# Third-Party Notices

`dsh-hdc-bridge` reuses mature external resources wherever possible. This file records
every third-party resource that is incorporated, derived from, or referenced by this
package, together with its license status. The machine-readable source of truth is
`notices.json`; the `license-check` script (`pnpm run license-check` / `npm run license-check`)
verifies that both files stay consistent and that only whitelisted licenses are involved.

License whitelist for anything that ships inside this package or is adapted from a
third-party source: MIT, Apache-2.0, CC-BY-4.0 (with attribution), ISC, BSD-2-Clause,
BSD-3-Clause, 0BSD. Resources without a license, or under GPL/AGPL/LGPL, are never
copied, adapted, or redistributed — they are referenced by link and name only.

## 1. Incorporated dependencies (installed alongside the plugin)

None. The plugin declares no npm dependencies (runtime, optional, or peer), so
installing it executes no third-party install-time code. The DevEco CLI backend
is an optional user-installed binary — see the reference-only table.

## 2. Bundled and derived content (ships inside the package)

| ID | Name | License | Copyright | Source |
| --- | --- | --- | --- | --- |
| deveco-cli-skill | `deveco-cli` runtime skill (`lib/skills.mjs`) | MIT | Copyright (c) 2026 Huawei Device Co., Ltd. | <https://gitcode.com/openharmony-sig/deveco-cli/blob/develop/SKILL.md> |
| deveco-code-tools | DevEco Code compile helpers (`assets/arkts-check.cjs` + `lib/compile-cli.mjs`, `lib/compile-output.mjs`, `lib/compile-session-cwd.mjs`) | Apache-2.0 | Copyright (c) 2026 Huawei Device Co., Ltd. | <https://gitcode.com/openharmony-sig/deveco-code> |
| openharmony-docs-tier1 | Tier-1 bundled official knowledge excerpts (`knowledge/*.md`, verbatim zh-CN docs) | CC-BY-4.0 | OpenHarmony documentation (openharmony/docs, © OpenHarmony Project Contributors), CC-BY-4.0 — <https://creativecommons.org/licenses/by/4.0/> | <https://gitee.com/openharmony/docs> |

The skill is a translated summary of the official SKILL.md command reference, not a
verbatim copy. The copyright and permission notice is reproduced in the skill content.

The knowledge excerpts are unmodified excerpts of the most-used API references
and app-model/ArkTS guides from the OpenHarmony documentation project. Entries
marked `excerpted` retain only selected sections (each carries an in-file excerpt
note); no text is ever edited.
bundled for offline use by the `hms_knowledge` tool. Attribution is reproduced in
`lib/knowledge.mjs` and in every tool result; per-file provenance (source commit,
sha256, source URL) is recorded in `knowledge/index.json`. Generated by
`scripts/build-knowledge.mjs`; regenerate to refresh from upstream.

## 3. Reference-only (never redistributed)

| ID | Resource | Reason |
| --- | --- | --- |
| deveco-cli | `@deveco/deveco-cli` (MIT, Copyright (c) 2026 Huawei Device Co., Ltd.) | Optional backend resolved at runtime from the user's own install (local package probe or PATH). Not declared as a dependency — installing the plugin runs no third-party install-time code; never bundled. |
| harmony-next-skills | linhay/harmony-next.skills | No license file in the repository; linked in README/skill text only. |
| codelinter-rules | DevEco Studio codelinter rules (Apache-2.0, Copyright (c) 2024 Huawei Device Co., Ltd.) | Read from the user's local DevEco Studio install at runtime (`hms_lint` rules); never redistributed. |
| sdk-dts | HarmonyOS SDK `.d.ts` API declarations in a local DevEco Studio install | Read from the user's local SDK install at runtime (`hms_api`); never redistributed. |
| hypium-hamock | `@ohos/hypium`, `@ohos/hamock` (Apache-2.0, distributed via ohpm/Gitee) | Referenced by name in guidance only. |
| open-deveco | open-deveco/\* (deveco-toolbox and its skills repositories) | No license in the repositories; excluded entirely. |