opensquilla--opensquilla/THIRD_PARTY_NOTICES.md

Third Party Notices

This file records third-party attribution for assets bundled with OpenSquilla. It covers:

• The bundled skill descriptors under src/opensquilla/skills/bundled/, which include OpenClaw-derived MIT descriptors and OpenSquilla-original descriptors.
• The bundled pptx skill references the python-pptx and PptxGenJS libraries; OpenSquilla does not vendor those libraries, but the skill instructs the agent runtime to invoke them and is documented here for transparency.
• The local SquillaRouter V4 Phase 3 model bundle under src/opensquilla/squilla_router/models/v4.2_phase3_inference/.
• Static frontend vendor assets and fonts distributed with the gateway Control UI and generated Web UI assets.
• The Web UI "Arctic" theme color palette, adapted from the Nord palette under the MIT license; see the dedicated section below.
• The built-in tokenjuice tool-result projection backend and bundled reduction rules under src/opensquilla/plugins/tokenjuice/.
• The cron prompt-injection scanner was reviewed against Hermes Agent reference material; the MIT notice is reproduced below for conservative attribution.

Static frontend vendor assets and fonts

OpenSquilla distributes a built Control UI and selected static assets in the gateway package. These assets are used for markdown rendering, math rendering, syntax highlighting, sanitization, and local typography. They are not proprietary components.

Component	Distributed files	License and attribution
KaTeX	src/opensquilla/gateway/static/vendor/katex.min.js, src/opensquilla/gateway/static/vendor/katex.min.css, generated KaTeX_* font files under src/opensquilla/gateway/static/dist/assets/fonts/	MIT. Copyright (c) 2013-2020 Khan Academy and other contributors.
PrismJS	src/opensquilla/gateway/static/vendor/prism-core.min.js, prism-autoloader.min.js, and prism-langs/*.min.js	MIT. Copyright (c) 2012 Lea Verou.
marked	src/opensquilla/gateway/static/vendor/marked.min.js	MIT. Copyright (c) 2011-2025, Christopher Jeffrey.
DOMPurify	src/opensquilla/gateway/static/vendor/purify.min.js	MPL-2.0 OR Apache-2.0. OpenSquilla distributes this asset under the Apache-2.0 option. Copyright belongs to Cure53 and other contributors.
IBM Plex Sans and IBM Plex Mono	opensquilla-webui/src/assets/fonts/ibm-plex-*.woff2 and generated Web UI font assets	SIL Open Font License 1.1. Copyright 2017 IBM Corp. with Reserved Font Name "Plex".
Space Grotesk	opensquilla-webui/src/assets/fonts/space-grotesk-*.woff2 and generated Web UI font assets	SIL Open Font License 1.1. Copyright 2020 The Space Grotesk Project Authors.
Inter	src/opensquilla/gateway/static/fonts/Inter-Variable.woff2	SIL Open Font License 1.1. Copyright (c) 2016 The Inter Project Authors.
JetBrains Mono	src/opensquilla/gateway/static/fonts/JetBrainsMono-Variable.woff2	SIL Open Font License 1.1. Copyright 2020 The JetBrains Mono Project Authors.

Current static vendor files are audited as distributed assets. Some manually vendored files intentionally record their own upstream version in-file; for example, the static marked.min.js header identifies marked 15.0.7, purify.min.js identifies DOMPurify 3.2.5, and katex.min.css identifies KaTeX 0.16.21. The Web UI npm lockfile may contain newer build-time dependency versions. Future updates should either regenerate these files from npm or record the exact vendored source and version here.

Feather Icons

• Component: music, pause, and volume icon path data in opensquilla-webui/src/utils/icons.ts and the generated Web UI assets.
• Upstream project: https://github.com/feathericons/feather
• License: MIT
• Copyright notice: Copyright (c) 2013-2017 Cole Bemis

MIT License

Copyright (c) 2013-2017 Cole Bemis

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

The MIT license text is reproduced in this file for MIT-licensed bundled components. The Apache License 2.0 text is reproduced in the repository LICENSE file. The SIL Open Font License 1.1 text for the bundled fonts is reproduced below.

SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007

PREAMBLE
The goals of the Open Font License (OFL) are to stimulate worldwide
development of collaborative font projects, to support the font creation
efforts of academic and linguistic communities, and to provide a free and
open framework in which fonts may be shared and improved in partnership
with others.

The OFL allows the licensed fonts to be used, studied, modified and
redistributed freely as long as they are not sold by themselves. The
fonts, including any derivative works, can be bundled, embedded,
redistributed and/or sold with any software provided that any reserved
names are not used by derivative works. The fonts and derivatives,
however, cannot be released under any other type of license. The
requirement for fonts to remain under this license does not apply
to any document created using the fonts or their derivatives.

DEFINITIONS
"Font Software" refers to the set of files released by the Copyright
Holder(s) under this license and clearly marked as such. This may
include source files, build scripts and documentation.

"Reserved Font Name" refers to any names specified as such after the
copyright statement(s).

"Original Version" refers to the collection of Font Software components as
distributed by the Copyright Holder(s).

"Modified Version" refers to any derivative made by adding to, deleting,
or substituting -- in part or in whole -- any of the components of the
Original Version, by changing formats or by porting the Font Software to a
new environment.

"Author" refers to any designer, engineer, programmer, technical
writer or other person who contributed to the Font Software.

PERMISSION & CONDITIONS
Permission is hereby granted, free of charge, to any person obtaining
a copy of the Font Software, to use, study, copy, merge, embed, modify,
redistribute, and sell modified and unmodified copies of the Font
Software, subject to the following conditions:

1) Neither the Font Software nor any of its individual components,
in Original or Modified Versions, may be sold by itself.

2) Original or Modified Versions of the Font Software may be bundled,
redistributed and/or sold with any software, provided that each copy
contains the above copyright notice and this license. These can be
included either as stand-alone text files, human-readable headers or
in the appropriate machine-readable metadata fields within text or
binary files as long as those fields can be easily viewed by the user.

3) No Modified Version of the Font Software may use the Reserved Font
Name(s) unless explicit written permission is granted by the corresponding
Copyright Holder. This restriction only applies to the primary font name as
presented to the users.

4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
Software shall not be used to promote, endorse or advertise any Modified
Version, except to acknowledge the contribution(s) of the Copyright
Holder(s) and the Author(s) or with their explicit written permission.

5) The Font Software, modified or unmodified, in part or in whole,
must be distributed entirely under this license, and must not be
distributed under any other license. The requirement for fonts to remain
under this license does not apply to any document created using the Font
Software.

TERMINATION
This license becomes null and void if any of the above conditions are
not met.

DISCLAIMER
THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
OTHER DEALINGS IN THE FONT SOFTWARE.

Arctic theme color palette (Nord)

• Component: Web UI "Arctic" value theme color palette in opensquilla-webui/src/themes/arctic/tokens.css (and its generated Web UI CSS assets).
• Upstream project: https://www.nordtheme.com
• License: MIT
• Copyright notice: Copyright (c) Sven Greb and the Nord contributors

The "Arctic" theme's color values are adapted from the Nord palette. OpenSquilla is not affiliated with, sponsored by, or endorsed by the Nord project; the palette is reused under the MIT license solely for its color values, with a matching attribution header reproduced at the top of the theme's tokens.css. Some values are lightened from the upstream palette so the theme passes OpenSquilla's WCAG contrast guards. The MIT license text is reproduced below.

MIT License

Copyright (c) Sven Greb and the Nord contributors

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

npm and Python dependency packaging strategy

OpenSquilla uses npm lockfiles for the Web UI and Electron shell and uv.lock for Python release environments. Lockfiles pin dependency resolution for reproducible builds, but lockfiles are not a replacement for third-party license notices when source, minified JavaScript, fonts, model files, or adapted code are copied into OpenSquilla release artifacts.

Build-time npm dependencies are installed from the package registry during CI. The Electron and gateway release artifacts distribute the compiled Control UI, selected static assets, updater metadata, and packaged runtime outputs rather than the full npm source tree. Any static npm-derived file copied into src/opensquilla/gateway/static/ must be listed in this notices file or in a component-local notice file.

Python dependencies are resolved from pyproject.toml and uv.lock during wheel, portable, and packaged-gateway builds. Python packages remain governed by their upstream package metadata and licenses. If OpenSquilla vendors or adapts Python package code, model files, rule files, binary assets, or generated runtime artifacts into the repository, the component must be recorded here or in a package-local provenance file.

OpenClaw-derived bundled skill descriptors

• Component: SKILL.md frontmatter and instruction text for these bundled skills:
  • sub-agent
• cron
  • github
  • nano-pdf
  • skill-creator
  • summarize
  • tmux
  • weather
• Upstream project: https://github.com/openclaw/openclaw
• License: MIT
• Copyright notice: Copyright (c) 2025 Peter Steinberger

Note: sub-agent was renamed from coding-agent on 2026-05-23; the descriptor retains the same OpenClaw upstream lineage and MIT attribution.

The descriptor text instructs the agent runtime how to use built-in skill surfaces and external tools; OpenSquilla does not redistribute third-party CLIs through these descriptors. Per the MIT license, the upstream copyright and permission notice are reproduced below in their entirety and apply to the OpenClaw-derived bundled descriptor files.

MIT License

Copyright (c) 2025 Peter Steinberger

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

OpenSquilla-original bundled skills

These bundled skill descriptors are authored and maintained by OpenSquilla and are released under OpenSquilla's repository license (Apache-2.0; see LICENSE):

• cron
• code-task
• AwesomeWebpageMetaSkill
• awesome-webpage-image-download
• awesome-webpage-research
• deep-research
• docx
• git-diff
• github
• history-explorer
• html-to-pdf
• http-fetch
• latex-compile
• memory
• meta-kid-project-planner
• meta-paper-write
• meta-short-drama
• meta-skill-creator
• multi-search-engine
• nano-pdf
• openrouter-video-generator
• paper-abstract-author
• paper-citation-planner
• paper-experiment-stub
• paper-outline-author
• paper-plot-stub
• paper-preference-planner
• paper-refbib-stub
• paper-revision-author
• paper-section-author
• paper-source-curator
• pdf-toolkit
• pptx
• skill-creator
• skill-creator-linter
• skill-creator-proposals
• skill-creator-smoke-test
• stack-trace-generic-probe
• stack-trace-go-probe
• stack-trace-js-probe
• stack-trace-python-probe
• swe-bench
• stack-trace-rust-probe
• sub-agent
• srt-from-script
• subtitle-burner
• summarize
• text-file-read
• title-card-image
• tmux
• video-still-animator
• weather
• xlsx
• advanced-dubbing-studio
• music-and-singing-studio
• voice-clone-lab
• voice-conversion-studio
• voiceover-studio

tokenjuice adapted reduction rules

• Component: built-in tokenjuice tool-result projection backend and bundled reduction rules under src/opensquilla/plugins/tokenjuice/.
• Upstream project: https://github.com/vincentkoc/tokenjuice
• License: MIT
• Copyright notice: Copyright (c) 2026 Vincent Koc

OpenSquilla includes a Python adaptation of tokenjuice's rule-driven reducer and bundles reduction rules derived from the upstream project. OpenSquilla does not depend on the upstream tokenjuice npm package at runtime. Additional provenance is recorded in src/opensquilla/plugins/tokenjuice/PROVENANCE.md; the MIT license text is also shipped with that package as LICENSE.tokenjuice.

MIT License

Copyright (c) 2026 Vincent Koc

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

Hermes Agent reference material

• Component: cron prompt-injection scanner reference material.
• Upstream project: https://github.com/NousResearch/hermes-agent
• License: MIT
• Copyright notice: Copyright (c) 2025 Nous Research

OpenSquilla does not redistribute Hermes Agent. This notice records conservative attribution for reference material reviewed while hardening OpenSquilla's cron prompt scanner.

MIT License

Copyright (c) 2025 Nous Research

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

ClawHub-derived bundled skill descriptors

• Component: SKILL.md frontmatter and instruction text for these bundled skills:
  • ai-video-script
  • audio-cog
  • deep-research
  • docx
  • html-coder
  • html-to-pdf
  • multi-search-engine
  • nano-banana-pro
  • nano-banana-pro-openrouter
  • pdf-toolkit
  • pptx
  • seedance-2-prompt
  • video-merger
  • web-search
  • xlsx
• Upstream registry: https://clawhub.ai
• License: MIT-0 (Public-domain-equivalent; no attribution required, but each skill records its specific upstream slug in its own THIRD_PARTY_NOTICES.md for transparency)

These bundled skills record their ClawHub source slug in SKILL.md frontmatter and, when present, the skill-local THIRD_PARTY_NOTICES.md. ClawHub's MIT-0 default license permits unlimited use, modification, and redistribution without attribution.

MIT No Attribution

Copyright

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

ClawHub MIT bundled skill descriptors

• Component: SKILL.md frontmatter and instruction text for these bundled skills:
  • filesystem
• Upstream registry: https://clawhub.ai
• Upstream package: https://clawhub.ai/gtrusler/clawdbot-filesystem
• License: MIT
• Copyright notice: Copyright (c) 2026 Clawdbot Community

The filesystem bundled skill metadata, package manifest, and skill card identify this upstream artifact as MIT licensed. OpenSquilla excludes skill-local LICENSE.md files from wheels as non-runtime skill resources, so the required MIT notice for this copied descriptor is reproduced here in the top-level notices distributed with release artifacts.

MIT License

Copyright (c) 2026 Clawdbot Community

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

BAAI bge-small-zh-v1.5 / FlagEmbedding

• Component: BAAI/bge-small-zh-v1.5 embedding model and tokenizer assets.
• Upstream model: https://huggingface.co/BAAI/bge-small-zh-v1.5
• Upstream project: https://github.com/FlagOpen/FlagEmbedding
• License: MIT
• Copyright notice: Copyright (c) 2022 staoxiao

The bundled router contains an ONNX export and tokenizer files derived from the BAAI bge-small-zh-v1.5 model. The upstream Hugging Face model card marks the model as MIT licensed and states that the released models can be used for commercial purposes free of charge.

MIT License

Copyright (c) 2022 staoxiao

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Router Artifact Safety Note

The SquillaRouter bundle contains .pkl and .joblib artifacts used by the current V4 Phase 3 runtime. Treat these artifacts as executable-code-equivalent inputs: load only assets shipped with a trusted OpenSquilla release or assets whose checksums match artifact_manifest.json.