Code under the Mozilla Public License 2.0 in the engine, as Tellop carries it: source code
==========================================================================================

Tellop, published by Pathnomic Labs FZ-LLC, carries an AI engine built as
one program with the Bun 1.3.14 runtime inside it (Bun is published by Oven,
github.com/oven-sh/bun) and native libraries embedded in it, among them
fff's file finder library. Three parts compiled into the engine are under
the Mozilla Public License, version 2.0, whose section 3.2(a) asks that
whoever distributes them in executable form makes their source code
available:

  - in Bun's runtime: Bun's CSS parser, the code in Bun's src/css folder,
    which its own README says is derived from Lightning CSS and from Servo;

  - in lol-html, Cloudflare's HTML rewriter that Bun's runtime is built
    with: three Rust crates, cssparser 0.36.0, selectors 0.33.0 and
    dtoa-short 0.3.5, with cssparser-macros 0.6.1, the procedural macro
    whose expansions are compiled into cssparser; and

  - in fff's file finder library (libfff_c.dylib, from fff 0.9.4, which
    the engine embeds): the Rust crate option-ext 0.2.0.

A fourth part under that licence is in the engine as source code, not
compiled: a Markdown highlighting file the engine embeds, which says it
comes in part from Helix (github.com/helix-editor/helix), the file
assets/markdown/highlights.scm of the npm package @opentui/core 0.4.5.
Source code is the form that licence covers, so that file is its own
source and is not repeated here; Tellop's notices name it and print the
licence's text with it.

This archive holds the source code of the three compiled parts exactly as
their authors published it, with every other file of Bun's tag that carries
the same licence's notice and the files Bun makes the engine's root
certificates from (see below). Pathnomic Labs made no changes to it.


1. What is in this archive
--------------------------

  README.txt
      This file.

  SHA256SUMS
      The SHA-256 of every other file here. Check them with:
          shasum -a 256 -c SHA256SUMS

  MPL-2.0.txt
      The Mozilla Public License, version 2.0: the file LICENSE inside
      dtoa-short-0.3.5.crate, unchanged.

  upstream/cssparser-0.36.0.crate
  upstream/cssparser-macros-0.6.1.crate
  upstream/dtoa-short-0.3.5.crate
  upstream/selectors-0.33.0.crate
      The crates built into lol-html, each exactly as crates.io serves it
      (a gzip-compressed tar archive; unpack one with tar -xzf). Each is
      the file whose checksum lol-html's c-api/Cargo.lock names, at commit
      77127cd2b8545998756e8d64e36ee2313c4bb312 of
      https://github.com/cloudflare/lol-html, the commit Bun 1.3.14 builds:
        cssparser-0.36.0.crate
            https://static.crates.io/crates/cssparser/cssparser-0.36.0.crate
            SHA-256: dae61cf9c0abb83bd659dab65b7e4e38d8236824c85f0f804f173567bda257d2
        cssparser-macros-0.6.1.crate
            https://static.crates.io/crates/cssparser-macros/cssparser-macros-0.6.1.crate
            SHA-256: 13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331
        dtoa-short-0.3.5.crate
            https://static.crates.io/crates/dtoa-short/dtoa-short-0.3.5.crate
            SHA-256: cd1511a7b6a56299bd043a9c167a6d2bfb37bf84a6dfceaba651168adfb43c87
        selectors-0.33.0.crate
            https://static.crates.io/crates/selectors/selectors-0.33.0.crate
            SHA-256: feef350c36147532e1b79ea5c1f3791373e61cbd9a6a2615413b3807bb164fb7
      selectors carries no licence file of its own: its manifest
      (Cargo.toml) declares MPL-2.0 and its source files carry the
      licence's notice; the licence's text is MPL-2.0.txt above.
      cssparser-macros is a procedural macro: it runs in the compiler
      while cssparser is compiled, and the code it writes is compiled
      into cssparser.

  upstream/option-ext-0.2.0.crate
      The crate built into fff's file finder library, exactly as
      crates.io serves it. It is the file whose checksum fff's Cargo.lock
      names, at tag v0.9.4 (commit
      7d7910b6ba78ea8406671eaac8cdb5eb9850d9d1) of
      https://github.com/dmtrKovalenko/fff:
        option-ext-0.2.0.crate
            https://static.crates.io/crates/option-ext/option-ext-0.2.0.crate
            SHA-256: 04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d
      None of its source files carries the licence's notice: its
      manifest (Cargo.toml) declares MPL-2.0, and its LICENSE.txt is the
      licence's text.

  bun-v1.3.14/
      Bun's files at its tag bun-v1.3.14, commit
      0d9b296af33f2b851fcbf4df3e9ec89751734ba4, under the same paths as
      in Bun's repository, unchanged: every file of its src/css folder
      (the CSS parser), and every other file of the tag whose head carries
      the Mozilla Public License's notice:
        packages/bun-usockets/certdata.txt
            Mozilla NSS's list of root certificates, as Bun copies it.
            It is here because its head carries the Mozilla Public
            License's notice. The engine carries root certificates taken
            from it; whether those certificates owe anything under that
            licence is a separate open question for counsel (question 7),
            which Tellop's notices list as its own obligation.
        test/js/bun/css/css.test.ts
        test/js/bun/css/doesnt_crash.test.ts
            Two of Bun's tests of its CSS parser, which are not built
            into the engine.
      and, though their heads carry no such notice, the file the
      certificates the engine carries are compiled from, and the two
      scripts that make it:
        packages/bun-usockets/src/crypto/root_certs.h
            The certificates from certdata.txt as C strings, the file Bun
            compiles them from.
        packages/bun-usockets/generate-root-certs.mjs
        packages/bun-usockets/generate-root-certs.pl
            Bun's scripts that make root_certs.h from certdata.txt (the
            second is curl's, under the licence its head states); they
            are not built into the engine.
      They are taken from GitHub's archive of that tag:
        From:    https://codeload.github.com/oven-sh/bun/tar.gz/refs/tags/bun-v1.3.14
        SHA-256: 112a5915992807f04b183854d360c2bf87ac7c1587fb5da3c560bdbb75b8c92e


2. Why this is the source of what the engine carries
----------------------------------------------------

The engine is built with Bun 1.3.14 (the npm package
@oven/bun-darwin-aarch64 1.3.14); every section of its program but the
one holding the engine's own code and the files embedded with it is, byte
for byte, Bun's release, which is built from Bun's tag bun-v1.3.14. GitHub writes that tag's commit into the
archive above (its pax header's comment), and every Bun file here is
checked against the Git blob id it has at that tag.

Bun's build script for lol-html (scripts/build/deps/lolhtml.ts at that tag)
builds lol-html's c-api crate at commit
77127cd2b8545998756e8d64e36ee2313c4bb312 with cargo build --locked, so the
crates it compiles are the ones its c-api/Cargo.lock names, by checksum.
The engine names cssparser 0.36.0 and selectors 0.33.0 by the paths of
their source files; dtoa-short 0.3.5 is cssparser's own dependency, and
cssparser-macros 0.6.1 the procedural macro cssparser is compiled with.

fff's release builds its file finder library from tag v0.9.4, commit
7d7910b6ba78ea8406671eaac8cdb5eb9850d9d1, whose Cargo.lock names
option-ext 0.2.0 by the checksum above; the library's search code uses
dirs 5.0.1, whose own dependency dirs-sys 0.4.1 uses option-ext, so the
library is built with it. The engine
embeds that library (the npm package @ff-labs/fff-bin-darwin-arm64 0.9.4)
byte for byte.

The engine carries lol-html, Bun's CSS parser and fff's library compiled;
Pathnomic Labs did not modify or rebuild them.
