joakimp
93f986e90e
Lint / hadolint (push) Successful in 9s
Publish Docker Image / resolve-versions (push) Successful in 15s
Publish Docker Image / base-decide (push) Successful in 8s
Lint / actionlint (push) Successful in 1m9s
Publish Docker Image / build-base (push) Successful in 41m23s
Publish Docker Image / smoke (push) Successful in 4m50s
Publish Docker Image / smoke-studio (push) Successful in 5m5s
Publish Docker Image / build-variant (push) Successful in 15m46s
Publish Docker Image / update-description (push) Successful in 7s
Publish Docker Image / promote-base-latest (push) Successful in 15s
Publish Docker Image / build-variant-studio (push) Successful in 19m59s
Three coupled pieces of work, all of which ride on the base rebuild that the
mempalace bump forces anyway.
DRIFT ADOPTED
- pi 0.84.2 -> 0.84.3. Its release notes carry a "Breaking Changes" line
(GoogleThinkingLevel -> GoogleApiThinkingLevel). Audited before adopting:
zero references across all four vendored companions (pi-fork,
pi-observational-memory, pi-atelier, pi-studio), so it is inert for us. The
reason to adopt is two skill-discovery fixes that land directly on v1.8.5's
vendored-skill work: nested Markdown skills inside grouping directories were
not discovered, and root README.md/AGENTS.md in skill dirs were reported as
broken skills.
- mempalace core 3.7.1 -> 3.8.0. Additive/reliability only. Its sync fix
(#2320/#2322) stops sync --apply deleting drawers whose source_file was
unreachable *at that moment* -- which does NOT relax the standing landmine
against sync on the shared palace, because that landmine is about paths
permanently absent from whichever host runs the sync. Different failure
shape; the caution stands.
DOCS -- three defects, one of them public
- DOCKER_HUB.md advertised "neovim (LazyVim defaults)". Nothing in the image
installs LazyVim; the only nvim config is a 19-line sysinit.vim. CI PATCHes
this file into the Docker Hub description on every release, so this was a
false claim published to the world. Removed.
- agent-browser + Playwright + Chromium is the single largest addition in the
image (~625 MB) and had zero mentions in README, DOCKER_HUB or THIRD_PARTY --
it was documented only to agents, in the AGENTS.md managed block. Now
documented to humans, including the Chromium licence dimension.
- typst and socat appeared in README prose but not in the "What's inside"
inventory. Added.
OBSERVABILITY -- the three gaps v1.8.5 listed as still open
- build-manifest.json now records mempalace core, read from the live binary
(ground truth, not the build ARG). Placed as a sibling of pi_version rather
than inside components{}, because pi-devbox-version renders that map through
[0:12] and would truncate a version string.
- smoke asserts the pi-observational-memory clone actually CONTAINS the ce9fc98
auth fix, pinned to src/runtime.ts. Deliberately not a repo-wide grep: two of
the three markers also live under tests/, so the repo-wide form stays green
with the fix site reverted. That is the third false-green of this exact family
in this repo (canary phrase in both snapshots; reconciler fixture using a
non-owned name; now this) -- pin containment checks to the fix site.
- smoke asserts the feeder's pi@<device> agent default behaviourally. The
earlier audit concluded this needed a --print-config added upstream; it does
not. AGENT is assigned before arg parsing, so `bash -x mempalace-pi-session
--help` observes the real resolution with no toolkit change. Two-sided:
device set => pi@<device>, unset => must not be pi@*.
- pi-devbox-version now prints a palace: line with the same live-vs-baked drift
detection pi already had. This matters more than it looks: mempalace is the
one component that is both client (here) and server (synlig), so skew between
them is a real failure mode. Degrades quietly on pre-v1.8.6 images.
Deferred deliberately: a native arm64 act_runner on tor-ms22 (the current
runner is on synlig, x86_64, so every arm64 layer ships QEMU-emulated).
Analysis and caveats filed to the palace rather than actioned here.
62 lines
3.3 KiB
Markdown
62 lines
3.3 KiB
Markdown
# Third-party notices
|
|
|
|
pi-devbox is distributed under the MIT License (see [`LICENSE`](LICENSE)), which
|
|
covers **this repository's own contents** — the Dockerfiles, entrypoint scripts,
|
|
`rootfs/` seeds, CI workflows, and docs.
|
|
|
|
The **published container images** (`joakimp/pi-devbox:*`) additionally *bundle*
|
|
third-party software, each of which remains under its own license. This file is
|
|
a good-faith summary; the authoritative sources are the upstream projects and,
|
|
for OS packages, the per-package copyright files inside the image at
|
|
`/usr/share/doc/<package>/copyright`.
|
|
|
|
## pi and its extensions (installed in the variant layer)
|
|
|
|
| Component | Upstream | License |
|
|
| --- | --- | --- |
|
|
| pi (`@earendil-works/pi-coding-agent`) | npm | MIT |
|
|
| pi-fork | github.com/elpapi42/pi-fork | MIT |
|
|
| pi-observational-memory | github.com/elpapi42/pi-observational-memory | MIT |
|
|
| pi-studio *(`-studio` variant only)* | github.com/omaclaren/pi-studio | MIT |
|
|
| pi-atelier | github.com/michaelmjhhhh/pi-atelier | MIT |
|
|
| pi-toolkit, pi-extensions, mempalace-toolkit | authored by the maintainer (Joakim Persson) | MIT |
|
|
|
|
## MemPalace (AI memory)
|
|
|
|
| Component | Upstream | License |
|
|
| --- | --- | --- |
|
|
| mempalace (core, MCP server) | github.com/MemPalace/mempalace (PyPI: `mempalace`) | MIT — the GitHub repo declares MIT; the PyPI package's own metadata omits a license classifier, so if you need clearance from the package artifact alone, verify against the repo's `LICENSE` file rather than the sdist/wheel metadata |
|
|
|
|
## Browser automation
|
|
|
|
| Component | Upstream | License |
|
|
| --- | --- | --- |
|
|
| agent-browser | github.com/vercel-labs/agent-browser (npm: `agent-browser`) | Apache-2.0 |
|
|
| Playwright | github.com/microsoft/playwright (npm: `playwright`) | Apache-2.0 |
|
|
| Chromium | chromium.googlesource.com/chromium/src | BSD-3-Clause for Chromium's own code, plus a large set of bundled third-party components each under their own license (see Chromium's own `LICENSE`/`about:credits`). The binary in this image is **not compiled here** — it is the build Playwright downloads for its pinned version ("Chrome for Testing"), installed via `playwright install --with-deps chromium` at `/usr/local/share/ms-playwright/`. Treat Playwright's own distribution terms for that build as authoritative over any summary here. |
|
|
|
|
## Tooling baked into the base image
|
|
|
|
| Component | Upstream | License (best effort) |
|
|
| --- | --- | --- |
|
|
| gosu | github.com/tianon/gosu | Apache-2.0 |
|
|
| Node.js | nodejs.org | MIT (bundles components under their own licenses) |
|
|
| uv | github.com/astral-sh/uv | Apache-2.0 OR MIT |
|
|
| Neovim | neovim.io | Apache-2.0 + Vim license |
|
|
| Pandoc | pandoc.org | GPL-2.0-or-later |
|
|
| Typst | github.com/typst/typst | Apache-2.0 |
|
|
| ripgrep / fd / micro / tealdeer / yq (mikefarah) | respective repos | MIT / Apache-2.0 / Unlicense (varies) |
|
|
|
|
## Base OS
|
|
|
|
The image is built `FROM` a Debian base and installs packages via `apt`. Debian
|
|
and its packages are distributed under their respective licenses (GPL, LGPL,
|
|
MIT, BSD, and others). See each package's copyright file in the image under
|
|
`/usr/share/doc/<package>/copyright`.
|
|
|
|
---
|
|
|
|
*Licenses marked "best effort" are widely known but were not each verified at
|
|
the exact bundled version; consult the upstream project for authoritative
|
|
terms. Corrections welcome.*
|