dsh-ops
Copyright (c) 2026 T-Auto and the dsh-ops contributors

================================================================
COMPOSITE LICENSE
================================================================

This distribution is licensed under the composite expression

    MIT AND Apache-2.0

because it contains two bodies of work under two licenses:

1. The dsh-ops plugin — everything in this repository except
   `licenses/fastctx/`. Licensed MIT. The license text is in `LICENSE`.

2. FastCtx, Apache-2.0 by its author. Earlier versions of this
   distribution vendored the FastCtx source in `vendor/fastctx/` and
   published this fork's build as `@dsh-ops/fastctx-<platform>-<arch>`;
   this version removes both, together with the background component that
   used them. FastCtx's license text is kept in
   `licenses/fastctx/LICENSE-APACHE` and upstream's notice in
   `licenses/fastctx/NOTICE`, and the attribution below is kept unchanged.
   The upstream revision and every difference from it remain recorded in
   `vendor/fastctx/UPSTREAM.md` and `vendor/fastctx/FORK.md` in the
   repository history and in the published tarballs of earlier versions.

The published package declares this distribution's own Windows Bash
platform package as an OPTIONAL dependency, and the same package — this
distribution's own tarball, carrying the pinned upstream runtime
unchanged — is attached to the GitHub Release for a tag. It is optional
in the dependency sense: npm fetches it automatically on Windows x64 and
skips it on platforms it does not cover.

  * `@dsh-ops/bash-win32-x64` — a declared optional dependency.
    This distribution carries the pinned upstream release unchanged: Git
    for Windows' `PortableGit-2.56.0.2-64-bit.7z.exe` (Git for Windows
    `v2.56.0.windows.2`, GNU bash 5.3.15). The pin records that upstream
    release, the official URL that publishes it, and its SHA-256; the
    assembly verifies the archive and the executable against the pin
    before publishing it. When the optional install is absent or
    incomplete, `dsh-ops bash-runtime install` reads the same pin,
    downloads that asset on the user's own machine, verifies the digest
    there, and unpacks it there. Git for Windows is distributed under the
    GNU General Public License version 2, so its bytes are GPL-2.0 and
    are used under that licence; its terms, its copyright, and the
    corresponding source belong to the Git for Windows project
    (https://github.com/git-for-windows/git) and to the Git project
    (https://github.com/git/git). Its original licences and notices are
    kept with the payload.

  * PowerShell remains managed by the host. `dsh-ops upgrade-host-pwsh`
    previews a standard Windows installation and `--yes` executes WinGet.
    It does not override the host executor or remove existing copies.
    The legacy provisioner retains a PIN, not a redistribution.
    This distribution does not contain, forward, repackage, or
    redistribute PowerShell. The pin records the upstream release
    (`PowerShell-7.6.6-win-x64.zip`, PowerShell `v7.6.6`), the official
    URL that publishes it, and its SHA-256; `dsh-ops provision-shells
    --pwsh` reads the pin, downloads that asset on the user's own
    machine, and verifies the digest there; OPS does not automatically
    activate that legacy copy. PowerShell is distributed by
    Microsoft under the MIT licence; that licence text, its copyright,
    and the corresponding source belong to Microsoft and to the
    PowerShell project (https://github.com/PowerShell/PowerShell).

Nothing in this distribution is relicensed. The MIT grant covers only the
work this repository authored.

================================================================
ATTRIBUTION NOTICE — FastCtx
================================================================

FastCtx's NOTICE requires that a derivative work carry the following
notice verbatim in its documentation. It is reproduced here and in the
repository README, as required.

    This product includes FastCtx
    (https://github.com/yc-duan/fastctx), Copyright (c) 2026 yc-duan,
    used under the Apache License 2.0.

    FastCtx is redistributed and/or modified here by the maintainer of
    this distribution. Any such change is that maintainer's own work
    and their sole responsibility. It is not endorsed by, not
    supported by, and not attributable to the author of FastCtx, who
    accepts no liability of any kind arising from this distribution or
    from anything built on top of it.

The changes this distribution makes to FastCtx are removals — of
distribution and CI machinery, and of the code that existed only for
upstream's standalone product (the control terminal, the self-updater and
its upstream update detection, and the Codex integration) — together with
the edits those removals forced in the files that remain. Every source
file this distribution touched carried its own Apache-2.0 section 4(b)
notice at the top, and the complete enumeration is in
`vendor/fastctx/FORK.md` in the repository history and in the published
tarballs of earlier versions.

================================================================

FastCtx is developed and maintained at
https://github.com/yc-duan/fastctx


DeepSeek Harness shell contract, approval and job adapters are adapted from
@deepseek-ai/dsh-tool-bash 0.2.0-rc.2 (MIT), Copyright (c) 2026 DeepSeek.
Upstream: https://github.com/deepseek-ai/deepseek-harness
License: licenses/deepseek-harness/LICENSE

The native worker's DOCX reader uses pinned third-party Rust ZIP/XML libraries.
Their exact versions and dependency rationale are recorded in docs/document-dependencies.md;
original license notices (MIT choices for dual-licensed packages, plus zlib-rs's Zlib license)
are reproduced in licenses/documents/THIRD-PARTY-NOTICES.txt. Existing upstream notices above
remain unchanged. No third-party code is relicensed by the plugin's own MIT grant.