@simulatte/doppler 0.1.8 → 0.2.0

package/README.md

@@ -1,103 +1,9 @@
 # @simulatte/doppler
 
-Inference and training on raw WebGPU. Pure JS + WGSL.
+**This package has moved to [`doppler-gpu`](https://www.npmjs.com/package/doppler-gpu).**
 
-![Phase-latency comparison on one workload across models](https://raw.githubusercontent.com/clocksmith/doppler/main/benchmarks/vendors/results/compare_1b_multi-workload_favorable_phases.svg)
-
-## Quick start
-
-```js
-import { doppler } from '@simulatte/doppler';
-
-const model = await doppler.load('gemma3-270m');
-
-for await (const token of model.generate('Describe WebGPU briefly')) {
-  process.stdout.write(token);
-}
 ```
-
-Browser-first WebGPU inference and training with explicit manifest-driven
-runtime behavior. Built for local models, streamed generation, adapter
-hot-swap, and direct JS → WGSL → WebGPU execution.
-
-Registry IDs resolve to hosted RDRR artifacts from `Clocksmith/rdrr` by default. Tokens stream from a native `AsyncGenerator`. See [more examples](#more-examples) below or the canonical [Root API guide](https://github.com/clocksmith/doppler/blob/main/docs/api/root.md).
-
-## Install
-
-```bash
-npm install @simulatte/doppler
+npm install doppler-gpu
 ```
 
-**[Live Demo](https://d4da.com)** · **[npm](https://www.npmjs.com/package/@simulatte/doppler)** · **[docs](https://github.com/clocksmith/doppler/blob/main/docs/INDEX.md)** · **[Project site](https://simulatte.world)**
-
-## Why Doppler
-
-**JS → WGSL → WebGPU.** Direct JavaScript orchestration into native WebGPU kernels, avoiding ONNX runtimes, WASM blobs, and bridge layers.
-
-**`for await` streaming.** Generation uses a native `AsyncGenerator` that fits normal app control flow.
-
-**LoRA hot-swap.** Swap adapters at runtime without reloading the base model.
-
-**Independent model instances.** Run multiple models concurrently. Each owns its pipeline, buffers, and KV cache.
-
-## Evidence
-
-Snapshot artifacts:
-- [g3-1b-p064-d064-t0-k1.compare.json](https://github.com/clocksmith/doppler/blob/main/benchmarks/vendors/fixtures/g3-1b-p064-d064-t0-k1.compare.json)
-- [lfm2-5-1-2b-p064-d064-t0-k1.compare.json](https://github.com/clocksmith/doppler/blob/main/benchmarks/vendors/fixtures/lfm2-5-1-2b-p064-d064-t0-k1.compare.json)
-
-## Under the hood
-
-- Sharded weight loading via OPFS moves multi-GB weights into VRAM without blocking the main thread.
-- Quantized inference paths (Q4K, Q8, F16) support practical model sizes on consumer GPUs.
-- Kernel hot-swap between prefill and decode paths.
-- Config-driven runtime keeps presets, kernel-path selection, and sampling explicit.
-- Reproducible benchmarks expose deterministic knobs and auditable kernel traces.
-
-## More examples
-
-```js
-// Non-streaming
-const text = await model.generateText('Explain WebGPU in one sentence');
-
-// Load with progress logging
-const modelWithProgress = await doppler.load('gemma3-270m', {
-  onProgress: ({ message }) => console.log(`[doppler] ${message}`),
-});
-
-// Chat
-const reply = await model.chatText([
-  { role: 'user', content: 'Write a dispatch that outruns its own light cone' },
-]);
-
-// LoRA hot-swap
-await model.loadLoRA('https://example.com/adapters/oneshift-twoshift-redshift-blueshift/manifest.json');
-
-// Convenience shorthand (caches model automatically)
-for await (const token of doppler('Hello', { model: 'gemma3-270m' })) {
-  process.stdout.write(token);
-}
-```
-
-## Documentation
-
-- Docs index (canonical navigation): [docs/INDEX.md](https://github.com/clocksmith/doppler/blob/main/docs/INDEX.md)
-- First-run workflow: [docs/getting-started.md](https://github.com/clocksmith/doppler/blob/main/docs/getting-started.md)
-- Runtime config contract: [docs/config.md](https://github.com/clocksmith/doppler/blob/main/docs/config.md)
-- Architecture: [docs/architecture.md](https://github.com/clocksmith/doppler/blob/main/docs/architecture.md)
-- Generated model support table: [docs/model-support-matrix.md](https://github.com/clocksmith/doppler/blob/main/docs/model-support-matrix.md)
-
-Current model support is generated from the catalog and conversion registry.
-See [docs/model-support-matrix.md](https://github.com/clocksmith/doppler/blob/main/docs/model-support-matrix.md) for the canonical verified, failing, and unverified status table.
-
-## Environment requirements
-
-- WebGPU is required.
-- Supported runtimes: WebGPU-capable browsers, or Node with a WebGPU provider.
-- Chrome / Edge 113+ supported.
-- Firefox support varies (typically behind a flag).
-- Safari support is evolving.
-
-## License
-
-Apache License 2.0 (`Apache-2.0`). See [LICENSE](LICENSE) and [NOTICE](NOTICE).
+All future releases will be published under `doppler-gpu`.

package/package.json

@@ -1,166 +1,11 @@
 {
   "name": "@simulatte/doppler",
-  "version": "0.1.8",
-  "description": "Browser-native WebGPU inference engine for local intent and inference loops",
-  "main": "src/index.js",
-  "types": "src/index.d.ts",
-  "type": "module",
-  "bin": {
-    "doppler": "tools/doppler-cli.js"
-  },
-  "scripts": {
-    "cli": "node tools/doppler-cli.js",
-    "convert": "node tools/doppler-cli.js convert",
-    "manifest-refresh": "node tools/refresh-converted-manifest.js",
-    "debug": "node tools/doppler-cli.js debug",
-    "bench": "node tools/doppler-cli.js bench",
-    "lean:check": "./lean/check.sh",
-    "lean:execution-contract": "node tools/lean-execution-contract.js",
-    "lean:execution-contract:sweep": "node tools/lean-execution-contract-sweep.js",
-    "lean:execution-contract:configs": "node tools/lean-execution-contract-config-sweep.js",
-    "ci:lean:execution-contract": "node tools/lean-execution-contract-sweep.js --root models",
-    "ci:lean:execution-contract:configs": "node tools/lean-execution-contract-config-sweep.js --config-root tools/configs/conversion --manifest-root models --require-manifest-match",
-    "contracts:check": "node tools/check-contract-artifacts.js",
-    "contracts:summary": "node tools/check-contract-artifacts.js --json",
-    "contracts:check:lean": "node tools/check-contract-artifacts.js --with-lean",
-    "contracts:summary:lean": "node tools/check-contract-artifacts.js --json --with-lean",
-    "ci:contracts:check": "node tools/check-contract-artifacts.js --with-lean --lean-require-manifest-match",
-    "reports:convert:summary": "node tools/summarize-conversion-reports.js",
-    "bench:chart": "node ./benchmarks/vendors/compare-chart.js",
-    "bench:chart:readme": "node ./benchmarks/vendors/compare-chart.js --preset readme-evidence",
-    "bench:architecture:chart": "node ./benchmarks/vendors/generate-architecture-overview-svg.js",
-    "ci:diffusion:contract": "node tools/ci-diffusion-contract-gates.js",
-    "ci:diffusion:contract:list": "node tools/ci-diffusion-contract-gates.js --list",
-    "ci:training:contract": "node tools/ci-training-contract-gates.js",
-    "ci:training:contract:list": "node tools/ci-training-contract-gates.js --list",
-    "training:contract:delta": "node tools/emit-training-contract-delta.js",
-    "training:workloads:verify": "node tools/verify-training-workload-packs.js --registry tools/configs/training-workloads/registry.json",
-    "training:report-ids:publish": "node tools/publish-training-report-ids.js --registry tools/configs/training-workloads/registry.json",
-    "distill:studio:mvp": "node tools/distill-studio-mvp.js",
-    "distill:quality-gate": "node tools/distill-studio-quality-gate.js",
-    "p2p:observability": "node tools/p2p-delivery-observability.js",
-    "p2p:drill": "node tools/p2p-resilience-drill.js",
-    "test": "npm run test:unit",
-    "test:unit": "node tools/run-node-tests.js --suite unit",
-    "test:gpu": "node tools/run-node-tests.js --suite gpu",
-    "test:coverage": "node tools/run-node-coverage.js",
-    "test:coverage:report": "node tools/run-node-coverage.js --no-threshold",
-    "test:gpu:browser": "node tools/doppler-cli.js verify --config '{\"request\":{\"suite\":\"kernels\"},\"run\":{\"surface\":\"browser\",\"browser\":{\"opfsCache\":false,\"headless\":true,\"channel\":\"chromium\",\"browserArgs\":[\"--use-angle=swiftshader\",\"--disable-vulkan-surface\"],\"console\":true}}}'",
-    "agents:verify": "node tools/verify-agent-parity.js",
-    "agents:freshness": "node tools/verify-agent-freshness.js",
-    "agents:freshness:strict": "node tools/verify-agent-freshness.js --strict",
-    "conflicts:check": "node tools/check-merge-markers.js",
-    "imports:check:browser": "node tools/check-browser-import-graph.js",
-    "api:docs:sync": "node tools/sync-api-docs.js",
-    "api:docs:check": "node tools/sync-api-docs.js --check",
-    "verify:model": "node tools/doppler-cli.js verify",
-    "quickstart:sync": "node tools/sync-quickstart-registry.js",
-    "quickstart:check": "node tools/sync-quickstart-registry.js --check",
-    "onboarding:check": "node tools/onboarding-tooling.js check",
-    "onboarding:check:strict": "node tools/onboarding-tooling.js check --strict",
-    "onboarding:scaffold": "node tools/onboarding-tooling.js scaffold",
-    "bench:vendors:list": "node tools/vendor-bench.js list",
-    "bench:vendors:validate": "node tools/vendor-bench.js validate",
-    "bench:vendors:matrix": "node tools/vendor-bench.js matrix",
-    "kernels:generate": "node tools/generate-wgsl.js",
-    "kernels:check": "node tools/generate-wgsl.js --check",
-    "verify": "node tools/run-registry-verify.js",
-    "registry:sync:scripts": "node tools/sync-registry-scripts.js",
-    "registry:sync:scripts:check": "node tools/sync-registry-scripts.js --check",
-    "registry:hf:check": "node tools/check-hf-registry.js",
-    "registry:publish:hf": "node tools/publish-hf-registry-model.js",
-    "support:matrix:sync": "node tools/sync-model-support-matrix.js",
-    "support:matrix:check": "node tools/sync-model-support-matrix.js --check",
-    "ci:catalog:check": "npm run registry:sync:scripts:check && npm run support:matrix:check && npm run registry:hf:check",
-    "external:rdrr:index": "node tools/sync-external-rdrr-index.js",
-    "external:rdrr:index:check": "node tools/sync-external-rdrr-index.js --check",
-    "external:support:sync": "node tools/sync-external-support-registry.js",
-    "external:support:check": "node tools/sync-external-support-registry.js --check",
-    "catalog:sync:external": "node tools/sync-catalog-from-external-support.js",
-    "catalog:sync:external:check": "node tools/sync-catalog-from-external-support.js --check",
-    "verify:gemma-3-1b-it-q4k-ehf16-af32": "node tools/run-registry-verify.js gemma-3-1b-it-q4k-ehf16-af32",
-    "verify:gemma-3-1b-it-wq4k-ef16-hf16": "node tools/run-registry-verify.js gemma-3-1b-it-wq4k-ef16-hf16",
-    "verify:gemma-3-270m-it-q4k-ehf16-af32": "node tools/run-registry-verify.js gemma-3-270m-it-q4k-ehf16-af32",
-    "verify:gemma-3-270m-it-wq4k-ef16": "node tools/run-registry-verify.js gemma-3-270m-it-wq4k-ef16",
-    "verify:gemma-3-270m-it-wq4k-ef16-hf16": "node tools/run-registry-verify.js gemma-3-270m-it-wq4k-ef16-hf16",
-    "verify:gemma-3-270m-it-wq4k-ef16-hf16-f32": "node tools/run-registry-verify.js gemma-3-270m-it-wq4k-ef16-hf16-f32",
-    "verify:gemma3-1b": "node tools/run-registry-verify.js gemma3-1b",
-    "verify:gemma3-270m": "node tools/run-registry-verify.js gemma3-270m",
-    "verify:google-gemma-3-1b-it": "node tools/run-registry-verify.js google-gemma-3-1b-it",
-    "verify:google-gemma-3-270m-it": "node tools/run-registry-verify.js google-gemma-3-270m-it"
-  },
-  "exports": {
-    ".": {
-      "types": "./src/index.d.ts",
-      "import": "./src/index.js"
-    },
-    "./provider": {
-      "types": "./src/client/doppler-provider.d.ts",
-      "import": "./src/client/doppler-provider.js"
-    },
-    "./tooling": {
-      "types": "./src/tooling-exports.d.ts",
-      "browser": "./src/tooling-exports.browser.js",
-      "import": "./src/tooling-exports.js"
-    },
-    "./internal": {
-      "types": "./src/index-internal.d.ts",
-      "import": "./src/index-internal.js"
-    },
-    "./generation": {
-      "types": "./src/generation/index.d.ts",
-      "import": "./src/generation/index.js"
-    },
-    "./diffusion": {
-      "types": "./src/diffusion/index.d.ts",
-      "import": "./src/diffusion/index.js"
-    },
-    "./energy": {
-      "types": "./src/energy/index.d.ts",
-      "import": "./src/energy/index.js"
-    }
-  },
+  "version": "0.2.0",
+  "description": "This package has moved to doppler-gpu",
+  "deprecated": "This package has been renamed to doppler-gpu. Install doppler-gpu instead.",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/clocksmith/doppler.git"
-  },
-  "homepage": "https://github.com/clocksmith/doppler",
-  "keywords": [
-    "doppler",
-    "webgpu",
-    "inference",
-    "llm",
-    "quantized",
-    "browser",
-    "local"
-  ],
-  "author": "clocksmith",
-  "bugs": {
-    "url": "https://github.com/clocksmith/doppler/issues"
-  },
-  "license": "Apache-2.0",
-  "publishConfig": {
-    "access": "public"
-  },
-  "files": [
-    "src",
-    "src/gpu/kernels/*.wgsl",
-    "README.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    "NOTICE",
-    "BRANDING.md",
-    "SECURITY.md",
-    "tools/doppler-cli.js",
-    "tools/convert-safetensors-node.js"
-  ],
-  "devDependencies": {
-    "@huggingface/transformers": "^3.8.1",
-    "jest": "^30.2.0",
-    "onnxruntime-web": "^1.24.1",
-    "playwright": "^1.58.2"
+    "url": "https://github.com/clocksmith/doppler"
   },
-  "optionalDependencies": {
-    "@simulatte/webgpu": "0.1.x"
-  }
+  "license": "Apache-2.0"
 }

package/BRANDING.md

@@ -1,14 +0,0 @@
-# Brand Usage Policy
-
-The names "Doppler" and "Doppler.js", and related logos (the "Project Marks"),
-are used to identify this project.
-
-This policy describes brand use expectations only. It does not represent a legal
-determination of trademark ownership, availability, or registration in any jurisdiction.
-
-No trademark rights are granted under the Apache License 2.0.
-
-Permitted use: truthful, non-confusing referential use (for example, "forked from Doppler").
-
-Not permitted without written permission: use of the Project Marks in a way that implies
-endorsement, affiliation, sponsorship, or official status of your fork or product.

package/CHANGELOG.md

@@ -1,145 +0,0 @@
-# Changelog
-
-All notable changes to `@simulatte/doppler` are documented in this file.
-
-This changelog is package-facing and release-oriented. Entries before `0.1.7`
-were retrofitted from package version history, release commits, and release
-docs so the `0.1.x` line has one conventional npm-visible history surface.
-
-## [0.1.8] - 2026-03-13
-
-### Changed
-
-- Simplified demo to show only verified Q4K models (Gemma 3 270M, Gemma 3 1B).
-  Hidden Translate, Diffusion, and Embedding tabs until models are ready.
-- Trimmed hosted HF registry and quickstart registry to the two verified models.
-- Aligned catalog, HF registry, and quickstart registry to the canonical
-  external support registry as single source of truth for HF revisions.
-
-### Fixed
-
-- Fixed Qwen 3.5 conversion configs using wrong model preset (`qwen3` instead
-  of `qwen3_5`), which caused support matrix check failures.
-- Fixed catalog lifecycle metadata inconsistencies: corrected `local`, `hf`,
-  `curated`, and `demo` fields to match actual artifact availability.
-- Removed failing and unverified models from demo visibility (TranslateGemma 4B,
-  EmbeddingGemma 300M with broken HF manifest, Qwen 3.5 0.8B/2B, F16 variant).
-
-## [0.1.7] - 2026-03-10
-
-### Added
-
-- Added a conventional npm-facing changelog and included it in the published
-  package file list.
-- Added stronger release-claim, quickstart-registry, local-model-integrity,
-  and browser diagnostics regression coverage.
-- Added browser OPFS registry smoke workflows for text and embedding model
-  validation.
-
-### Changed
-
-- Tightened release-facing model claims around the verified quickstart/catalog
-  set and regenerated the support and release matrices from current metadata.
-- Synced the public quickstart registry from canonical catalog metadata instead
-  of maintaining it by hand.
-
-### Fixed
-
-- Fixed a tensor-loader buffer ownership bug that corrupted returned weight
-  buffers and broke Gemma 3 1B generation.
-- Fixed quickstart Hugging Face revision drift for registry-backed model IDs.
-- Fixed multiple CI contract drifts across onboarding, release metadata,
-  support matrices, and generated benchmark fixtures.
-
-## [0.1.6] - 2026-03-07
-
-### Added
-
-- Added stricter config and contract tests around runtime overrides, kernel-path
-  semantics, and release-support metadata.
-- Added distillation helper extraction coverage for training suite refactors.
-
-### Changed
-
-- Continued the execution-v0 and training orchestration refactor work so public
-  entrypoints read more like facades and less like inline policy code.
-- Refreshed package exports, repository metadata, and release-facing support
-  surfaces for the npm package.
-
-### Fixed
-
-- Preserved explicit `null` semantics for `runtime.inference.kernelPath` through
-  schema, runtime config, and harness paths.
-- Fixed CI drift around onboarding, registry verification aliases, release
-  matrix metadata, and kernel-path preset naming.
-
-## [0.1.5] - 2026-03-06
-
-### Added
-
-- Added diffusion kernel and contract work, plus additional Lean execution
-  contract sweep tooling.
-- Added public API reference inventory and stronger registry workflow tooling.
-
-### Changed
-
-- Expanded documentation around public APIs, registry workflow, hosted model
-  visibility, and release metadata.
-- Tightened package exports and release checks for the public package surface.
-
-### Fixed
-
-- Fixed hosted TranslateGemma visibility and registry metadata alignment across
-  docs, demos, and package surfaces.
-- Removed incorrect self-dependency metadata from the published package.
-
-## [0.1.4] - 2026-03-05
-
-### Added
-
-- Added Lean execution contract scripts and related package commands.
-- Added translation prompt validation and quickstart/demo polish.
-
-### Fixed
-
-- Fixed external resolution issues in conversion publication paths.
-- Fixed quickstart-facing package and demo issues ahead of publication.
-
-## [0.1.3] - 2026-03-05
-
-### Changed
-
-- Intermediate package metadata and dependency layout refresh during early npm
-  packaging work.
-
-## [0.1.2] - 2026-03-05
-
-### Changed
-
-- Aligned build scripts, tests, docs, and package conventions with the active
-  workspace and release process.
-- Refined README messaging and compatibility notes before npm publication.
-
-## [0.1.1] - 2026-03-05
-
-### Added
-
-- Added benchmark vendor comparison docs, runtime patch documentation, and
-  refreshed evidence/chart surfaces for the package release.
-
-### Changed
-
-- Moved vendor benchmark dependencies to development dependencies and kept the
-  runtime package dependency surface leaner.
-- Refreshed package metadata, exports, and README/API positioning for the first
-  public npm publishing cycle.
-
-## [0.1.0] - 2025-12-23
-
-### Added
-
-- Initial npm package release for Doppler.
-- Browser and Node command surfaces, CLI entrypoint, loader/storage pipeline,
-  RDRR manifest handling, config schemas/presets, WebGPU kernel registry, text
-  inference pipeline, conversion tooling, benchmark tooling, tests, and demo
-  infrastructure.

package/LICENSE

@@ -1,201 +0,0 @@
-Apache License
-Version 2.0, January 2004
-http://www.apache.org/licenses/
-
-TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-1. Definitions.
-
-   "License" shall mean the terms and conditions for use, reproduction,
-   and distribution as defined by Sections 1 through 9 of this document.
-
-   "Licensor" shall mean the copyright owner or entity authorized by
-   the copyright owner that is granting the License.
-
-   "Legal Entity" shall mean the union of the acting entity and all
-   other entities that control, are controlled by, or are under common
-   control with that entity. For the purposes of this definition,
-   "control" means (i) the power, direct or indirect, to cause the
-   direction or management of such entity, whether by contract or
-   otherwise, or (ii) ownership of fifty percent (50%) or more of the
-   outstanding shares, or (iii) beneficial ownership of such entity.
-
-   "You" (or "Your") shall mean an individual or Legal Entity
-   exercising permissions granted by this License.
-
-   "Source" form shall mean the preferred form for making modifications,
-   including but not limited to software source code, documentation
-   source, and configuration files.
-
-   "Object" form shall mean any form resulting from mechanical
-   transformation or translation of a Source form, including but
-   not limited to compiled object code, generated documentation,
-   and conversions to other media types.
-
-   "Work" shall mean the work of authorship, whether in Source or
-   Object form, made available under the License, as indicated by a
-   copyright notice that is included in or attached to the work
-   (an example is provided in the Appendix below).
-
-   "Derivative Works" shall mean any work, whether in Source or Object
-   form, that is based on (or derived from) the Work and for which the
-   editorial revisions, annotations, elaborations, or other modifications
-   represent, as a whole, an original work of authorship. For the purposes
-   of this License, Derivative Works shall not include works that remain
-   separable from, or merely link (or bind by name) to the interfaces of,
-   the Work and Derivative Works thereof.
-
-   "Contribution" shall mean any work of authorship, including
-   the original version of the Work and any modifications or additions
-   to that Work or Derivative Works thereof, that is intentionally
-   submitted to Licensor for inclusion in the Work by the copyright owner
-   or by an individual or Legal Entity authorized to submit on behalf of
-   the copyright owner. For the purposes of this definition, "submitted"
-   means any form of electronic, verbal, or written communication sent
-   to the Licensor or its representatives, including but not limited to
-   communication on electronic mailing lists, source code control systems,
-   and issue tracking systems that are managed by, or on behalf of, the
-   Licensor for the purpose of discussing and improving the Work, but
-   excluding communication that is conspicuously marked or otherwise
-   designated in writing by the copyright owner as "Not a Contribution."
-
-   "Contributor" shall mean Licensor and any individual or Legal Entity
-   on behalf of whom a Contribution has been received by Licensor and
-   subsequently incorporated within the Work.
-
-2. Grant of Copyright License. Subject to the terms and conditions of
-   this License, each Contributor hereby grants to You a perpetual,
-   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-   copyright license to reproduce, prepare Derivative Works of,
-   publicly display, publicly perform, sublicense, and distribute the
-   Work and such Derivative Works in Source or Object form.
-
-3. Grant of Patent License. Subject to the terms and conditions of
-   this License, each Contributor hereby grants to You a perpetual,
-   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-   (except as stated in this section) patent license to make, have made,
-   use, offer to sell, sell, import, and otherwise transfer the Work,
-   where such license applies only to those patent claims licensable
-   by such Contributor that are necessarily infringed by their
-   Contribution(s) alone or by combination of their Contribution(s)
-   with the Work to which such Contribution(s) was submitted. If You
-   institute patent litigation against any entity (including a
-   cross-claim or counterclaim in a lawsuit) alleging that the Work
-   or a Contribution incorporated within the Work constitutes direct
-   or contributory patent infringement, then any patent licenses
-   granted to You under this License for that Work shall terminate
-   as of the date such litigation is filed.
-
-4. Redistribution. You may reproduce and distribute copies of the
-   Work or Derivative Works thereof in any medium, with or without
-   modifications, and in Source or Object form, provided that You
-   meet the following conditions:
-
-   (a) You must give any other recipients of the Work or
-       Derivative Works a copy of this License; and
-
-   (b) You must cause any modified files to carry prominent notices
-       stating that You changed the files; and
-
-   (c) You must retain, in the Source form of any Derivative Works
-       that You distribute, all copyright, patent, trademark, and
-       attribution notices from the Source form of the Work,
-       excluding those notices that do not pertain to any part of
-       the Derivative Works; and
-
-   (d) If the Work includes a "NOTICE" text file as part of its
-       distribution, then any Derivative Works that You distribute must
-       include a readable copy of the attribution notices contained
-       within such NOTICE file, excluding those notices that do not
-       pertain to any part of the Derivative Works, in at least one
-       of the following places: within a NOTICE text file distributed
-       as part of the Derivative Works; within the Source form or
-       documentation, if provided along with the Derivative Works; or,
-       within a display generated by the Derivative Works, if and
-       wherever such third-party notices normally appear. The contents
-       of the NOTICE file are for informational purposes only and
-       do not modify the License. You may add Your own attribution
-       notices within Derivative Works that You distribute, alongside
-       or as an addendum to the NOTICE text from the Work, provided
-       that such additional attribution notices cannot be construed
-       as modifying the License.
-
-   You may add Your own copyright statement to Your modifications and
-   may provide additional or different license terms and conditions
-   for use, reproduction, or distribution of Your modifications, or
-   for any such Derivative Works as a whole, provided Your use,
-   reproduction, and distribution of the Work otherwise complies with
-   the conditions stated in this License.
-
-5. Submission of Contributions. Unless You explicitly state otherwise,
-   any Contribution intentionally submitted for inclusion in the Work
-   by You to the Licensor shall be under the terms and conditions of
-   this License, without any additional terms or conditions.
-   Notwithstanding the above, nothing herein shall supersede or modify
-   the terms of any separate license agreement you may have executed
-   with Licensor regarding such Contributions.
-
-6. Trademarks. This License does not grant permission to use the trade
-   names, trademarks, service marks, or product names of the Licensor,
-   except as required for reasonable and customary use in describing the
-   origin of the Work and reproducing the content of the NOTICE file.
-
-7. Disclaimer of Warranty. Unless required by applicable law or
-   agreed to in writing, Licensor provides the Work (and each
-   Contributor provides its Contributions) on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-   implied, including, without limitation, any warranties or conditions
-   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-   PARTICULAR PURPOSE. You are solely responsible for determining the
-   appropriateness of using or redistributing the Work and assume any
-   risks associated with Your exercise of permissions under this License.
-
-8. Limitation of Liability. In no event and under no legal theory,
-   whether in tort (including negligence), contract, or otherwise,
-   unless required by applicable law (such as deliberate and grossly
-   negligent acts) or agreed to in writing, shall any Contributor be
-   liable to You for damages, including any direct, indirect, special,
-   incidental, or consequential damages of any character arising as a
-   result of this License or out of the use or inability to use the
-   Work (including but not limited to damages for loss of goodwill,
-   work stoppage, computer failure or malfunction, or any and all
-   other commercial damages or losses), even if such Contributor has
-   been advised of the possibility of such damages.
-
-9. Accepting Warranty or Additional Liability. While redistributing
-   the Work or Derivative Works thereof, You may choose to offer,
-   and charge a fee for, acceptance of support, warranty, indemnity,
-   or other liability obligations and/or rights consistent with this
-   License. However, in accepting such obligations, You may act only
-   on Your own behalf and on Your sole responsibility, not on behalf
-   of any other Contributor, and only if You agree to indemnify,
-   defend, and hold each Contributor harmless for any liability
-   incurred by, or claims asserted against, such Contributor by reason
-   of your accepting any such warranty or additional liability.
-
-END OF TERMS AND CONDITIONS
-
-APPENDIX: How to apply the Apache License to your work.
-
-   To apply the Apache License to your work, attach the following
-   boilerplate notice, with the fields enclosed by brackets "[]"
-   replaced with your own identifying information. (Don't include
-   the brackets!) The text should be enclosed in the appropriate
-   comment syntax for the file format. We also recommend that a
-   file or class name and description of purpose be included on the
-   same "printed page" as the copyright notice for easier
-   identification within third-party archives.
-
-Copyright [yyyy] [name of copyright owner]
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.

package/NOTICE

@@ -1,5 +0,0 @@
-Doppler
-Copyright 2026 Doppler contributors
-
-This product includes software developed by Doppler contributors
-(https://github.com/clocksmith/doppler).

package/SECURITY.md

@@ -1,19 +0,0 @@
-# Security Policy
-
-## Supported versions
-
-Security fixes are applied on `main`.
-
-## Reporting a vulnerability
-
-Do not open public issues for suspected vulnerabilities.
-
-Report privately using GitHub Security Advisories for this repository.
-If advisories are unavailable, open a private maintainer contact thread and include:
-
-- affected commit or tag
-- reproduction steps
-- impact assessment
-- proposed mitigation (if available)
-
-You will receive an acknowledgment as soon as possible, followed by triage and a remediation plan.