@krauq/ufo-cli 0.0.0-stage → 1.5.2

package/ENGINE-LICENSE.txt

@@ -0,0 +1,378 @@
+UFO business use license
+========================
+
+Universal File Opener command line and engine binaries
+Copyright 2026 Krauq LLC. All rights reserved.
+
+This license covers the UFO binaries: the Linux app image, the Debian package,
+the restricted OCI container image, and any other executable distribution of
+Universal File Opener that embeds the office-core and viewer-core engines.
+
+It does NOT cover the source files that the repository root LICENSE places
+under the Apache License, Version 2.0: cli/, docs/cli/schemas/, tools/cli/,
+tools/corpus/, tools/audit/, packaging/linux-cli/, packaging/npm/ and
+packaging/homebrew/. Those keep their Apache terms whether or not you hold a
+license under this document. The engines themselves, office-core,
+viewer-core, office-compose, office-compose-android, desktop-app, app,
+ios-app and baselineprofile, carry no open source grant. A binary distributed
+by Krauq LLC combines those Apache licensed sources with the proprietary
+engines, and the binary as a whole is licensed under this document, with the
+Apache License text and the NOTICE file included as that license requires.
+
+1. Definitions
+--------------
+
+"Software" means the UFO binaries described above, in the exact form supplied,
+identified by the release hashes and the container digest published with them.
+
+"You" means the individual or the organization exercising the rights in this
+document. For an organization, You includes its affiliates under common
+control.
+
+"Organization" means any company, partnership, sole proprietorship acting in
+trade, government body, school district, charity or other legal entity, and
+any group of people acting for one of them.
+
+"People" means the total number of full time employees, part time employees
+and long term contractors of the Organization, counted worldwide, whether or
+not they use the Software. Every person in the Organization counts, not only
+the people whose work the Software supports.
+
+"Annual revenue" means the Organization's total gross revenue, worldwide, over
+its most recently completed fiscal year, before expenses and taxes, plus any
+funding the Organization raised in that same period. Raised funding counts.
+
+"Commercial use" means use by or for an Organization, or use that directly
+supports paid work, including client deliverables, internal business
+documents and a product or service You sell.
+
+2. Free use
+-----------
+
+No fee and no separate agreement are required for any of the following. These
+grants are perpetual for the release You received and do not expire when a
+paid license elsewhere lapses.
+
+The free tier is full fidelity: every verb and every format the Software
+supports, at full quality, with no feature withheld and no output
+watermarked. It carries three bounds: a batch plan may run up to twenty five
+(25) steps; a folder report or a folder search may cover up to two hundred
+(200) files; and the Software runs one worker at a time, meaning no parallel
+jobs, and an MCP server that answers one request at a time. No other document,
+page or command meter applies.
+
+  (a) Individuals. Use by a natural person for personal projects, learning,
+      hobby work, personal finances and unpaid volunteer work.
+
+  (b) Evaluation. Use by anyone, including any Organization of any size, to
+      evaluate whether the Software fits a job, for as long as it likes. The
+      free tier bounds above are the evaluation: there is no separate time
+      limit and nothing to renew. Evaluation includes running the Software on
+      Your own files, benchmarking it and building a prototype with it. Work
+      past those bounds needs a paid organization license under section 3,
+      and the thirty (30) day refund on an Organization's first purchase,
+      described there, is the trial at that scale.
+
+  (c) Education. Use by students, teachers, academic researchers and
+      accredited educational institutions for teaching, coursework and
+      non commercial research.
+
+  (d) Non commercial use. Use by a registered charity, a non profit or an open
+      source project, where the output is not sold and does not support paid
+      work.
+
+  (e) Small organizations. Commercial use by an Organization with BOTH fewer
+      than ten (10) People AND less than one million United States dollars
+      (USD 1,000,000) in annual revenue. Both tests apply together. An
+      Organization that crosses either threshold may keep using the free tier
+      for ninety (90) days after it crosses, and needs a paid organization
+      license for commercial use after that.
+
+Free use under this section is the same Software paid Organizations run: the
+same operations, the same formats and the same receipts, bounded only by the
+batch, folder and worker limits above.
+
+3. Paid organization license
+----------------------------
+
+An Organization that needs to work past the free tier bounds in section 2, or
+that does not otherwise qualify under section 2, needs a paid organization
+license for commercial use. There are three tiers, each priced by the
+Organization's People count and each self declared by the Organization at
+checkout, no seats:
+
+  Price          Set by the Organization's People count, self declared at
+                 checkout:
+
+                   Up to fifty (50) People: ninety nine United States
+                   dollars (USD 99) per organization per month, or nine
+                   hundred and ninety United States dollars (USD 990) per
+                   organization per year, paid in advance, which is ten
+                   monthly payments for twelve months.
+
+                   Fifty one (51) to five hundred (500) People: four hundred
+                   ninety nine United States dollars (USD 499) per
+                   organization per month, or four thousand nine hundred and
+                   ninety United States dollars (USD 4,990) per organization
+                   per year, paid in advance.
+
+                   Over five hundred (500) People: one thousand nine hundred
+                   ninety nine United States dollars (USD 1,999) per
+                   organization per month, or nineteen thousand nine hundred
+                   and ninety United States dollars (USD 19,990) per
+                   organization per year, paid in advance.
+
+  Band           The tier above that matches the Organization's own People
+                 count, self declared by the Organization at checkout and not
+                 verified at purchase. A band that understates the
+                 Organization's People count is a breach of this license,
+                 cured by buying the license for the correct band; it is not
+                 cured by a refund or cancellation alone.
+  Unit           One legal entity. Not per seat, not per developer, not per
+                 application, not per unattended worker, not per document and
+                 not per page.
+  Term           A monthly license renews each month and a yearly license
+                 renews each year, unless it is cancelled before the renewal
+                 date. Cancellation takes effect at the end of the paid
+                 period.
+  Renewal notice Krauq LLC sends a renewal notice at least thirty (30) days
+                 before a yearly renewal.
+  Licence file   Issued automatically once checkout completes. It names the
+                 Organization, the tier and band, the order reference, the
+                 dates it was issued and expires and the date the
+                 Organization's continuous paid subscription began, and
+                 carries Krauq LLC's signature. Install it with
+                 `ufo license install FILE`; it is Your entitlement, and the
+                 receipt of every operation records the tier it read. It
+                 expires on the paid through date it names, with a fourteen
+                 (14) day grace period after that date before the Software
+                 returns to the free tier bounds in section 2, except as
+                 releases kept below provide.
+  Releases kept  Once an Organization's paid organization license has run
+                 for twelve (12) consecutive months, the Organization keeps,
+                 after that license ends, commercial use at its band's scale
+                 of every release of the Software published on or before
+                 the last paid through date, for as long as it likes. This
+                 is not a renewal: it covers no later release and no defect
+                 response under section 4, and the Software applies it
+                 itself, offline, from the licence file. A cancelled license
+                 and an unpaid renewal both end the subscription; buying
+                 again starts a new one.
+  Refund         A full refund on request within thirty (30) days of an
+                 Organization's first purchase. This window is the trial at
+                 scale: the free tier in section 2 is the evaluation, and this
+                 refund is how You try a paid band's full scale without risk.
+  Currency       Prices are in United States dollars, before tax. The payment
+                 processor collects any applicable tax and handles currency
+                 conversion. Payment terms are otherwise those of the payment
+                 processor's receipt.
+
+The first one hundred (100) paying Organizations keep the price they first
+paid for twenty four (24) months from their first purchase, even if the list
+price rises.
+
+What a paid organization license buys, in addition to the rights in section
+2, is commercial use of the Software by the named Organization at its band's
+scale, without the batch, folder and worker bounds in section 2, the defect
+response commitment in section 4, and, after twelve consecutive paid months,
+the releases kept above. It does not buy configuration
+hours, integration work, a resolution time guarantee or a service level
+agreement.
+
+4. Defect response
+------------------
+
+For a paid Organization, Krauq LLC responds within one business day to a
+report of a defect that breaks a receipted edit, meaning an operation that
+reports a completed receipt while the published output does not match what the
+receipt says it applied, or that changes a source file, or that overwrites an
+existing output. A qualifying defect is fixed in the product and the fix ships
+in a public release.
+
+"Respond" means a human acknowledgement with a triage result. It is not a
+repair deadline. Business days are Monday to Friday, United States Pacific
+time, excluding United States federal holidays. Send a report to
+support@krauq.com and attach the receipt of the failing operation.
+
+This commitment does not cover configuration help, integration assistance,
+performance tuning, unsupported formats, refusals that the documented limits
+describe, or a result You disagree with that the receipt reported honestly. A
+refusal is a correct outcome, not a defect.
+
+5. What this license does not allow
+-----------------------------------
+
+The following require a separate written agreement with Krauq LLC and are
+outside both free and paid use:
+
+  (a) Redistribution. Supplying the Software, in whole or in part, to a third
+      party, whether or not for a fee, including bundling it with Your own
+      product, mirroring the release artifacts, or publishing the container
+      image to a registry You control. Running the Software for Your own
+      Organization's work, including work You are paid to do for a client, is
+      not redistribution. Handing a client the OUTPUT files is not
+      redistribution.
+
+  (b) SDK embedding. Presenting the Software, or any part of it, as a library,
+      SDK, API or component of Your own product, or exposing its operations as
+      a paid service to third parties.
+
+  (c) Resale. Selling, reselling, sublicensing, renting or leasing the
+      Software, and offering it as a hosted or managed service to anyone
+      outside Your Organization.
+
+  (d) Removing or altering the notices, license files, receipt fields, version
+      identity or third party attributions in the Software.
+
+  (e) Using the Software to build a competing document processing engine, or
+      developing a RAR compatible archiver from the extraction only UnRAR
+      component, which its own license forbids.
+
+Agency handoff is ordinary use, not redistribution. An agency may install and
+run the Software on a client controlled machine under the agency's own license
+while the agency performs the work. Once the client operates the Software in
+its own workflows after the handoff, the client needs its own license, which
+is free if the client qualifies under section 2. Handing a client the output
+files is never redistribution.
+
+6. Offline licence file, no activation service, no telemetry
+------------------------------------------------------------
+
+A paid organization license is a signed licence file, not a key and not a
+network check. The file names the Organization, the tier and band, the order
+reference, the dates it was issued and expires and the date the continuous
+paid subscription began, and carries Krauq LLC's signature. Install it once with `ufo license install FILE`; the Software then
+reads it from local storage. There is nothing to enter, activate or renew
+online.
+
+The Software makes no network request, ever: not to check a license, not to
+activate one, not to fetch an update, and not while processing a document.
+The restricted container runs with networking disabled. It sends no
+telemetry: not about the license, not about Your files, not about Your use.
+Krauq LLC does not receive a copy of anything the Software reads or writes.
+
+The licence file is Your entitlement, read locally and enforced locally. The
+receipt of every operation records the tier the Software read when it ran.
+Absent an installed file, or once one expires past its fourteen (14) day
+grace period, the Software runs at the free tier bounds in section 2, not
+disabled, except a release that the kept releases in section 3 cover, which
+keeps the tier the file names. Krauq LLC cannot observe Your use beyond what a support request or a
+license purchase tells it, and does not try to.
+
+7. Reverse engineering
+----------------------
+
+Except to the extent applicable law expressly forbids the restriction, You may
+not reverse engineer, decompile or disassemble the Software.
+
+That restriction does not apply where reverse engineering is necessary to
+debug modifications You make to an LGPL covered library that the Software
+links dynamically, including the GNU C Library. Krauq LLC expressly permits
+that reverse engineering, and permits You to replace those shared libraries
+and relink, as the LGPL requires. Corresponding source and notices for the
+LGPL and GPL covered components, including the OpenJDK runtime under its GPLv2
+Classpath and assembly exceptions and the GraalVM runtime compiled into the
+Linux app image's parser worker under the GPLv2 with the Classpath Exception,
+are made available from the release location for the retention period stated
+with the release.
+
+8. Third party components
+-------------------------
+
+The Software includes third party software under its own licenses. See NOTICE
+at the repository root, the shipped THIRD-PARTY-NOTICES.txt, and the component
+inventories, license review rows and source locks under packaging/linux-cli/.
+Where a third party license grants You rights broader than this document, that
+license controls for that component.
+
+9. Feedback and shared reproduction files
+-----------------------------------------
+
+If You send Krauq LLC a bug report, a reproduction or a suggestion, Krauq LLC
+may use it to improve the product without obligation to You. Do not send files
+You are not authorized to share.
+
+A file You send to reproduce a defect is used only to reproduce and fix that
+defect. It is stored only on devices and accounts Krauq LLC controls. It is
+never published and is never used to train anything. Krauq LLC deletes it on
+request, and in any case no later than ninety (90) days after the fix ships.
+
+10. Term and termination
+------------------------
+
+Free use under section 2 continues for as long as You qualify. A paid license
+runs for its paid term, and the releases it keeps under section 3 are kept
+after it ends. Krauq LLC may terminate this license if You breach
+section 5 and do not cure the breach within thirty (30) days of written
+notice, and at once if You breach section 13. On termination You stop using
+the Software. Krauq LLC will never
+remove, disable or alter Your files, and the Software has no mechanism to do
+so.
+
+Output You already produced with the Software is Yours. Nothing in this
+document claims any right in Your documents or their contents.
+
+11. Warranty disclaimer
+-----------------------
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+
+UFO is local file intake, reading and editing software. It is not antivirus,
+malware analysis, content disarm and reconstruction, a legal or compliance
+determination, a fidelity guarantee, or proof that any content is benign or
+authentic. A receipt is evidence to review. Review every published output in
+the application that owns the format before relying on it.
+
+12. Limitation of liability and governing law
+---------------------------------------------
+
+To the maximum extent permitted by law, Krauq LLC is not liable for indirect,
+incidental, special, consequential or punitive damages, or for loss of data,
+profits, revenue or business opportunity, arising out of or connected with the
+Software or Your use of it, however caused.
+
+Krauq LLC's aggregate liability for all claims connected with the Software
+will not exceed the total fees the Organization paid Krauq LLC in the twelve
+(12) months before the claim. For free use under section 2 that cap is one
+hundred United States dollars (USD 100).
+
+Krauq LLC gives no indemnity. You are responsible for holding the rights You
+need in the files You process with the Software.
+
+These terms, and any dispute arising out of them or out of the Software, are
+governed by the laws of the State of California, where Krauq LLC is based,
+without regard to its conflict of law rules. The state and federal courts
+located in California are the venue for a dispute that cannot be settled by
+email first. Write to support@krauq.com before anything formal.
+
+Nothing in this section limits any right You have under the mandatory consumer
+protection laws of the place where You live. A consumer in the EU, the UK or
+another jurisdiction whose law says so keeps the protection of the local
+mandatory rules and may be able to bring proceedings in the local courts.
+Nothing in this document excludes or limits liability for death or personal
+injury caused by negligence, for fraud or fraudulent misrepresentation, or for
+anything else that cannot lawfully be excluded or limited.
+
+13. Export and sanctions
+------------------------
+
+You may use, export and re-export the Software only as the laws of the United
+States and of the place where You obtained or use it allow. In particular, the
+Software may not be exported, re-exported or made available (a) into any
+country or region subject to a comprehensive United States embargo, or (b) to
+anyone on the U.S. Treasury Department's Specially Designated Nationals and
+Blocked Persons List or the U.S. Department of Commerce's Denied Persons List
+or Entity List, and it may not be used for an end use those laws prohibit. By
+downloading or using the Software, You represent that You are not located in
+such a country or region, are not on such a list, and are not owned or
+controlled by, or acting for, anyone who is.
+
+14. Precedence
+--------------
+
+If a signed agreement between You and Krauq LLC covers the Software, that
+agreement controls. Otherwise these terms control, from the first public
+release published under them. If a court finds any part of these terms
+unenforceable, the rest still applies.

package/LICENSE

@@ -0,0 +1,273 @@
+Scope. The Apache License, Version 2.0, covers the source paths listed below
+and nothing else. A binary distributed by Krauq LLC combines those Apache
+licensed sources with the proprietary office-core and viewer-core engines, so
+the binary as a whole is licensed under the business use license in
+packaging/linux-cli/ENGINE-LICENSE.txt, with this Apache License text and the
+NOTICE file included as the Apache License requires.
+
+UFO CLI open source license
+===========================
+
+Copyright 2026 Krauq LLC.
+
+The Apache License, Version 2.0, reproduced in full below, applies to the
+source files in the following repository paths, and to those paths only:
+
+  cli/                      the CLI command layer: argument parsing, the
+                            command surface, parser worker supervision,
+                            inspection and edit orchestration, receipt
+                            emission, the local stdio MCP server
+                            (cli/src/main/kotlin/com/krauq/universalfileopener/
+                            desktop/cli/McpServer.kt) and the agent skill
+                            generator (.../cli/SkillCommand.kt), together with
+                            the module's tests and test fixtures
+  docs/cli/schemas/         the receipt, report and capability JSON schemas
+  tools/cli/                build, packaging, installation and evaluation tools
+  tools/corpus/             corpus and comparison evaluation tools
+  tools/audit/              the customer held compatibility audit tools
+  packaging/linux-cli/      Linux CLI packaging, container recipe, registry
+                            metadata and license or security evidence tooling
+  packaging/npm/            the npm wrapper package
+  packaging/homebrew/       the Homebrew formula
+
+NOT LICENSED UNDER APACHE 2.0
+-----------------------------
+
+The Apache grant above does NOT extend to any other part of this repository or
+to any distributed binary. In particular, and without limiting that statement,
+the following are NOT under the Apache License and carry no open source grant
+of any kind:
+
+  office-core/              the OOXML, ODF and XPS parsing, model and editor
+                            engine
+  viewer-core/              the PDF byte engine, image codecs, structured text,
+                            archive and detection engine
+  office-compose/           the shared document rendering and editing
+  office-compose-android/   controllers
+  desktop-app/              the Windows and Linux desktop application
+  app/                      the Android application
+  ios-app/                  the parked iOS foundation
+  baselineprofile/          the Android baseline profile module
+
+Every other file in this repository that is not listed in the Apache section
+above is likewise outside the Apache grant, including the prose under docs/,
+the material under store-assets/, and the tools/ directories not named above.
+
+Binary distributions of UFO, including the Linux app image, the Debian package
+and the restricted OCI container image, embed office-core, viewer-core and
+their third party dependencies. Those binaries are NOT distributed under the
+Apache License. They are distributed under the separate business use license
+in packaging/linux-cli/ENGINE-LICENSE.txt. Building the Apache licensed
+sources in this repository against the engines does not place the engines, or
+the resulting binary, under the Apache License.
+
+Third party components retain their own licenses and notices. See NOTICE at
+the repository root, desktop-app/src/main/resources/packaging/
+THIRD-PARTY-NOTICES.txt, viewer-core/src/main/resources/NOTICE.md and the
+component inventories under packaging/linux-cli/.
+
+Apache License 2.0 text
+=======================
+
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,90 @@
+Universal File Opener (UFO)
+Copyright 2026 Krauq LLC.
+
+This product includes software developed by Krauq LLC.
+
+What this NOTICE covers
+-----------------------
+
+This NOTICE is the Apache License 2.0 section 4(d) notice for the parts of
+this repository that LICENSE places under the Apache License, Version 2.0:
+
+  cli/                 the CLI command layer, the local stdio MCP server and
+                       the agent skill generator
+  docs/cli/schemas/    the receipt, report and capability JSON schemas
+  tools/cli/           build, packaging, installation and evaluation tools
+  tools/corpus/        corpus and comparison evaluation tools
+  tools/audit/         the customer held compatibility audit tools
+  packaging/linux-cli/ Linux CLI packaging, container recipe, registry
+                       metadata and evidence tooling
+  packaging/npm/       the npm wrapper package
+  packaging/homebrew/  the Homebrew formula
+
+What this NOTICE does not cover
+-------------------------------
+
+office-core, viewer-core, office-compose, office-compose-android,
+desktop-app, app, ios-app and baselineprofile are NOT under the Apache
+License. No open source grant of any kind applies to them. Neither does the
+Apache License apply to any distributed UFO binary: the Linux app image, the
+Debian package and the restricted OCI container image embed office-core and
+viewer-core and are distributed under the separate business use license in
+packaging/linux-cli/ENGINE-LICENSE.txt.
+
+A redistribution of the Apache licensed sources must keep this NOTICE and must
+not describe the engines, the applications or any UFO binary as Apache
+licensed.
+
+Third party components
+----------------------
+
+UFO binaries include third party software under its own licenses. The
+human readable notice shipped beside the application is
+desktop-app/src/main/resources/packaging/THIRD-PARTY-NOTICES.txt. Component
+inventories, license review rows, source locks and the special restriction
+decisions are under packaging/linux-cli/, including
+app-special-license-review.tsv, debian-license-review.tsv,
+jar-legal-evidence-review.tsv, debian-source.lock.tsv,
+temurin-source.lock.tsv and vendored-asset-source.lock.tsv.
+
+Vendored asset notices live with the assets: viewer-core/src/main/resources/
+NOTICE.md records the modified Roboto derivatives and their exact byte
+identities. The Android notice resource is app/src/main/res/raw/
+third_party_notices.txt.
+
+Named obligations that survive redistribution, from the review rows above:
+
+  UnRAR (com.github.junrar)      extraction only; the UnRAR restriction notice
+                                 must ship, and no RAR compatible archiver may
+                                 be developed from it
+  SQLite JDBC (org.xerial)       the exact Apache and Zentus notices are
+                                 preserved byte for byte
+  OpenJDK runtime                GPLv2 with the Classpath and assembly
+                                 exceptions; the packaged runtime keeps its
+                                 own legal directory and corresponding source
+                                 availability
+  glibc                          dynamically linked LGPL boundary with
+                                 relinkable shared libraries and corresponding
+                                 source availability
+  Roboto and the Adobe Glyph     modified derivatives, documented with their
+  List                           provenance and exact hashes
+
+Trademarks
+----------
+
+UFO, Universal File Opener and Krauq are marks of Krauq LLC. The Apache
+License does not grant trademark rights. Microsoft Office, Word, Excel,
+PowerPoint, Adobe, PDF and every other third party mark named in this
+repository belong to their respective owners and are used only to identify
+file formats and applications.
+
+Scope
+-----
+
+The Apache License covers the source paths listed above and nothing else. A
+binary distributed by Krauq LLC combines those Apache licensed sources with
+the proprietary engines, so the binary as a whole is licensed under the
+business use license in packaging/linux-cli/ENGINE-LICENSE.txt, and it ships
+the Apache License text and this NOTICE as the Apache License requires. The
+obligations named above stand as written for a source publication of the
+listed paths, which ships no third party binary.

package/README.md

@@ -1,3 +1,108 @@
-# Temporary Holding Version
+# UFO CLI
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Useful information for any accessible regular file. Deeper readers screen
+supported formats for hidden content and privacy risks, extract content, and
+make targeted changes in new copies. UFO runs locally as a CLI or stdio MCP
+server. Reports state what was inspected and what remains unknown.
+
+This package installs the exact UFO 1.5.2 runtime. Direct
+[Linux downloads](https://github.com/krauqllc/ufo-cli/releases/tag/v1.5.2)
+are also available. Install and check your first file:
+
+```sh
+npm install --global @krauq/ufo-cli@1.5.2 --allow-scripts=@krauq/ufo-cli
+ufo --version
+ufo doctor
+ufo inspect --json ./your-file
+```
+
+On npm 12, the explicit script approval lets UFO's installer run. With npm 11
+or earlier, use `npm install --global @krauq/ufo-cli@1.5.2` with install scripts
+enabled; omit `--allow-scripts`.
+
+Linux x86_64, glibc 2.35+, Node.js 18.17+ and GNU tar are required. Ubuntu
+24.04 and Debian 12 are tested. Native macOS, Windows, ARM64 and Alpine/musl
+are unsupported. Java is included. `ufo doctor` also checks optional rendering
+dependencies on your host.
+
+Your npm version may require a newer Node.js release than the wrapper does.
+For example, npm 12.2.0 requires Node.js 22.22.2 or later in 22.x, 24.15.0 or
+later in 24.x, or 26+. Use a Node.js version supported by your npm release.
+
+Installation downloads the pinned 202 MB release archive over HTTPS and checks
+its hash and complete runtime identity. npm install scripts must be enabled.
+Document processing sends no network requests or telemetry. A connected agent
+can send tool results to its model provider.
+
+For a supported document, try `ufo inspect --deep ./report.docx`. Basic file
+information does not promise a reader, editor or security inspector for every
+format. Review findings and coverage gaps; `ufo capabilities` and command help
+describe the operations available in this release.
+
+## Connect an agent
+
+Install before registering MCP. An uncached `npx` startup can exceed a client's
+handshake timeout while it downloads the runtime. An installed server starts
+without a download. Print a client template:
+
+```sh
+ufo mcp print-config --client claude-code
+```
+
+Use the installed `ufo` executable and replace allowed-root placeholders with
+existing absolute task directories. Printing does not register a server. UFO
+grants no directories by default; use separate input and output folders when
+possible. The same local server can be started directly:
+
+```sh
+ufo mcp --allow-root /absolute/input --allow-root /absolute/output
+```
+
+For a project guide instead, run
+`ufo skill install --agent claude-code --dir "$PWD"` and start a new session. See the
+[agent setup guide](https://universalfileopener.com/cli/#agents) for other clients.
+
+## License and maintenance
+
+Every command is included. Individuals and eligible small organizations can
+use UFO free; larger commercial organizations need a
+[business license](https://universalfileopener.com/cli/pricing/).
+Wrapper source is Apache 2.0; the full binary terms are in
+`ENGINE-LICENSE.txt`. Install a delivered license
+with `ufo license install ./license.json`, then check `ufo license status`.
+License checks are offline.
+
+The wrapper is pinned to its exact runtime version and never upgrades it
+silently. Update by selecting a reviewed exact published version. On npm 12:
+
+```sh
+npm install --global @krauq/ufo-cli@VERSION --allow-scripts=@krauq/ufo-cli
+```
+
+With npm 11 or earlier, omit `--allow-scripts` and keep install scripts enabled.
+If installation was blocked by script policy, approve and rerun the installed
+package's setup. This also verifies and reuses an intact runtime:
+
+```sh
+npm rebuild --global @krauq/ufo-cli --allow-scripts=@krauq/ufo-cli
+```
+
+The same npm-version rule applies to rebuilding. To check all files in a
+downloaded runtime, run:
+
+```sh
+npm run verify --prefix "$(npm root --global)/@krauq/ufo-cli"
+```
+
+Normal launches of that runtime check the launcher hash.
+
+Use `npm uninstall --global @krauq/ufo-cli` to remove the wrapper and downloaded
+runtime. It leaves your documents and per-user license in place. The optional
+`ufo license remove` command removes that license separately.
+
+To reuse an existing matching 1.5.2 installation, set
+`UFO_CLI_SKIP_DOWNLOAD=1` and `UFO_CLI_BINARY` to its absolute `bin/ufo` path
+during installation. The resolved path is saved and reused on later launches
+and rebuilds. The wrapper rejects another version and its own launcher.
+External installations are checked for the matching version, rather than the
+downloaded runtime's complete file identity.

package/bin/ufo.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+'use strict'
+
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+const { readRelease, launcher, wrapperEnvironment } = require('../lib/runtime')
+
+try {
+  const root = path.resolve(__dirname, '..')
+  const release = readRelease(root)
+  const env = wrapperEnvironment(__filename)
+  const result = spawnSync(launcher(root, release), process.argv.slice(2), { stdio: 'inherit', env })
+  if (result.error) throw result.error
+  if (result.signal) process.kill(process.pid, result.signal)
+  else process.exitCode = result.status === null ? 1 : result.status
+} catch (error) {
+  process.stderr.write(`@krauq/ufo-cli: ${error.message}\n`)
+  process.exitCode = 2
+}

package/lib/runtime.js

@@ -0,0 +1,159 @@
+'use strict'
+
+const crypto = require('node:crypto')
+const fs = require('node:fs')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+
+function platformKey (platform = process.platform, arch = process.arch, glibc = process.report.getReport().header.glibcVersionRuntime) {
+  if (platform !== 'linux' || arch !== 'x64') {
+    throw new Error(`no release for ${platform}/${arch}. UFO CLI currently supports Linux x86_64. Use a supported Linux host. Native macOS and Windows CLI downloads are not yet available.`)
+  }
+  const version = String(glibc || '').match(/^(\d+)\.(\d+)/)
+  if (!version || Number(version[1]) < 2 || (Number(version[1]) === 2 && Number(version[2]) < 35)) {
+    throw new Error('UFO CLI requires glibc 2.35 or later. Alpine/musl is unsupported. Ubuntu 24.04 and Debian 12 are tested installation targets.')
+  }
+  return 'linux-x64'
+}
+
+function readRelease (root, platform = process.platform, arch = process.arch) {
+  const key = platformKey(platform, arch)
+  const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'))
+  const pins = JSON.parse(fs.readFileSync(path.join(root, 'release-pins.json'), 'utf8'))
+  const asset = pins.assets && pins.assets[key]
+  if (!/^\d+\.\d+\.\d+$/.test(pins.version) || pins.version !== pkg.version || !asset) {
+    throw new Error('package version and release pins must name the same exact supported release.')
+  }
+  for (const field of ['sha256', 'treeSha256', 'launcherSha256']) {
+    if (!/^[a-f0-9]{64}$/.test(asset[field]) || /^0+$/.test(asset[field])) {
+      throw new Error(`release pin ${field} is missing or is a placeholder. Nothing was installed.`)
+    }
+  }
+  const url = new URL(asset.url)
+  const image = `universal-file-opener-${pins.version}-linux-x64`
+  if (url.protocol !== 'https:' || url.username || url.password ||
+      asset.launcher !== `${image}/bin/ufo` ||
+      !Number.isSafeInteger(asset.sizeBytes) || asset.sizeBytes <= 0 ||
+      !Number.isSafeInteger(asset.fileCount) || asset.fileCount <= 0) {
+    throw new Error('release pins contain an invalid URL, size, file count or launcher path.')
+  }
+  return { version: pins.version, image, asset }
+}
+
+function sha256 (file) {
+  const hash = crypto.createHash('sha256')
+  const buffer = Buffer.allocUnsafe(1024 * 1024)
+  const fd = fs.openSync(file, 'r')
+  try {
+    let count
+    while ((count = fs.readSync(fd, buffer, 0, buffer.length, null)) > 0) hash.update(buffer.subarray(0, count))
+  } finally {
+    fs.closeSync(fd)
+  }
+  return hash.digest('hex')
+}
+
+// Complete content identity, including executable bits. Update this pin from
+// the approved archive, never from a mutable installation receipt.
+function treeIdentity (image) {
+  const files = []
+  function visit (directory) {
+    for (const name of fs.readdirSync(directory).sort()) {
+      const file = path.join(directory, name)
+      const stat = fs.lstatSync(file)
+      if (stat.isDirectory()) visit(file)
+      else if (stat.isFile()) {
+        files.push({ path: path.relative(image, file).split(path.sep).join('/'), sizeBytes: stat.size, sha256: sha256(file), executable: Boolean(stat.mode & 0o111) })
+      } else throw new Error('runtime contains a symbolic link or a non-regular file.')
+    }
+  }
+  visit(image)
+  files.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0)
+  return { sha256: crypto.createHash('sha256').update(JSON.stringify(files)).digest('hex'), fileCount: files.length }
+}
+
+function executable (file) {
+  const resolved = fs.realpathSync(file)
+  if (!fs.statSync(resolved).isFile()) throw new Error('launcher is not a regular file.')
+  fs.accessSync(resolved, fs.constants.X_OK)
+  return resolved
+}
+
+function verifyImage (image, release) {
+  if (!fs.lstatSync(image).isDirectory()) throw new Error('runtime image is not a real directory.')
+  const identity = treeIdentity(image)
+  if (identity.fileCount !== release.asset.fileCount || identity.sha256 !== release.asset.treeSha256) {
+    throw new Error(`installed runtime does not match the complete ${release.version} release. Remove this package deliberately and reinstall; no existing runtime was changed.`)
+  }
+  return executable(path.join(image, 'bin/ufo'))
+}
+
+function verifyVendor (root, release) {
+  const vendor = path.join(root, 'vendor')
+  if (!fs.lstatSync(vendor).isDirectory() || JSON.stringify(fs.readdirSync(vendor)) !== JSON.stringify([release.image])) {
+    throw new Error('vendor must contain only the pinned runtime image. No existing runtime was changed.')
+  }
+  return verifyImage(path.join(vendor, release.image), release)
+}
+
+function wrapperEnvironment (shim, env = process.env) {
+  const self = fs.realpathSync(shim)
+  let active
+  try { active = JSON.parse(env.UFO_CLI_ACTIVE_WRAPPERS || '[]') } catch { active = [] }
+  if (!Array.isArray(active) || active.some(item => typeof item !== 'string')) active = []
+  if (active.includes(self)) throw new Error('recursive ufo wrapper on PATH. Set UFO_CLI_BINARY to the actual absolute UFO launcher.')
+  return { ...env, UFO_CLI_ACTIVE_WRAPPERS: JSON.stringify([...active, self]) }
+}
+
+function externalLauncher (root, release, env = process.env) {
+  const shim = path.join(root, 'bin/ufo.js')
+  const self = fs.realpathSync(shim)
+  const childEnv = wrapperEnvironment(shim, env)
+  let selected = env.UFO_CLI_BINARY
+  const marker = path.join(root, '.use-external-ufo.json')
+  if (!selected && fs.existsSync(marker)) {
+    let saved
+    try { saved = JSON.parse(fs.readFileSync(marker, 'utf8')) } catch {
+      throw new Error('saved external launcher configuration is invalid. Reinstall deliberately with UFO_CLI_BINARY set to the matching absolute launcher.')
+    }
+    if (!saved || saved.version !== release.version ||
+        (saved.binary !== undefined && (typeof saved.binary !== 'string' || !path.isAbsolute(saved.binary)))) {
+      throw new Error('saved external launcher configuration does not name this release and an absolute launcher. Reinstall deliberately with UFO_CLI_BINARY set.')
+    }
+    // Older local preparation saved only the version and used PATH. New
+    // installations retain the resolved launcher and verify it on every use.
+    selected = saved.binary
+  }
+  let candidates
+  if (selected) {
+    if (!path.isAbsolute(selected)) throw new Error('UFO_CLI_BINARY must be an absolute launcher path.')
+    candidates = [selected]
+  } else {
+    candidates = (env.PATH || '').split(path.delimiter).map(directory => path.resolve(directory || '.', 'ufo'))
+  }
+  for (const candidate of candidates) {
+    let resolved
+    try { resolved = executable(candidate) } catch { continue }
+    if (resolved === self) continue
+    const result = spawnSync(resolved, ['--version'], { encoding: 'utf8', env: childEnv, timeout: 10000, maxBuffer: 1024 * 1024 })
+    if (!result.error && result.status === 0 && result.stdout.trim() === `ufo ${release.version}`) return resolved
+    // Respect PATH precedence. Do not silently select a different installed
+    // release further down PATH after encountering a real incompatible ufo.
+    throw new Error(`external ufo must report "ufo ${release.version}". Set UFO_CLI_BINARY to that release's absolute launcher.`)
+  }
+  throw new Error(`no external UFO ${release.version} launcher. The npm shim cannot use itself. Install the matching Debian/app-image release or allow the pinned download.`)
+}
+
+function launcher (root, release, env = process.env) {
+  if (env.UFO_CLI_BINARY) return externalLauncher(root, release, env)
+  const installed = path.join(root, 'vendor', release.asset.launcher)
+  if (fs.existsSync(installed)) {
+    const resolved = executable(installed)
+    if (sha256(resolved) !== release.asset.launcherSha256) throw new Error('installed launcher does not match the release pin. Run npm run verify in the package directory.')
+    return resolved
+  }
+  if (fs.existsSync(path.join(root, '.use-external-ufo.json')) || env.UFO_CLI_SKIP_DOWNLOAD === '1') return externalLauncher(root, release, env)
+  throw new Error('no installed runtime. Enable npm install scripts and reinstall, or explicitly set UFO_CLI_SKIP_DOWNLOAD=1 with the matching UFO release already installed.')
+}
+
+module.exports = { platformKey, readRelease, sha256, treeIdentity, executable, verifyImage, verifyVendor, wrapperEnvironment, externalLauncher, launcher }

package/package.json

@@ -1,6 +1,60 @@
 {
   "name": "@krauq/ufo-cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.5.2",
+  "private": false,
+  "description": "Pinned local file inspection, extraction and guarded edits for CLI and MCP. Linux x86_64.",
+  "mcpName": "io.github.krauqllc/ufo-cli",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "keywords": [
+    "docx",
+    "xlsx",
+    "pptx",
+    "pdf",
+    "mcp",
+    "agent",
+    "document-editing",
+    "cli"
+  ],
+  "license": "SEE LICENSE IN ENGINE-LICENSE.txt",
+  "homepage": "https://universalfileopener.com/cli/",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/krauqllc/ufo-cli.git"
+  },
+  "bugs": {
+    "url": "mailto:support@krauq.com"
+  },
+  "engines": {
+    "node": ">=18.17.0"
+  },
+  "os": [
+    "linux"
+  ],
+  "cpu": [
+    "x64"
+  ],
+  "libc": [
+    "glibc"
+  ],
+  "bin": {
+    "ufo": "bin/ufo.js"
+  },
+  "files": [
+    "bin/ufo.js",
+    "lib/runtime.js",
+    "scripts/postinstall.js",
+    "release-pins.json",
+    "README.md",
+    "ENGINE-LICENSE.txt",
+    "NOTICE",
+    "LICENSE"
+  ],
+  "scripts": {
+    "postinstall": "node scripts/postinstall.js",
+    "verify": "node scripts/postinstall.js --verify-only"
+  },
+  "dependencies": {}
+}

package/release-pins.json

@@ -0,0 +1,22 @@
+{
+  "version": "1.5.2",
+  "provenance": {
+    "releaseUrl": "https://github.com/krauqllc/ufo-cli/releases/tag/v1.5.2",
+    "releaseId": 403255027,
+    "sourceCommit": "af3021084836d6b42c8a92efab758e645f494186",
+    "checksumSignatureNamespace": "ufo-cli-release-checksums-v1",
+    "signerFingerprint": "SHA256:PaoFqFSErvcvmeZ+GAzWUSX/f2A3afw9RIvrs4wxt60",
+    "verifiedAt": "2026-10-04"
+  },
+  "assets": {
+    "linux-x64": {
+      "url": "https://github.com/krauqllc/ufo-cli/releases/download/v1.5.2/universal-file-opener-1.5.2-linux-x64.tar.gz",
+      "sha256": "60f56e71fd00b21a48b160eaee85c082811f8e256d16474d916d3af05ec8fd1b",
+      "sizeBytes": 205252019,
+      "launcher": "universal-file-opener-1.5.2-linux-x64/bin/ufo",
+      "launcherSha256": "0c6913ad8ca795cf68fb2843509d6db565b80a30119ef40083710dc1ea28d14b",
+      "treeSha256": "8fad7137aeba60ce072221179be63a686b2342326d84fdef60dfba854aa8008c",
+      "fileCount": 467
+    }
+  }
+}

package/scripts/postinstall.js

@@ -0,0 +1,155 @@
+#!/usr/bin/env node
+'use strict'
+
+const fs = require('node:fs')
+const path = require('node:path')
+const https = require('node:https')
+const { spawnSync } = require('node:child_process')
+const { readRelease, sha256, verifyImage, verifyVendor, externalLauncher } = require('../lib/runtime')
+
+const DOWNLOAD_TIMEOUT_MS = 120000
+const EXTRACTION_TIMEOUT_MS = 120000
+
+function download (url, destination, sizeBytes, redirects = 0, deadline = Date.now() + DOWNLOAD_TIMEOUT_MS) {
+  if (new URL(url).protocol !== 'https:' || redirects > 5) throw new Error('download requires HTTPS and at most five redirects.')
+  const remaining = deadline - Date.now()
+  if (remaining <= 0) throw new Error('release download exceeded its total deadline. Nothing was installed.')
+  return new Promise((resolve, reject) => {
+    let request
+    let response
+    let out
+    let timer
+    let settled = false
+    function finish (error, result) {
+      if (settled) return
+      settled = true
+      clearTimeout(timer)
+      if (error) {
+        if (request) request.destroy()
+        if (response) response.destroy()
+        if (out) out.destroy()
+        reject(error)
+      } else resolve(result)
+    }
+    request = https.get(url, { headers: { 'user-agent': 'ufo-cli-npm-wrapper' } }, incoming => {
+      response = incoming
+      if ([301, 302, 303, 307, 308].includes(response.statusCode)) {
+        response.resume()
+        if (!response.headers.location) return finish(new Error('download redirect has no location.'))
+        try {
+          download(new URL(response.headers.location, url).toString(), destination, sizeBytes, redirects + 1, deadline)
+            .then(result => finish(null, result), finish)
+        } catch (error) { finish(error) }
+        return
+      }
+      if (response.statusCode !== 200) {
+        response.resume()
+        finish(new Error(`download returned HTTP ${response.statusCode}. Nothing was installed.`))
+        return
+      }
+      out = fs.createWriteStream(destination, { flags: 'wx', mode: 0o600 })
+      let received = 0
+      response.on('data', data => {
+        received += data.length
+        if (received > sizeBytes) response.destroy(new Error('download exceeds the release pin size.'))
+      })
+      response.on('error', finish)
+      out.on('error', finish)
+      response.pipe(out)
+      out.on('finish', () => out.close(error => finish(error, destination)))
+    })
+    request.on('error', finish)
+    request.setTimeout(Math.min(remaining, DOWNLOAD_TIMEOUT_MS), () => finish(new Error('release download timed out. Nothing was installed.')))
+    timer = setTimeout(() => finish(new Error('release download exceeded its total deadline. Nothing was installed.')), remaining)
+  })
+}
+
+function tar (args, timeoutMs = EXTRACTION_TIMEOUT_MS) {
+  const result = spawnSync('tar', args, { encoding: 'utf8', maxBuffer: 4 * 1024 * 1024, timeout: timeoutMs, killSignal: 'SIGKILL' })
+  if (result.error && result.error.code === 'ETIMEDOUT') throw new Error('archive listing or extraction exceeded its two-minute deadline. Nothing was installed.')
+  if (result.error || result.status !== 0) throw new Error('GNU tar could not read the release asset. Install GNU tar or use the Debian package.')
+  return result.stdout
+}
+
+function extract (archive, into, release) {
+  const members = tar(['--list', '--gzip', '--file', archive, '--quoting-style=literal']).trimEnd().split('\n')
+  if (!members.length || members.some(name =>
+    !/^[A-Za-z0-9 ._+/-]+$/.test(name) ||
+    !name.startsWith(`${release.image}/`) ||
+    name.split('/').some(part => part === '..' || part === '.'))) {
+    throw new Error('release archive contains an unexpected path. Nothing was installed.')
+  }
+  const listing = tar(['--list', '--verbose', '--gzip', '--file', archive, '--quoting-style=literal'])
+  if (listing.trimEnd().split('\n').some(line => !['-', 'd'].includes(line[0]))) {
+    throw new Error('release archive contains links or special files. Nothing was installed.')
+  }
+  tar(['--extract', '--gzip', '--file', archive, '--directory', into, '--no-same-owner', '--no-same-permissions'])
+}
+
+async function install (root, env = process.env, verifyOnly = false) {
+  const release = readRelease(root)
+  const vendor = path.join(root, 'vendor')
+  const marker = path.join(root, '.use-external-ufo.json')
+  if (env.UFO_CLI_SKIP_DOWNLOAD === '1' || (!fs.existsSync(vendor) && fs.existsSync(marker))) {
+    const binary = externalLauncher(root, release, env)
+    if (!verifyOnly) fs.writeFileSync(marker, JSON.stringify({ version: release.version, binary }) + '\n', { mode: 0o600 })
+    process.stderr.write(`@krauq/ufo-cli: using external UFO ${release.version} at ${binary}.\n`)
+    return binary
+  }
+  if (fs.existsSync(vendor)) {
+    const binary = verifyVendor(root, release)
+    process.stderr.write(`@krauq/ufo-cli: verified existing UFO ${release.version}; no download needed.\n`)
+    return binary
+  }
+  if (verifyOnly) {
+    throw new Error('no installed runtime to verify. Enable npm install scripts and reinstall.')
+  }
+
+  // Lock and stage beside vendor. Only a complete verified image is renamed
+  // into place; a failed download/extraction leaves no installed runtime.
+  const lock = path.join(root, '.ufo-install.lock')
+  let lockFd
+  let staging
+  let createdVendor = false
+  try {
+    try { lockFd = fs.openSync(lock, 'wx', 0o600) } catch (error) {
+      if (error.code === 'EEXIST') throw new Error('another install is active, or an interrupted install left .ufo-install.lock. Remove that lock only after confirming no install is running.')
+      throw error
+    }
+    if (fs.existsSync(vendor)) return verifyVendor(root, release)
+    staging = fs.mkdtempSync(path.join(root, '.ufo-stage-'))
+    const archive = path.join(staging, 'release.tar.gz')
+    if (env.UFO_CLI_LOCAL_ASSET) {
+      const source = fs.statSync(env.UFO_CLI_LOCAL_ASSET)
+      if (!source.isFile() || source.size !== release.asset.sizeBytes) throw new Error('local asset size does not match the release pin. Nothing was installed.')
+      fs.copyFileSync(env.UFO_CLI_LOCAL_ASSET, archive, fs.constants.COPYFILE_EXCL)
+    } else await download(release.asset.url, archive, release.asset.sizeBytes)
+    if (fs.statSync(archive).size !== release.asset.sizeBytes || sha256(archive) !== release.asset.sha256) throw new Error('release size or SHA-256 mismatch. Nothing was installed.')
+    extract(archive, staging, release)
+    const image = path.join(staging, release.image)
+    verifyImage(image, release)
+    fs.mkdirSync(vendor)
+    createdVendor = true
+    fs.renameSync(image, path.join(vendor, release.image))
+    createdVendor = false
+    fs.rmSync(path.join(root, '.use-external-ufo.json'), { force: true })
+    process.stderr.write(`@krauq/ufo-cli: installed verified UFO ${release.version}. Installation needs no system Java; document processing is local.\n`)
+    return path.join(vendor, release.asset.launcher)
+  } finally {
+    if (createdVendor && fs.readdirSync(vendor).length === 0) fs.rmdirSync(vendor)
+    if (staging) fs.rmSync(staging, { recursive: true, force: true })
+    if (lockFd !== undefined) {
+      fs.closeSync(lockFd)
+      fs.rmSync(lock, { force: true })
+    }
+  }
+}
+
+if (require.main === module) {
+  install(path.resolve(__dirname, '..'), process.env, process.argv.includes('--verify-only')).catch(error => {
+    process.stderr.write(`@krauq/ufo-cli: ${error.message}\n`)
+    process.exitCode = 1
+  })
+}
+
+module.exports = { install, download, extract, tar }