retiam 1.0.2 → 2.0.0

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,318 @@
+# Retiam third-party notices
+
+These notices describe third-party code, fonts, generated font data, and weights
+used by Retiam. Each component retains its own license; Retiam's own license
+does not replace or restrict the rights those licenses grant. Original license
+and notice texts are reproduced in [`THIRD_PARTY_LICENSES.txt`](THIRD_PARTY_LICENSES.txt).
+Identical texts are stored once; the section references below identify the
+applicable texts for each component. Distinct copyright notices are preserved.
+For upstream READMEs, only reviewed licensing and attribution passages are
+included. Those excerpts are reproduced unchanged and marked in the text file.
+
+This inventory conservatively includes non-optional production packages from
+the root lockfile, explicitly bundled packages and their dependencies even when
+marked development-only, WebGPU declaration types, and the pinned Monaco editor
+used by Studio. Some packages are CLI/server dependencies rather
+than browser bundle contents. Optional platform binaries, development-only
+tools, downloaded browsers, and externally served CDN resources are not claimed
+to be included in every Retiam distribution. Their distributors provide their
+own terms. Applications that add dependencies or media need their own inventory.
+
+Keep this file and `THIRD_PARTY_LICENSES.txt` together when redistributing Retiam bundles,
+alongside Retiam's own `LICENSE` and `COMMERCIAL_LICENSE.md`. Retiam's own code
+is free for noncommercial use; commercial use requires the separate paid
+agreement described in those files. These restrictions do not replace or limit
+the rights granted by the third-party licenses reproduced here.
+Do not remove embedded upstream license notices. Generated projects additionally
+copy the installed engine's notices to `public/vendor/retiam/` and copy the actual
+installed TypeScript and Monaco notices beside their vendor files before builds.
+
+## Fonts, generated font data, weights, and vendored components
+
+| Component | License | Text sections |
+| --- | --- | --- |
+| Roboto | Apache-2.0 | [L001, L002](THIRD_PARTY_LICENSES.txt) |
+| Fira Code | OFL-1.1 | [L003, L004](THIRD_PARTY_LICENSES.txt) |
+| Fredericka the Great | OFL-1.1 | [L005, L006](THIRD_PARTY_LICENSES.txt) |
+| Excalifont | OFL-1.1 | [L007, L008](THIRD_PARTY_LICENSES.txt) |
+| Intel Open Image Denoise weights | Apache-2.0 | [L009, L010](THIRD_PARTY_LICENSES.txt) |
+| WOFF2/Brotli implementations used by woff2-encoder | MIT | [L011, L012, L013](THIRD_PARTY_LICENSES.txt) |
+| Emscripten, musl and LLVM WebAssembly runtime notices | MIT AND (Apache-2.0 WITH LLVM-exception) | [L014, L015, L016, L017, L018, L019](THIRD_PARTY_LICENSES.txt) |
+| Inigo Quilez SDF technical snippets (WGSL adaptations) | MIT | [L020, L021](THIRD_PARTY_LICENSES.txt) |
+
+Font coverage includes the corresponding MSDF PNG/JSON atlases and generated
+glyph outlines in `excalifontMathJaxData.ts`. These remain font-derived data
+under the respective font license. Reserved Font Name
+conditions apply to modified font distributions. See the individual source notes
+for provenance, copyright information, and the verified OIDN checksum.
+
+## npm dependencies and Studio
+
+Versions refer to this repository's inventory snapshot. Installed dependencies
+also supply their own terms. MIT is the selected alternative for `xmldom-sre`,
+which offers MIT or LGPL; both upstream options are preserved in its notice.
+
+| Package | Version | Declared license | Text sections |
+| --- | --- | --- | --- |
+| @babel/code-frame | 7.27.1 | MIT | [L022](THIRD_PARTY_LICENSES.txt) |
+| @babel/helper-validator-identifier | 7.28.5 | MIT | [L022](THIRD_PARTY_LICENSES.txt) |
+| @dimforge/rapier2d-compat | 0.20.0 | Apache-2.0 | [L023](THIRD_PARTY_LICENSES.txt) |
+| @dimforge/rapier3d-compat | 0.20.0 | Apache-2.0 | [L023](THIRD_PARTY_LICENSES.txt) |
+| @petamoriken/float16 | 3.9.3 | MIT | [L024](THIRD_PARTY_LICENSES.txt) |
+| @puppeteer/browsers | 1.9.1 | Apache-2.0 | [L025, L026, L027](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs-backend-cpu | 4.20.0 | Apache-2.0 | [L030, L031, L009](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs-backend-webgl | 4.20.0 | Apache-2.0 | [L032, L033, L009](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs-backend-webgpu | 4.20.0 | Apache-2.0 | [L034, L035, L009](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs-converter | 4.20.0 | Apache-2.0 | [L036, L037, L009](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs-core | 4.20.0 | Apache-2.0 | [L038, L039, L009](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs-data | 4.20.0 | Apache-2.0 | [L043, L044, L009](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs-layers | 4.20.0 | Apache-2.0 AND MIT | [L045, L046, L047](THIRD_PARTY_LICENSES.txt) |
+| @tensorflow/tfjs | 4.20.0 | Apache-2.0 | [L028, L029, L009](THIRD_PARTY_LICENSES.txt) |
+| @tootallnate/quickjs-emscripten | 0.23.0 | MIT | [L052](THIRD_PARTY_LICENSES.txt) |
+| @types/dom-webcodecs | 0.1.18 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/estree | 1.0.7 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/libtess | 1.2.0 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/long | 4.0.2 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/node-fetch | 2.6.13 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/node | 22.7.4 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/offscreencanvas | 2019.3.0 | MIT | [L053](THIRD_PARTY_LICENSES.txt) |
+| @types/offscreencanvas | 2019.7.3 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/prismjs | 1.26.6 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/seedrandom | 2.4.34 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @types/wicg-file-system-access | 2020.9.8 | MIT | [L040](THIRD_PARTY_LICENSES.txt) |
+| @webgpu/types | 0.1.38 | BSD-3-Clause | [L041](THIRD_PARTY_LICENSES.txt) |
+| @webgpu/types | 0.1.40 | BSD-3-Clause | [L041](THIRD_PARTY_LICENSES.txt) |
+| @zappar/msdf-generator | 1.2.4 | MIT AND BSD-3-Clause | [L054](THIRD_PARTY_LICENSES.txt) |
+| agent-base | 6.0.2 | MIT | [L062, L063](THIRD_PARTY_LICENSES.txt) |
+| agent-base | 7.1.3 | MIT | [L055](THIRD_PARTY_LICENSES.txt) |
+| ansi-regex | 5.0.1 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| ansi-styles | 4.3.0 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| argparse | 1.0.10 | MIT | [L057](THIRD_PARTY_LICENSES.txt) |
+| argparse | 2.0.1 | Python-2.0 | [L079](THIRD_PARTY_LICENSES.txt) |
+| as-number | 1.0.0 | MIT | [L058](THIRD_PARTY_LICENSES.txt) |
+| ast-types | 0.13.4 | MIT | [L059](THIRD_PARTY_LICENSES.txt) |
+| asynckit | 0.4.0 | MIT | [L060](THIRD_PARTY_LICENSES.txt) |
+| axios | 1.20.0 | MIT | [L061](THIRD_PARTY_LICENSES.txt) |
+| b4a | 1.6.7 | Apache-2.0 | [L001](THIRD_PARTY_LICENSES.txt) |
+| base64-js | 1.5.1 | MIT | [L066](THIRD_PARTY_LICENSES.txt) |
+| basic-ftp | 5.0.5 | MIT | [L067](THIRD_PARTY_LICENSES.txt) |
+| box3d-wasm | 0.2.0 | MIT | [L068, L069](THIRD_PARTY_LICENSES.txt) |
+| buffer-crc32 | 0.2.13 | MIT | [L071](THIRD_PARTY_LICENSES.txt) |
+| buffer | 5.7.1 | MIT | [L070](THIRD_PARTY_LICENSES.txt) |
+| buffer | 6.0.3 | MIT | [L070](THIRD_PARTY_LICENSES.txt) |
+| call-bind-apply-helpers | 1.0.2 | MIT | [L072](THIRD_PARTY_LICENSES.txt) |
+| callsites | 3.1.0 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| chalk | 4.1.2 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| chromium-bidi | 0.5.8 | Apache-2.0 | [L001](THIRD_PARTY_LICENSES.txt) |
+| cli-progress | 3.12.0 | MIT | [L073](THIRD_PARTY_LICENSES.txt) |
+| cliui | 7.0.4 | ISC | [L048](THIRD_PARTY_LICENSES.txt) |
+| cliui | 8.0.1 | ISC | [L048](THIRD_PARTY_LICENSES.txt) |
+| color-convert | 2.0.1 | MIT | [L074](THIRD_PARTY_LICENSES.txt) |
+| color-name | 1.1.4 | MIT | [L075](THIRD_PARTY_LICENSES.txt) |
+| combined-stream | 1.0.8 | MIT | [L076](THIRD_PARTY_LICENSES.txt) |
+| comlink | 4.4.2 | Apache-2.0 | [L077](THIRD_PARTY_LICENSES.txt) |
+| commander | 9.2.0 | MIT | [L180](THIRD_PARTY_LICENSES.txt) |
+| core-js | 3.29.1 | MIT | [L049](THIRD_PARTY_LICENSES.txt) |
+| cosmiconfig | 9.0.0 | MIT | [L078](THIRD_PARTY_LICENSES.txt) |
+| cross-fetch | 4.0.0 | MIT | [L081](THIRD_PARTY_LICENSES.txt) |
+| data-uri-to-buffer | 6.0.2 | MIT | [L082](THIRD_PARTY_LICENSES.txt) |
+| debug | 4.3.4 | MIT | [L083](THIRD_PARTY_LICENSES.txt) |
+| degenerator | 5.0.1 | MIT | [L084, L063](THIRD_PARTY_LICENSES.txt) |
+| delayed-stream | 1.0.0 | MIT | [L076](THIRD_PARTY_LICENSES.txt) |
+| devtools-protocol | 0.0.1232444 | BSD-3-Clause | [L085](THIRD_PARTY_LICENSES.txt) |
+| dunder-proto | 1.0.1 | MIT | [L086](THIRD_PARTY_LICENSES.txt) |
+| earcut | 3.0.2 | ISC | [L087](THIRD_PARTY_LICENSES.txt) |
+| emoji-regex | 8.0.0 | MIT | [L088](THIRD_PARTY_LICENSES.txt) |
+| end-of-stream | 1.4.4 | MIT | [L089](THIRD_PARTY_LICENSES.txt) |
+| env-paths | 2.2.1 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| error-ex | 1.3.2 | MIT | [L090](THIRD_PARTY_LICENSES.txt) |
+| es-define-property | 1.0.1 | MIT | [L072](THIRD_PARTY_LICENSES.txt) |
+| es-errors | 1.3.0 | MIT | [L072](THIRD_PARTY_LICENSES.txt) |
+| es-object-atoms | 1.1.2 | MIT | [L072](THIRD_PARTY_LICENSES.txt) |
+| es-set-tostringtag | 2.1.0 | MIT | [L091](THIRD_PARTY_LICENSES.txt) |
+| esbuild | 0.25.5 | MIT | [L092](THIRD_PARTY_LICENSES.txt) |
+| esbuild | 0.28.1 | MIT | [L092](THIRD_PARTY_LICENSES.txt) |
+| escalade | 3.2.0 | MIT | [L093](THIRD_PARTY_LICENSES.txt) |
+| escodegen | 2.1.0 | BSD-2-Clause | [L094](THIRD_PARTY_LICENSES.txt) |
+| esm | 3.2.25 | MIT | [L095](THIRD_PARTY_LICENSES.txt) |
+| esprima | 4.0.1 | BSD-2-Clause | [L096](THIRD_PARTY_LICENSES.txt) |
+| estraverse | 5.3.0 | BSD-2-Clause | [L097](THIRD_PARTY_LICENSES.txt) |
+| esutils | 2.0.3 | BSD-2-Clause | [L097](THIRD_PARTY_LICENSES.txt) |
+| events | 3.3.0 | MIT | [L098](THIRD_PARTY_LICENSES.txt) |
+| extract-zip | 2.0.1 | BSD-2-Clause | [L099](THIRD_PARTY_LICENSES.txt) |
+| extrude-polyline | 1.0.6 | MIT | [L058](THIRD_PARTY_LICENSES.txt) |
+| fast-fifo | 1.3.2 | MIT | [L101](THIRD_PARTY_LICENSES.txt) |
+| fd-slicer | 1.1.0 | MIT | [L102](THIRD_PARTY_LICENSES.txt) |
+| fdir | 6.4.5 | MIT | [L196](THIRD_PARTY_LICENSES.txt) |
+| fdir | 6.5.0 | MIT | [L196](THIRD_PARTY_LICENSES.txt) |
+| follow-redirects | 1.16.0 | MIT | [L103](THIRD_PARTY_LICENSES.txt) |
+| form-data | 4.0.6 | MIT | [L104](THIRD_PARTY_LICENSES.txt) |
+| function-bind | 1.1.2 | MIT | [L105](THIRD_PARTY_LICENSES.txt) |
+| get-caller-file | 2.0.5 | ISC | [L106](THIRD_PARTY_LICENSES.txt) |
+| get-intrinsic | 1.3.0 | MIT | [L107](THIRD_PARTY_LICENSES.txt) |
+| get-proto | 1.0.1 | MIT | [L108](THIRD_PARTY_LICENSES.txt) |
+| get-stream | 5.2.0 | MIT | [L100](THIRD_PARTY_LICENSES.txt) |
+| get-uri | 6.0.4 | MIT | [L082](THIRD_PARTY_LICENSES.txt) |
+| gl-vec2 | 1.3.0 | zlib | [L109](THIRD_PARTY_LICENSES.txt) |
+| gopd | 1.2.0 | MIT | [L110](THIRD_PARTY_LICENSES.txt) |
+| hachure-fill | 0.5.2 | MIT | [L111](THIRD_PARTY_LICENSES.txt) |
+| has-flag | 4.0.0 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| has-symbols | 1.1.0 | MIT | [L112](THIRD_PARTY_LICENSES.txt) |
+| has-tostringtag | 1.0.2 | MIT | [L113](THIRD_PARTY_LICENSES.txt) |
+| hasown | 2.0.4 | MIT | [L114](THIRD_PARTY_LICENSES.txt) |
+| http-proxy-agent | 7.0.2 | MIT | [L115](THIRD_PARTY_LICENSES.txt) |
+| https-proxy-agent | 5.0.1 | MIT | [L064, L063](THIRD_PARTY_LICENSES.txt) |
+| https-proxy-agent | 7.0.6 | MIT | [L055](THIRD_PARTY_LICENSES.txt) |
+| ieee754 | 1.2.1 | BSD-3-Clause | [L116](THIRD_PARTY_LICENSES.txt) |
+| import-fresh | 3.3.1 | MIT | [L100](THIRD_PARTY_LICENSES.txt) |
+| inherits | 2.0.4 | ISC | [L117](THIRD_PARTY_LICENSES.txt) |
+| ip-address | 9.0.5 | MIT | [L118](THIRD_PARTY_LICENSES.txt) |
+| is-arrayish | 0.2.1 | MIT | [L090](THIRD_PARTY_LICENSES.txt) |
+| is-fullwidth-code-point | 3.0.0 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| isomorphic-ws | 5.0.0 | MIT | [L120](THIRD_PARTY_LICENSES.txt) |
+| jolt-physics | 1.1.0 | MIT | [L121](THIRD_PARTY_LICENSES.txt) |
+| js-tokens | 4.0.0 | MIT | [L122](THIRD_PARTY_LICENSES.txt) |
+| js-yaml | 4.1.0 | MIT | [L080](THIRD_PARTY_LICENSES.txt) |
+| jsbn | 1.1.0 | MIT | [L123](THIRD_PARTY_LICENSES.txt) |
+| json-parse-even-better-errors | 2.3.1 | MIT | [L124](THIRD_PARTY_LICENSES.txt) |
+| libtess | 1.2.2 | SGI-B-2.0 | [L125](THIRD_PARTY_LICENSES.txt) |
+| lines-and-columns | 1.2.4 | MIT | [L126](THIRD_PARTY_LICENSES.txt) |
+| long | 4.0.0 | Apache-2.0 | [L127](THIRD_PARTY_LICENSES.txt) |
+| lru-cache | 7.18.3 | ISC | [L160](THIRD_PARTY_LICENSES.txt) |
+| math-intrinsics | 1.1.0 | MIT | [L086](THIRD_PARTY_LICENSES.txt) |
+| mathjax-full | 3.2.2 | Apache-2.0 | [L009](THIRD_PARTY_LICENSES.txt) |
+| matter-js | 0.20.0 | MIT | [L128, L129](THIRD_PARTY_LICENSES.txt) |
+| mhchemparser | 4.2.1 | Apache-2.0 | [L130](THIRD_PARTY_LICENSES.txt) |
+| mime-db | 1.52.0 | MIT | [L131](THIRD_PARTY_LICENSES.txt) |
+| mime-types | 2.1.35 | MIT | [L132](THIRD_PARTY_LICENSES.txt) |
+| mitt | 3.0.1 | MIT | [L133](THIRD_PARTY_LICENSES.txt) |
+| mj-context-menu | 0.6.1 | Apache-2.0 | [L134, L001, L135](THIRD_PARTY_LICENSES.txt) |
+| mkdirp-classic | 0.5.3 | MIT | [L136](THIRD_PARTY_LICENSES.txt) |
+| monaco-editor | 0.45.0 | MIT | [L223, L224](THIRD_PARTY_LICENSES.txt) |
+| mp4-muxer | 5.2.2 | MIT | [L137](THIRD_PARTY_LICENSES.txt) |
+| ms | 2.1.2 | MIT | [L138](THIRD_PARTY_LICENSES.txt) |
+| msedge-tts | 2.0.8 | MIT | [L139](THIRD_PARTY_LICENSES.txt) |
+| nanoid | 3.3.11 | MIT | [L141](THIRD_PARTY_LICENSES.txt) |
+| netmask | 2.0.2 | MIT | [L142, L143, L144](THIRD_PARTY_LICENSES.txt) |
+| node-fetch | 2.6.13 | MIT | [L042](THIRD_PARTY_LICENSES.txt) |
+| node-fetch | 2.6.13 | MIT | [L042](THIRD_PARTY_LICENSES.txt) |
+| node-fetch | 2.7.0 | MIT | [L042](THIRD_PARTY_LICENSES.txt) |
+| oidn-web | 0.3.5 | MIT | [L145](THIRD_PARTY_LICENSES.txt) |
+| once | 1.4.0 | ISC | [L146](THIRD_PARTY_LICENSES.txt) |
+| opentype.js | 1.3.4 | MIT | [L147](THIRD_PARTY_LICENSES.txt) |
+| pac-proxy-agent | 7.2.0 | MIT | [L148](THIRD_PARTY_LICENSES.txt) |
+| pac-resolver | 7.0.1 | MIT | [L055](THIRD_PARTY_LICENSES.txt) |
+| pako | 1.0.11 | (MIT AND Zlib) | [L149](THIRD_PARTY_LICENSES.txt) |
+| parent-module | 1.0.1 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| parse-json | 5.2.0 | MIT | [L100](THIRD_PARTY_LICENSES.txt) |
+| path-data-parser | 0.1.0 | MIT | [L150](THIRD_PARTY_LICENSES.txt) |
+| pend | 1.2.0 | MIT | [L151](THIRD_PARTY_LICENSES.txt) |
+| picocolors | 1.1.1 | ISC | [L152](THIRD_PARTY_LICENSES.txt) |
+| picomatch | 4.0.2 | MIT | [L197](THIRD_PARTY_LICENSES.txt) |
+| picomatch | 4.0.3 | MIT | [L197](THIRD_PARTY_LICENSES.txt) |
+| planck | 1.5.0 | MIT | [L153](THIRD_PARTY_LICENSES.txt) |
+| points-on-curve | 0.2.0 | MIT | [L150](THIRD_PARTY_LICENSES.txt) |
+| points-on-path | 0.2.1 | MIT | [L154](THIRD_PARTY_LICENSES.txt) |
+| polygon-clipping | 0.15.7 | MIT | [L155](THIRD_PARTY_LICENSES.txt) |
+| polyline-miter-util | 1.0.1 | MIT | [L058](THIRD_PARTY_LICENSES.txt) |
+| postcss | 8.5.6 | MIT | [L156](THIRD_PARTY_LICENSES.txt) |
+| prismjs | 1.30.0 | MIT | [L157](THIRD_PARTY_LICENSES.txt) |
+| progress | 2.0.3 | MIT | [L158](THIRD_PARTY_LICENSES.txt) |
+| proxy-agent | 6.3.1 | MIT | [L159, L063](THIRD_PARTY_LICENSES.txt) |
+| proxy-from-env | 1.1.0 | MIT | [L065](THIRD_PARTY_LICENSES.txt) |
+| proxy-from-env | 2.1.0 | MIT | [L065](THIRD_PARTY_LICENSES.txt) |
+| pump | 3.0.2 | MIT | [L089](THIRD_PARTY_LICENSES.txt) |
+| puppeteer-core | 21.11.0 | Apache-2.0 | [L163, L164, L027](THIRD_PARTY_LICENSES.txt) |
+| puppeteer | 21.11.0 | Apache-2.0 | [L161, L162, L027](THIRD_PARTY_LICENSES.txt) |
+| readable-stream | 3.6.2 | MIT | [L165](THIRD_PARTY_LICENSES.txt) |
+| regenerator-runtime | 0.13.11 | MIT | [L166](THIRD_PARTY_LICENSES.txt) |
+| require-directory | 2.1.1 | MIT | [L167](THIRD_PARTY_LICENSES.txt) |
+| resolve-from | 4.0.0 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| robust-predicates | 3.0.3 | Unlicense | [L168](THIRD_PARTY_LICENSES.txt) |
+| rollup | 4.41.1 | MIT | [L169](THIRD_PARTY_LICENSES.txt) |
+| roughjs | 4.6.6 | MIT | [L170](THIRD_PARTY_LICENSES.txt) |
+| safe-buffer | 5.2.1 | MIT | [L171](THIRD_PARTY_LICENSES.txt) |
+| seedrandom | 3.0.5 | MIT | [L172, L173, L174, L175](THIRD_PARTY_LICENSES.txt) |
+| smart-buffer | 4.2.0 | MIT | [L176](THIRD_PARTY_LICENSES.txt) |
+| socks-proxy-agent | 8.0.5 | MIT | [L055](THIRD_PARTY_LICENSES.txt) |
+| socks | 2.8.5 | MIT | [L177](THIRD_PARTY_LICENSES.txt) |
+| source-map-js | 1.2.1 | BSD-3-Clause | [L178](THIRD_PARTY_LICENSES.txt) |
+| source-map | 0.6.1 | BSD-3-Clause | [L178](THIRD_PARTY_LICENSES.txt) |
+| speech-rule-engine | 4.0.7 | Apache-2.0 | [L179](THIRD_PARTY_LICENSES.txt) |
+| splaytree | 3.2.3 | MIT | [L181, L182, L183, L184](THIRD_PARTY_LICENSES.txt) |
+| sprintf-js | 1.0.3 | BSD-3-Clause | [L185](THIRD_PARTY_LICENSES.txt) |
+| sprintf-js | 1.1.3 | BSD-3-Clause | [L119](THIRD_PARTY_LICENSES.txt) |
+| stage-js | 1.0.2 | MIT | [L186](THIRD_PARTY_LICENSES.txt) |
+| stream-browserify | 3.0.0 | MIT | [L187](THIRD_PARTY_LICENSES.txt) |
+| streamx | 2.22.1 | MIT | [L101](THIRD_PARTY_LICENSES.txt) |
+| string_decoder | 1.3.0 | MIT | [L188](THIRD_PARTY_LICENSES.txt) |
+| string-width | 4.2.3 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| string.prototype.codepointat | 0.2.1 | MIT | [L088](THIRD_PARTY_LICENSES.txt) |
+| strip-ansi | 6.0.1 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| supports-color | 7.2.0 | MIT | [L056](THIRD_PARTY_LICENSES.txt) |
+| svg-parser | 2.0.4 | MIT | [L189, L190](THIRD_PARTY_LICENSES.txt) |
+| svg-pathdata | 7.1.0 | MIT | [L191](THIRD_PARTY_LICENSES.txt) |
+| tar-fs | 3.0.4 | MIT | [L089](THIRD_PARTY_LICENSES.txt) |
+| tar-stream | 3.1.7 | MIT | [L089](THIRD_PARTY_LICENSES.txt) |
+| text-decoder | 1.2.3 | Apache-2.0 | [L001](THIRD_PARTY_LICENSES.txt) |
+| through | 2.3.8 | MIT | [L192, L193](THIRD_PARTY_LICENSES.txt) |
+| tiny-inflate | 1.0.3 | MIT | [L194](THIRD_PARTY_LICENSES.txt) |
+| tinyglobby | 0.2.15 | MIT | [L195](THIRD_PARTY_LICENSES.txt) |
+| tr46 | 0.0.3 | MIT | [L198, L199](THIRD_PARTY_LICENSES.txt) |
+| tslib | 2.8.1 | 0BSD | [L200](THIRD_PARTY_LICENSES.txt) |
+| tsx | 4.22.4 | MIT | [L201](THIRD_PARTY_LICENSES.txt) |
+| typescript | 5.4.5 | Apache-2.0 | [L202, L203](THIRD_PARTY_LICENSES.txt) |
+| unbzip2-stream | 1.4.3 | MIT | [L204](THIRD_PARTY_LICENSES.txt) |
+| undici-types | 6.19.8 | MIT | [L205](THIRD_PARTY_LICENSES.txt) |
+| urlpattern-polyfill | 10.0.0 | MIT | [L206](THIRD_PARTY_LICENSES.txt) |
+| utif | 2.0.1 | MIT | [L207](THIRD_PARTY_LICENSES.txt) |
+| util-deprecate | 1.0.2 | MIT | [L208](THIRD_PARTY_LICENSES.txt) |
+| vite | 6.3.6 | MIT | [L209](THIRD_PARTY_LICENSES.txt) |
+| webidl-conversions | 3.0.1 | BSD-2-Clause | [L210](THIRD_PARTY_LICENSES.txt) |
+| webm-muxer | 5.1.4 | MIT | [L211](THIRD_PARTY_LICENSES.txt) |
+| wgsl_reflect | 1.2.3 | MIT | [L212](THIRD_PARTY_LICENSES.txt) |
+| whatwg-url | 5.0.0 | MIT | [L213](THIRD_PARTY_LICENSES.txt) |
+| wicked-good-xpath | 1.3.0 | MIT | [L214](THIRD_PARTY_LICENSES.txt) |
+| woff2-encoder | 2.0.0 | MIT | [L215](THIRD_PARTY_LICENSES.txt) |
+| wrap-ansi | 7.0.0 | MIT | [L100](THIRD_PARTY_LICENSES.txt) |
+| wrappy | 1.0.2 | ISC | [L146](THIRD_PARTY_LICENSES.txt) |
+| ws | 8.16.0 | MIT | [L140](THIRD_PARTY_LICENSES.txt) |
+| ws | 8.22.0 | MIT | [L140](THIRD_PARTY_LICENSES.txt) |
+| xmldom-sre | 0.1.31 | MIT | [L216, L217, L218, L219](THIRD_PARTY_LICENSES.txt) |
+| y18n | 5.0.8 | ISC | [L220](THIRD_PARTY_LICENSES.txt) |
+| yargs-parser | 20.2.9 | ISC | [L051](THIRD_PARTY_LICENSES.txt) |
+| yargs-parser | 21.1.1 | ISC | [L051](THIRD_PARTY_LICENSES.txt) |
+| yargs | 16.2.0 | MIT | [L050](THIRD_PARTY_LICENSES.txt) |
+| yargs | 17.7.2 | MIT | [L050](THIRD_PARTY_LICENSES.txt) |
+| yauzl | 2.10.0 | MIT | [L221](THIRD_PARTY_LICENSES.txt) |
+| yerror | 8.0.0 | MIT | [L222](THIRD_PARTY_LICENSES.txt) |
+
+## Review boundaries
+
+This inventory does not grant rights to demo photos, videos, models, SVGs, or
+research PDFs. Their provenance remains recorded as unresolved in
+`docs/THIRD_PARTY_ASSET_REVIEW.md` in the source repository. Do not treat them
+as covered by the code or font licenses listed here. They are excluded from
+the engine npm package by its existing package file allowlist.
+The SDF helper block adapts Inigo Quilez's technical snippets under the MIT
+permission stated on his article index. Its attribution and MIT terms are
+included in the component table and license texts above. That permission does
+not cover the author's separately protected mathematical/shader artwork.
+The review also records a verified match between the installed WOFF2 decoder's embedded
+WASM and upstream's version-tagged artifact, with documented toolchain/runtime
+notices. The exact historical Brotli revision and full build reproducibility
+are not asserted. An absent build hash alone does not add a permission
+requirement to the MIT license.
+
+## Maintaining this inventory
+
+After dependency or asset changes, run `npm ci`, then
+`npm run licenses:generate` and review the result. Upstream text supplements
+for packages that omit license files, reviewed README excerpts, and asset provenance are recorded in
+`tools/third-party-sources.json` in the source repository. These internal maintenance records
+are not needed in distributions. Generation uses local files and checked-in originals;
+it does not execute package scripts or fetch new legal terms. Run
+`npm run licenses:check` to verify the committed input and file fingerprints.
+This command also runs before the library build.
+
+<!-- retiam-third-party-packages: ["@babel/code-frame@7.27.1","@babel/helper-validator-identifier@7.28.5","@dimforge/rapier2d-compat@0.20.0","@dimforge/rapier3d-compat@0.20.0","@petamoriken/float16@3.9.3","@puppeteer/browsers@1.9.1","@tensorflow/tfjs-backend-cpu@4.20.0","@tensorflow/tfjs-backend-webgl@4.20.0","@tensorflow/tfjs-backend-webgpu@4.20.0","@tensorflow/tfjs-converter@4.20.0","@tensorflow/tfjs-core@4.20.0","@tensorflow/tfjs-data@4.20.0","@tensorflow/tfjs-layers@4.20.0","@tensorflow/tfjs@4.20.0","@tootallnate/quickjs-emscripten@0.23.0","@types/dom-webcodecs@0.1.18","@types/estree@1.0.7","@types/libtess@1.2.0","@types/long@4.0.2","@types/node-fetch@2.6.13","@types/node@22.7.4","@types/offscreencanvas@2019.3.0","@types/offscreencanvas@2019.7.3","@types/prismjs@1.26.6","@types/seedrandom@2.4.34","@types/wicg-file-system-access@2020.9.8","@webgpu/types@0.1.38","@webgpu/types@0.1.40","@zappar/msdf-generator@1.2.4","agent-base@6.0.2","agent-base@7.1.3","ansi-regex@5.0.1","ansi-styles@4.3.0","argparse@1.0.10","argparse@2.0.1","as-number@1.0.0","ast-types@0.13.4","asynckit@0.4.0","axios@1.20.0","b4a@1.6.7","base64-js@1.5.1","basic-ftp@5.0.5","box3d-wasm@0.2.0","buffer-crc32@0.2.13","buffer@5.7.1","buffer@6.0.3","call-bind-apply-helpers@1.0.2","callsites@3.1.0","chalk@4.1.2","chromium-bidi@0.5.8","cli-progress@3.12.0","cliui@7.0.4","cliui@8.0.1","color-convert@2.0.1","color-name@1.1.4","combined-stream@1.0.8","comlink@4.4.2","commander@9.2.0","core-js@3.29.1","cosmiconfig@9.0.0","cross-fetch@4.0.0","data-uri-to-buffer@6.0.2","debug@4.3.4","degenerator@5.0.1","delayed-stream@1.0.0","devtools-protocol@0.0.1232444","dunder-proto@1.0.1","earcut@3.0.2","emoji-regex@8.0.0","end-of-stream@1.4.4","env-paths@2.2.1","error-ex@1.3.2","es-define-property@1.0.1","es-errors@1.3.0","es-object-atoms@1.1.2","es-set-tostringtag@2.1.0","esbuild@0.25.5","esbuild@0.28.1","escalade@3.2.0","escodegen@2.1.0","esm@3.2.25","esprima@4.0.1","estraverse@5.3.0","esutils@2.0.3","events@3.3.0","extract-zip@2.0.1","extrude-polyline@1.0.6","fast-fifo@1.3.2","fd-slicer@1.1.0","fdir@6.4.5","fdir@6.5.0","follow-redirects@1.16.0","form-data@4.0.6","function-bind@1.1.2","get-caller-file@2.0.5","get-intrinsic@1.3.0","get-proto@1.0.1","get-stream@5.2.0","get-uri@6.0.4","gl-vec2@1.3.0","gopd@1.2.0","hachure-fill@0.5.2","has-flag@4.0.0","has-symbols@1.1.0","has-tostringtag@1.0.2","hasown@2.0.4","http-proxy-agent@7.0.2","https-proxy-agent@5.0.1","https-proxy-agent@7.0.6","ieee754@1.2.1","import-fresh@3.3.1","inherits@2.0.4","ip-address@9.0.5","is-arrayish@0.2.1","is-fullwidth-code-point@3.0.0","isomorphic-ws@5.0.0","jolt-physics@1.1.0","js-tokens@4.0.0","js-yaml@4.1.0","jsbn@1.1.0","json-parse-even-better-errors@2.3.1","libtess@1.2.2","lines-and-columns@1.2.4","long@4.0.0","lru-cache@7.18.3","math-intrinsics@1.1.0","mathjax-full@3.2.2","matter-js@0.20.0","mhchemparser@4.2.1","mime-db@1.52.0","mime-types@2.1.35","mitt@3.0.1","mj-context-menu@0.6.1","mkdirp-classic@0.5.3","monaco-editor@0.45.0","mp4-muxer@5.2.2","ms@2.1.2","msedge-tts@2.0.8","nanoid@3.3.11","netmask@2.0.2","node-fetch@2.6.13","node-fetch@2.7.0","oidn-web@0.3.5","once@1.4.0","opentype.js@1.3.4","pac-proxy-agent@7.2.0","pac-resolver@7.0.1","pako@1.0.11","parent-module@1.0.1","parse-json@5.2.0","path-data-parser@0.1.0","pend@1.2.0","picocolors@1.1.1","picomatch@4.0.2","picomatch@4.0.3","planck@1.5.0","points-on-curve@0.2.0","points-on-path@0.2.1","polygon-clipping@0.15.7","polyline-miter-util@1.0.1","postcss@8.5.6","prismjs@1.30.0","progress@2.0.3","proxy-agent@6.3.1","proxy-from-env@1.1.0","proxy-from-env@2.1.0","pump@3.0.2","puppeteer-core@21.11.0","puppeteer@21.11.0","readable-stream@3.6.2","regenerator-runtime@0.13.11","require-directory@2.1.1","resolve-from@4.0.0","robust-predicates@3.0.3","rollup@4.41.1","roughjs@4.6.6","safe-buffer@5.2.1","seedrandom@3.0.5","smart-buffer@4.2.0","socks-proxy-agent@8.0.5","socks@2.8.5","source-map-js@1.2.1","source-map@0.6.1","speech-rule-engine@4.0.7","splaytree@3.2.3","sprintf-js@1.0.3","sprintf-js@1.1.3","stage-js@1.0.2","stream-browserify@3.0.0","streamx@2.22.1","string-width@4.2.3","string.prototype.codepointat@0.2.1","string_decoder@1.3.0","strip-ansi@6.0.1","supports-color@7.2.0","svg-parser@2.0.4","svg-pathdata@7.1.0","tar-fs@3.0.4","tar-stream@3.1.7","text-decoder@1.2.3","through@2.3.8","tiny-inflate@1.0.3","tinyglobby@0.2.15","tr46@0.0.3","tslib@2.8.1","tsx@4.22.4","typescript@5.4.5","unbzip2-stream@1.4.3","undici-types@6.19.8","urlpattern-polyfill@10.0.0","utif@2.0.1","util-deprecate@1.0.2","vite@6.3.6","webidl-conversions@3.0.1","webm-muxer@5.1.4","wgsl_reflect@1.2.3","whatwg-url@5.0.0","wicked-good-xpath@1.3.0","woff2-encoder@2.0.0","wrap-ansi@7.0.0","wrappy@1.0.2","ws@8.16.0","ws@8.22.0","xmldom-sre@0.1.31","y18n@5.0.8","yargs-parser@20.2.9","yargs-parser@21.1.1","yargs@16.2.0","yargs@17.7.2","yauzl@2.10.0","yerror@8.0.0"] -->

package/bin/export.js

@@ -4,6 +4,7 @@
 import { build } from 'vite';
 import path from 'path';
 import fs from 'fs';
+import { retiamNoticesPlugin } from './third-party.js';
 
 const rootDir = process.cwd();
 
@@ -285,7 +286,7 @@ try {
         configFile: false,
         publicDir: false,
         assetsInclude: ['**/*.tza', '**/*.ttf', '**/*.png'],
-        plugins: [tzaPlugin(), wgslPlugin()],
+        plugins: [tzaPlugin(), wgslPlugin(), retiamNoticesPlugin()],
         resolve: {
             alias: [
                 { find: '../../index', replacement: path.resolve(rootDir, 'src/engine/_core/Constants.ts') },
@@ -308,7 +309,7 @@ try {
         },
         esbuild: {
             drop: ['debugger'],
-            legalComments: 'none',
+            legalComments: 'inline',
             treeShaking: true
         }
     });
@@ -320,4 +321,4 @@ try {
     if (fs.existsSync(tempEntryPath)) {
         fs.unlinkSync(tempEntryPath);
     }
-}
+}

package/bin/init.js

@@ -8,6 +8,7 @@ import fs from 'fs';
 import path from 'path';
 import readline from 'readline/promises';
 import { spawnSync } from 'child_process';
+import { copyThirdPartyNotices } from './third-party.js';
 
 const args = process.argv.slice(2);
 
@@ -173,8 +174,8 @@ async function main() {
         private: true,
         type: 'module',
         scripts: {
-            dev: 'vite',
-            build: 'tsc && vite build',
+            dev: 'node tools/prepare-notices.mjs && vite',
+            build: 'tsc && node tools/prepare-notices.mjs && vite build',
             preview: 'vite preview',
             render: 'retiam render src/scenes/HelloWorld.ts'
         },
@@ -217,7 +218,8 @@ export default defineConfig({
     }
   },
   esbuild: {
-    target: 'es2022'
+    target: 'es2022',
+    legalComments: 'inline'
   },
   server: {
     port: 3000,
@@ -349,6 +351,20 @@ A cinematic WebGPU mathematical animation built with [Retiam](https://github.com
 - \`src/main.ts\`: Entrypoint mounting the WebGPU canvas.
 - \`src/scenes/HelloWorld.ts\`: Starter scene with hero typography and \`Write\` animation.
 - \`vite.config.ts\`: Real-time WebGPU bundler configuration with hot module reload.
+
+## Licensing
+
+Retiam and its supplied starter code are free for noncommercial use under
+\`LICENSE\`. Commercial development, client work, products, services, and
+monetized content require a paid written license; see \`COMMERCIAL_LICENSE.md\`.
+Your independently authored code and original outputs remain your own.
+For commercial licensing and quotes, contact
+[abhilasbiswas@gmail.com](mailto:abhilasbiswas@gmail.com).
+Retain both files plus \`THIRD_PARTY_NOTICES.md\` and \`THIRD_PARTY_LICENSES.txt\`
+with redistributed Retiam code.
+Development and production builds copy the installed Retiam version's notices
+to \`public/vendor/retiam/\`, which Vite includes in the built application.
+Your own media and dependencies need their own notices and permissions.
 `;
 
     // Write all template files
@@ -360,6 +376,9 @@ A cinematic WebGPU mathematical animation built with [Retiam](https://github.com
     fs.writeFileSync(path.join(resolvedDir, 'README.md'), readme, 'utf8');
     fs.writeFileSync(path.join(srcDir, 'main.ts'), mainTs, 'utf8');
     fs.writeFileSync(path.join(scenesDir, 'HelloWorld.ts'), helloWorldTs, 'utf8');
+    copyThirdPartyNotices(resolvedDir);
+    fs.mkdirSync(path.join(resolvedDir, 'tools'), { recursive: true });
+    fs.copyFileSync(new URL('./prepare-notices.js', import.meta.url), path.join(resolvedDir, 'tools/prepare-notices.mjs'));
 
     const createdFiles = [
         'package.json',
@@ -369,7 +388,12 @@ A cinematic WebGPU mathematical animation built with [Retiam](https://github.com
         '.gitignore',
         'README.md',
         'src/main.ts',
-        'src/scenes/HelloWorld.ts'
+        'src/scenes/HelloWorld.ts',
+        'LICENSE',
+        'COMMERCIAL_LICENSE.md',
+        'THIRD_PARTY_NOTICES.md',
+        'THIRD_PARTY_LICENSES.txt',
+        'tools/prepare-notices.mjs'
     ];
 
     // Optional git init

package/bin/prepare-notices.js

@@ -0,0 +1,11 @@
+// Copied into projects created by `retiam init`; run before Vite copies public/.
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const engine = path.resolve(path.dirname(fileURLToPath(import.meta.resolve('retiam'))), '..');
+const output = path.resolve('public/vendor/retiam');
+fs.mkdirSync(output, { recursive: true });
+for (const file of ['LICENSE', 'COMMERCIAL_LICENSE.md', 'THIRD_PARTY_NOTICES.md', 'THIRD_PARTY_LICENSES.txt']) {
+    fs.copyFileSync(path.join(engine, file), path.join(output, file));
+}

package/bin/third-party.d.ts

@@ -0,0 +1,6 @@
+import type { Plugin } from 'vite';
+
+export declare function copyThirdPartyNotices(destination: string, root?: string): void;
+export declare function thirdPartyNoticesPlugin(root?: string, options?: { verifyDependencies?: boolean }): Plugin;
+/** Include installed Retiam terms in application builds; add your application's own notices separately. */
+export declare function retiamNoticesPlugin(): Plugin;

package/bin/third-party.js

@@ -0,0 +1,92 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const packageRoot = fileURLToPath(new URL('../', import.meta.url));
+const noticeName = 'THIRD_PARTY_NOTICES.md';
+const textsName = 'THIRD_PARTY_LICENSES.txt';
+const licenseName = 'LICENSE';
+const commercialName = 'COMMERCIAL_LICENSE.md';
+
+function noticeFiles(root) {
+    const files = [licenseName, commercialName, noticeName, textsName];
+    // Fail a build rather than silently distribute assets without their notices.
+    for (const file of files) fs.accessSync(path.join(root, file));
+    return files;
+}
+
+export function copyThirdPartyNotices(destination, root = packageRoot) {
+    const files = noticeFiles(root);
+    if (path.resolve(destination) === path.resolve(root)) {
+        throw new Error('Third-party notices must be copied to a different directory.');
+    }
+    for (const file of files) {
+        const target = path.join(destination, file);
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.copyFileSync(path.join(root, file), target);
+    }
+}
+
+/** @returns {import('vite').Plugin} */
+export function thirdPartyNoticesPlugin(root = packageRoot, { verifyDependencies = true } = {}) {
+    return {
+        name: 'retiam-third-party-notices',
+        apply: 'build',
+        outputOptions(options) {
+            const previous = options.banner;
+            return {
+                ...options,
+                banner: async chunk => {
+                    const original = typeof previous === 'function' ? await previous(chunk) : previous || '';
+                    const notice = path.posix.relative(path.posix.dirname(chunk.fileName), noticeName);
+                    const texts = path.posix.relative(path.posix.dirname(chunk.fileName), textsName);
+                    const license = path.posix.relative(path.posix.dirname(chunk.fileName), licenseName);
+                    const commercial = path.posix.relative(path.posix.dirname(chunk.fileName), commercialName);
+                    return `${original}\n/*! Retiam: noncommercial use only unless separately licensed. See ${license} and ${commercial}. Third-party notices: ${notice} and ${texts}. */`;
+                },
+            };
+        },
+        generateBundle() {
+            const files = noticeFiles(root);
+            // Coverage travels with the public index; maintenance records stay in the source repo.
+            const marker = fs.readFileSync(path.join(root, noticeName), 'utf8').match(/^<!-- retiam-third-party-packages: (.+) -->$/m);
+            if (!marker) this.error(`Missing package coverage in ${noticeName}. Regenerate notices.`);
+            const packages = JSON.parse(marker[1]);
+            if (!Array.isArray(packages) || packages.some(pkg => typeof pkg !== 'string')) this.error('Invalid third-party package coverage.');
+            const covered = new Set(packages);
+            const inspected = new Set();
+            for (const id of verifyDependencies ? this.getModuleIds() : []) {
+                if (!id.includes('/node_modules/') || this.getModuleInfo(id)?.isExternal) continue;
+                const file = id.replace(/^\0/, '').split('?')[0];
+                if (!fs.existsSync(file)) continue;
+                let directory = path.dirname(file);
+                while (directory !== path.dirname(directory)) {
+                    const manifest = path.join(directory, 'package.json');
+                    if (fs.existsSync(manifest)) {
+                        const pkg = JSON.parse(fs.readFileSync(manifest, 'utf8'));
+                        if (pkg.name && pkg.version) {
+                            const key = `${pkg.name}@${pkg.version}`;
+                            if (!inspected.has(key) && !covered.has(key)) {
+                                this.error(`No third-party license inventory entry for bundled package ${key}. Update tools/third-party-sources.json and regenerate notices.`);
+                            }
+                            inspected.add(key);
+                            break;
+                        }
+                    }
+                    directory = path.dirname(directory);
+                }
+            }
+            for (const file of files) {
+                this.emitFile({ type: 'asset', fileName: file, source: fs.readFileSync(path.join(root, file)) });
+            }
+        },
+    };
+}
+
+/** Copy installed Retiam terms into an application's Vite output.
+ * Application dependencies have their own notice requirements.
+ * @returns {import('vite').Plugin}
+ */
+export function retiamNoticesPlugin() {
+    return thirdPartyNoticesPlugin(packageRoot, { verifyDependencies: false });
+}

package/dist/COMMERCIAL_LICENSE.md

@@ -0,0 +1,61 @@
+# Retiam commercial licensing
+
+Commercial use of Retiam requires a paid license.
+
+Contact Abhilas Biswas at
+[abhilasbiswas@gmail.com](mailto:abhilasbiswas@gmail.com) to request a written
+commercial license before commercial use begins. Describe your organization,
+intended products, services or content, developers, client work, deployments,
+and redistribution needs.
+
+Commercial use has the meaning given in the accompanying [LICENSE](LICENSE).
+It includes direct or indirect commercial revenue, commercial advantage,
+internal business use, paid professional work, advertising, sponsorship,
+subscriptions, and monetized videos, animations, courses, products or services.
+The requirement applies when Retiam is one component of a larger project,
+when an offering is free to download, and before an intended commercial
+offering has earned revenue.
+
+## Written agreement required
+
+This file explains how to obtain a license; it does not itself grant commercial
+permission or establish a price, payment obligation, subscription, or renewal.
+Downloading Retiam, receiving this file, or requesting a quote does not grant
+commercial rights. Commercial permission exists only under a separate written
+agreement issued or expressly accepted by Abhilas Biswas, after any conditions
+and payments required by that agreement have been satisfied.
+
+The agreement should identify:
+
+- The licensed person or legal entity, covered developers, contractors,
+  affiliates, and client projects.
+- Covered Retiam versions, products, services, content, and permitted uses.
+- Hosting, deployment, redistribution, and end-user rights, including whether
+  embedded Retiam code may be delivered to clients or customers.
+- Fees, currency, payment dates, license duration, renewal, and rights after
+  expiry or termination.
+- Any support, maintenance, updates, warranties, liability terms, governing
+  law, or dispute provisions agreed by the parties.
+
+Pricing, duration, and other commercial terms are negotiated separately.
+No perpetual license, annual plan, automatic renewal, updates, or support is
+promised by this notice.
+
+## Ownership and third-party materials
+
+Retiam's licensor retains rights in Retiam-authored software. Users retain
+rights in their independently authored application code and original rendered
+outputs. A commercial license authorizes the agreed uses of Retiam; it does
+not transfer ownership of either party's independent work.
+
+Third-party code, fonts, font-derived data, weights, and other materials remain
+under their respective licenses. See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)
+and [THIRD_PARTY_LICENSES.txt](THIRD_PARTY_LICENSES.txt). A Retiam commercial
+agreement cannot override third-party rights or grant rights the licensor does
+not control. External services and application-supplied media may require
+separate permissions.
+
+Retain Retiam's license, this file, and applicable third-party notices with
+redistributed Retiam code, subject to the applicable written agreement and
+third-party terms. Permissions already granted under ISC or another earlier
+license remain unaffected.