@xgent-ai/skills 0.5.0 → 0.7.0

package/skills/xgent-app-release/scripts/preflight.mjs

@@ -263,10 +263,18 @@ if (!manifestPath) {
     for (const [i, n] of (Array.isArray(mf.navItems) ? mf.navItems : []).entries())
       if (n && typeof n.label !== "string")
         err(`manifest.navItems[${i}].label 必须是字符串（导航项标题不支持多语；现在是${shown(n.label)}）`);
-    for (const [i, w] of (Array.isArray(mf.dashboardWidgets) ? mf.dashboardWidgets : []).entries())
+    if (mf.dashboard !== undefined)
+      err(`manifest.dashboard 不是有效字段 —— Dashboard 组件声明在顶层 dashboardWidgets（数组）里；嵌套的 dashboard.widgets 门户从不读取，新门户提交即拒`);
+    const WIDGET_TYPES = ["metric", "activity", "insight", "topic_grid", "topic_list"];
+    for (const [i, w] of (Array.isArray(mf.dashboardWidgets) ? mf.dashboardWidgets : []).entries()) {
       for (const f of ["title", "subtitle", "description"])
         if (w && w[f] !== undefined && typeof w[f] !== "string")
           err(`manifest.dashboardWidgets[${i}].${f} 必须是字符串（Widget 文案不支持多语）`);
+      if (w && !WIDGET_TYPES.includes(w.type))
+        err(`manifest.dashboardWidgets[${i}].type 只能是 ${WIDGET_TYPES.join(" / ")}（现在是${shown(w.type)}；注意是下划线）`);
+      if (w && w.owner !== key)
+        err(`manifest.dashboardWidgets[${i}].owner 必须等于 listingKey「${key}」（现在是${shown(w.owner)}）`);
+    }
 
     /* ② scopeLabels = 同意屏正文，jsonb，**支持**多语对象。这里查的是三种「配了不生效」：
        键不在 scopes 里（写入时被静默丢弃）、多语对象缺 zh-CN（回退终点）、
@@ -308,16 +316,48 @@ if (!manifestPath) {
       );
     if (labelOk) ok(`scopeLabels ${labelOk} 条形状合法`);
 
-    /* ③ usageMetrics[].label 是【第三种】形状：键名是 zh/en/tw，不是 zh-CN/zh-TW。
-       写成 zh-CN 会被门户判成缺 label.zh，提交即拒（连提案都不落）。 */
+    /* ③ usageMetrics[].label 必须是对象：语言键与 scopeLabels 同一套 zh-CN / en / zh-TW，
+       旧形状 zh / en / tw 门户仍收并归一。缺 zh-CN（旧形状缺 zh）门户提交即拒（连提案都不落）。
+       判定与门户 normalizeMetricLabel 同口径：取 zh-CN ?? zh，须是非空白字符串。 */
     for (const [i, u] of (Array.isArray(mf.usageMetrics) ? mf.usageMetrics : []).entries()) {
       const l = u?.label;
-      if (!isObj(l) || typeof l.zh !== "string" || !l.zh.trim())
+      const zh = isObj(l) ? l["zh-CN"] ?? l.zh : undefined;
+      if (typeof zh !== "string" || !zh.trim())
         err(
-          `manifest.usageMetrics[${i}].label 必须是 { "zh": "…" }（en / tw 可选，缺省回退 zh）——` +
-            `注意这里的键是 zh / en / tw，不是 scopeLabels 那套 zh-CN / zh-TW / en。写错门户提交即拒。`,
+          `manifest.usageMetrics[${i}].label 必须是 { "zh-CN": "…" }（en / zh-TW 可选，缺省回退 zh-CN）——` +
+            `必须是对象，不能是纯字符串；旧形状 { "zh": "…" } 仍可用。缺 zh-CN 门户提交即拒。`,
         );
     }
+    /* ③c adminPages：门户嵌进管理面的 App 自有页面。{ platform?, tenant? }，每级 { route, label }；
+       route 是 App 内路由（/ 开头、不能 //），label 是字符串或带 zh-CN 的多语对象。门户提交面会再判一次。 */
+    if (mf.adminPages !== undefined && mf.adminPages !== null) {
+      if (!isObj(mf.adminPages) || Array.isArray(mf.adminPages)) err(`manifest.adminPages 必须是对象 { platform?, tenant? }`);
+      else
+        for (const [level, decl] of Object.entries(mf.adminPages)) {
+          if (level !== "platform" && level !== "tenant") { err(`manifest.adminPages 只支持 platform / tenant（得到「${level}」）`); continue; }
+          if (decl === null) continue;
+          const extra = isObj(decl) ? Object.keys(decl).filter((k) => k !== "route" && k !== "label") : [];
+          const route = decl?.route, label = decl?.label;
+          if (!isObj(decl) || extra.length) err(`manifest.adminPages.${level} 必须是 { route, label }${extra.length ? `（多了 ${extra.join("、")}）` : ""}`);
+          else if (typeof route !== "string" || !route.startsWith("/") || route.startsWith("//") || /(^|\/)\.\.(\/|$)/.test(route))
+            err(`manifest.adminPages.${level}.route 必须是 App 内路由（以 / 开头，不能 //、不能 ..）`);
+          else if (!(typeof label === "string" ? label.trim() : isObj(label) && typeof label["zh-CN"] === "string" && label["zh-CN"].trim()))
+            err(`manifest.adminPages.${level}.label 必须是非空字符串，或带 "zh-CN" 的多语对象`);
+        }
+    }
+    /* ③b requiredEnvNotes：只能给 requiredEnv 里的键写说明，非空、≤200 字（与门户同口径）。 */
+    if (mf.requiredEnvNotes !== undefined) {
+      const declaredEnv = new Set((Array.isArray(mf.requiredEnv) ? mf.requiredEnv : [])
+        .map((e) => (typeof e === "string" ? e : typeof e?.key === "string" ? e.key : null)).filter(Boolean));
+      if (!isObj(mf.requiredEnvNotes) || Array.isArray(mf.requiredEnvNotes))
+        err(`manifest.requiredEnvNotes 必须是对象 { "键名": "说明" }`);
+      else
+        for (const [k, note] of Object.entries(mf.requiredEnvNotes)) {
+          if (!declaredEnv.has(k)) err(`manifest.requiredEnvNotes 的「${k}」不在 requiredEnv 里 —— 说明只能写给声明过的键`);
+          else if (typeof note !== "string" || !note.trim()) err(`manifest.requiredEnvNotes 的「${k}」必须是非空字符串`);
+          else if (note.trim().length > 200) err(`manifest.requiredEnvNotes 的「${k}」超过 200 字（它显示在审批屏上，不是文档）`);
+        }
+    }
     /* ④ 像库 / Redis 连接串、却不按约定命名的键：平台自动供给不到它，落到审批屏就是
        「平台管理员多点一下」。**只 warn 不阻断** —— 键名归 App，这里只是告诉你便宜的写法。 */
     const PREFIX = key ? key.toUpperCase().replace(/-/g, "_") : null;
@@ -325,13 +365,15 @@ if (!manifestPath) {
     const envKeys = (Array.isArray(mf.requiredEnv) ? mf.requiredEnv : [])
       .map((e) => (typeof e === "string" ? e : typeof e?.key === "string" ? e.key : null))
       .filter(Boolean);
-    const unbound = envKeys.filter((k) => /(DATABASE_URL|_DSN|POSTGRES|REDIS)/.test(k) && !CONVENTIONAL.has(k));
+    // requiredServices[].envKey 显式绑定过的键，平台照样自动供给，不算「供给不到」。
+    const BOUND = new Set((Array.isArray(mf.requiredServices) ? mf.requiredServices : []).map((s) => s?.envKey).filter((k) => typeof k === "string"));
+    const unbound = envKeys.filter((k) => /(DATABASE_URL|_DSN|POSTGRES|REDIS)/.test(k) && !CONVENTIONAL.has(k) && !BOUND.has(k));
     if (unbound.length)
       warn(
         `这几个键看着是库 / Redis 连接串，但平台自动供给不到它们：${unbound.slice(0, 4).join(" ")}${unbound.length > 4 ? " …" : ""}` +
-          `\n      → 改用约定名就零手填：${PREFIX ? `${PREFIX}_DATABASE_URL` : "<PREFIX>_DATABASE_URL"} / REDIS_CONN_STRING，` +
-          `并在 requiredServices 里声明要哪条服务（只写 name / kind / note，多一个字段整份清单会被拒收）。` +
-          `\n      不改也能发 —— 只是平台管理员要在审批屏上逐个点「从平台服务取值」，多等一轮。`,
+          `\n      → 改用约定名就零手填：${PREFIX ? `${PREFIX}_DATABASE_URL` : "<PREFIX>_DATABASE_URL"} / REDIS_CONN_STRING；` +
+          `名字改不了（上游定死）就在 requiredServices 里用 envKey 绑定：{ "kind": "postgres", "name": "main", "envKey": "${unbound[0]}" }。` +
+          `\n      不改也能发 —— 只是平台管理员要在审批屏上逐个手选服务取值，多等一轮。`,
       );
 
     if (!errs.some((m) => m.startsWith(`manifest.`) || m.startsWith(`${manifestPath} `)))

package/skills/xgent-image-push/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: xgent-image-push
-description: 把 App 镜像构建并推送到自建的私有 Harbor 镜像仓库（地址由本地配置提供，不写在这个 skill 里）。用户提到发版、上线新版本、发布镜像、推镜像、docker push、打 tag 推仓库、配 CI 的镜像构建推送步骤、私有镜像仓库、Harbor、robot 账号推不上去、push 卡住推不动、ImagePullBackOff 之前的推送环节，都用这个 skill —— 哪怕他们只说"发个版"或"把这个服务的镜像推上去"没提仓库名字。它在推之前自动预检四条会让流水线静默失败的硬约束（链路、镜像架构、tag 不可变、保留策略），绕过它直接 docker push 很容易踩中其中一条。
+description: 用于 App 发版时构建、推送镜像到私有 Harbor，配置 CI 推送或排查 docker push 失败。仓库地址从本地配置读取；推送前检查链路、架构、tag 与保留策略。
 ---
 
 # 推镜像到私有仓库

package/skills/xgent-init/SKILL.md

@@ -2,7 +2,7 @@
 name: xgent-init
 metadata:
   internal: true
-description: 在 XGENT.ai Portal 出仓 App 自己的仓库里补齐 AGENTS.md / PRODUCT.md / DESIGN.md，保留 Portal 产品边界和设计规范，支持不同 coding agent。用户要求初始化出仓 App 规范、补齐产品或设计上下文时使用；读清单与代码事实，一轮问清缺的信息，已有文件不覆盖。install 本身只直接创建 AGENTS.md。
+description: 用于在 XGENT 出仓 App 仓库初始化或补齐 AGENTS.md、PRODUCT.md、DESIGN.md；已有文件不覆盖。保留 Portal 产品边界与设计规范。
 ---
 
 # xgent-init · 出仓 App 的 Agent、产品与设计上下文
@@ -19,7 +19,7 @@ description: 在 XGENT.ai Portal 出仓 App 自己的仓库里补齐 AGENTS.md /
 
 `PRODUCT.md` 与 `DESIGN.md` 分别使用 [references/external-app-PRODUCT.template.md](references/external-app-PRODUCT.template.md) 和 [references/external-app-DESIGN.template.md](references/external-app-DESIGN.template.md)。填槽位前读 [references/fill-guide.md](references/fill-guide.md)，保留模板里的 Portal 产品边界与设计规范，不替换成通用设计建议。
 
-`install` 保留 hooks / impeccable 安装，可选步骤直接创建仓根 `AGENTS.md`，不安装本 skill，也不生成产品和设计文档。需要补齐这些文档时显式安装并使用本 skill；非交互 install 用 `--xgent-init` 创建 AGENTS.md，`--force` 也不覆盖已有文件。
+`install` 保留 hooks / Phoenix UI 安装，可选步骤直接创建仓根 `AGENTS.md`，不安装本 skill，也不生成产品和设计文档。需要补齐这些文档时显式安装并使用本 skill；非交互 install 用 `--xgent-init` 创建 AGENTS.md，`--force` 也不覆盖已有文件。
 
 ## 约束
 

package/skills/xgent-init/references/external-app-AGENTS.template.md

@@ -106,7 +106,7 @@
 
 涉及页面、组件、布局、交互或视觉的改动，走完设计与浏览器验收两步：
 
-- **设计阶段用 impeccable**：先读已有产品与设计上下文，覆盖视觉层级、信息架构、间距对齐、配色、动效、可访问性以及空状态和错误状态。当前环境没有该 skill 时说明缺失并提示安装，不声称已经使用。
+- **设计阶段用 phoenix-ui**：先读已有产品与设计上下文，覆盖视觉层级、信息架构、间距对齐、配色、动效、可访问性以及空状态和错误状态。当前环境没有该 skill 时说明缺失并提示安装，不声称已经使用。
 - **验收使用当前 Agent 可用的真实浏览器通道**：Chrome extension、`kimi-webbridge` 或 Playwright 均可，按实际可用能力选择，不绑定某一种 Agent。
 - **Portal App 必须从宿主进入**：从已有宿主入口打开 App，走通主路径与关键边界；首次接入时还要覆盖市场卡片、安装与授权。确认浏览器显示的是最新产物；standalone 页面或直接打开 dev server 只能作为补充。
 - 检查本次改动涉及的导航、面包屑、关键操作与保存结果、空 / 错状态、权限边界；涉及响应式、主题或语言时检查相应状态。查看 console 与失败请求，保留实际步骤、结果及必要截图作为验收证据。

package/skills/xgent-init/references/external-app-DESIGN.template.md

@@ -134,7 +134,8 @@ components:
 主题不是你的选择：宿主经 `sdk.onTheme` 推 `light` / `dark`，你把它落到自己根节点的 `data-theme` 上，两套都必须过 AA。**iframe 是独立文档**——宿主的 CSS 变量、字体、Tailwind 配置一律不会继承过来，token 与字体都要在你自己的 `index.css` / `index.html` 里再声明一份（本模板的 frontmatter 就是那份的权威值）。
 
 > 本文件只管**长什么样**。SDK 行为（主题 / 语言 / 面包屑 / 弹层 / 路由）以 `portal-micro-app` skill 为准；
-> 设计推进用 `impeccable` skill（它开工前会读本文件与 `PRODUCT.md`）。
+> 设计推进用 `phoenix-ui` skill（它开工前会读本文件与 `PRODUCT.md`）。
+> Phoenix 的结构化解析只覆盖支持的字段，正文规则仍需读原文，缺项不补模板值；使用本模板不会自动启用 Portal profile，项目须显式选择，其建议不替代本文件的既定规范。
 
 **关键特征：**
 - 冷调 slate 中性色，浅色底是 `paper` (#FAFAFC)，深色底是 `ink` (#0B1220)；两套都是一等公民。

package/skills/xgent-init/references/fill-guide.md

@@ -2,12 +2,14 @@
 
 AGENTS.md 使用通用模板原样创建，不填项目槽位，也不与 CLAUDE.md 镜像。以下指南用于 `external-app-PRODUCT.template.md` 和 `external-app-DESIGN.template.md`；只填产品与设计槽位，保留 Portal 规范。
 
-## 0. 三条硬约束（改坏了 impeccable 就解析不出来）
+## 0. 三条硬约束（本模板的结构约定）
 
 - **PRODUCT.md**：七个二级标题，名字与顺序固定 —— `Register` / `Users` / `Product Purpose` / `Brand Personality` / `Anti-references` / `Design Principles` / `Accessibility & Inclusion`。别改名、别加段、别调序。`## Register` 的正文只能是裸词 `product` 或 `brand`，不加句号、不加解释。
-- **DESIGN.md**：YAML frontmatter 必须从**文件第 1 行**开始（前面多一个空行就整块解析不出来），正文**恰好六段**，名字与顺序照抄 —— `1. Overview` / `2. Colors` / `3. Typography` / `4. Elevation` / `5. Components` / `6. Do's and Don'ts`。不要加 Layout / Motion / Responsive 这类第七段，把内容折进六段里。
+- **DESIGN.md**：YAML frontmatter 必须从**文件第 1 行**开始（本模板的格式约定，前面不加空行），正文**恰好六段**，名字与顺序照抄 —— `1. Overview` / `2. Colors` / `3. Typography` / `4. Elevation` / `5. Components` / `6. Do's and Don'ts`。不要加 Layout / Motion / Responsive 这类第七段，把内容折进六段里。
 - **平台口径的事实源是目标仓里已装的 skill**，不是这三份文件：`portal-external-app`（接入契约 · `app.manifest.json` · `/svc` 与健康检查）· `portal-micro-app`（SDK 握手 / 版头 / consent / iframe 坑）· `xgent-app-release`（发布提案 · 产物打包 · 排错）· `xgent-image-push`（镜像构建与推送）· `portal-dev-setup`（一盒本地联调）· `portal-app-exchange`（跨应用调用）。**门户仓的文档目标仓访问不到，别在生成的文件里引它的路径。**
 
+这些是模板合同，`check-docs.mjs` 只检查结构与槽位，不证明 Phoenix 完整解析。Phoenix context 保留原文、路径/hash；结构化视图仅支持 YAML 标量映射和已识别标题，`parseCoverage` 的部分覆盖、未支持项与 `conflicts` 仍须回到原文核实，不删规范或用模板值补齐缺项。Portal profile 须由项目显式启用并核对 ID/版本、定义来源与 token 绑定，规则及 `defaultAdvice` 只作建议，不能覆盖既定规范或冻结目标；CLI 不可用时人工读原文，不自动安装、改配置或声称 profile 已加载。
+
 ## 1. 项目事实
 
 - App 中文名从 manifest `name` 读取：对象取 `zh-CN`，字符串直接使用。

package/skills/xgent-init/scripts/check-docs.mjs

@@ -4,9 +4,9 @@
  *
  *   node check-docs.mjs [目标仓根，默认 .]
  *
- * 挡的是模型输出的三类漂移：残留占位（用户还得手工编辑）、结构走样（impeccable
- * 按标题逐字解析，多一段少一段就读不出来）、过度替换（把 `Page<T>` 这种类型名
- * 当槽位换掉了）。内容质量不归它管。
+ * 挡的是模型输出的三类漂移：残留占位（用户还得手工编辑）、偏离本 skill 的模板
+ * 结构、过度替换（把 `Page<T>` 这种类型名当槽位换掉了）。这是模板结构与槽位检查，
+ * 不代表 Phoenix 的解析覆盖，也不是完整 YAML、token 或设计规则验证。内容质量不归它管。
  *
  * 零依赖，纯 Node ≥18。退出码：有 ✗ → 1，否则 0（! 只是提醒，不拦）。
  */
@@ -128,7 +128,7 @@ if (product) {
   const got = h2(product);
   if (got.join(" | ") !== PRODUCT_H2.join(" | ")) {
     err(
-      `PRODUCT.md 的二级标题必须是这七个、按这个顺序（impeccable 逐字解析）：\n` +
+      `PRODUCT.md 的二级标题必须是这七个、按这个顺序（本 skill 的模板结构约定）：\n` +
         `      期望  ${PRODUCT_H2.join(" / ")}\n` +
         `      实际  ${got.length ? got.join(" / ") : "（一个都没有）"}`
     );
@@ -169,7 +169,7 @@ const DESIGN_H2 = ["1. Overview", "2. Colors", "3. Typography", "4. Elevation",
 if (design) {
   const lines = design.split("\n");
   if (lines[0] !== "---") {
-    err(`DESIGN.md 第 1 行必须是 \`---\`（YAML frontmatter 不在开头就整块解析不出来），实际：${JSON.stringify(lines[0].slice(0, 40))}`);
+    err(`DESIGN.md 第 1 行必须是 \`---\`（本模板的格式约定），实际：${JSON.stringify(lines[0].slice(0, 40))}`);
   } else {
     ok("DESIGN.md frontmatter 从第 1 行开始");
   }
@@ -206,7 +206,7 @@ if (design) {
   const got = h2(design);
   if (got.join(" | ") !== DESIGN_H2.join(" | ")) {
     err(
-      `DESIGN.md 正文必须恰好六段、名字与顺序照抄（Google Stitch 格式，impeccable 逐字解析）：\n` +
+      `DESIGN.md 正文必须恰好六段、名字与顺序照抄（Google Stitch 模板结构约定）：\n` +
         `      期望  ${DESIGN_H2.join(" / ")}\n` +
         `      实际  ${got.length ? got.join(" / ") : "（一个都没有）"}`
     );

package/vendor/phoenix-ui/NOTICE.md

@@ -0,0 +1,17 @@
+# Third-Party Notices
+
+This project includes content derived from third-party work, used under the terms of its original license.
+
+## Phoenix UI fork
+
+XGENT maintains Phoenix UI as a modified Apache-2.0 fork of Impeccable skill 4.5.0 (commit `508d7e8955de3b3caf2d8676e85206723d41a887`) and engine 0.1.11 (commit `86be0f02dcdaaeb3f9b6780711dbdc03a14ce222`). The original license and notices remain in this distribution.
+
+Local changes cover public identity and state paths, offline distribution, provider hooks, local catalog candidates, screenshot resources and deterministic numeric operations. `UPSTREAM.json` preserves the original file hashes; `patches/ownership.json` records current modified and relocated paths. Skill sources now live under `skills/phoenix-ui/src/`.
+
+## Platform Design Skills
+
+The `skill/reference/ios.md` and `skill/reference/android.md` platform reference files are distilled from ehmo's `platform-design-skills` (Apple Human Interface Guidelines and Material Design 3 rules), rewritten in Impeccable's voice.
+
+**Original work:** https://github.com/ehmo/platform-design-skills
+**Original license:** MIT
+**Author:** ehmo

package/vendor/phoenix-ui/THIRD-PARTY-LICENSES/005fc765ddc5115da796cca915baa9557abae13ff35e0a47c47affc56f6c414d.txt

@@ -0,0 +1,272 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+Licenses for support code
+-------------------------
+
+Parts of the TLS test suite are under the Go license. This code is not included
+in BoringSSL (i.e. libcrypto and libssl) when compiled, however, so
+distributing code linked against BoringSSL does not trigger this license:
+
+Copyright (c) 2009 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+BoringSSL uses the Chromium test infrastructure to run a continuous build,
+trybots etc. The scripts which manage this, and the script for generating build
+metadata, are under the Chromium license. Distributing code linked against
+BoringSSL does not trigger this license.
+
+Copyright 2015 The Chromium Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.