mirror of
https://github.com/Colton-z/AstraBox.git
synced 2026-09-28 06:02:56 +08:00
Colton QiandClaude
5ed0137859
Strengthen sandbox isolation and authentication, make all five engines work through the bundled installer, and preserve conversations across sandbox and service restarts. Add team login and single-container deployment, with upgrade instructions for replacing existing 0.1.0 sandboxes. Co-Authored-By: Claude <noreply@anthropic.com>
84 lines
5.1 KiB
Plaintext
84 lines
5.1 KiB
Plaintext
AstraBox
|
|
Copyright 2026 Colton Qi
|
|
|
|
This product depends on and gratefully acknowledges:
|
|
|
|
- claude-agent-sdk (Anthropic, MIT License) - the native Claude Code adapter's SDK.
|
|
As published by Anthropic, it bundles the Claude Code CLI; see below.
|
|
- Hermes Agent (Nous Research, MIT License) - the Agent program installed in
|
|
the Assistant sandbox image. The packaged wheel retains its MIT license text.
|
|
- AIO Sandbox (agent-infra/sandbox, Apache License 2.0) - the base image of the
|
|
Claude Code sandbox image (containers/sandbox-claude-code/Dockerfile), whose
|
|
entrypoint starts the in-sandbox workspace file API + terminal + code-server
|
|
the host's session file service speaks to. Used as a published image; no
|
|
agent-infra code is vendored.
|
|
- OpenSandbox (Alibaba Group Holding Ltd., Apache License 2.0) - the sandbox
|
|
client model vocabulary, and the lifecycle server + injected execd daemon
|
|
behind the open_sandbox provider. Used as a published library; no opensandbox
|
|
code is vendored.
|
|
- LiteLLM (BerriAI, MIT License) - the model gateway, run as a supervised bundled
|
|
service or an operator-managed external service; no LiteLLM code is vendored.
|
|
- Casdoor (the Casbin organization, Apache License 2.0) - the identity provider
|
|
of the team-login deployment (containers/compose.sso.yaml). Used as its
|
|
published image; no Casdoor code is vendored.
|
|
- PostgreSQL (PostgreSQL Global Development Group, PostgreSQL License) - the
|
|
embedded database of the all-in-one image (containers/all-in-one/Dockerfile),
|
|
installed unmodified from Debian's postgresql-17 package; its licence is
|
|
retained at /usr/share/doc/postgresql-17/copyright.
|
|
- Valkey (Valkey contributors, BSD 3-Clause License) - the embedded pool-state
|
|
store of the all-in-one image, installed unmodified from Debian's
|
|
valkey-server package; its licence is retained at
|
|
/usr/share/doc/valkey-server/copyright.
|
|
- mergerfs (Antonio SJ Musumeci, ISC License) - the workspace router's
|
|
host-side filesystem service. The workspace-mounter image uses release
|
|
2.42.0 and retains its license at /usr/share/doc/mergerfs/LICENSE.
|
|
- DBOS Transact for Python (DBOS, Inc., MIT License) - the embedded durable
|
|
schedule and Run execution engine. Used as a released library; no DBOS code
|
|
is vendored and its hosted control plane is not required.
|
|
- AWS Encryption SDK for Python (Amazon Web Services, Apache License 2.0) -
|
|
optional AWS KMS envelope encryption for stateless Credential Vault replicas.
|
|
Used as a released library; no SDK code is vendored.
|
|
- Satori core and adapters (Shigma and contributors, MIT License) - the released
|
|
Node.js packages used by the private bundled channel gateway for Telegram,
|
|
Discord, KOOK, Feishu/Lark, DingTalk, QQ, Slack, Zulip, LINE, WhatsApp,
|
|
WeChat Official Account, WeCom, and other adapters pinned in
|
|
channel-gateway/package.json. No Satori or Koishi console is vendored.
|
|
- satori-python-core (RF-Tar-Railt, MIT License) - the released Satori event
|
|
models and message-element parser used at the channel gateway boundary.
|
|
- Cordis HTTP/server plugins and cosmokit (Shigma and contributors, MIT
|
|
License) - released runtime libraries used to host the Satori adapters in
|
|
the private channel gateway.
|
|
- ImapFlow and mailparser (Postal Systems OÜ / Andris Reinman, MIT License),
|
|
Nodemailer (Andris Reinman, MIT-0), ws (Einar Otto Stangvik and contributors,
|
|
MIT), and file-type (Sindre Sorhus and contributors, MIT) - released packages
|
|
used by the Email adapter, authenticated gateway transport, and adapter
|
|
compatibility layer. Matrix uses the official Satori adapter.
|
|
- shadcn/ui (shadcn, MIT License) - UI primitives vendored into the web console
|
|
under frontend/src/components/ui/ (generated with the shadcn CLI, then adapted).
|
|
- AI Elements (Vercel, Apache License 2.0) - agent/chat UI components vendored
|
|
into the web console under frontend/src/components/ai-elements/.
|
|
|
|
Agent programs installed in the published sandbox images. Each keeps its own
|
|
license; AstraBox does not modify them.
|
|
|
|
- Claude Code (Anthropic PBC) - installed in the Claude Code sandbox image from
|
|
the public npm registry, and bundled by claude-agent-sdk. Claude Code is not
|
|
open-source software: it is © Anthropic PBC, all rights reserved, and its use
|
|
is subject to Anthropic's Commercial Terms of Service
|
|
(https://www.anthropic.com/legal/commercial-terms). Running it through
|
|
AstraBox requires accepting those terms.
|
|
- Codex CLI (OpenAI, Apache License 2.0) - `@openai/codex`, installed in the
|
|
Codex sandbox image.
|
|
- DeepSeek Harness (DeepSeek, MIT License) - `@deepseek-ai/dsh`, installed in the
|
|
DeepSeek Harness sandbox image.
|
|
- Pi coding agent (Mario Zechner, MIT License) - `@earendil-works/pi-coding-agent`,
|
|
and pi-subagents (Nico Bailon, MIT License), installed in the Pi sandbox image.
|
|
- Hermes Agent - listed above.
|
|
|
|
Trademarks
|
|
|
|
Claude and Claude Code are trademarks of Anthropic PBC. OpenAI and Codex are
|
|
trademarks of OpenAI. Other product names are trademarks of their respective
|
|
owners. AstraBox is an independent project, not affiliated with or endorsed by
|
|
these companies; names are used only to identify the software it runs.
|