@zergai/ztc 0.4.0-beta.1 → 0.5.0-beta.1

package/THIRD_PARTY_NOTICES.md

@@ -1,4 +1,4 @@
-# Third-Party Notices for `zerg-ztc` 0.2
+# Third-Party Notices for `zerg-ztc`
 
 `zerg-ztc` includes or depends on third-party software. Those components are
 not relicensed under the Zerg Source Available License 1.0; their respective
@@ -14,34 +14,69 @@ or—when neither ships a license file—the crate's Cargo attribution plus the
 official SPDX license text. A choice such as `MIT OR Apache-2.0` means a recipient
 may use the component under either listed license.
 
+The internal `@zerg/model-contracts` package is first-party Zerg code, version
+0.1.0, under the Zerg Source Available License 1.0. Its distribution includes
+`LICENSE.md`; it adds no third-party dependencies.
+
 ## Direct npm dependencies
 
+This inventory describes the current core dependency lock. The two bundled
+first-party modules are listed separately below. Transitive npm distributions
+retain their own license and notice files; this table does not replace them.
+
 | Package | Locked version | License | Upstream |
 | --- | ---: | --- | --- |
-| `@modelcontextprotocol/sdk` | 1.29.0 | MIT | https://www.npmjs.com/package/@modelcontextprotocol/sdk |
-| `acorn` | 8.17.0 | MIT | https://www.npmjs.com/package/acorn |
+| `@modelcontextprotocol/sdk` | 1.30.0 | MIT | https://www.npmjs.com/package/@modelcontextprotocol/sdk |
+| `acorn` | 8.18.0 | MIT | https://www.npmjs.com/package/acorn |
 | `chalk` | 5.6.2 | MIT | https://www.npmjs.com/package/chalk |
-| `cs-cli` | 0.2.7 | MIT | https://www.npmjs.com/package/cs-cli |
-| `csterm` | 1.0.22 | MIT | https://www.npmjs.com/package/csterm |
-| `docx` | 9.6.1 | MIT | https://www.npmjs.com/package/docx |
-| `docx-preview` | 0.3.7 | Apache-2.0 | https://www.npmjs.com/package/docx-preview |
+| `docx` | 9.7.1 | MIT | https://www.npmjs.com/package/docx |
 | `exceljs` | 4.4.0 | MIT | https://www.npmjs.com/package/exceljs |
-| `fastify` | 5.11.3 | MIT | https://www.npmjs.com/package/fastify |
+| `fastify` | 5.12.5 | MIT | https://www.npmjs.com/package/fastify |
+| `immer` | 10.1.1 | MIT | https://github.com/immerjs/immer |
 | `ink` | 5.2.1 | MIT | https://www.npmjs.com/package/ink |
-| `jsonrepair` | 3.14.0 | ISC | https://www.npmjs.com/package/jsonrepair |
+| `jsonrepair` | 3.15.0 | ISC | https://www.npmjs.com/package/jsonrepair |
 | `node-pty` | 1.1.0 | MIT | https://www.npmjs.com/package/node-pty |
 | `nunjucks` | 3.2.4 | BSD-2-Clause | https://www.npmjs.com/package/nunjucks |
 | `pdfkit` | 0.18.0 | MIT | https://www.npmjs.com/package/pdfkit |
 | `pptxgenjs` | 4.0.1 | MIT | https://github.com/gitbrent/PptxGenJS/tree/v4.0.1 |
 | `react` | 18.3.1 | MIT | https://www.npmjs.com/package/react |
-| `react-dom` | 18.3.1 | MIT | https://www.npmjs.com/package/react-dom |
 | `semver` | 7.8.5 | ISC | https://www.npmjs.com/package/semver |
 | `socket.io-client` | 4.8.3 | MIT | https://www.npmjs.com/package/socket.io-client |
+| `yaml` | 2.9.0 | ISC | https://www.npmjs.com/package/yaml |
+| `zod` | 4.4.3 | MIT | https://www.npmjs.com/package/zod |
+
+### Separate view clients and retained historical references
+
+These entries are retained from earlier inventories and are not current core
+npm dependencies. `docx-preview`, `vue`, and `vue-router` belong to the separate
+Tycoon view client; `react-dom` belongs to `ztc-web-client`. Those packages have
+their own dependency locks and distributions. The versions below are retained
+references, not a claim about a view client's current locked versions.
+
+`cs-cli`, `csterm`, and the SheetJS `xlsx` package are historical references.
+The checked core tarball contains no package manifests or runtime imports for
+these seven npm packages. ExcelJS files and `.xlsx` filenames do not identify a
+bundled SheetJS package. Their historical references and component terms remain
+here rather than being discarded based only on the core manifest.
+
+| Component | Referenced version | Declared or published terms | Upstream |
+| --- | ---: | --- | --- |
+| `cs-cli` | 0.2.7 | MIT | https://www.npmjs.com/package/cs-cli |
+| `csterm` | 1.0.22 | MIT in metadata; PolyForm Noncommercial 1.0.0 in published `LICENSE` | https://www.npmjs.com/package/csterm |
+| `docx-preview` | 0.3.7 | Apache-2.0 | https://www.npmjs.com/package/docx-preview |
+| `react-dom` | 18.3.1 | MIT | https://www.npmjs.com/package/react-dom |
 | `vue` | 3.5.32 | MIT | https://www.npmjs.com/package/vue |
 | `vue-router` | 4.6.4 | MIT | https://www.npmjs.com/package/vue-router |
 | `xlsx` | 0.18.5 | Apache-2.0 | https://www.npmjs.com/package/xlsx |
-| `yaml` | 2.8.3 | ISC | https://www.npmjs.com/package/yaml |
-| `zod` | 4.3.6 | MIT | https://www.npmjs.com/package/zod |
+
+For `csterm@1.0.22`, [npm metadata](https://registry.npmjs.org/csterm/1.0.22)
+declares MIT, but the `LICENSE` in its [published archive](https://registry.npmjs.org/csterm/-/csterm-1.0.22.tgz)
+identifies PolyForm Noncommercial License 1.0.0. Both facts are recorded above;
+the metadata label must not be treated as a description of that license file.
+For `cs-cli@0.2.7`, MIT is declared in npm metadata's legacy `licenses` field;
+its published tarball contains no license file. Neither package is bundled in the checked core
+artifact. This inventory makes no redistribution-policy change for a future
+integration of either component.
 
 ### Bundled first-party npm module
 
@@ -89,6 +124,23 @@ declared dependencies, including the unpatched vulnerable `image-size` package.
 Exact upstream hashes and the reason for this packaging are recorded in
 [`node_modules/pptxgenjs/PROVENANCE.md`](./node_modules/pptxgenjs/PROVENANCE.md).
 
+## Optional immutable broker image
+
+The [broker build context](remote-broker/README.md) installs the following pinned
+Python runtime dependencies from their upstream distributions. Their original
+license files remain in the image's `*.dist-info/licenses/` directories. These
+packages and the Python/Debian base image are installed when the operator builds
+the separate receiver image; they are not included as Python binaries in the npm
+package. Preserve the base image's Python and operating-system component notices.
+
+| Package | Version | Declared license | Upstream |
+| --- | ---: | --- | --- |
+| `pydantic` | 2.13.5 | MIT | https://pypi.org/project/pydantic/2.13.5/ |
+| `pydantic-core` | 2.46.5 | MIT | https://pypi.org/project/pydantic-core/2.46.5/ |
+| `annotated-types` | 0.8.0 | MIT | https://pypi.org/project/annotated-types/0.8.0/ |
+| `typing-extensions` | 4.16.0 | PSF-2.0 | https://pypi.org/project/typing-extensions/4.16.0/ |
+| `typing-inspection` | 0.4.4 | MIT | https://pypi.org/project/typing-inspection/0.4.4/ |
+
 ## Rust dependencies in shipped native binaries
 
 The complete target-specific package inventory and the deduplicated license and
@@ -124,3 +176,212 @@ This notice is informational and does not replace or modify any third-party
 license. Source code and license texts for npm packages are available through
 their linked npm distributions; source code and license texts for Rust crates
 are available through their linked crates.io distributions.
+
+
+## Bundled native fallback fonts
+
+The native ZTC desktop binary embeds unmodified Noto Sans Mono CJK JP Regular
+and Noto Emoji variable outline fonts. These fonts retain the SIL Open Font
+License 1.1; the agent and native application license does not replace it.
+Noto Emoji renders in monochrome. Neither font requires OS installation.
+
+Upstream: https://github.com/notofonts/noto-cjk/tree/main/Sans/Mono and
+https://github.com/google/fonts/tree/main/ofl/notoemoji. Exact source asset hashes
+and local coverage/geometry qualification are recorded with ZTC-228 evidence.
+
+### Noto Sans CJK license
+
+```text
+This Font Software is licensed under the SIL Open Font License,
+Version 1.1.
+
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font
+creation efforts of academic and linguistic communities, and to
+provide a free and open framework in which fonts may be shared and
+improved in partnership with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply to
+any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software
+components as distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to,
+deleting, or substituting -- in part or in whole -- any of the
+components of the Original Version, by changing formats or by porting
+the Font Software to a new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed,
+modify, redistribute, and sell modified and unmodified copies of the
+Font Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components, in
+Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the
+corresponding Copyright Holder. This restriction only applies to the
+primary font name as presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created using
+the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+
+```
+
+### Noto Emoji license
+
+```text
+Copyright 2013 Google LLC
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+
+```