# License and attribution

Canvas UI is published by Bobby Nannier, the owner-approved publisher display
name. The skill at `skills/canvas/SKILL.md` and, in the OpenAI package, its
`agents/openai.yaml` are copied without modification from the public npm release
`@nannier/canvas@4.1.0`. The accompanying `LICENSE` is copied byte for byte from
that verified release. Its copyright holder remains Robert Nannier. Its MIT grant
covers those npm-distributed files; it does not license the Canvas source
repository.

The owner has separately granted MIT permission for the newly generated plugin
wrapper metadata and documentation, as scoped in `LICENSE.wrapper.txt`.

The Canvas mark (`assets/canvas-mark.svg`) and product icon
(`assets/canvas-icon.png`) are existing Canvas brand artwork. The owner permits
redistribution of these icons with the Canvas UI plugins and their reviewed
`bnannier/canvas-plugins` repository. All trademark rights are reserved; this
permission grants no rights to use Canvas marks to imply endorsement of another
product. The icons are not relicensed under MIT. These grants do not change the
license or access rights of the Canvas source repository.
No third-party artwork or testing screenshots are included.

`PROVENANCE.json` records the npm tarball URL, registry integrity and SHA-256 of
each packaged file other than itself. The separate build report records each
complete archive's SHA-256. This plugin contains instructions and brand assets,
not the Canvas library runtime; install `@nannier/canvas` separately in your app.