Skip to content

THIRD_PARTY_LICENSES.md

Latest commit

 

History

History
541 lines (407 loc) · 25 KB

THIRD_PARTY_LICENSES.md

File metadata and controls

541 lines (407 loc) · 25 KB
Raw

Third-Party Licenses

cmux includes the following third-party software:

Lobe Icons (selected agent marks)

Selected Cursor, Gemini, Kiro, GitHub Copilot, CodeBuddy, Qoder, Kimi, and Ollama SVG marks are bundled under Assets.xcassets/AgentIcons. The complete license text is in Assets.xcassets/AgentIcons/LOBE-LICENSE.txt.

Primer Octicons (selected diff viewer icons)

Selected 16px path data is embedded in webviews/src/icons.tsx.

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Ghostty

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Bonsplit

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

cmux-cua engine

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

herdr agent-detection plugin

cmux includes a userland agent-detection plugin derived from herdr. Its manifests and adapted detector sources live under cmux-tui/bindings/examples/rust-agent-screen-detection/.

  • Package license: MIT AND Apache-2.0
  • Herdr-derived material: Apache License 2.0
  • Source: https://github.com/herdrdev/herdr
  • Detector source reference: commit 7b675f42af35508eab66ac42fe1598628597a893
  • Pi bundled-launcher correction: commit b1ff4582e9688f52ffb943cfa8bee4871ae122e4
  • Manifest snapshot: commit 2290257acb2085ce6842ba5c7e3ca50c3ba64f02
  • Included manifest fixes: Claude MCP elicitation f807b697353cfa00aa912c7cde4830e863001cf5, Claude background-shell state 987b070fbfa187e85009b45cd7e208fc6175ff6a, Codex weak-blocker scope f457cff4f2648eee85d176f8a41861241d4e8428, and Copilot background-agent activity 2290257acb2085ce6842ba5c7e3ca50c3ba64f02
  • License text: cmux-owned code is covered by cmux-tui/bindings/examples/rust-agent-screen-detection/LICENSE-MIT; the herdr-derived files use cmux-tui/bindings/examples/rust-agent-screen-detection/manifests/LICENSE
  • Latest agent-surface capability audit: commit 987b070fbfa187e85009b45cd7e208fc6175ff6a. The herdr repository tip checked on 2026-09-02 is 94f6d9c0d9bb9cf9ffae99d8bbfb09e9bf2fc9e0; commits after the audit pin change client rendering, terminal reads, graphics ownership, Windows input and worktree handling, or sidebar focus, with no further src/detect or manifest changes. The audit includes the exact Pi bundled CLI path correction from b1ff4582e9688f52ffb943cfa8bee4871ae122e4 and the Claude background-shell state correction from 987b070fbfa187e85009b45cd7e208fc6175ff6a, both adapted and tested in the userland package. The first-acquisition OSC retention fix from 82e6a80eb3ae39fb3d3ebd4d1fed19389767e605 is adapted in the userland tracker. The foreground group-leader CWD fix from 3a3792622e59c7f2dc20f9c0236167161e4a5035 is already covered by cmux's generic foreground_cwd resource. The shell-render refactor in 207be3c771d281baae6e5fa0fb74be9a056e97a2 and independent multi-client tab views in 6c0bb273d5d5405a00985621b17e36f8b4d64609 are application/client architecture and are not copied. The delayed-agent-prompt fix in 8633a398e653eee47b375c963996c78a8a14aa48 changes PTY input sequencing, and 5616196942cbe752cc0659b9bd0fb616b2a6ed5c hardens malformed Windows process environments in portable-pty. These changes are outside detector behavior and are not copied. SDK endpoint-generation compatibility remains a standalone-release requirement; review the Windows changes before publishing a Windows package.

Nineteen manifests are unchanged from the manifest snapshot. claude.toml is byte-identical to upstream commit 987b070fbfa187e85009b45cd7e208fc6175ff6a. grok.toml is based on the snapshot file and contains one documented cmux precedence correction. github-copilot.toml is byte-identical to the snapshot and uses upstream version 2026.08.29.1. The manifest engine, process discovery, state detector, and update logic are adapted for the cmux userland plugin contract. The source paths, commits, license, and adaptations are recorded in cmux-tui/bindings/examples/rust-agent-screen-detection/ATTRIBUTIONS.md. The SHA256SUMS file is a checked-in byte-provenance record verified before the bundled manifests are compiled. It detects accidental drift, but it is not a cryptographic release signature for remote updates.

Sparkle

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

PostHog iOS

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Sentry Cocoa

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Markdown Viewer Web Assets

cmux bundles these files under Resources/markdown-viewer/ so the markdown viewer has no runtime CDN dependency.

marked

highlight.js

github-markdown-css

Mermaid

Vega

Vega-Lite

Vega-Embed

BSD 3-Clause License:

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

  1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
  3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Swift Package Dependencies

The following packages are linked into the cmux app binary.

MarkdownUI (swift-markdown-ui)

NetworkImage

swift-cmark (cmark / cmark-gfm)

  • License: BSD 2-Clause License (and MIT-licensed portions; see upstream COPYING)
  • Copyright: Copyright (c) 2014, John MacFarlane; cmark-gfm portions Copyright (c) 2017, GitHub, Inc.
  • Source: https://github.com/swiftlang/swift-cmark

iroh-ffi

Swift Crypto and Swift ASN.1

Stack Auth Swift SDK

  • License: MIT License (per Stack Auth's published per-package licensing policy, under which client SDKs are MIT-licensed; the vendored prerelease does not yet include its own LICENSE file)
  • Copyright: Copyright (c) Stack Auth (HexClave, Inc.)
  • Source: https://github.com/stack-auth/stack

Diff Viewer Highlighting Assets

cmux bundles compiled syntax-highlighting code and grammars (shiki and its Oniguruma WASM engine, built from webviews/ with @pierre/diffs) inside the generated Resources/markdown-viewer/webviews-app/ bundle so the diff viewer has no runtime CDN dependency.

shiki

vscode-textmate

vscode-oniguruma

Oniguruma

Browser REPL Runtime Assets

cmux bundles these files under Resources/browser-repl/vendor/ for the cmux browser repl runtime and its page agent.

Playwright (injected script and locator helpers)

  • Version: 1.57.0 (playwright-core)
  • License: Apache License 2.0
  • Copyright: Copyright (c) Microsoft Corporation
  • Source: https://github.com/microsoft/playwright
  • Files: vendor/playwright-injected.js (the generated injectedScriptSource bundle, unmodified) and vendor/playwright-locator-utils.js (functions from lib/utils/isomorphic/locatorUtils.js and stringUtils.js, re-wrapped as a plain script)

Playwright's NOTICE: "Playwright. Copyright (c) Microsoft Corporation. This software contains code derived from the Puppeteer project (https://github.com/puppeteer/puppeteer), available under the Apache 2.0 license (https://github.com/puppeteer/puppeteer/blob/master/LICENSE)."

acorn

  • Version: 8.16.0
  • License: MIT License
  • Copyright: Copyright (C) 2012-2022 by various contributors
  • Source: https://github.com/acornjs/acorn
  • Files: vendor/acorn.js (dist/acorn.js, unmodified)

Shared License Texts

MIT-licensed components above are distributed under the MIT License text reproduced in the sections earlier in this document. BSD 2-Clause components are distributed under the following text:

BSD 2-Clause License:

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

  1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Apache-2.0-licensed components are distributed under the Apache License, Version 2.0. A copy of the license is available at http://www.apache.org/licenses/LICENSE-2.0 and in each component's source repository listed above.

WireGuardKit (wireguard-apple)

  • License: MIT License
  • Copyright: Copyright © 2018-2023 WireGuard LLC. All Rights Reserved.
  • Source: https://git.zx2c4.com/wireguard-apple (vendored at vendor/WireGuardKit)
  • Used by: the cmux Cloud tunnel system extension (Contents/Library/SystemExtensions)

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

"WireGuard" and the "WireGuard" logo are registered trademarks of Jason A. Donenfeld.

wireguard-go

  • License: MIT License
  • Copyright: Copyright (C) 2017-2023 WireGuard LLC. All Rights Reserved.
  • Source: https://git.zx2c4.com/wireguard-go (module golang.zx2c4.com/wireguard, compiled into the tunnel extension via scripts/build-wireguard-go.sh)

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Go supplementary libraries (golang.org/x/crypto, golang.org/x/net, golang.org/x/sys)

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

  • Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  • Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
  • Neither the name of Google LLC nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.