Its generated openspec-* agent skills are materialized from the pinned upstream release archive declared in third_party/org_fissionai_openspec/; the resulting .agents/skills/openspec-* entries are written as regular files by //.agents:write_skills and verified by //.agents:write_skills_test.

Mon, 01 Jan 0001 00:00:00 +0000

OpenSpec

Upstream OpenSpec release archive pinned by tag. //third_party/openspec materializes the skills/openspec-* instructions from this archive into the consuming repository.

ai_opencode_opencode

Mon, 01 Jan 0001 00:00:00 +0000

com_drawio_desktop_bin

Mon, 01 Jan 0001 00:00:00 +0000

com_github_bazelbuild_bazel_protobuf

Mon, 01 Jan 0001 00:00:00 +0000

com_github_bazelbuild_bazelisk

Mon, 01 Jan 0001 00:00:00 +0000

com_github_georgewfraser_java_language_server

Mon, 01 Jan 0001 00:00:00 +0000

com_nanovms_ops

Mon, 01 Jan 0001 00:00:00 +0000

com_nousresearch_hermes_agent

Mon, 01 Jan 0001 00:00:00 +0000

com_truenas_scale

Mon, 01 Jan 0001 00:00:00 +0000

dev_sanaei_3xui

Mon, 01 Jan 0001 00:00:00 +0000

flux

Mon, 01 Jan 0001 00:00:00 +0000

Gradle

Mon, 01 Jan 0001 00:00:00 +0000

Pinned Gradle 8.13 binary distribution from the primary publisher.

Images

Mon, 01 Jan 0001 00:00:00 +0000

Deploy ISO to Proxmox

bazel run //third_party/images:deploy_proxmox

Deploy ISO to Yandex Cloud

bazel run //third_party/images:deploy_yc

io_cert_manager_cmctl

Mon, 01 Jan 0001 00:00:00 +0000

io_controlplane_flux_operator

Mon, 01 Jan 0001 00:00:00 +0000

io_docker_library_alpine

Mon, 01 Jan 0001 00:00:00 +0000

io_getsops_sops

Mon, 01 Jan 0001 00:00:00 +0000

io_goharbor_harbor_cli

Mon, 01 Jan 0001 00:00:00 +0000

io_goharbor_helm_harbor

Mon, 01 Jan 0001 00:00:00 +0000

io_goharbor_offline_installer

Mon, 01 Jan 0001 00:00:00 +0000

io_k3s_k3s

Mon, 01 Jan 0001 00:00:00 +0000

io_kubernetes_kubectl

Mon, 01 Jan 0001 00:00:00 +0000

io_traefik_traefik

Mon, 01 Jan 0001 00:00:00 +0000

Lego ACME client

Mon, 01 Jan 0001 00:00:00 +0000

This package supplies the Linux x86-64 build of Lego 5.4.1, licensed under MIT. Its archive checksum matches both the publisher’s release checksum file and GitHub release asset metadata. The binary is packaged by the XCP-ng Ansible workflow; no package manager or lifecycle download runs on the host.

The binary_toolchain.json file owns the immutable version and integrity pin.

net_zlib_zlib

Mon, 01 Jan 0001 00:00:00 +0000

OpenHands canvas UI compatibility module

Mon, 01 Jan 0001 00:00:00 +0000

tools/canvas_ui_tool.py from OpenHands/OpenHands at tag v1.18.0 (commit 9120ff6cbbe23640f0e475661e5a9c9729cdbf1f). The OpenHands Agent Canvas launchers import it into the agent server through --import-modules canvas_ui_tool.

It is required because the automation preset builds its agent with a finish_tool_response_schema, which registers the SDK’s builtin FinishTool only inside the preset’s own process while advertising it to the agent server as openhands.sdk.tool.builtins.finish. That SDK module does not self-register, so every automation-dispatched remote conversation fails to resolve FinishTool unless the compatibility module registers it in the agent server process first.

org_codeberg_forgejo

Mon, 01 Jan 0001 00:00:00 +0000

org_codeberg_forgejo_bin

Mon, 01 Jan 0001 00:00:00 +0000

org_codeberg_forgejo_contrib_forgejo_cli_bin

Mon, 01 Jan 0001 00:00:00 +0000

org_codeberg_forgejo_runner_bin

Mon, 01 Jan 0001 00:00:00 +0000

org_fedora_cloud

Mon, 01 Jan 0001 00:00:00 +0000

org_kernel_headers

Mon, 01 Jan 0001 00:00:00 +0000

Generate the config

zcat /proc/config.gz >third_party/org_kernel_headers/config.txt

org_nmap_nmap

Mon, 01 Jan 0001 00:00:00 +0000

org_openssl_openssl

Mon, 01 Jan 0001 00:00:00 +0000

org_pcre_pcre2

Mon, 01 Jan 0001 00:00:00 +0000

org_xcp_ng

Mon, 01 Jan 0001 00:00:00 +0000

sh_helm_helm

Mon, 01 Jan 0001 00:00:00 +0000

Terraform dependencies

Mon, 01 Jan 0001 00:00:00 +0000

include.MODULE.bazel owns the repository’s Terraform provider versions, immutable release URLs, and SHA256 integrity. Consumers select the generated provider labels through the public rules_terraform rules. One version is selected per provider source; the rule module’s resolution boundary can support an explicit override policy later.

The pins were verified against the publishers’ release checksums listed by the Terraform registry protocol. Provider downloads use Bazel’s verified downloader. Terraform installs only from the selected runfiles mirror and writes provider locks in runtime workspaces.

Tf

Mon, 01 Jan 0001 00:00:00 +0000

us_nasm_nasm

Mon, 01 Jan 0001 00:00:00 +0000

Xen Orchestra OIDC plugin

Mon, 01 Jan 0001 00:00:00 +0000

This package supplies Xen Orchestra’s AGPL-3.0-or-later auth-oidc 0.4.0 from upstream commit 4bc614ffd1417d3e0563522aeb4a195fa494c57c, including OIDC group synchronization and the single-group claim fix. It can be installed independently of the XO server; the Ansible deployment verifies its runtime before restarting XO.

The plugin is plain CommonJS. Its complete runtime dependency set is passport-openidconnect 0.1.2 (MIT), passport-strategy 1.0.0 (MIT), and oauth 0.10.2 (MIT). The npm archives retain upstream license files and use integrity values from the appliance revision’s upstream lockfile. Bazel fetches and verifies all inputs before deployment; Ansible extracts them without a package-manager resolution or lifecycle script.

Third_party on Alwaldend

Third party

Requirements

Publish vendored helm

OpenSpec

OpenSpec

ai_opencode_opencode

Links

com_drawio_desktop_bin

Links

com_github_bazelbuild_bazel_protobuf

com_github_bazelbuild_bazelisk

Links

com_github_georgewfraser_java_language_server

com_nanovms_ops

Links

com_nousresearch_hermes_agent

Links

com_truenas_scale

Links

dev_sanaei_3xui

Links

flux

Links

Gradle

Links

Images

Deploy ISO to Proxmox

Deploy ISO to Yandex Cloud

io_cert_manager_cmctl

Links

io_controlplane_flux_operator

Links

io_docker_library_alpine

Links

io_getsops_sops

Links

io_goharbor_harbor_cli

Links

io_goharbor_helm_harbor

Links

io_goharbor_offline_installer

Links

io_k3s_k3s

Links

io_kubernetes_kubectl

Links

io_traefik_traefik

Links

Lego ACME client

net_zlib_zlib

Links

OpenHands canvas UI compatibility module

org_codeberg_forgejo

Links

org_codeberg_forgejo_bin

Links

org_codeberg_forgejo_contrib_forgejo_cli_bin

Links

org_codeberg_forgejo_runner_bin

Links

org_fedora_cloud

Links

org_kernel_headers

Links

Generate the config

org_nmap_nmap

Links

org_openssl_openssl

Links

org_pcre_pcre2

Links

org_xcp_ng

Links

sh_helm_helm

Links

Terraform dependencies

Tf

us_nasm_nasm

Links