THIRD-PARTY-NOTICES

# Third-Party Licenses

HolyClaude includes third-party software distributed within the Docker image.
Each component retains its original license. HolyClaude's own source code is
licensed under MIT (see LICENSE).

## CloudCLI (@cloudcli-ai/cloudcli)

- License: AGPL-3.0-or-later
- Copyright: CloudCLI UI Contributors
- Homepage: https://cloudcli.ai
- npm: https://www.npmjs.com/package/@cloudcli-ai/cloudcli
- Version: 1.36.3, installed from HolyClaude's vendored source-release tarball

CloudCLI is installed as a standalone program via npm and runs as an
independent process managed by s6-overlay.

### Modification Notice

HolyClaude applies the account and dependency source overlays while building
the vendored tarball, then applies the remaining runtime patches during the
Docker build. The exact commands are in the artifact builder and Dockerfile,
and missing patch anchors fail closed.

- Self-update guard: blocks CloudCLI's npm update path in both CLI and web API
  surfaces so HolyClaude's patched runtime is not replaced inside a running
  container.
- Codex permission-mode compatibility backport: adds HolyClaude's
  `HOLYCLAUDE_CODEX_CHAT_PERMISSION_MODE` runtime mapping for CloudCLI Codex
  chat, including `default`, `acceptEdits`, and `bypassPermissions` modes.
- Apprise notification bridge: sends CloudCLI Codex run completion and failure
  lifecycle events from CloudCLI's notification orchestrator through
  HolyClaude's existing `/usr/local/bin/notify.py` hook.
- Codex completion guard: keeps provider-normalized Codex `turn_complete`
  events aligned with the successful final completion payload.
- Browser runtime bridge: keeps CloudCLI Browser Use on HolyClaude's
  checksum-pinned Debian Chromium without a runtime browser download.
- Base-path bridge: keeps API, asset, router, and WebSocket paths aligned when
  CloudCLI is served under a configured reverse-proxy prefix.
- Account-management bridge: adds local Logout and Change Password controls,
  rotates the local password hash in place, and invalidates older REST, SSE,
  and WebSocket tokens after a password change until upstream CloudCLI ships
  equivalent support.
- Dependency hardening: resolves CloudCLI's runtime and transitive dependency
  tree to reviewed compatible versions, including `ws`, `multer`, DOMPurify,
  Express, `path-to-regexp`, Hono, PostCSS, `fast-uri`, `jws`, `minimatch`,
  `picomatch`, `tar-fs`, and YAML. Multer field nesting remains limited to the
  flat upload fields used by CloudCLI.
- Build-time upstream checks: verify CloudCLI's WebSocket binary-frame handling
  provider model command flow, Codex final exit codes, Apprise call sites, and
  Codex provider completion fields are present in the compiled runtime.

The unmodified upstream package is available from the links above. HolyClaude's
source overlay, artifact manifest, and Dockerfile checks are included in the
public source release.

### Bundled CloudCLI Plugins

HolyClaude builds and enables these CloudCLI plugins in the image:

- `project-stats`: https://github.com/cloudcli-ai/cloudcli-plugin-starter,
  pinned to commit `4895cd3fd33362471e739b786493aba048487bcc`.
- `web-terminal`: https://github.com/cloudcli-ai/cloudcli-plugin-terminal,
  pinned to commit `8aa41f614c216d961e7c0d9c3e67982c6b2d9da3`.

Each plugin remains under its upstream license. Inspect the plugin repositories
for their source and license files.

HolyClaude patches the pinned `web-terminal` plugin during the Docker build so
PTY output is decoded safely before it reaches xterm.js, the default terminal
font stack includes broader fallbacks, and WebGL rendering can be disabled per
browser with `localStorage['web-terminal-disable-webgl'] = 'true'`.

## s6-overlay

- License: ISC
- Source: https://github.com/just-containers/s6-overlay
- Version: 3.2.3.2

## fzf

- License: MIT
- Source: https://github.com/junegunn/fzf
- Version: 0.74.1, installed from checksum-verified upstream archives

## esbuild

- License: MIT
- Source: https://github.com/evanw/esbuild
- Versions: 0.15.18, 0.18.20, and 0.25.12

HolyClaude keeps the JavaScript package versions required by the bundled full-image tools, but rebuilds their native esbuild executables from the matching upstream tags with Go 1.26.5. This removes the older Go runtimes without changing the packages' JavaScript APIs.

## Dependency Security Overlays

HolyClaude replaces selected compatible dependency copies with version-pinned
archives and fail-closed path checks. Overlays that replace a known vendored copy
also verify its owning tool and original dependency version before changing it.
v1.5.7 updates selected copies of setuptools, Piscina, brace-expansion, glob,
js-yaml, minimatch, Nanoid, node-forge, path-to-regexp, Undici, and ws. Cursor Agent uses
HolyClaude's patched Node 26.7.0 runtime instead of its bundled Node binary.

These packages retain their upstream licenses. The exact versions, archive
hashes, owning paths, and fail-closed patch checks are recorded in the
Dockerfile, `security/immutable-inputs.yml`, and the release source.

## Chromium

- License: BSD-3-Clause and other open-source licenses listed by Chromium
- Source: https://www.chromium.org/Home/
- Debian source package: https://packages.debian.org/source/bookworm/chromium
- Version: 151.0.7922.108-1~deb12u1, installed from Bookworm security packages

## OpenSSH

- License: BSD-style
- Source: https://www.openssh.com/
- Debian package: `openssh-client`, `openssh-server`

OpenSSH provides outbound SSH client support and the optional key-only `sshd`
service. HolyClaude keeps `sshd` disabled by default.

## Mosh

- License: GPL-3.0-or-later
- Source: https://mosh.org/
- Debian package: `mosh`

Mosh provides the optional roaming terminal path. HolyClaude gates
`mosh-server` behind `HOLYCLAUDE_MOSH_ENABLE=true`.

## Node.js

- License: MIT
- Source: https://github.com/nodejs/node
- Version: 26.7.0 base image

## node-tar

- License: ISC
- Source: https://github.com/isaacs/node-tar
- npm: https://www.npmjs.com/package/tar
- Version: 7.5.22, installed in the full image only

HolyClaude uses the checksum-verified npm archive to replace the `tar` 7.5.7
copies bundled by EAS CLI 20.5.1 and Vercel CLI 54.21.1. The replacement
contains the upstream fix for `CVE-2026-59873` / `GHSA-23hp-3jrh-7fpw`.

## Netlify CLI

- License: MIT
- Source: https://github.com/netlify/cli
- npm: https://www.npmjs.com/package/netlify-cli
- Version: 26.2.0, installed in the full image only

HolyClaude removes Netlify CLI's optional `local-functions-proxy` executable.
The current architecture packages ship that executable with Go 1.16.7. The
Netlify deployment CLI remains installed; local Go/Rust function emulation is
not included.

## Desloppify

- License: OSNL-0.2
- Copyright: Peter O'Malley
- Source: https://github.com/peteromallet/desloppify
- PyPI: https://pypi.org/project/desloppify/
- Version: 1.0, installed in both image variants

Desloppify is installed as a passive CLI. HolyClaude does not run scans,
create `.desloppify/`, or modify project files unless a user runs Desloppify.

## Pi Coding Agent (@earendil-works/pi-coding-agent)

- License: MIT
- Source: https://github.com/earendil-works/pi
- npm: https://www.npmjs.com/package/@earendil-works/pi-coding-agent
- Version: 0.82.1, installed in the full image only

## Downstream security backports

### image-size

- License: MIT
- Source: https://github.com/image-size/image-size
- Version: 2.0.2, bundled by Netlify CLI
- Fix commits: `bdbe560bfd98af6feab93b46aed67f2f0a77e4d5` and `0f6a6665a166c530ba126a8ab8608a0603cb49dc`

HolyClaude applies the upstream ICNS, HEIF, and JXL parser progress fixes to the
compiled CommonJS and ES module files bundled by Netlify CLI.

### FFmpeg

- License: GPL-2.0-or-later and LGPL-2.1-or-later, depending on the library
- Source: https://ffmpeg.org/
- Debian source: https://packages.debian.org/source/bookworm/ffmpeg
- Version: 7:5.1.9-0+deb12u1+holyclaude1, full image only
- Fix commits: `02fc47e13f903768b75f7985a2706a6223ab4506` and `16b2049d4d5222db6cd7c031409058571c94f6a9`

HolyClaude rebuilds the Bookworm FFmpeg source package with the upstream fixes
for CVE-2026-70628 and CVE-2026-70632 and installs the complete runtime package set.

### cryptography

- License: Apache-2.0 OR BSD-3-Clause
- Source: https://github.com/pyca/cryptography
- Version: 46.0.7+holyclaude.1, installed in Azure CLI's Python environment
- Fix commits: `4a12cf49675a184e47f912b00b04f3a629283582` and `53fccd93413a8d7f07d6d8999681f27b75cffa3f`

HolyClaude rebuilds cryptography 46.0.7 with the upstream certificate-verification
and PKCS7 fixes while preserving Azure CLI's compatible dependency range.

For a complete list of installed packages and their licenses, inspect the
Docker image directly or refer to the Dockerfile.