Acknowledgements.

This page is a quick public index. If you spot a missing entry, an out-of-date version, or a licence we’ve classified incorrectly, please tell us at [email protected].

The projects Ostler is built on

Ostler is built on open-source software. We are grateful to the maintainers and contributors of the projects below. Every component ships under a permissive licence; the full verbatim licence texts are installed on your Mac at ~/.ostler/LICENSES/ and printable with ostler --licenses.

Core engine

• Ostler Assistant – the Rust AI-assistant engine that powers the Hub. A soft-fork of ZeroClaw. Licence: MIT OR Apache-2.0. github.com/zeroclaw-labs/zeroclaw
• Verifiable Intent – open specification for layered intent credentials, reimplemented in Rust. Licence: Apache-2.0. github.com/agent-intent/verifiable-intent

The engine statically links its Rust dependency tree (over 1,200 crates), each under a permissive licence (MIT, Apache-2.0, BSD-2/3-Clause, ISC, Zlib, MPL-2.0, Unicode, and similar). Notable libraries include: tokio (MIT), rustls (Apache-2.0 OR ISC OR MIT), ring (Apache-2.0 AND ISC), hyper / axum (MIT), serde / reqwest / clap / chrono / image (MIT OR Apache-2.0), rusqlite (MIT), lettre (MIT), and mail-parser (Apache-2.0 OR MIT).

Memory stores and runtime

• Qdrant – vector database. Apache-2.0. github.com/qdrant/qdrant
• Oxigraph – RDF triple store. Apache-2.0 OR MIT. github.com/oxigraph/oxigraph
• Valkey – cache and message bus (Linux Foundation fork of Redis). BSD-3-Clause. github.com/valkey-io/valkey
• Ollama – local LLM runtime. MIT. github.com/ollama/ollama
• SQLite (via rusqlite) – embedded database. Public domain.

Ingest and processing

• sentence-transformers – embeddings. Apache-2.0. github.com/UKPLab/sentence-transformers
• rdflib – RDF for Python. BSD-3-Clause. github.com/RDFLib/rdflib
• vobject (Apache-2.0) and phonenumbers (Apache-2.0) – contact and vCard parsing.
• qdrant-client – Apache-2.0. github.com/qdrant/qdrant-client
• beautifulsoup4 (MIT), lxml (BSD-3-Clause), openpyxl (MIT) – document extraction.
• Google Workspace CLI (gws) – Gmail and Google Calendar bridges. Apache-2.0. github.com/googleworkspace/cli
• cryptography (Apache-2.0 OR BSD-3-Clause) and onnxruntime (MIT) – security and on-device privacy classification.

Site and interface

• FastAPI (MIT), Uvicorn (BSD-3-Clause), Pydantic (MIT) – API services.
• MkDocs (BSD-2-Clause) and Material for MkDocs (MIT) – the personal wiki site.
• Outfit, IBM Plex Sans, and IBM Plex Mono – interface fonts. SIL Open Font License 1.1. Outfit · IBM Plex

On-device models

• Qwen3 (Apache-2.0), nomic-embed-text (Apache-2.0) – language and embedding models.
• OpenAI Whisper via WhisperKit (MIT) – speech transcription.

iOS Companion app

• WhisperKit (MIT), FluidAudio (Apache-2.0), Realm (Apache-2.0), swift-transformers / swift-collections / swift-crypto (Apache-2.0), llama.cpp via llama.swift (MIT).

Full licence texts and copyright notices for every component are available in the product at ~/.ostler/LICENSES/. If we have missed an attribution, please contact us and we will correct it.

Complete package index

The exhaustive per-package index, grouped by licence family.

Permissive (MIT / BSD / Apache-2.0)

The majority of Ostler’s stack. Attribution required, no copyleft obligations.

Python – Mac Hub services

• aiofiles ≥23.2.0 repo · Apache-2.0
• aiokafka ≥0.10.0 repo · Apache-2.0
• aiolimiter ≥1.1.0 repo · MIT
• aiosqlite ≥0.19.0 repo · MIT
• anthropic ≥0.40.0 repo · MIT
• bcrypt ≥4.0.0,<5 repo · Apache-2.0
• beautifulsoup4 ≥4.12.0 repo · MIT
• click ≥8.1.0 repo · BSD-3-Clause
• cryptography ≥46.0.1,<47 repo · Apache-2.0 OR BSD-3-Clause
• diskcache ≥5.6.0 repo · Apache-2.0
• fastapi ≥0.109.0 repo · MIT
• fastapi-users ≥13.0.0 repo · MIT
• gunicorn ≥21.0.0 repo · MIT
• httpx ≥0.25.0 repo · BSD-3-Clause
• huggingface_hub ≥0.25.0,<1 repo · Apache-2.0
• lxml ≥5.0.0 repo · BSD-3-Clause
• mcp (Model Context Protocol) ≥1.0.0 repo · MIT
• mkdocs latest repo · BSD-2-Clause
• mkdocs-material latest repo · MIT
• msoffcrypto-tool ≥5.0.0 repo · MIT
• numpy ≥1.24.0,<3 repo · BSD-3-Clause (with vendored 0BSD, MIT, Zlib, CC0-1.0 components)
• onnxruntime ≥1.18.0,<2 repo · MIT
• openpyxl ≥3.1.0 repo · MIT
• passlib ≥1.7.4 repo · BSD-3-Clause
• phonenumbers ≥8.13.0 repo · Apache-2.0
• pydantic ≥2.5.0 repo · MIT
• pydantic-settings ≥2.1.0 repo · MIT
• python-jose ≥3.3.0 repo · MIT
• python-multipart ≥0.0.6 repo · Apache-2.0
• PyYAML ≥6.0 repo · MIT
• qdrant-client ≥1.15,<2 repo · Apache-2.0
• rdflib ≥7.0.0 repo · BSD-3-Clause
• redis (Python client) ≥5.0.0 repo · MIT
• requests ≥2.31.0 repo · Apache-2.0
• rich ≥13.7.0 repo · MIT
• sentence-transformers ≥2.2.0 repo · Apache-2.0
• sqlalchemy ≥2.0.0 repo · MIT
• tokenizers ≥0.20.0,<1 repo · Apache-2.0
• torch ≥2.1.0 repo · BSD-3-Clause
• uvicorn ≥0.27.0 repo · BSD-3-Clause
• vobject ≥0.9.6 repo · Apache-2.0

Swift – iOS app & macOS RemoteCapture

• FluidAudio 0.14.8 repo · Apache-2.0
• llama.swift 2.9489.0 repo · MIT
• realm-core 20.1.4 repo · Apache-2.0
• realm-swift 20.0.4 repo · Apache-2.0
• swift-argument-parser 1.7.1 repo · Apache-2.0
• swift-asn1 1.6.0–1.7.0 repo · Apache-2.0
• swift-collections 1.4.1–1.5.0 repo · Apache-2.0
• swift-crypto 4.3.1–4.5.0 repo · Apache-2.0
• swift-jinja 2.3.5 repo · Apache-2.0
• swift-transformers 1.1.9 repo · Apache-2.0
• WhisperKit 0.18.0 repo · MIT
• yyjson 0.12.0 repo · MIT

Bundled runtime services

Fetched at install time via Homebrew (or the equivalent upstream release page) and pinned by the installer. Not statically linked into any Creative Machines binary; each retains its own upstream identity.

• Colima (container runtime for macOS) latest repo · MIT
• Docker CE (CLI + engine, invoked by Colima) latest repo · Apache-2.0
• docker-compose latest repo · Apache-2.0
• Ollama latest repo · MIT
• Oxigraph latest repo · Apache-2.0 OR MIT
• Python (3.11, via Homebrew) 3.11.x repo · PSF-2.0
• Qdrant latest repo · Apache-2.0
• Valkey (LF fork of Redis 7.2) latest repo · BSD-3-Clause
• Tailscale (install-time brew install tailscale; optional network transport for Hub ↔ iOS pairing across networks) latest repo · BSD-3-Clause

Local model weights

Models are lazy-downloaded on first use; you’ll be informed before any download.

• nomic-embed-text v1.5 repo · Apache-2.0
• OpenAI Privacy Filter latest repo · Apache-2.0
• OpenAI Whisper (large-v3-turbo) v3 repo · MIT
• Qwen3 8B 8B Q4 repo · Apache-2.0
• Qwen3 30B-A3B 30B MoE repo · Apache-2.0

If you swap in an alternative local model (Llama, Gemma, or others) via Ollama, that model carries its own upstream licence which we cannot reproduce here on your behalf. You’re responsible for accepting the chosen model’s terms before use.

Mozilla Public License 2.0

File-level copyleft. Modifications to the licensed files must be published under MPL-2.0; combining with a larger work under another licence is permitted.

• orjson ≥3.9.0 repo · Apache-2.0 OR MIT (with MPL-2.0 components)

Other open licences (Zlib)

Permissive in effect, but distinct from the MIT/BSD/Apache family.

• pysqlcipher3 ≥1.2.0,<2 repo · Zlib
• SQLCipher (C library, Homebrew dep) latest repo · BSD-3-Clause

Copyleft (LGPL / GPL)

Ostler does not bundle any GPL or LGPL code into its distributed binaries. Where any optional tooling falls under copyleft (for example, developer-only utilities), it is invoked as a separate process or fetched at install time from the user’s own package manager (Homebrew, pip), not redistributed by us.

Custom / proprietary

Linked at runtime from the user’s operating system. Not bundled or redistributed by us. No attribution required; listed for transparency.

Why this matters

Open source is the reason a small team can ship a product like this. Attribution is the trade. The version-controlled source-of-truth for the legally-binding NOTICE files lives inside the installed product. Mistakes in this list are ours, not the upstream projects’.

Contact

Missed something? Questions about a specific licence, missing attribution, or compliance: [email protected] or [email protected].