circuitjson-toolkit 1.0.16 → 1.1.0

package/docs/migration.md

@@ -0,0 +1,120 @@
+# Migration from 1.0.17 to 1.1.0
+
+## Breaking API convergence
+
+Version 1.1.0 intentionally aligns CircuitJSON Toolkit with Gerber Toolkit,
+Altium Toolkit, and KiCad Toolkit. Existing names and return shapes may change;
+the previous behavior remains available through canonical services or the
+explicit `circuitjson-toolkit/extensions` compatibility surface.
+
+No feature in the 1.0.17 public baseline was silently removed. The generated
+appendix pages map all 1207 exports, methods, options, fields, and
+observable behaviors to their 1.1.0 owner and record availability in all four
+toolkits.
+
+## Canonical root
+
+The root exports these common classes:
+
+- `Parser`
+- `ProjectLoader`
+- `CircuitJsonDocumentContext`
+- `PcbSvgRenderer`
+- `SchematicSvgRenderer`
+- `BomTableRenderer`
+- `PcbInteractionIndex`
+- `QueryService`
+- `ManufacturingService`
+- `SimulationService`
+- `PcbScene3dBuilder`
+- `PcbScene3dPreparator`
+- `ToolkitCapabilities`
+- `ToolkitError`
+
+`CircuitJsonDocument`, `CircuitJsonIndexer`, and `CircuitJsonUnits` remain
+temporary root exports for `pcb-scene3d-viewer` compatibility. Other previous
+root and renderer symbols moved to `circuitjson-toolkit/extensions`.
+
+## Parser input and result
+
+Before:
+
+```js
+const model = CircuitJsonParser.parseText(text, { fileName: 'board.json' })
+```
+
+After:
+
+```js
+const document = Parser.parse({ fileName: 'board.json', data: text })
+const model = document.model
+```
+
+The common parser input is `{ fileName, data, assets? }`. Common options are
+`preserveRaw`, `decodeAssets`, `extensions`, `reports`,
+`retainSource`, `worker`, `transferInput`, `signal`, and
+`onProgress`. Unsupported enum values fail instead of being coerced.
+
+`retainSource` is exactly `'none' | 'reference'`. Reference mode adds the
+exact caller input as a non-enumerable `sourceReference` on direct parser
+results; it does not freeze that object and serialized results omit it.
+Explicit worker execution rejects reference mode because cross-thread identity
+cannot be preserved, while automatic execution stays direct.
+
+`Parser.parse` returns `ecad-toolkit.document.v1` with exact top-level
+`schema`, `id`, `modelSchema`, `model`, `source`, `extensions`,
+`assets`, `diagnostics`, and `statistics` fields. `Parser.tryParse`
+returns either `{ ok: true, value }` or
+`{ ok: false, error, diagnostics }`.
+
+## Project, rendering, query, manufacturing, simulation, and 3D
+
+- `ProjectLoader` accepts named entry arrays and returns
+  `ecad-toolkit.project.v1`. It captures known fields once, rejects an
+  excessive entry count before inspecting records, and classifies that stable
+  snapshot.
+- Renderers accept a document, model, or prepared context and use common
+  `top`/`bottom` sides.
+- Reuse one `CircuitJsonDocumentContext` for repeated render, interaction,
+  query, manufacturing, simulation, and scene work.
+- `PcbScene3dBuilder` is synchronous and data-only.
+  `PcbScene3dPreparator` performs explicit asynchronous asset resolution.
+- Native source facts stay under `document.extensions[format]`; they are not
+  duplicated into the CircuitJSON model.
+- Missing native prerequisites and unsupported operations throw typed
+  `ToolkitError` failures rather than returning invented empty results.
+
+## Workers
+
+`Parser.parseAsync` and `ProjectLoader.loadAsync` use the shared
+`ecad-toolkit.worker.v1` protocol. Inputs are not detached unless
+`transferInput: true`; worker-owned output buffers are transferred. Progress
+uses ordered `detect`, `decode`, `project`, `validate`, and `complete`
+stages. Cancellation is request-scoped.
+
+## Package subpaths
+
+- `circuitjson-toolkit/parser`
+- `circuitjson-toolkit/project`
+- `circuitjson-toolkit/renderers`
+- `circuitjson-toolkit/interaction`
+- `circuitjson-toolkit/query`
+- `circuitjson-toolkit/manufacturing`
+- `circuitjson-toolkit/simulation`
+- `circuitjson-toolkit/scene3d`
+- `circuitjson-toolkit/capabilities`
+- `circuitjson-toolkit/extensions`
+- `circuitjson-toolkit/testing`
+- `circuitjson-toolkit/workers/parser.worker.mjs`
+- `circuitjson-toolkit/styles/renderers.css`
+
+## Exhaustive feature mapping
+
+The exhaustive mapping is generated from the immutable captured contracts by
+`npm run sync:migration`. The pages remain deterministic and each stays below
+the repository's 1,000-line limit.
+
+- [Root entrypoint (673 mappings)](migration/root.md)
+- [Parser entrypoint (43 mappings)](migration/parser.md)
+- [Legacy renderer entrypoint (483 mappings)](migration/renderers.md)
+- [Observable behaviors (8 mappings)](migration/behaviors.md)

package/docs/model-format.md

@@ -1,10 +1,13 @@
-# Model Format
+# Model and envelope format
 
-CircuitJSON Toolkit works with serialized CircuitJSON element arrays.
+CircuitJSON Toolkit uses a standards-only CircuitJSON element array as its
+shared model. Public parsers wrap that array in typed, clone-safe envelopes so
+all ECAD toolkits return the same top-level shape.
 
-## Top-Level Shape
+## CircuitJSON model
 
-The expected top-level value is an array:
+`DocumentResult.model` is an immutable array of CircuitJSON `0.0.446`
+elements:
 
 ```json
 [
@@ -19,78 +22,193 @@ The expected top-level value is an array:
 ]
 ```
 
-Every element must be an object with a known non-empty string `type` field and
-the required fields for that element. The validator also checks the standard
-identifier convention for known element types, plus strict core fields for
-boards, source components, source ports, schematic components, PCB components,
-and SMT pads.
+Every element must have a known non-empty `type` and satisfy its standard
+field contract. Source toolkits may not add private element types, hidden
+renderer graphs, array expando properties, or native records to this model.
 
-## Metadata
+Acceptance is defined over the serialized input contract of the pinned
+`circuit-json@0.0.446` union. The browser runtime is generated from that union
+at development time and preserves required fields, unions, refinements,
+pipelines, and transform rejection boundaries. Upstream random default IDs are
+not materialized because doing so would make identical input nondeterministic;
+an omitted random identity instead produces the
+`CIRCUITJSON_UPSTREAM_DEFAULT_ID_OMITTED` warning and increments
+`statistics.upstreamDefaultIdentityOmissions`.
 
-`CircuitJsonParser` and `CircuitJsonDocument.attachMetadata()` attach
-non-structural metadata directly to the returned array:
+## DocumentResult
+
+`Parser.parse()` and `Parser.parseAsync()` return this exact enumerable shape:
 
 ```js
 {
-    fileName: 'board.json',
-    fileType: 'circuitjson',
-    kind: 'pcb',
-    sourceFormat: 'circuitjson'
+    schema: 'ecad-toolkit.document.v1',
+    id: 'document-...',
+    modelSchema: {
+        name: 'circuit-json',
+        version: '0.0.446'
+    },
+    model: [],
+    source: {
+        format: 'circuitjson',
+        fileName: 'board.json',
+        fileType: 'circuitjson'
+    },
+    extensions: {},
+    assets: [],
+    diagnostics: [],
+    statistics: {}
 }
 ```
 
-These fields are enumerable so they survive `structuredClone()` and align with
-the parser packages' document-model conventions.
+`id` derives from normalized source identity rather than the complete payload.
+The validated model is deeply immutable. A non-enumerable in-process proof lets
+`CircuitJsonDocumentContext` reuse validation; structured cloning intentionally
+drops that proof and the receiving process validates once.
+
+For direct asynchronous requests, binary parser inputs, project entries, and
+selected assets are captured before any progress callback or host yield.
+Partial and shared-buffer views preserve only their exact visible range.
+Worker-received request graphs are already process-owned by structured clone,
+so the worker marks and reuses that boundary instead of making a second input
+copy.
 
-## Identifiers
+The `CircuitJsonParser` legacy array is mutable for migration-only metadata and
+slot replacement, while every unchanged element graph is deeply immutable. If
+a caller replaces an element slot, optimized consumers discard the proof-bound
+shortcut and validate the replacement before use.
 
-`CircuitJsonIndexer` recognizes common CircuitJSON ID fields, including:
+## Source extensions
 
-- `pcb_board_id`
-- `pcb_component_id`
-- `pcb_hole_id`
-- `pcb_plated_hole_id`
-- `pcb_port_id`
-- `pcb_smtpad_id`
-- `pcb_trace_id`
-- `pcb_via_id`
-- `source_component_id`
-- `source_net_id`
-- `source_port_id`
-- `source_trace_id`
+CircuitJSON input has an empty extension map. `extensions: 'none'` also returns
+exactly `{}` for every source format. When source-native facts are selected,
+the document has one owned namespace:
 
-Indexed element IDs are stored with a type prefix, such as
-`pcb_board:board_1`, so different element classes can reuse local IDs without
-colliding.
+```js
+{
+    altium: {
+        $meta: {
+            schema: 'ecad-toolkit.extension.v1',
+            completeness: 'canonical',
+            included: ['layers'],
+            omitted: ['raw-records']
+        },
+        layers: []
+    }
+}
+```
+
+Extensions contain only explicitly selected native facts and references. They
+must not duplicate the CircuitJSON model or keep a renamed renderer model.
+Default parsing excludes raw/base64/full-payload graphs.
+
+When a caller explicitly selects a native extension, the toolkit captures and
+freezes that graph once under a distinct ceiling of 2,000,000 structured items
+and 128 MiB of string or binary content. The ceiling is shared across the
+selected namespace, applies equally after worker transfer, and remains below
+the worker's 250 MB whole-result limit. General document metadata keeps its
+smaller budget, so a large native projection cannot consume the canonical
+metadata allowance. Oversized graphs are rejected; they are never truncated or
+partially retained. Binary extension values remain byte-backed with their
+common buffer/view type and are exposed as defensive copies, preserving
+mutation isolation without expanding bytes into plain numeric arrays.
+
+Supported pre-union CircuitJSON aliases may be projected through
+`CircuitJsonDocument.normalizeModel()`. The copy-on-write form preserves exact
+canonical identities; the owned form is for source toolkits before their one
+validation/proof boundary. Table cell geometry, PCB artwork routes,
+pad-clearance relations, courtyards, layer aliases, and stroke dashes are
+derived structurally and never from a source filename or fixture identity.
+
+## Assets and diagnostics
+
+Assets have exact `id`, `kind`, `name`, `mediaType`, `byteLength`, `data`, and
+`source` fields. `data` is `null`, a string, or a supported binary view.
+`decodeAssets` controls whether no assets, metadata, or full payloads are
+returned.
+
+Schematic images are canonical model rows, not inline payload containers:
+
+```js
+{
+    type: 'schematic_image',
+    schematic_image_id: 'schematic_image_logo',
+    asset_id: 'asset_logo',
+    center: { x: 20, y: 10 },
+    size: { width: 8, height: 4 },
+    rotation: 0,
+    opacity: 1,
+    preserve_aspect_ratio: true,
+    render_order: 0,
+    source_name: 'logo.png'
+}
+```
 
-PCB courtyard artwork rows use the normal `type_id` identifier convention. The
-validator accepts generic `pcb_courtyard` rows plus shape-specific variants such
-as `pcb_courtyard_rect`, `pcb_courtyard_circle`, `pcb_courtyard_outline`,
-`pcb_courtyard_path`, and `pcb_courtyard_line`.
+The referenced ToolkitAsset uses `kind: 'schematic-image'`. Payload bytes live
+only in `assets[].data` when `decodeAssets: 'full'`; metadata mode retains
+`byteLength` and sets `data: null`.
 
-## Group Indexing
+Hierarchical child boxes use `schematic_sheet_symbol` with
+`schematic_sheet_symbol_id`, `name`, optional `source_file_name`,
+`center`, `width`, `height`, and standard stroke/fill fields. Child
+`schematic_port` rows reference `schematic_sheet_symbol_id`.
+`schematic_sheet` remains reserved for actual selectable document pages.
 
-`CircuitJsonIndexer` builds `groupsById` and `elementsByGroupId` from direct
-group fields such as `source_group_id`, `pcb_group_id`,
-`schematic_group_id`, `group_id`, and `group_ids`. It also treats member-style
-fields such as `member_source_group_ids`, `member_pcb_group_ids`,
-`member_schematic_group_ids`, and `member_group_ids` as group memberships, so
-source nets and other non-group elements can participate in group indexes
-without duplicating direct group fields.
+Diagnostics have exact `code`, `severity`, `message`, `source`, `location`, and
+`details` fields. Severity is `info`, `warning`, or `error`.
 
-## Units
+## ProjectResult
 
-CircuitJSON PCB coordinates and dimensions are millimeter-based. The toolkit
-provides unit helpers for consumers such as 3D render adapters that need mils:
+`ProjectLoader` returns:
 
 ```js
-const widthMil = CircuitJsonUnits.mmToMil(board.width)
-const centerMil = CircuitJsonUnits.pointMmToMil(board.center)
+{
+    schema: 'ecad-toolkit.project.v1',
+    id: 'project-...',
+    source: { format: 'circuitjson', entryNames: [] },
+    documents: [],
+    project: null,
+    extensions: {},
+    assets: [],
+    diagnostics: [],
+    statistics: {}
+}
 ```
 
-## Scope
+`documents` contains canonical `DocumentResult` objects. `project` is `null`
+for a collection without project metadata or an exact descriptor with `id`,
+`name`, `format`, `documentIds`, and `relationships`.
+
+## Prepared contexts
+
+`CircuitJsonDocumentContext.prepare(document, options)` accepts a document
+envelope, bare CircuitJSON array, or an existing context. It validates a bare
+or cloned input once and owns request-scoped element, relation, connectivity,
+spatial, render, query, manufacturing, simulation, and scene-derived caches.
+The `identifiers` index is a compact set-only view for membership checks and
+clone boundaries that do not need duplicate element values.
+
+Contexts can only be constructed by `prepare()`. Calling the exported class
+constructor directly throws before reading caller input, so an arbitrary model
+cannot be branded as validated and handed to a renderer, viewer, or app.
+
+Serialized results never contain context caches, validation tokens, callbacks,
+signals, workers, or caller source references.
+
+## Shared drilled geometry
+
+`CircuitJsonPcbHolePrimitiveModel` converts `pcb_hole` and `pcb_plated_hole`
+rows into one source-neutral primitive. For `hole_with_polygon_pad`, the model
+inverse-rotates `pad_outline` around the authored center before measuring the
+outer width and height. Its global `bounds` remain global, and pill drill
+`outer_width`/`outer_height`, rectangular-pad dimensions, and independent
+`rect_ccw_rotation`/`hole_ccw_rotation` variants remain distinct. `holeWidth`,
+`holeHeight`, `holeDiameter`, `rotation`, and board-space `holeRotation` remain
+available
+separately. This lets every viewer consume the same canonical geometry without
+format-specific repairs.
+
+## Units and scene coordinates
 
-This package does not render CircuitJSON, parse native ECAD formats, or infer
-format-specific semantics. Renderer packages and parser packages should consume
-these utilities rather than moving rendering or source-format behavior into this
-toolkit.
+CircuitJSON PCB positions and dimensions use millimeters. Canonical 3D scenes
+use millimeters and `right-handed-z-up`. Scene assets are data records; loading
+and runtime rendering remain explicit host responsibilities.

package/docs/provenance.md

@@ -0,0 +1,206 @@
+<!--
+SPDX-FileCopyrightText: 2026 André Fiedler
+SPDX-License-Identifier: CC-BY-SA-4.0
+-->
+
+# Implementation provenance
+
+## Pinned CircuitJSON schema provenance
+
+The canonical serialized-input contract is compiled at development time from
+the complete `any_circuit_element` union exported by
+`circuit-json@0.0.446`. `package-lock.json` pins the npm integrity, and
+`spec/circuitjson-schema-source.json` records that integrity together with the
+distributed module SHA-256 and compiled contract SHA-256. The generated
+`src/core/CircuitJsonUpstreamSchema.mjs` contains only browser-neutral data and
+runtime instructions; neither `circuit-json`, Zod, Node built-ins, nor
+`format-si-unit` is a published runtime edge.
+
+Schema compilation also pins and verifies the exact compiler dependencies
+`format-si-unit@0.0.7` and `zod@3.25.76`. For each dependency, the source and
+generated provenance records contain the npm lockfile integrity, the inspected
+distribution entry file, and that file's SHA-256. The lock integrity covers the
+complete published tarball; the distribution hash makes the exact local entry
+bytes independently visible.
+
+The compiler preserves the pinned union's object, union, refinement, pipeline,
+and transform acceptance behavior. In particular, the indirect development
+dependency `format-si-unit@0.0.7` can throw for malformed SI strings; the
+generated validator represents that rejection boundary without executing the
+upstream transform or materializing its output. `npm run sync:schema --
+--check` recompiles the live dependency and rejects any difference without
+writing files, including any compiler dependency version, integrity, or entry
+file drift.
+
+## Query implementation provenance
+
+Task 6 consolidates source-neutral query behavior in `circuitjson-toolkit`.
+The implementation is an independent, contract-driven reimplementation over
+CircuitJSON indexes. No source text or package-native data model from the
+consulted Altium or KiCad implementations is copied into this repository.
+
+## Adapted-module records
+
+Every adapted module has a complete record for both consulted repositories.
+The records deliberately distinguish behavior observation from implementation
+reuse.
+
+### RegexPattern.mjs
+
+- Local path: `src/core/query/RegexPattern.mjs`
+
+#### Altium Toolkit source
+
+- Repository: `https://github.com/SunboX/altium-toolkit`
+- Path: `src/core/netlist-query/RegexPattern.mjs`
+- Inspected worktree commit: `9fa22e1028d96e583275093279bf6e03e8619588`
+- Source-introducing commit: `e8a8cd551ad103cd0cf96bb5b5f5b816874ed72b`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### KiCad Toolkit source
+
+- Repository: `https://github.com/SunboX/kicad-toolkit`
+- Path: `src/core/netlist-query/RegexPattern.mjs`
+- Inspected worktree commit: `c71c88d69d236accce123656dfa66914c0d5489c`
+- Source-introducing commit: `02e38fe0b961a09d2ff25462b9b00207326743d2`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### Decision
+
+- Consulted behavior: string-sourced regular-expression matching and reset
+  behavior between tests.
+- Reuse classification: behavior-only, independent bounded validation. No
+  source text or algorithm implementation was copied.
+
+### ComponentGrouping.mjs
+
+- Local path: `src/core/query/ComponentGrouping.mjs`
+
+#### Altium Toolkit source
+
+- Repository: `https://github.com/SunboX/altium-toolkit`
+- Path: `src/core/netlist-query/ComponentGrouping.mjs`
+- Inspected worktree commit: `9fa22e1028d96e583275093279bf6e03e8619588`
+- Source-introducing commit: `e8a8cd551ad103cd0cf96bb5b5f5b816874ed72b`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### KiCad Toolkit source
+
+- Repository: `https://github.com/SunboX/kicad-toolkit`
+- Path: `src/core/netlist-query/ComponentGrouping.mjs`
+- Inspected worktree commit: `c71c88d69d236accce123656dfa66914c0d5489c`
+- Source-introducing commit: `02e38fe0b961a09d2ff25462b9b00207326743d2`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### Decision
+
+- Consulted behavior: deterministic grouping vocabulary and stable result
+  ordering.
+- Reuse classification: behavior-only, independent grouping over canonical
+  CircuitJSON relations. No source text or algorithm implementation was copied.
+
+### CircuitTraversal.mjs
+
+- Local path: `src/core/query/CircuitTraversal.mjs`
+
+#### Altium Toolkit source
+
+- Repository: `https://github.com/SunboX/altium-toolkit`
+- Path: `src/core/netlist-query/CircuitTraversal.mjs`
+- Inspected worktree commit: `9fa22e1028d96e583275093279bf6e03e8619588`
+- Source-introducing commit: `e8a8cd551ad103cd0cf96bb5b5f5b816874ed72b`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### KiCad Toolkit source
+
+- Repository: `https://github.com/SunboX/kicad-toolkit`
+- Path: `src/core/netlist-query/CircuitTraversal.mjs`
+- Inspected worktree commit: `c71c88d69d236accce123656dfa66914c0d5489c`
+- Source-introducing commit: `02e38fe0b961a09d2ff25462b9b00207326743d2`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### Decision
+
+- Consulted behavior: ordered traversal, visited-net handling, and cycle
+  termination. Sibling endpoint and traversal-bound fields were not consulted.
+- Reuse classification: behavior-only, independent traversal. Endpoint and
+  path-connector records are derived directly from CircuitJSON ports, nets, and
+  explicit internal connections; no source text or algorithm was copied.
+
+### QueryNetlistBuilder.mjs
+
+- Local path: `src/core/query/QueryNetlistBuilder.mjs`
+
+#### Altium Toolkit source
+
+- Repository: `https://github.com/SunboX/altium-toolkit`
+- Path: `src/core/netlist-query/QueryNetlistBuilder.mjs`
+- Inspected worktree commit: `9fa22e1028d96e583275093279bf6e03e8619588`
+- Source-introducing commit: `e8a8cd551ad103cd0cf96bb5b5f5b816874ed72b`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### KiCad Toolkit source
+
+- Repository: `https://github.com/SunboX/kicad-toolkit`
+- Path: `src/core/netlist-query/QueryNetlistBuilder.mjs`
+- Inspected worktree commit: `c71c88d69d236accce123656dfa66914c0d5489c`
+- Source-introducing commit: `02e38fe0b961a09d2ff25462b9b00207326743d2`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### Decision
+
+- Consulted behavior: component, net, and pin result vocabulary.
+- Reuse classification: behavior-only, independent construction from prepared
+  CircuitJSON indexes. No source text or algorithm implementation was copied.
+
+### QueryService.mjs
+
+- Local path: `src/core/query/QueryService.mjs`
+
+#### Altium Toolkit source
+
+- Repository: `https://github.com/SunboX/altium-toolkit`
+- Path: `src/core/netlist-query/LoadedDesignNetlistService.mjs`
+- Inspected worktree commit: `9fa22e1028d96e583275093279bf6e03e8619588`
+- Source-introducing commit: `e8a8cd551ad103cd0cf96bb5b5f5b816874ed72b`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### KiCad Toolkit source
+
+- Repository: `https://github.com/SunboX/kicad-toolkit`
+- Path: `src/core/netlist-query/LoadedDesignNetlistService.mjs`
+- Inspected worktree commit: `c71c88d69d236accce123656dfa66914c0d5489c`
+- Source-introducing commit: `02e38fe0b961a09d2ff25462b9b00207326743d2`
+- Copyright: `2026 André Fiedler`
+- License: `GPL-3.0-or-later`
+
+#### Decision
+
+- Consulted behavior: bound-service reuse and convenience query methods.
+- Reuse classification: behavior-only, independent canonical query boundary
+  over a prepared CircuitJSON context. No source text or algorithm was copied.
+
+## CircuitJSON-owned inputs
+
+- Repository: `https://github.com/SunboX/circuitjson-toolkit`
+- Inspected commit: `ed46a237e6d71355d6400692509356fe3737c802`
+- Paths: `src/core/CircuitJsonIndexer.mjs` and
+  `src/core/context/CircuitJsonDocumentContext.mjs`
+- Copyright: `2026 André Fiedler`
+- License: `AGPL-3.0-or-later`
+- Reuse classification: these repository-owned APIs are consumed directly as
+  the single source of truth for element, relation, and connectivity data.
+
+All new Task 6 software remains `AGPL-3.0-or-later`. Because no GPL source or
+algorithm implementation is copied, no source-file relicensing occurs. The
+consulted projects and their original GPL notices remain attributed here and in
+`NOTICE.md`.