---
title: "Open source at Optimi"
description: "Optimi open-source projects: software delivery with Kodama, local OIDC with oauthsonas and URL clustering with clusterpath."
canonical_url: https://optimi.com/en/docs/open-source
md_url: https://optimi.com/en/docs/open-source.md
last_updated: 2018-10-20
---

# Open source at Optimi

Optimi publishes focused open-source tools that solve the same problems we hit
when building edge platforms: realistic local authentication for integration
tests, safe URL cardinality reduction before analytics indexing, and durable
agent-assisted software delivery.

**oauthsonas** and **clusterpath** are MIT-licensed Go projects maintained under
[optimiweb](https://github.com/optimiweb) on GitHub. Kodama is published under
[optimiware](https://github.com/optimiware/kodama) with the Apache-2.0 license.

## Projects

| Project | What it does | Repository |
| --- | --- | --- |
| **[Kodama](/en/docs/kodama)** | API-first software factory: work, Git workspaces, pipelines, agents and review | [github.com/optimiware/kodama](https://github.com/optimiware/kodama) |
| **[oauthsonas](/en/docs/oauthsonas)** | In-memory OpenID Connect provider for local development and integration tests | [github.com/optimiweb/oauthsonas](https://github.com/optimiweb/oauthsonas) |
| **[clusterpath](/en/docs/clusterpath)** | Bounded-memory URL normalizer that collapses high-cardinality paths into stable templates | [github.com/optimiweb/clusterpath](https://github.com/optimiweb/clusterpath) |

## When to use which

- Explore **Kodama** to connect business requirements to recoverable pipeline
  execution, Git source, review evidence and controlled delivery. Its operator
  and developer documentation covers Helm installation, pipelines and operations.
- Use **oauthsonas** when a relying party (dashboard, API gateway, SPA) needs a
  real browser Authorization Code + PKCE flow in CI or on a laptop — without
  Auth0, Okta, or Keycloak, and without stubbing the OIDC client.
- Use **clusterpath** when a high-volume request log would explode a ClickHouse
  (or similar) dictionary of distinct URLs. It learns structural templates
  online and emits a fixed vocabulary of placeholders such as `{id}` and
  `{hex}`.

## Design principles

These projects share the same product posture as the managed platform:

- **Small and intentional.** Each project has a focused role and integrates with
  the application or infrastructure you already operate.
- **Safe defaults.** oauthsonas binds to loopback and refuses non-loopback
  exposure unless you opt in. clusterpath bounds memory by construction.
- **Observable contracts.** Stable selectors for browser automation, versioned
  form posts, typed placeholders, and health endpoints where they matter.
- **Documented failure modes.** Single-replica limits, restart invalidation,
  and dictionary versioning are first-class in the docs — not footnotes.

## License and contribution

oauthsonas and clusterpath use the MIT license. Their contributions are welcome
through GitHub issues and pull requests. Kodama uses **Apache-2.0** and accepts
contributions through [its GitHub repository](https://github.com/optimiware/kodama).
Run the project's test suite (`go test -race ./…`
where applicable) before opening a PR, and keep the development-only security
model of oauthsonas intact.

## Next steps

1. **[oauthsonas](/en/docs/oauthsonas)** — run the local OIDC provider and wire a
   dashboard.
2. **[oauthsonas configuration](/en/docs/oauthsonas/configuration)** — clients,
   personas, and claim names.
3. **[clusterpath](/en/docs/clusterpath)** — normalize a URL stream with the
   library or CLI.
4. **[clusterpath metrics](/en/docs/clusterpath/metrics)** — budgeted 96-ID
    metric clusters for dashboards.
5. **[Kodama](/en/docs/kodama)** — concepts, architecture, getting started,
   developer workflows and operations.