adapter/

Package aikit is what every AI adapter does the same way, whatever its provider: the prompts, the tools a model is given and their schemas, the budgeted reader a model reads the repository through, and what a tool call does.

Package aitest holds what the AI adapters' tests share: a repository in memory.

Package anthropic screens deployment plans with Claude (design 10 §6).

Package local performs Pando's AI functions with a model served on your own hardware, by any server that speaks the OpenAI Chat Completions API: Ollama, LM Studio, llama.cpp's server, vLLM.

Package openai performs Pando's AI functions with OpenAI's models, through the Responses API.

Package https is the audit sink adapter for a SIEM's HTTPS ingest endpoint (R-382, design 12 §5.1): one POST per batch, in the body shape the destination reads — newline-delimited JSON, a JSON array, Splunk HEC's envelope, Elastic's bulk action lines, or Datadog log items.

Package sinkkit holds what the audit sink kinds share: the settings that narrow and shape what core sends (R-384), reading inline credentials out of plain configuration (R-190), and a trusted certificate bundle.

Package syslog is the audit sink adapter for a syslog collector (R-382, design 12 §5.1): RFC 5424 messages over TCP, octet-counted as RFC 5425 and RFC 6587 frame them, with TLS unless the operator turns it off.

Package local stores backup bundles on a filesystem path.

Package s3 stores backup bundles in an S3-compatible bucket: Amazon S3, MinIO, Cloudflare R2, Backblaze B2 and anything else that speaks the S3 API.

Package buildkit implements the builder adapter: rootless, containerized, no socket.

Package local implements the local identity adapter: username and password, argon2id.

Package oidc is the generic OpenID Connect identity adapter (R-043).

Package saml is the SAML 2.0 identity adapter (R-043).

Package ecr is the image registry adapter for Amazon ECR.

Package oci is the image registry adapter for any registry that signs in with a username and password, or not at all: the Distribution registry docker-compose.registry.yml runs, Harbor, GitHub Container Registry, Google Artifact Registry, Zot.

Package registrykit is what the image registry adapters share: reading a registry address, laying built images out in it, and deleting a deleted app's (R-224).

Package chat is the notify adapters for chat platforms that take an incoming webhook: Slack, Microsoft Teams and Discord (R-374, issue #50).

Package console is the v1 notification adapter (R-230, R-231).

Package notifykit is what notify adapters share.

Package ntfy is the notify adapter for ntfy, the push notification service (R-374, issue #50): ntfy.sh or a server of your own.

Package slack is the notify adapter for Slack (R-374): a channel adapter (R-373) that posts the events a subscription chooses to the Slack channel that subscription names.

Package smtp is the email notify adapter (R-232, R-374, issue #50).

Package cloudflare routes apps through a Cloudflare Tunnel (R-160, design 03 §4.5).

Package loopback implements port-mode routing with no TLS: the laptop default.

Package traefik implements subdomain and path routing with TLS.

Package docker implements the runtime adapter for local containers.

Package incus runs each app in its own Incus virtual machine (notes-incus-runtime.md).

Package incusapi is the part of the Incus REST API the Incus runtime uses: the types, with Incus's own JSON names, and a client for them.

Package kubernetes runs apps on a Kubernetes cluster (issue #72, PR 6, O-33).

Package multidocker runs apps on several Docker hosts (notes-multi-host-docker-issue-72.md, issue #72 PR 7).

Package trivy scans what an app deploys, with Trivy in a container.

Package local implements the secrets adapter, encrypted at rest with the key on disk (R-190).

Package docker provisions services that fill declared slots: postgres, mysql, redis.

Package azuredevops is the source adapter for Azure DevOps Services and Azure DevOps Server (R-091).

Package bitbucket is the source adapter for Bitbucket Cloud and Bitbucket Data Center (R-091).

Package forgekit is what source adapters share: reading a repository address in each of the forms people write one, deciding whether a connection covers it, and building the credential core clones with.

Package generic is the source adapter for any git host (R-091): an HTTPS username and token, or an SSH key with the host's key pinned.

Package gitea is the source adapter for Gitea and Forgejo, Codeberg among them (R-091).

Package github is the source adapter for GitHub (R-091): github.com and GitHub Enterprise Server, reached with a GitHub App installation, an OAuth application, a personal access token or a deploy key.

Package gitlab is the source adapter for GitLab, on gitlab.com or self-managed (R-091).