@krauq/ufo-cli 1.6.0 → 1.7.1

package/LICENSE

@@ -44,6 +44,8 @@ of any kind:
                             archive and detection engine
   office-compose/           the shared document rendering and editing
   office-compose-android/   controllers
+  editor-chrome/            the shared editor ribbon for Windows and Android
+  editor-chrome-android/    tablets
   desktop-app/              the Windows and Linux desktop application
   app/                      the Android application
   ios-app/                  the parked iOS foundation

package/NOTICE

@@ -24,11 +24,12 @@ What this NOTICE does not cover
 -------------------------------
 
 office-core, viewer-core, office-compose, office-compose-android,
-desktop-app, app, ios-app and baselineprofile are NOT under the Apache
-License. No open source grant of any kind applies to them. Neither does the
-Apache License apply to any distributed UFO binary: the Linux app image, the
-Debian package and the restricted OCI container image embed office-core and
-viewer-core and are distributed under the separate business use license in
+desktop-app, app, ios-app, baselineprofile and web-engine are NOT under the
+Apache License. No open source grant of any kind applies to them. Neither does
+the Apache License apply to any distributed UFO binary: the Linux app image,
+the Debian package, the restricted OCI container image and the browser engine
+module (web-engine, ufo-engine.wasm) embed office-core and viewer-core and are
+distributed under the separate business use license in
 packaging/linux-cli/ENGINE-LICENSE.txt.
 
 A redistribution of the Apache licensed sources must keep this NOTICE and must
@@ -47,6 +48,11 @@ app-special-license-review.tsv, debian-license-review.tsv,
 jar-legal-evidence-review.tsv, debian-source.lock.tsv,
 temurin-source.lock.tsv and vendored-asset-source.lock.tsv.
 
+The browser engine module ships web-engine/legal/ENGINE-NOTICE.txt, its own
+notice for everything compiled into it (including TeaVM, Apache License 2.0,
+and the ThreeTen backport, BSD-3-Clause), with the component inventory
+web-engine/legal/component-inventory.tsv.
+
 Vendored asset notices live with the assets: viewer-core/src/main/resources/
 NOTICE.md records the modified Roboto derivatives and their exact byte
 identities. The Android notice resource is app/src/main/res/raw/

package/README.md

@@ -6,19 +6,19 @@ change them without breaking them, and hand back clean copies. UFO runs
 locally as a CLI or stdio MCP server. Reports state what was inspected and
 what remains unknown; findings are advisory, not an antivirus verdict.
 
-This package installs the exact UFO 1.6.0 runtime. Direct
-[Linux downloads](https://github.com/krauqllc/ufo-cli/releases/tag/v1.6.0)
+This package installs the exact UFO 1.7.1 runtime. Direct
+[Linux downloads](https://github.com/krauqllc/ufo-cli/releases/tag/v1.7.1)
 are also available. Install and check your first file:
 
 ```sh
-npm install --global @krauq/ufo-cli@1.6.0 --allow-scripts=@krauq/ufo-cli
+npm install --global @krauq/ufo-cli@1.7.1 --allow-scripts=@krauq/ufo-cli
 ufo --version
 ufo doctor
 ufo inspect --json ./your-file
 ```
 
 On npm 12, the explicit script approval lets UFO's installer run. With npm 11
-or earlier, use `npm install --global @krauq/ufo-cli@1.6.0` with install scripts
+or earlier, use `npm install --global @krauq/ufo-cli@1.7.1` with install scripts
 enabled; omit `--allow-scripts`.
 
 Linux x86_64, glibc 2.35+, Node.js 18.17+ and GNU tar are required. Ubuntu
@@ -101,7 +101,7 @@ Use `npm uninstall --global @krauq/ufo-cli` to remove the wrapper and downloaded
 runtime. It leaves your documents and per-user license in place. The optional
 `ufo license remove` command removes that license separately.
 
-To reuse an existing matching 1.6.0 installation, set
+To reuse an existing matching 1.7.1 installation, set
 `UFO_CLI_SKIP_DOWNLOAD=1` and `UFO_CLI_BINARY` to its absolute `bin/ufo` path
 during installation. The resolved path is saved and reused on later launches
 and rebuilds. The wrapper rejects another version and its own launcher.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@krauq/ufo-cli",
-  "version": "1.6.0",
+  "version": "1.7.1",
   "private": false,
   "description": "Pinned local file inspection, extraction and guarded edits for CLI and MCP. Linux x86_64.",
   "mcpName": "io.github.krauqllc/ufo-cli",

package/release-pins.json

@@ -1,22 +1,22 @@
 {
-  "version": "1.6.0",
+  "version": "1.7.1",
   "provenance": {
-    "releaseUrl": "https://github.com/krauqllc/ufo-cli/releases/tag/v1.6.0",
-    "releaseId": 404332646,
-    "sourceCommit": "01cd7abb9037872e0195a618c89830e755467ad2",
+    "releaseUrl": "https://github.com/krauqllc/ufo-cli/releases/tag/v1.7.1",
+    "releaseId": 409141428,
+    "sourceCommit": "ecec32f2d6716a7b03a97d4a9ac4814bfa1b7f9e",
     "checksumSignatureNamespace": "ufo-cli-release-checksums-v1",
     "signerFingerprint": "SHA256:PaoFqFSErvcvmeZ+GAzWUSX/f2A3afw9RIvrs4wxt60",
-    "verifiedAt": "2026-10-06"
+    "verifiedAt": "2026-10-10"
   },
   "assets": {
     "linux-x64": {
-      "url": "https://github.com/krauqllc/ufo-cli/releases/download/v1.6.0/universal-file-opener-1.6.0-linux-x64.tar.gz",
-      "sha256": "50a70b90fd474a88f090dda1aafd3c59efe476b36f1d1d1e83b5703ad1584ca4",
-      "sizeBytes": 205145573,
-      "launcher": "universal-file-opener-1.6.0-linux-x64/bin/ufo",
-      "launcherSha256": "3cd0fa3a4227a1136787c07a4977339db0509ab35e69a58d9f672132c2e45b91",
-      "treeSha256": "c47082d3da59b2672e2e13c816acfcbb1dcf44e94b660ba5a9f8a5c3de0b81cd",
-      "fileCount": 467
+      "url": "https://github.com/krauqllc/ufo-cli/releases/download/v1.7.1/universal-file-opener-1.7.1-linux-x64.tar.gz",
+      "sha256": "3170f5a141bd0fa0c645564f2a656b1c8e11d863d2600e49834756b3d88ba647",
+      "sizeBytes": 207340245,
+      "launcher": "universal-file-opener-1.7.1-linux-x64/bin/ufo",
+      "launcherSha256": "802ca4f13f7ab3bb053d9ab83f84d7659b597a407e28902ace72faf65c751265",
+      "treeSha256": "df2a14721383d4652bfe415713eeb187d8d7f36a81e88d967f7a960e5148a1c5",
+      "fileCount": 468
     }
   }
 }