sushiro-cli-darwin-x64 0.1.2

package/README.md

@@ -0,0 +1,19 @@
+# sushiro-cli-darwin-x64
+
+Version 0.1.2. Precompiled Sushiro CLI distribution.
+
+Keep optional dependencies enabled. No postinstall download is used.
+
+No personal login or credential import is required to install, run help/version, or initialize MCP and discover tools.
+
+Start with `sushiro-cli help`, `sushiro-cli version --json`, or `sushiro-cli mcp`.
+
+Public `stores` and `slots` queries are separate from personal authentication; the upstream may require legitimate query configuration. An empty result and a failed request are different outcomes.
+
+Personal ticket/reservation queries and reservation/cancellation commands remain available and require their own credentials; writes also require explicit user authorization. Import personal credentials only when using those features. Native login is pending.
+
+## License, privacy and attribution
+
+[THIRD_PARTY_NOTICES.md](legal/THIRD_PARTY_NOTICES.md) · [THIRD_PARTY_LICENSES.txt](legal/THIRD_PARTY_LICENSES.txt) · [LICENSE](legal/LICENSE) · [CREDITS.md](legal/CREDITS.md) · [PRIVACY.md](legal/PRIVACY.md) · [DISCLAIMER.md](legal/DISCLAIMER.md) · [SECURITY.md](legal/SECURITY.md)
+
+The project license does not replace third-party licenses. Built-in public query configuration is present in the binary; personal credentials are not bundled. npm uninstall does not remove application configuration.

package/legal/CREDITS.md

@@ -0,0 +1,37 @@
+# Credits
+
+## Foundational upstream: Ryujoxys/sushiro-overdose
+
+**Thank you to [Ryujoxys](https://github.com/Ryujoxys) and the contributors to
+[sushiro-overdose](https://github.com/Ryujoxys/sushiro-overdose). Their published
+Sushiro China API implementation and protocol research made this smaller CLI
+and MCP client possible.**
+
+We used revision `e273df046789773616c7851c0bea14d4546f47e5`, specifically:
+
+- [`internal/api/api.go`](https://github.com/Ryujoxys/sushiro-overdose/blob/e273df046789773616c7851c0bea14d4546f47e5/internal/api/api.go): store and timeslot requests, reservation request fields, separate query/reservation authorization, E044/E052 meaning, and nested ticket-response parsing. Our HTTP client rewrites these flows with its own errors, limits and validation.
+- [`internal/core/slot.go`](https://github.com/Ryujoxys/sushiro-overdose/blob/e273df046789773616c7851c0bea14d4546f47e5/internal/core/slot.go): the reproduced `Slot` definition and adapted store/reservation models.
+- [`internal/app/queue_live.go`](https://github.com/Ryujoxys/sushiro-overdose/blob/e273df046789773616c7851c0bea14d4546f47e5/internal/app/queue_live.go): store discovery, non-location coordinates, result-count default and the public-query default token. Token content is deliberately omitted from this credit document.
+- [`internal/core/capture.go`](https://github.com/Ryujoxys/sushiro-overdose/blob/e273df046789773616c7851c0bea14d4546f47e5/internal/core/capture.go), [`internal/app/auth_import.go`](https://github.com/Ryujoxys/sushiro-overdose/blob/e273df046789773616c7851c0bea14d4546f47e5/internal/app/auth_import.go) and [`internal/app/mobile_auth_capture.go`](https://github.com/Ryujoxys/sushiro-overdose/blob/e273df046789773616c7851c0bea14d4546f47e5/internal/app/mobile_auth_capture.go): evidence for credential/header interpretation and the distinction between local capture guidance and native WeChat login. Our strict credential importer and bounded observer are separate implementations informed by this research.
+
+sushiro-cli has a separate CLI/service/auth architecture, official Go SDK MCP
+integration and npm launcher. It does not include upstream's desktop app,
+Web UI, prediction/sampling system or Python FastMCP server. These differences
+do not erase the adaptation above. Please credit and support the upstream work
+when discussing this project's origins.
+
+Upstream is MIT, copyright (c) 2026 Ryujoxys. Its complete notice is preserved in
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) and
+[THIRD_PARTY_LICENSES.txt](THIRD_PARTY_LICENSES.txt).
+
+## Runtime and packaging foundations
+
+Thanks to the Model Context Protocol Go SDK contributors, JSON Schema Go Project
+Authors, Segment, Kohei YOSHIDA, and the Go Authors for the runtime dependencies
+listed in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md). The Node.js/npm tools
+are used to package and launch the Go executable; Node.js itself is not bundled.
+
+This community client is not an official Sushiro product, and no upstream author
+or dependency maintainer is represented as endorsing it. The root MIT license
+covers this project's own contributions by lmxx1234567, while third-party
+copyright and license notices remain applicable.

package/legal/DISCLAIMER.md

@@ -0,0 +1,29 @@
+# 项目关系、使用边界与责任说明
+
+更新日期：2026-09-16。
+
+本项目是非官方的寿司郎中国服务 CLI/MCP 工具，与寿司郎、其关联企业、微信或腾讯不存在官方隶属、合作或背书关系。相关名称和商标属于各自权利人，仅用于说明兼容对象。
+
+项目参考并改编了 [Ryujoxys/sushiro-overdose](https://github.com/Ryujoxys/sushiro-overdose) 的协议字段、响应处理及公共查询默认配置，感谢其开源工作。来源和许可见 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)。上游代码公开或采用 MIT，并不意味着第三方服务授权、商标许可或公共 token 分发条件也已获得确认。
+
+## 使用与服务限制
+
+你应仅在有权使用的账户和数据范围内操作，并遵守适用法律及官方服务的现行规则。不要把工具用于冒用账户、绕过访问限制、滥发请求或占用他人服务资源。此使用说明不改变 MIT 对软件本身授予的许可，也不授予第三方服务或账户的访问权。
+
+接口、会话、门店、时段和名额可能随时变化或不可用；查询成功不保证预约成功。等位数表示桌数，不能当作等候分钟数。错误不能解释为“没有预约”，当前票据快照不能替代完整预约历史。
+
+创建和取消预约会影响真实账户。使用前必须明确授权具体门店、日期、时间、人数、桌型或要取消的票据。CLI 的 `--confirm` 和 MCP 的 `confirm=true` 是调用条件，不能证明操作者或模型真的取得了授权；宿主和调用者仍须落实确认。遇到超时、连接中断或 `state=uncertain`，不要盲目重试；先检查返回的回查信息，并通过官方服务核对实际状态。当前完整预约列表不可用时，程序的回查不能保证完成确认。
+
+截至本说明核对的基线，公共默认模式的 CLI/MCP/npm 查询有成功验收记录；个人接口存在 E010/404 的历史失败，原生认证及创建/取消预约闭环仍待验证。历史成功记录不是当前可用性、所有平台兼容性或未来持续服务承诺。
+
+## 不保证与责任限制
+
+本项目新增贡献采用 [MIT 许可证](LICENSE)，第三方内容保留其各自许可，详见 [第三方声明](THIRD_PARTY_NOTICES.md)。依 MIT 的不保证与责任限制安排，在适用法律允许的最大范围内，软件按现状提供，不对适销性、特定用途适用性或不侵权作明示或默示保证；作者和版权持有人的相关责任受该许可证限制。本文不扩张许可证所授予的权利，也不对第三方服务作保证。[MIT 官方文本](https://opensource.org/license/mit)
+
+**任何不保证或责任限制都不排除、限制适用法律不允许排除或限制的责任，也不剥夺依法不可放弃的权利。** 本说明不是对“所有风险均由用户承担”或“维护者在任何情形下均免责”的承诺。具体效力取决于实际发布主体、使用场景、适用法律及事实。
+
+本文是项目说明，未经律师审定，不是面向特定法域的法律意见或合规认证。发布账号/署名已确定为 `lmxx1234567`，但法律主体身份、管辖/适用法域、私密联系渠道及第三方接口使用条件尚待确认；仅面向中文用户不构成选择适用法律的依据。功能边界见[已知限制](https://github.com/lmxx1234567/sushiro-cli/blob/0a66837e75c06de098527308ce27e97ce0ee5ee8/docs/limitations.md)，数据处理方式见 [PRIVACY.md](PRIVACY.md)。
+
+## English summary
+
+This is an unofficial project with no affiliation or endorsement from Sushiro, WeChat or Tencent. Credit and source attribution belong to Ryujoxys/sushiro-overdose and the other named dependencies. Interface availability and reservation success are not guaranteed. Account writes require explicit authorization; uncertain writes must not be blindly retried. New project contributions use MIT; third-party terms remain applicable. Warranty and liability limitations apply only to the extent permitted by applicable law and do not exclude non-excludable liability or rights. This document is not legal advice or a compliance certification.

package/legal/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 lmxx1234567
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/legal/PRIVACY.md

@@ -0,0 +1,56 @@
+# 隐私与数据处理说明
+
+更新日期：2026-09-16。适用于本仓库的 `sushiro-cli` CLI、stdio MCP 及 npm 启动器；使用配置见[配置说明](https://github.com/lmxx1234567/sushiro-cli/blob/0a66837e75c06de098527308ce27e97ce0ee5ee8/docs/configuration.md)，功能边界见[已知限制](https://github.com/lmxx1234567/sushiro-cli/blob/0a66837e75c06de098527308ce27e97ce0ee5ee8/docs/limitations.md)。发布账号/署名为 `lmxx1234567`；其法律主体身份、隐私联系安排和适用法域尚待确认，不能仅从 GitHub 用户名推定。本文不构成已经完成法律合规审查的声明。
+
+## 数据流
+
+当前产品代码没有维护者运营的数据中转、使用分析、遥测或崩溃上报入口。业务请求以 HTTPS 发往 `crm-cn-prd.sushiro.com.cn`，不会先交给本项目维护者的服务器。此结论限定于核对过的产品代码，不涵盖自行修改版本、包管理器、MCP 宿主或另行运行的研究脚本。
+
+“公共查询”表示无需你的个人业务会话，并不表示匿名或无认证。默认公共查询 token 随源码和二进制分发，只在运行时作为内存默认配置使用，不自动写入用户配置目录。它的签发主体、分发条件和有效期尚未确证；来自公开上游源码不等于获得寿司郎官方授权。
+
+| 功能 | 发给寿司郎接口的数据 | 本地输出 |
+| --- | --- | --- |
+| 门店列表、单店查询 | 公共查询 Authorization、客户端头；列表坐标与数量，或门店 ID | 门店名称、地址、区域、营业/预约状态、等位桌数等选定字段 |
+| 可约时段 | 公共查询 Authorization、客户端头、门店 ID、桌型、合计人数 | 门店、日期、起止时间、可用状态 |
+| 当前票据 | 个人 Authorization、客户端头、URL 查询参数中的 WechatID | 当前排队/预约票据的选定字段，可能包括票号、门店、日期时间、人数 |
+| 完整预约列表 | 个人 Authorization、客户端头、WechatID、手机号 | 预约记录的选定字段，或明确的失败状态 |
+| 创建或取消预约 | 个人 Authorization、客户端头、WechatID、手机号，以及预约参数或票据 ID | 票据、操作状态；必要时包含只读回查结果 |
+
+客户端头可包括 User-Agent、Referer、X-App-Code、X-App-Client；个人请求另带 Xweb_xhr。是否发送某个可选头取决于配置。公共查询不加载个人档案，也不发送其中的 WechatID 或手机号。
+
+程序不自动获取设备定位。列表未指定 `--near` / `near` 时使用兼容坐标 `1,1`，不是你的位置；显式提供的坐标会发送给服务端。寿司郎服务端能看到请求来源 IP（使用代理时通常是代理出口 IP）、请求时间、请求头和参数。项目无法规定该服务端的留存、共享或删除方式，应查阅你使用的官方服务内的现行隐私说明。
+
+网络路径还受你的环境影响：Go 默认 HTTP transport 可使用 `HTTPS_PROXY` 等代理配置，DNS、代理及受信任的网络检查设施也可能处理连接信息。“目标是寿司郎接口”不等于网络上没有其他参与方。[Go 官方说明](https://pkg.go.dev/net/http#ProxyFromEnvironment)
+
+## 本机保存、保留与删除
+
+个人模式通过 `auth import --file` 导入已有会话；原生微信登录尚未完成。保存内容包括个人授权 token、WechatID、手机号及兼容请求头，具体以导入文件为准。`public import --file` 保存单独的公共覆盖配置，其 schema 拒绝个人身份字段。导入不会自动删除原始文件。
+
+在支持的 Unix 系统上，程序创建配置目录时使用 `0700`、写入文件时使用 `0600`，并拒绝部分不安全路径/权限。文件是**未加密 JSON**，不是系统钥匙串或凭证保险库。同一用户权限的应用、管理员、恶意软件以及有权限的备份程序仍可能读取。已有的更严格权限可以保留；权限检查不能保证所有文件系统、ACL 或并发攻击场景都安全。Windows 当前不支持这些私有文件存储操作；内置默认公共查询不依赖该存储能力。
+
+| 系统 | 默认个人档案路径；公共档案位于其 `public/` 子目录 |
+| --- | --- |
+| macOS | `~/Library/Application Support/sushiro/<profile>.json` |
+| Linux | `$XDG_CONFIG_HOME/sushiro/<profile>.json`；未设置时 `~/.config/sushiro/<profile>.json` |
+
+`SUSHIRO_CONFIG_DIR` 可指定配置根目录，`SUSHIRO_PUBLIC_CONFIG_DIR` 可单独指定公共目录；这些变量仅应放路径，不要放 token。默认 profile 是 `default`。`auth status` 只检查本地字段存在情况，可能创建配置目录；它不证明服务端会话有效。公共默认查询和 `public status` 在无覆盖文件时不创建默认配置文件或目录。
+
+显式导入的数据没有自动到期删除机制，升级和卸载 npm 包后仍保留在用户配置目录；本版没有 CLI 清理命令。需要删除时，先停止 CLI/MCP，确认实际覆盖路径及所选 profile，再手动删除对应个人或公共 JSON 文件，并分别处理原始导入文件、备份和自己保存的输出。删除公共覆盖文件会恢复内置默认查询行为；删除个人文件不会撤销寿司郎服务端会话，也不会取消预约。文件删除不保证安全擦除。npm 自第 7 版起没有卸载生命周期脚本，不能依靠包卸载清理这些外部文件。[npm 官方说明](https://docs.npmjs.com/cli/v11/using-npm/scripts/#a-note-on-a-lack-of-npm-uninstall-scripts)
+
+## 输出、MCP 与第三方
+
+CLI 将结果写到标准输出，MCP 通过 stdin/stdout 向宿主返回文本及结构化结果。产品不自动保存业务历史或完整 HTTP 日志；业务错误信息按固定类别返回，不直接转储请求头、URL 或原始响应。但正常票据结果本身可能具有个人性，输出重定向、终端记录、shell 历史、MCP 会话记录和系统诊断可能产生副本。交互写操作确认会展示已校验的操作参数；系统或第三方错误信息还可能包含本机路径等环境信息。不要把凭证粘贴到命令参数或交互窗口，不要把未经检查的日志视为已脱敏。
+
+MCP 宿主能够接收工具参数和输出，并可能将其保存、发送给模型供应商或其他服务。是否用于训练、保存多久、在哪个地区处理，取决于所选宿主、供应商、账户类型和设置，本项目不能保证“永不离机”或“不会被用于训练”。工具的只读/写入提示不是宿主权限控制；请按需要限制个人工具与写操作。
+
+本 CLI/MCP 产品没有桌面截图、Computer Use、浏览器控制、系统代理设置或证书安装能力。若宿主另外执行 Computer Use，其截图和桌面内容由宿主按自身权限处理，不是本 CLI 的采集行为。
+
+从 GitHub/npm 下载、访问项目页面、提交 issue 或发送附件，会另外与这些第三方交互。维护者可看到你主动提供的反馈，公开 issue 的内容还可能被他人复制；“无产品遥测”不表示维护者不可能收到你提交的数据。相关平台按其政策处理账户、网络和内容信息：[GitHub 隐私声明](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement)、[npm 隐私说明](https://docs.npmjs.com/policies/privacy/)。
+
+项目地址为 [lmxx1234567/sushiro-cli](https://github.com/lmxx1234567/sushiro-cli)。非敏感反馈可通过项目 issues 提交；安全或隐私问题请使用已启用的 [GitHub 私密漏洞报告](https://github.com/lmxx1234567/sushiro-cli/security/advisories/new)，不要在公开 issue 中发送个人数据。
+
+发现误发凭证或隐私问题时，停止继续分享，按[安全说明](SECURITY.md)联系维护者；涉及官方会话失效、撤销或官方数据请求，应使用寿司郎/微信现行官方渠道。维护者不能代替第三方承诺删除其全部副本。
+
+## English summary
+
+The reviewed CLI/MCP code has no maintainer telemetry or relay backend. Business requests target Sushiro over HTTPS, subject to your proxy settings. Public queries use an embedded query token and disclose request metadata and supplied coordinates; they are not anonymous. Imported personal credentials are unencrypted local JSON protected by Unix permissions, readable by applications running as the same user. Imported files survive uninstall. MCP hosts and model providers may receive, store or process tool results. GitHub/npm and voluntarily submitted reports have separate data flows. The publisher account is lmxx1234567. Private security and privacy reports can be submitted through the repository’s GitHub private vulnerability reporting channel.

package/legal/SECURITY.md

@@ -0,0 +1,35 @@
+# 安全说明与漏洞报告
+
+更新日期：2026-09-16。项目已公开，尚未确定长期支持版本范围、响应时限或漏洞奖励计划。不要据此假定旧版本有安全维护承诺。
+
+## 如何报告
+
+仓库已启用 [GitHub 私密漏洞报告](https://github.com/lmxx1234567/sushiro-cli/security/advisories/new)。请通过 Security → Advisories → **Report a vulnerability** 向维护者 `lmxx1234567` 提交安全问题。
+
+若该入口不可用，可在项目 issue 中仅询问私密联系方式，不附漏洞利用细节、个人数据或凭证。使用方法见 [GitHub 官方报告指引](https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/report-privately)。
+
+报告应尽量包含版本/commit、操作系统、CLI 或 MCP 使用方式、影响描述，以及使用虚构账户和假 token 的最小复现。可以提供固定错误码及脱敏截图。不要发送实际 Authorization、WechatID、手机号、票据号码、完整凭证 JSON、代理捕获、请求头或未经检查的宿主日志。私密渠道仍可能由第三方托管，并非可以放心提交全部秘密的理由。
+
+如已泄露个人凭证，应先停止进一步传播、通过官方服务处理会话撤销/更新，并检查真实账户状态。删除本地文件或公开帖子不保证服务端凭证失效，也不能收回所有副本。涉及寿司郎或微信服务本身的问题应同时使用其官方渠道；本项目无权承诺第三方的修复时限。
+
+## 已实现的保护及边界
+
+- 公共查询与个人档案分开；公共客户端限制为公共路径的 GET。显式损坏或不安全公共配置不会静默退回默认配置。
+- 业务目标固定为寿司郎 HTTPS origin，不跟随 HTTP 重定向。默认网络层仍受系统信任和环境代理配置影响。
+- Unix 配置目录/文件创建权限为 `0700`/`0600`，包含路径和文件检查；保存为未加密 JSON，同用户应用和管理员仍可能读取。Windows 私有文件存储尚不支持。
+- 业务错误不直接回传原始响应、请求 URL 或头。正常票据输出、交互确认中的操作参数，以及系统、终端或 MCP 宿主保存的内容仍需人工脱敏。
+- 写操作要求确认标志，服务层没有自动重试写请求的循环；不确定结果尝试只读回查，不把未确认状态当作成功。确认标志、MCP annotations 都不是独立的授权或安全隔离机制。
+
+这些是代码层面的保护，不是对不存在漏洞、不会泄露或不会发生未经授权操作的保证。源码中的公共默认 token 是公开分发内容，不能当作个人账户凭证或秘密保护措施，其分发条件和有效期仍需确认。
+
+## 使用和维护建议
+
+只向可信的 MCP 宿主开放所需工具，核对每次写操作的具体参数。避免将个人工具开放给不可信对话或自动流程。不要将原始凭证放进命令行、环境变量、聊天、issue 或仓库；配置目录的环境变量只用于路径。使用私有文件导入并妥善处理导入源文件和备份。
+
+只使用来源可核对的发行物；发布文件哈希有助于检查一致性，但不能独立证明发布者身份。贡献者应使用虚构数据和测试 transport 复现问题，不要为测试实际预约或取消。
+
+具体数据流、保留和删除方式见 [PRIVACY.md](PRIVACY.md)，配置方法见[配置说明](https://github.com/lmxx1234567/sushiro-cli/blob/0a66837e75c06de098527308ce27e97ce0ee5ee8/docs/configuration.md)，功能边界见[已知限制](https://github.com/lmxx1234567/sushiro-cli/blob/0a66837e75c06de098527308ce27e97ce0ee5ee8/docs/limitations.md)。
+
+## English summary
+
+GitHub private vulnerability reporting is enabled for this repository. Use “Report a vulnerability”; if unavailable, ask for a private contact without posting sensitive details. Reports should use synthetic credentials and minimal reproductions. No response-time, support-lifetime or bounty commitment has been established. Local credentials are unencrypted, MCP hosts may process personal outputs, and confirmation flags do not prove user authorization. Do not disclose real tokens or run account writes to reproduce a security issue.

package/legal/THIRD_PARTY_LICENSES.txt

@@ -0,0 +1,956 @@
+Third-party license texts for sushiro-cli.
+
+The root MIT LICENSE applies to this project's own contributions only.
+The following files are reproduced unchanged, including upstream transition
+language. Labels are inventory information, not replacement license grants.
+MCP SDK documentation licensing is preserved as stated by the SDK; this bundle
+does not redistribute its documentation. The Go boringcrypto notice is retained
+conservatively with its own conditional scope; standard CGO_ENABLED=0 builds do
+not enable BoringSSL. Refresh this inventory when dependencies/toolchains change.
+
+=== Ryujoxys/sushiro-overdose e273df046789773616c7851c0bea14d4546f47e5 ===
+
+LICENSE
+MIT License
+
+Copyright (c) 2026 Ryujoxys
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+=== github.com/modelcontextprotocol/go-sdk v1.4.0 ===
+
+LICENSE
+The MCP project is undergoing a licensing transition from the MIT License to the Apache License, Version 2.0 ("Apache-2.0"). All new code and specification contributions to the project are licensed under Apache-2.0. Documentation contributions (excluding specifications) are licensed under CC-BY-4.0.
+
+Contributions for which relicensing consent has been obtained are licensed under Apache-2.0. Contributions made by authors who originally licensed their work under the MIT License and who have not yet granted explicit permission to relicense remain licensed under the MIT License.
+
+No rights beyond those granted by the applicable original license are conveyed for such contributions.
+
+---
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright
+      owner or by an individual or Legal Entity authorized to submit on behalf
+      of the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+---
+
+MIT License
+
+Copyright (c) 2024-2025 Model Context Protocol a Series of LF Projects, LLC.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+Creative Commons Attribution 4.0 International (CC-BY-4.0)
+
+Documentation in this project (excluding specifications) is licensed under
+CC-BY-4.0. See https://creativecommons.org/licenses/by/4.0/legalcode for
+the full license text.
+
+
+=== github.com/google/jsonschema-go v0.4.2 ===
+
+LICENSE
+MIT License
+
+Copyright (c) 2025 JSON Schema Go Project Authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+=== github.com/segmentio/asm v1.1.3 ===
+
+LICENSE
+MIT License
+
+Copyright (c) 2021 Segment
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+=== github.com/segmentio/encoding v0.5.3 ===
+
+LICENSE
+MIT License
+
+Copyright (c) 2019 Segment.io, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+=== github.com/yosida95/uritemplate/v3 v3.0.2 ===
+
+LICENSE
+Copyright (C) 2016, Kohei YOSHIDA <https://yosida95.com/>. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of the copyright holder nor the names of its
+      contributors may be used to endorse or promote products derived from
+      this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== golang.org/x/oauth2 v0.34.0 ===
+
+LICENSE
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== golang.org/x/sys v0.40.0 ===
+
+LICENSE
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== golang.org/x/sys v0.40.0 ===
+
+PATENTS
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
+
+
+=== Go runtime and standard library go1.26.5 ===
+
+LICENSE
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== Go runtime and standard library go1.26.5 ===
+
+PATENTS
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/crypto/internal/boring/LICENSE
+The Go source code and supporting files in this directory
+are covered by the usual Go license (see ../../../../LICENSE).
+
+When building with GOEXPERIMENT=boringcrypto, the following applies.
+
+The goboringcrypto_linux_amd64.syso object file is built
+from BoringSSL source code by build/build.sh and is covered
+by the BoringSSL license reproduced below and also at
+https://boringssl.googlesource.com/boringssl/+/fips-20220613/LICENSE.
+
+BoringSSL is a fork of OpenSSL. As such, large parts of it fall under OpenSSL
+licensing. Files that are completely new have a Google copyright and an ISC
+license. This license is reproduced at the bottom of this file.
+
+Contributors to BoringSSL are required to follow the CLA rules for Chromium:
+https://cla.developers.google.com/clas
+
+Some files from Intel are under yet another license, which is also included
+underneath.
+
+The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the
+OpenSSL License and the original SSLeay license apply to the toolkit. See below
+for the actual license texts. Actually both licenses are BSD-style Open Source
+licenses. In case of any license issues related to OpenSSL please contact
+openssl-core@openssl.org.
+
+The following are Google-internal bug numbers where explicit permission from
+some authors is recorded for use of their work. (This is purely for our own
+record keeping.)
+  27287199
+  27287880
+  27287883
+
+  OpenSSL License
+  ---------------
+
+/* ====================================================================
+ * Copyright (c) 1998-2011 The OpenSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the OpenSSL Project
+ *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
+ *
+ * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
+ *    endorse or promote products derived from this software without
+ *    prior written permission. For written permission, please contact
+ *    openssl-core@openssl.org.
+ *
+ * 5. Products derived from this software may not be called "OpenSSL"
+ *    nor may "OpenSSL" appear in their names without prior written
+ *    permission of the OpenSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the OpenSSL Project
+ *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ * This product includes cryptographic software written by Eric Young
+ * (eay@cryptsoft.com).  This product includes software written by Tim
+ * Hudson (tjh@cryptsoft.com).
+ *
+ */
+
+ Original SSLeay License
+ -----------------------
+
+/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
+ * All rights reserved.
+ *
+ * This package is an SSL implementation written
+ * by Eric Young (eay@cryptsoft.com).
+ * The implementation was written so as to conform with Netscapes SSL.
+ *
+ * This library is free for commercial and non-commercial use as long as
+ * the following conditions are aheared to.  The following conditions
+ * apply to all code found in this distribution, be it the RC4, RSA,
+ * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
+ * included with this distribution is covered by the same copyright terms
+ * except that the holder is Tim Hudson (tjh@cryptsoft.com).
+ *
+ * Copyright remains Eric Young's, and as such any Copyright notices in
+ * the code are not to be removed.
+ * If this package is used in a product, Eric Young should be given attribution
+ * as the author of the parts of the library used.
+ * This can be in the form of a textual message at program startup or
+ * in documentation (online or textual) provided with the package.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *    "This product includes cryptographic software written by
+ *     Eric Young (eay@cryptsoft.com)"
+ *    The word 'cryptographic' can be left out if the rouines from the library
+ *    being used are not cryptographic related :-).
+ * 4. If you include any Windows specific code (or a derivative thereof) from
+ *    the apps directory (application code) you must include an acknowledgement:
+ *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * The licence and distribution terms for any publically available version or
+ * derivative of this code cannot be changed.  i.e. this code cannot simply be
+ * copied and put under another distribution licence
+ * [including the GNU Public Licence.]
+ */
+
+
+ISC license used for completely new code in BoringSSL:
+
+/* Copyright (c) 2015, Google Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
+ * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
+ * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
+ * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
+
+
+Some files from Intel carry the following license:
+
+# Copyright (c) 2012, Intel Corporation
+#
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are
+# met:
+#
+# *  Redistributions of source code must retain the above copyright
+#    notice, this list of conditions and the following disclaimer.
+#
+# *  Redistributions in binary form must reproduce the above copyright
+#    notice, this list of conditions and the following disclaimer in the
+#    documentation and/or other materials provided with the
+#    distribution.
+#
+# *  Neither the name of the Intel Corporation nor the names of its
+#    contributors may be used to endorse or promote products derived from
+#    this software without specific prior written permission.
+#
+#
+# THIS SOFTWARE IS PROVIDED BY INTEL CORPORATION ""AS IS"" AND ANY
+# EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL INTEL CORPORATION OR
+# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+# EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+# PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+# NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/crypto/LICENSE
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/crypto/PATENTS
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/net/LICENSE
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/net/PATENTS
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/sys/LICENSE
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/sys/PATENTS
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/text/LICENSE
+Copyright 2009 The Go Authors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google LLC nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+=== Go go1.26.5 bundled sources ===
+
+src/vendor/golang.org/x/text/PATENTS
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.

package/legal/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,90 @@
+# Third-party notices for sushiro-cli
+
+The root [MIT LICENSE](LICENSE), copyright (c) 2026 lmxx1234567, covers this
+project's own contributions. It does not replace third-party licenses or claim
+ownership of upstream code. This distribution contains components with different
+licenses. Complete collected texts are in [THIRD_PARTY_LICENSES.txt](THIRD_PARTY_LICENSES.txt).
+
+## Ryujoxys/sushiro-overdose — MIT
+
+**sushiro-cli builds on the protocol research and implementation of
+[Ryujoxys/sushiro-overdose](https://github.com/Ryujoxys/sushiro-overdose).**
+Reference revision: `e273df046789773616c7851c0bea14d4546f47e5` (audited 2026-09-16).
+
+The API client is a rewritten adaptation of upstream request construction,
+query-versus-reservation authorization selection, business-error semantics and
+nested reservation parsing. The `Slot` model is reproduced; other response
+models are reduced/adapted. Store-list coordinates and result-count defaults,
+and the built-in public-query token, derive from upstream `queue_live.go`.
+Authentication import research also consulted upstream capture/import code.
+See [CREDITS.md](CREDITS.md) and the [provenance audit](https://github.com/lmxx1234567/sushiro-cli/blob/0a66837e75c06de098527308ce27e97ce0ee5ee8/docs/provenance.md)
+for specific files, changes and history. This is not a claim of completely
+independent authorship or official Sushiro affiliation.
+
+The full upstream notice below must be retained with distributed copies or
+substantial portions. It is also included in the standalone license bundle.
+
+MIT License
+
+Copyright (c) 2026 Ryujoxys
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## Pinned runtime dependencies
+
+| Component | Version | License and attribution scope |
+| --- | --- | --- |
+| [modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk/blob/v1.4.0/LICENSE) | v1.4.0 | Apache-2.0 for new/relicensed contributions; original MIT remains for contributions without relicensing consent. SDK documentation excluding specifications is CC-BY-4.0. Preserve the complete transition statement and license texts. This is not an MIT-only component or a blanket choice between MIT and Apache. |
+| [google/jsonschema-go](https://github.com/google/jsonschema-go/blob/v0.4.2/LICENSE) | v0.4.2 | MIT |
+| [segmentio/asm](https://github.com/segmentio/asm/blob/v1.1.3/LICENSE) | v1.1.3 | MIT |
+| [segmentio/encoding](https://github.com/segmentio/encoding/blob/v0.5.3/LICENSE) | v0.5.3 | Root MIT; Go-derived JSON code retains Go Authors BSD notices, covered by the included Go license. The separate Apache-2.0 `json/fuzz/LICENSE` belongs to the unlinked fuzz tool, not the runtime package. |
+| [yosida95/uritemplate](https://github.com/yosida95/uritemplate/blob/v3.0.2/LICENSE) | v3.0.2 | BSD-3-Clause |
+| [golang.org/x/oauth2](https://github.com/golang/oauth2/blob/v0.34.0/LICENSE) | v0.34.0 | BSD-3-Clause |
+| [golang.org/x/sys](https://github.com/golang/sys/blob/v0.40.0/LICENSE) | v0.40.0 | BSD-3-Clause; additional `PATENTS` grant preserved |
+| [Go runtime/standard library](https://github.com/golang/go/blob/go1.26.5/LICENSE) | go1.26.5 audited toolchain | BSD-3-Clause and `PATENTS`; bundled x/crypto, x/net, x/sys, x/text license/patent texts are included separately. The conditional boringcrypto notice is preserved with its original scope. |
+
+The seven module versions and checksums are locked in `go.mod` / `go.sum`.
+The build toolchain is separately recorded in the release build manifest; changing
+it requires refreshing this inventory. No separate `NOTICE` file was found in
+these seven downloaded module trees or the inspected Go dependency ancestors.
+Do not remove or replace a future upstream `NOTICE`: applicable attribution
+notices must travel with the distribution, including Apache-2.0 section 4(d).
+
+## Distribution requirements
+
+Ship `LICENSE`, `THIRD_PARTY_NOTICES.md`, `THIRD_PARTY_LICENSES.txt`, and
+`CREDITS.md` with every standalone binary archive and npm package, including each
+platform package and the wrapper. A link to an upstream license is not a substitute
+for the required license text. Source distributions also retain the provenance
+audit and existing source copyright/license notices. This four-file set is the
+project's packaging rule; it includes both license obligations and our more
+visible credit policy.
+
+For Apache-covered code retain applicable source notices and mark modified
+third-party files if any are changed. No SDK fork, patched module or vendored SDK
+source is present in the audited baseline. SDK documentation is not copied into
+our release package; importing its runtime does not relicense our own docs under
+CC-BY-4.0. If SDK docs are later copied, review their attribution/license separately.
+
+The public-query token is retained from published upstream source by explicit
+project-owner choice. A software license does not establish that token's issuer,
+ownership, lifetime, transferability, or permission to access Sushiro's backend.
+Successful public read-only checks are operational evidence, not service
+operator authorization. Upstream credit is not an endorsement by Ryujoxys,
+Sushiro, the MCP project or any dependency author.

package/package.json

@@ -0,0 +1,28 @@
+{
+  "version": "0.1.2",
+  "description": "Sushiro China CLI and stdio MCP",
+  "license": "MIT",
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lmxx1234567/sushiro-cli.git"
+  },
+  "homepage": "https://github.com/lmxx1234567/sushiro-cli#readme",
+  "bugs": {
+    "url": "https://github.com/lmxx1234567/sushiro-cli/issues"
+  },
+  "name": "sushiro-cli-darwin-x64",
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "x64"
+  ],
+  "files": [
+    "bin/",
+    "legal/"
+  ]
+}