@wubaoqi/guancopilot 0.0.0-stage → 0.2.0

package/NOTICE.md

@@ -0,0 +1,17 @@
+# Distribution notice
+
+First-party GuanCopilot/GuanVM code is distributed without a public license grant
+(UNLICENSED). Public availability of this package does not grant an open-source
+license to first-party code. Third-party components retain their respective
+licenses, with collected license texts in licenses/.
+
+The BI bundle includes marked (MIT), DOMPurify (Apache-2.0 OR MPL-2.0), and
+speed-highlight/core (CC0-1.0).
+License texts, package attribution, and notices for actual bundled transitive
+dependencies are collected during packaging.
+
+The self-contained package includes source provenance and per-file SHA-256 hashes.
+WASM files are a prebuilt snapshot, not a claim of a fresh reproducible WASI build.
+Codex itself is not bundled: an installed ChatGPT app or compatible Codex CLI is required.
+
+The distribution uses the fixed guandata build profile and bundles the manual BI plugin.

package/README.md

@@ -1,3 +1,147 @@
-# Temporary Holding Version
+# @wubaoqi/guancopilot
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+本地 GuanData BI Copilot。安装包自带 guancopilot、GuanVM、9 个 WASM 工具、
+7 个技能定义及可手工安装的 BI 前端插件。用户不需要 Go，也不需要准备 GuanVM。
+
+本包版本为 **0.2.0**，仅有 `@wubaoqi/guancopilot` 一个自包含包；发布状态以官方 npm registry 为准。
+
+本包仅提供观远 BI；应用范围在编译和打包时固定为 `guandata`。Chrome 扩展不包含在 npm 包中。普通 HTTP BI 页面使用本机连接窗口，使用期间请保持窗口打开。
+
+
+## 0.2.0 更新
+
+- 观远专用构建固定应用范围，包内只保留观远应用及所需运行资源。
+- 普通 HTTP BI 页面通过用户点击打开的本机窗口连接，兼容 HTTP 环境的请求标识生成。
+- 本机窗口支持后台重启后的恢复，未知请求结果不会自动重放。
+- 共享工作区继续保留历史、文件、终端及已验证账号和域隔离。
+
+升级前请停止后台并备份完整 `~/.guancopilot`。本版本会升级本地连接元数据；降级到旧版需要恢复升级前备份，不能直接让旧版写入迁移后的数据库。更新后台后，也请重新导出并人工替换 BI 注册插件的完整 JS。
+
+## 用户启动流程
+
+需要 Node.js >=20，以及已安装并登录的 ChatGPT.app 或兼容的 Codex CLI（>=0.162.1，
+需文件 auth.json）。macOS 优先使用 ChatGPT.app 自带 Codex，再回退 PATH 中的 CLI；
+本包不下载 Codex、不改桌面配置、不安装全局 Codex skills/MCP。
+
+用户安装和启动流程：
+
+```bash
+npm install -g @wubaoqi/guancopilot
+guancopilot doctor
+guancopilot
+```
+
+直接 `guancopilot` 或 `guancopilot start` 默认运行 serve，仅监听 127.0.0.1:19090。
+默认 CORS 为 `*`，浏览器免配对，无需填写 --origins；仍可用 --origins 限制精确 Origin。任意工作目录均可启动，
+后台和资源路径按安装包位置定位；--guanvm/--assets/--skills 可用于开发时显式覆盖。
+`guancopilot --version`、`--help` 不需要启动 Codex。
+
+```bash
+guancopilot plugin-path
+guancopilot plugin --out ./guancopilot-plugin.js
+```
+
+把导出的 JS 整体粘贴到已登录 BI 的 Console 进行联调，或由管理员人工安装。
+只在 `/data-dev/offline-dev/` 下显示；没有自动修改、安装或发布 BI 插件的步骤。
+界面可选择模型及该模型支持的 Low/Medium/High 等常规思考强度，排除 xhigh/max/ultra。
+观远历史、文件和终端按 BI URL + 服务端验证的 domID + 账号隔离，同一身份的新对话复用固定工作区。
+文件浏览提供搜索、排序、分栏/列表/专注预览，以及文件和空目录的确认后永久删除；没有回收站。
+同一后台默认可同时服务多个 BI 环境。需要限制来源时，可显式指定各自 Origin：
+
+```bash
+guancopilot start --origins https://demo.guandata.com,https://app.guandata.com
+```
+
+不同身份的凭证、历史和文件工作区隔离；同一身份的多个页面复用文件工作区。
+聊天及状态默认在当前用户 home 的 `.guancopilot`，不会写入 npm 安装目录；支持 --state。
+
+```bash
+guancopilot start --expose --origins https://your-bi.example.com
+```
+
+外网模式默认监听 0.0.0.0:19090，并每次启动生成、打印配对码，保存到状态目录
+pairing-token（0600）。前端设置中填写后台地址和配对码；HTTPS BI 访问远端需要 HTTPS
+入口，本包不配置 TLS 或代理。配对码授权个人实例，不是多租户账号隔离系统。
+
+## 维护者本地构建和打包
+
+构建机需要 Go 1.26.5、Node 开发依赖，以及旁边 GuanVM 仓库已准备的 assets/ 与
+skills-bundle/。这些是维护者的构建输入，最终用户无需它们；WASM 原始编译继续使用
+GuanVM 自己的 prepare/build 脚本。本流程将现有 WASM 快照按 SHA-256 固定，不宣称
+它们刚从 native 源码提交重建。记录源码 commit、dirty 状态、Go 版本和逐文件摘要。
+
+在 guancopilot 根目录：
+
+前端源码位于 `frontend/`，打包脚本自动生成 `dist/bi/guancopilot.js` 并复制为包内
+`plugin/guancopilot.js`；不依赖 Git 中的预编译 JS。Chrome 扩展产物位于 `dist/chrome-extension/`，不打入 npm 包。
+
+```bash
+npm ci --ignore-scripts
+cd npm
+npm run build                   # 当前平台；生成完整单包暂存目录
+npm run pack                    # 只写本地 .tgz
+npm test
+npm run test:install             # 本机只读 registry fixture 安装验收，不发布
+```
+
+当前唯一目标 macOS Apple Silicon（darwin-arm64）的完整构建与打包：
+
+```bash
+npm run build:all
+npm run pack:all
+```
+
+仅支持 darwin-arm64，CGO_ENABLED=0。npm 的 os/cpu 和平台选择器都会拒绝其他系统与架构；其他平台的 Codex 定位、目录和认证逻辑后续按需验收后添加。
+
+定制源码/资产来源：`node scripts/build.mjs --target darwin-arm64 --guanvm-source /path/to/guanvm
+--assets /path/to/assets --skills /path/to/skills-bundle`。构建不改变来源目录，包内软链接
+被复制为实际文件；拒绝指向技能包之外的软链接。分发包不依赖源码中的链接。
+
+产物只有 `npm/dist/0.1.0/wubaoqi-guancopilot-0.1.0.tgz` 一个包，名称为
+`@wubaoqi/guancopilot`。JS 启动器、两个 macOS ARM64 程序、WASM、skills、插件、
+许可证和 manifest 全部内置；没有 dependencies 或 optionalDependencies，也没有资源包/
+平台包的额外安装步骤。后续有其他平台需求时再拆包。
+
+安装无需 lifecycle scripts，不会编译或从 GitHub 下载运行时；缺失文件、平台不匹配或
+文件摘要错误会明确拒绝启动。维护者的构建暂存目录为 `npm/build/package/`；
+`npm run pack` 从该完整目录打包，避免将源码目录误当作完整分发包。
+
+当前 macOS ARM64 可以直接使用单一本地 tarball 安装（在 npm 目录下）：
+
+```bash
+npm install -g --offline ./dist/0.1.0/wubaoqi-guancopilot-0.1.0.tgz
+```
+
+也可运行 `npm run test:install -- --tarballs` 自动在临时 prefix 验证离线 tarball 安装。
+测试将 PATH 限定为无 Go、无独立 GuanVM，使用带空格的安装路径及无关工作目录，验证
+全局命令、doctor、启动、自动浏览器会话、内置 GuanVM 身份验证、凭证更新及优雅退出。
+registry fixture 只接受 GET/HEAD，所有包来自本地 tgz；不连接公共 registry、不发布。
+使用 `--keep` 保留安装 prefix，供进一步运行 `guancopilot smoke` 检查真实 Codex 链路。
+
+构建、打包和安装测试不会自动发布。维护者只发布已经安装验证的 tarball；浏览器登录、dry-run、发布及发布后验证流程见源码仓库 `AGENTS.md`。
+
+双站点并行验收：安装测试加 `--keep` 后，在仓库根运行
+`node npm/scripts/multisite-smoke.mjs`，使用本地模拟 BI 验证隔离、凭证轮换、停止和直接删除。
+
+## 浏览器提示 loopback address space 权限错误
+
+默认 CORS * 及兼容 PNA 的 Access-Control-Allow-Private-Network 头，不能代替浏览器的
+本地网络访问权限。若看到 `Permission was denied ... loopback address space`，在当前
+BI 站点的浏览器站点设置中允许“本地网络访问/本机访问”，刷新页面；不是在 127.0.0.1
+页面设置。不同浏览器版本的名称可能不同。后端不能通过响应头授予该权限。
+参见 [Chrome 官方说明](https://developer.chrome.com/blog/local-network-access)。
+
+首次打开 Copilot 会从用户点击中发起本机连接，触发浏览器授权弹窗；选择“允许”即可。
+授权前暂停后台探活。权限查询优先 loopback-network，旧版兼容 local-network-access；
+已允许时自动连接，已拒绝时显示恢复指引，网页无法强制覆盖拒绝决定。
+
+## Safari 和代码配色
+
+macOS Safari 打开 HTTPS BI 时，插件使用独立的本机连接窗口：启动更新后的 guancopilot，
+点击 Copilot，再保持自动打开的“guanloop 本机连接”窗口开启，返回 BI 使用。若关闭该窗口，
+面板会显示断线，点击连接可重新打开。弹窗被浏览器阻止时，面板会提示允许当前站点的弹窗。
+Chrome 继续使用直接连接和原有本地网络授权流程。无需安装证书或修改安全设置。
+后台和导出的单文件插件需一起更新；本次已在 macOS Safari 27.0 完成真实 BI 只读验证。
+
+Markdown 代码块、文件预览和终端使用 Solarized Light。SQL、Bash、JavaScript、JSON、
+Python 语法高亮随单文件插件内置，不需要 CDN；复制代码仍为原始文本。

package/assets/guanbi.wasm

@@ -0,0 +1,4 @@
+[diffend] Oversized file quarantined before diffing.
+name: package/assets/guanbi.wasm
+size: 66169856 bytes
+sha256: 39f865fab8f7381b7a703f8ad3a237485eeb15453fcc7330a23b0726dfcb53c0

package/bin/platforms.cjs

@@ -0,0 +1,6 @@
+const targets = [
+ ['darwin','arm64'],
+].map(([platform,arch]) => ({platform,arch,key:`${platform}-${arch}`,goos:platform==='win32'?'windows':platform,goarch:arch==='x64'?'amd64':arch,ext:platform==='win32'?'.exe':''}));
+const wasmNames=['coreutils','find','guanbi','guancli','guanhelm','jq','openskills','rg','sed'];
+const skillNames=['guancli','guands','guanetl','guanmetric','guanvis','guanwf','js'];
+module.exports={targets,wasmNames,skillNames,targetFor:(platform,arch)=>targets.find(t=>t.platform===platform&&t.arch===arch)};

package/bin/run.cjs

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+'use strict';
+const fs=require('node:fs');
+const path=require('node:path');
+const os=require('node:os');
+const {spawn}=require('node:child_process');
+const {resolveRuntime}=require('./runtime.cjs');
+const pkg=require('../package.json');
+function launch(argv=process.argv.slice(2)) {
+ if(['--version','-v','version'].includes(argv[0])) {console.log(pkg.version);return;}
+ if(['--help','-h','help'].includes(argv[0])) {
+  console.log(`guancopilot ${pkg.version}\n\nUsage:\n  guancopilot [serve|start] [--origins https://your-bi.example.com]\n  guancopilot doctor\n  guancopilot plugin-path\n  guancopilot plugin [--out FILE]\n\nDefault: 127.0.0.1:19090, CORS *, automatic browser session, no pairing code.\n--expose enables external listening and generates a pairing code.\nUse guancopilot serve --help for all server flags.\nGuanVM, WASM tools and skills are bundled; no Go installation required.\nAn authenticated ChatGPT app or compatible Codex CLI is required.`);return;
+ }
+ const runtime=resolveRuntime();
+ if(argv[0]==='plugin-path') {if(argv.length!==1)throw new Error('Usage: guancopilot plugin-path');console.log(runtime.plugin);return;}
+ if(argv[0]==='plugin') {
+  if(argv.length===1)process.stdout.write(fs.readFileSync(runtime.plugin));
+  else if(argv.length===3&&argv[1]==='--out') {fs.copyFileSync(runtime.plugin,path.resolve(argv[2]));console.log(path.resolve(argv[2]));}
+  else throw new Error('Usage: guancopilot plugin [--out FILE]');
+  return;
+ }
+ argv=[...argv];
+ if(argv[0]==='start')argv[0]='serve';
+ if(!argv.length||argv[0].startsWith('-'))argv.unshift('serve');
+ for(const [flag,value]of [['--guanvm',runtime.guanvm],['--assets',runtime.assets],['--skills',runtime.skills]]) {
+  if(!argv.some(arg=>arg===flag||arg.startsWith(flag+'=')))argv.push(flag,value);
+ }
+ if(argv[0]==='serve')console.error(`Bundled BI plugin: ${runtime.plugin}`);
+ const child=spawn(runtime.copilot,argv,{stdio:'inherit',shell:false,env:process.env});
+ const signals=['SIGINT','SIGTERM'];
+ const forward=signal=>{if(!child.killed)child.kill(signal);};
+ const handlers=signals.map(signal=>{const handler=()=>forward(signal);process.on(signal,handler);return [signal,handler];});
+ const cleanup=()=>{for(const [signal,handler]of handlers)process.removeListener(signal,handler);};
+ child.on('error',error=>{cleanup();console.error(`Cannot start guancopilot: ${error.message}`);process.exitCode=1;});
+ child.on('exit',(code,signal)=>{cleanup();process.exitCode=code??(128+(os.constants.signals[signal]||1));});
+ return child;
+}
+if(require.main===module)try{launch();}catch(error){console.error(error.message);process.exitCode=1;}
+module.exports={launch};

package/bin/runtime.cjs

@@ -0,0 +1,44 @@
+const fs=require('node:fs');
+const path=require('node:path');
+const crypto=require('node:crypto');
+const {targetFor,wasmNames,skillNames}=require('./platforms.cjs');
+const main=require('../package.json');
+function hashFile(file) {
+ const hash=crypto.createHash('sha256'),fd=fs.openSync(file,'r'),buffer=Buffer.allocUnsafe(1024*1024);
+ try {let n;while((n=fs.readSync(fd,buffer,0,buffer.length,null))>0)hash.update(buffer.subarray(0,n));} finally {fs.closeSync(fd);}
+ return hash.digest('hex');
+}
+function checkedFile(root,relative) {
+ if(typeof relative!=='string'||!relative||relative.includes('\\')||path.posix.isAbsolute(relative)||relative.split('/').some(p=>!p||p==='.'||p==='..'))throw new Error('Invalid bundled file path');
+ const file=path.join(root,...relative.split('/'));
+ // Build materializes bundle-local links; verify every component again in installed packages.
+ let current=root;
+ for(const part of relative.split('/')) {current=path.join(current,part);if(fs.lstatSync(current).isSymbolicLink())throw new Error('Unexpected symlink in bundled runtime');}
+ if(!fs.statSync(file).isFile())throw new Error(`Bundled file missing: ${relative}`);
+ return file;
+}
+function verifyPackage(root, required, targetKey) {
+ const pkg=JSON.parse(fs.readFileSync(path.join(root,'package.json'),'utf8'));
+ if(pkg.name!==main.name)throw new Error(`Unexpected runtime package: ${pkg.name}`);
+ if(pkg.version!==main.version)throw new Error(`Runtime version mismatch: ${pkg.name} ${pkg.version}; expected ${main.version}`);
+ const manifest=JSON.parse(fs.readFileSync(path.join(root,'manifest.json'),'utf8'));
+ if(manifest.version!==main.version||!manifest.files||typeof manifest.files!=='object')throw new Error('Invalid runtime manifest');
+ if(manifest.buildProfile!=='guandata'||JSON.stringify(manifest.applications)!=='["guandata"]')throw new Error('Unexpected application release profile; reinstall '+main.name);
+ if(targetKey&&manifest.platform!==targetKey)throw new Error(`Bundled platform mismatch: ${manifest.platform}; expected ${targetKey}`);
+ for(const relative of required)if(!Object.hasOwn(manifest.files,relative))throw new Error(`Runtime manifest is missing ${relative}`);
+ for(const [relative,expected]of Object.entries(manifest.files)) {
+  const file=checkedFile(root,relative);
+  if(fs.statSync(file).size!==expected.size||hashFile(file)!==expected.sha256)throw new Error(`Bundled file integrity check failed: ${relative}; reinstall ${main.name}`);
+ }
+ return manifest;
+}
+function resolveRuntime({platform=process.platform,arch=process.arch,root=path.resolve(__dirname,'..')}={}) {
+ const target=targetFor(platform,arch);
+ if(!target)throw new Error(`Unsupported platform: ${platform}-${arch}`);
+ const copilot=`bin/guancopilot${target.ext}`,vm=`bin/guanvm${target.ext}`;
+ verifyPackage(root,[copilot,vm,'bin/run.cjs','bin/runtime.cjs','bin/platforms.cjs',...wasmNames.map(n=>`assets/${n}.wasm`),...skillNames.map(n=>`skills-bundle/${n}/SKILL.md`),'plugin/guancopilot.js'],target.key);
+ const runtime={copilot:path.join(root,copilot),guanvm:path.join(root,vm),assets:path.join(root,'assets'),skills:path.join(root,'skills-bundle'),plugin:path.join(root,'plugin/guancopilot.js')};
+ for(const file of [runtime.copilot,runtime.guanvm])fs.accessSync(file,fs.constants.X_OK);
+ return runtime;
+}
+module.exports={hashFile,checkedFile,verifyPackage,resolveRuntime};

package/licenses/Go-LICENSE

@@ -0,0 +1,27 @@
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/licenses/browser-_speed-highlight_core-LICENSE

@@ -0,0 +1,121 @@
+Creative Commons Legal Code
+
+CC0 1.0 Universal
+
+    CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE
+    LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN
+    ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS
+    INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES
+    REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS
+    PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+    THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED
+    HEREUNDER.
+
+Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer
+exclusive Copyright and Related Rights (defined below) upon the creator
+and subsequent owner(s) (each and all, an "owner") of an original work of
+authorship and/or a database (each, a "Work").
+
+Certain owners wish to permanently relinquish those rights to a Work for
+the purpose of contributing to a commons of creative, cultural and
+scientific works ("Commons") that the public can reliably and without fear
+of later claims of infringement build upon, modify, incorporate in other
+works, reuse and redistribute as freely as possible in any form whatsoever
+and for any purposes, including without limitation commercial purposes.
+These owners may contribute to the Commons to promote the ideal of a free
+culture and the further production of creative, cultural and scientific
+works, or to gain reputation or greater distribution for their Work in
+part through the use and efforts of others.
+
+For these and/or other purposes and motivations, and without any
+expectation of additional consideration or compensation, the person
+associating CC0 with a Work (the "Affirmer"), to the extent that he or she
+is an owner of Copyright and Related Rights in the Work, voluntarily
+elects to apply CC0 to the Work and publicly distribute the Work under its
+terms, with knowledge of his or her Copyright and Related Rights in the
+Work and the meaning and intended legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be
+protected by copyright and related or neighboring rights ("Copyright and
+Related Rights"). Copyright and Related Rights include, but are not
+limited to, the following:
+
+  i. the right to reproduce, adapt, distribute, perform, display,
+     communicate, and translate a Work;
+ ii. moral rights retained by the original author(s) and/or performer(s);
+iii. publicity and privacy rights pertaining to a person's image or
+     likeness depicted in a Work;
+ iv. rights protecting against unfair competition in regards to a Work,
+     subject to the limitations in paragraph 4(a), below;
+  v. rights protecting the extraction, dissemination, use and reuse of data
+     in a Work;
+ vi. database rights (such as those arising under Directive 96/9/EC of the
+     European Parliament and of the Council of 11 March 1996 on the legal
+     protection of databases, and under any national implementation
+     thereof, including any amended or successor version of such
+     directive); and
+vii. other similar, equivalent or corresponding rights throughout the
+     world based on applicable law or treaty, and any national
+     implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention
+of, applicable law, Affirmer hereby overtly, fully, permanently,
+irrevocably and unconditionally waives, abandons, and surrenders all of
+Affirmer's Copyright and Related Rights and associated claims and causes
+of action, whether now known or unknown (including existing as well as
+future claims and causes of action), in the Work (i) in all territories
+worldwide, (ii) for the maximum duration provided by applicable law or
+treaty (including future time extensions), (iii) in any current or future
+medium and for any number of copies, and (iv) for any purpose whatsoever,
+including without limitation commercial, advertising or promotional
+purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each
+member of the public at large and to the detriment of Affirmer's heirs and
+successors, fully intending that such Waiver shall not be subject to
+revocation, rescission, cancellation, termination, or any other legal or
+equitable action to disrupt the quiet enjoyment of the Work by the public
+as contemplated by Affirmer's express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason
+be judged legally invalid or ineffective under applicable law, then the
+Waiver shall be preserved to the maximum extent permitted taking into
+account Affirmer's express Statement of Purpose. In addition, to the
+extent the Waiver is so judged Affirmer hereby grants to each affected
+person a royalty-free, non transferable, non sublicensable, non exclusive,
+irrevocable and unconditional license to exercise Affirmer's Copyright and
+Related Rights in the Work (i) in all territories worldwide, (ii) for the
+maximum duration provided by applicable law or treaty (including future
+time extensions), (iii) in any current or future medium and for any number
+of copies, and (iv) for any purpose whatsoever, including without
+limitation commercial, advertising or promotional purposes (the
+"License"). The License shall be deemed effective as of the date CC0 was
+applied by Affirmer to the Work. Should any part of the License for any
+reason be judged legally invalid or ineffective under applicable law, such
+partial invalidity or ineffectiveness shall not invalidate the remainder
+of the License, and in such case Affirmer hereby affirms that he or she
+will not (i) exercise any of his or her remaining Copyright and Related
+Rights in the Work or (ii) assert any associated claims and causes of
+action with respect to the Work, in either case contrary to Affirmer's
+express Statement of Purpose.
+
+4. Limitations and Disclaimers.
+
+ a. No trademark or patent rights held by Affirmer are waived, abandoned,
+    surrendered, licensed or otherwise affected by this document.
+ b. Affirmer offers the Work as-is and makes no representations or
+    warranties of any kind concerning the Work, express, implied,
+    statutory or otherwise, including without limitation warranties of
+    title, merchantability, fitness for a particular purpose, non
+    infringement, or the absence of latent or other defects, accuracy, or
+    the present or absence of errors, whether or not discoverable, all to
+    the greatest extent permissible under applicable law.
+ c. Affirmer disclaims responsibility for clearing rights of other persons
+    that may apply to the Work or any use thereof, including without
+    limitation any person's Copyright and Related Rights in the Work.
+    Further, Affirmer disclaims responsibility for obtaining any necessary
+    consents, permissions or other rights required for any use of the
+    Work.
+ d. Affirmer understands and acknowledges that Creative Commons is not a
+    party to this document and has no duty or obligation with respect to
+    this CC0 or use of the Work.

package/licenses/browser-_speed-highlight_core-package.json

@@ -0,0 +1,14 @@
+{
+  "name": "@speed-highlight/core",
+  "version": "2.1.0",
+  "license": "CC0-1.0",
+  "author": {
+    "name": "matubu",
+    "email": "hi@mathias.ninja",
+    "url": "https://mathias.ninja"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/speed-highlight/core.git"
+  }
+}