@krauq/ufo-cli 1.6.0 → 1.10.1

package/LICENSE

@@ -44,6 +44,8 @@ of any kind:
                             archive and detection engine
   office-compose/           the shared document rendering and editing
   office-compose-android/   controllers
+  editor-chrome/            the shared editor ribbon for Windows and Android
+  editor-chrome-android/    tablets
   desktop-app/              the Windows and Linux desktop application
   app/                      the Android application
   ios-app/                  the parked iOS foundation

package/NOTICE

@@ -24,11 +24,12 @@ What this NOTICE does not cover
 -------------------------------
 
 office-core, viewer-core, office-compose, office-compose-android,
-desktop-app, app, ios-app and baselineprofile are NOT under the Apache
-License. No open source grant of any kind applies to them. Neither does the
-Apache License apply to any distributed UFO binary: the Linux app image, the
-Debian package and the restricted OCI container image embed office-core and
-viewer-core and are distributed under the separate business use license in
+desktop-app, app, ios-app, baselineprofile and web-engine are NOT under the
+Apache License. No open source grant of any kind applies to them. Neither does
+the Apache License apply to any distributed UFO binary: the Linux app image,
+the Debian package, the restricted OCI container image and the browser engine
+module (web-engine, ufo-engine.wasm) embed office-core and viewer-core and are
+distributed under the separate business use license in
 packaging/linux-cli/ENGINE-LICENSE.txt.
 
 A redistribution of the Apache licensed sources must keep this NOTICE and must
@@ -47,9 +48,16 @@ app-special-license-review.tsv, debian-license-review.tsv,
 jar-legal-evidence-review.tsv, debian-source.lock.tsv,
 temurin-source.lock.tsv and vendored-asset-source.lock.tsv.
 
+The browser engine module ships web-engine/legal/ENGINE-NOTICE.txt, its own
+notice for everything compiled into it (including TeaVM, Apache License 2.0,
+and the ThreeTen backport, BSD-3-Clause), with the component inventory
+web-engine/legal/component-inventory.tsv.
+
 Vendored asset notices live with the assets: viewer-core/src/main/resources/
 NOTICE.md records the modified Roboto derivatives and their exact byte
-identities. The Android notice resource is app/src/main/res/raw/
+identities, and the public domain LZMA SDK PPMd7 decoder port. The decoder
+source provenance and version are in viewer-core/src/main/resources/
+component-inventory.tsv. The Android notice resource is app/src/main/res/raw/
 third_party_notices.txt.
 
 Named obligations that survive redistribution, from the review rows above:

package/README.md

@@ -6,19 +6,19 @@ change them without breaking them, and hand back clean copies. UFO runs
 locally as a CLI or stdio MCP server. Reports state what was inspected and
 what remains unknown; findings are advisory, not an antivirus verdict.
 
-This package installs the exact UFO 1.6.0 runtime. Direct
-[Linux downloads](https://github.com/krauqllc/ufo-cli/releases/tag/v1.6.0)
+This package installs the exact UFO 1.10.1 runtime. Direct
+[Linux downloads](https://github.com/krauqllc/ufo-cli/releases/tag/v1.10.1)
 are also available. Install and check your first file:
 
 ```sh
-npm install --global @krauq/ufo-cli@1.6.0 --allow-scripts=@krauq/ufo-cli
+npm install --global @krauq/ufo-cli@1.10.1 --allow-scripts=@krauq/ufo-cli
 ufo --version
 ufo doctor
 ufo inspect --json ./your-file
 ```
 
 On npm 12, the explicit script approval lets UFO's installer run. With npm 11
-or earlier, use `npm install --global @krauq/ufo-cli@1.6.0` with install scripts
+or earlier, use `npm install --global @krauq/ufo-cli@1.10.1` with install scripts
 enabled; omit `--allow-scripts`.
 
 Linux x86_64, glibc 2.35+, Node.js 18.17+ and GNU tar are required. Ubuntu
@@ -101,7 +101,7 @@ Use `npm uninstall --global @krauq/ufo-cli` to remove the wrapper and downloaded
 runtime. It leaves your documents and per-user license in place. The optional
 `ufo license remove` command removes that license separately.
 
-To reuse an existing matching 1.6.0 installation, set
+To reuse an existing matching 1.10.1 installation, set
 `UFO_CLI_SKIP_DOWNLOAD=1` and `UFO_CLI_BINARY` to its absolute `bin/ufo` path
 during installation. The resolved path is saved and reused on later launches
 and rebuilds. The wrapper rejects another version and its own launcher.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@krauq/ufo-cli",
-  "version": "1.6.0",
+  "version": "1.10.1",
   "private": false,
   "description": "Pinned local file inspection, extraction and guarded edits for CLI and MCP. Linux x86_64.",
   "mcpName": "io.github.krauqllc/ufo-cli",

package/release-pins.json

@@ -1,22 +1,22 @@
 {
-  "version": "1.6.0",
+  "version": "1.10.1",
   "provenance": {
-    "releaseUrl": "https://github.com/krauqllc/ufo-cli/releases/tag/v1.6.0",
-    "releaseId": 404332646,
-    "sourceCommit": "01cd7abb9037872e0195a618c89830e755467ad2",
+    "releaseUrl": "https://github.com/krauqllc/ufo-cli/releases/tag/v1.10.1",
+    "releaseId": 414166382,
+    "sourceCommit": "356eeb4d6f9a446cd1a6ba9e1c7079781d456e34",
     "checksumSignatureNamespace": "ufo-cli-release-checksums-v1",
     "signerFingerprint": "SHA256:PaoFqFSErvcvmeZ+GAzWUSX/f2A3afw9RIvrs4wxt60",
-    "verifiedAt": "2026-10-06"
+    "verifiedAt": "2026-10-15"
   },
   "assets": {
     "linux-x64": {
-      "url": "https://github.com/krauqllc/ufo-cli/releases/download/v1.6.0/universal-file-opener-1.6.0-linux-x64.tar.gz",
-      "sha256": "50a70b90fd474a88f090dda1aafd3c59efe476b36f1d1d1e83b5703ad1584ca4",
-      "sizeBytes": 205145573,
-      "launcher": "universal-file-opener-1.6.0-linux-x64/bin/ufo",
-      "launcherSha256": "3cd0fa3a4227a1136787c07a4977339db0509ab35e69a58d9f672132c2e45b91",
-      "treeSha256": "c47082d3da59b2672e2e13c816acfcbb1dcf44e94b660ba5a9f8a5c3de0b81cd",
-      "fileCount": 467
+      "url": "https://github.com/krauqllc/ufo-cli/releases/download/v1.10.1/universal-file-opener-1.10.1-linux-x64.tar.gz",
+      "sha256": "aa41529c837d6b4dd66838d2f9607ab71a6c184b638f7cc0d3c006a1f22d9307",
+      "sizeBytes": 208753714,
+      "launcher": "universal-file-opener-1.10.1-linux-x64/bin/ufo",
+      "launcherSha256": "d9f843636fce7f6d34d3fa552c153db1f7229781f7d0c0a704d4a21aab51b590",
+      "treeSha256": "75e873f133a1bd25ab9da61cc4cbe6f2728982adb377e681e011b418e921fdf1",
+      "fileCount": 469
     }
   }
 }