NOTICE

codex-zcode-bridge
Copyright 2026 codex-zcode-bridge contributors

The project as a whole is licensed under the Apache License, Version 2.0;
see the LICENSE file. The following notice applies to adapted third-party code.

This product includes software developed as part of the cc-plugin-codex project
(https://github.com/hex1n/cc-plugin-codex), licensed under the Apache License,
Version 2.0.

Adapted source: scripts/lib/process.mjs (commit
501f975372ddb5117b6389114c15f1ccd0104711) was adapted, with modifications, into
src/adapters/process-spawn.ts of this project. Modifications include the
TypeScript ESM rewrite, injection-friendly types for this project's frozen
adapter contract, and additional termination verification. The adapted file
carries an attribution header.

The upstream project's NOTICE is reproduced below as required.

This product also includes adapted software from the zcode-acp project
(https://github.com/william0wang/zcode-acp), licensed under the Apache License,
Version 2.0.

Adapted source: src/tasks-index.ts was adapted, with modifications, into
src/adapters/task-index-sync.ts. Modifications include Bridge task correlation,
custom ZCODE_HOME path resolution, runtime schema checks, preserving Desktop-
owned rows and titles, and best-effort session status synchronization.

This product also includes software adapted from the public ZCode source at
commit aac4755666d09fdcd70272fcf063c077a639015f (Apache-2.0), used to implement
the optional Bridge browser host (ADR-007):

  Adapted sources: packages/shared/src/browser-use/{command-metadata,commands,
  backend,result,snapshot}.ts were adapted, with modifications, into
  src/browser/{command-metadata,commands,backend,result,snapshot-schema}.ts.
  Modifications keep the official interaction/browserList and
  interaction/browserExecute wire schemas while consolidating the shared
  package into this repository's module layout and making host-side request
  parsing tolerant of advisory-field drift.

  Adapted sources: apps/zcode-cli/packages/adapters/src/browser/{index,session,
  page-command,playwright-command,snapshot,request,descriptor,executable}.ts
  were adapted, with modifications, into src/browser/{runtime,session,
  page-command,playwright-command,snapshot-capture,request,descriptor,
  executable}.ts. Modifications replace @zcode/contracts imports with local
  modules, bind the browser lifecycle to a Bridge task attempt, report
  unverified teardowns honestly (connection-state verdicts, late-launch
  recycling), and rewrite error text for Bridge runtime settings.

  Adapted source: apps/zcode-cli/packages/contracts/src/interfaces/
  browser-control.port.ts was adapted, with modifications, into
  src/browser/contracts.ts. Modifications drop TraceContext and child-session
  derivation: the Bridge host binds every request to the single active task
  session and registers no child sessions.

Each adapted file carries an attribution header and in-place annotations for
Bridge-specific changes.

--------------------------------------------------------------------------------

cc-plugin-codex
Copyright 2026 cc-plugin-codex contributors

This product is independently developed and is not affiliated with or endorsed
by Anthropic PBC or OpenAI, L.L.C. Claude, Claude Code, Codex, and OpenAI are
trademarks of their respective owners.

The marketplace plugin bundles the following runtime dependencies. Their
license texts are included under plugins/codex-zcode-bridge/licenses/:

  @modelcontextprotocol/server 2.1.0 and @modelcontextprotocol/core 2.1.0
    Hybrid Apache-2.0/MIT license; the package license also references
    CC-BY-4.0 for documentation. See MCP-TYPESCRIPT-SDK-LICENSE.txt.
  Zod 4.6.5
    MIT License. See ZOD-LICENSE.txt.
  content-type
    MIT License; bundled license comment credits Douglas Christopher Wilson.
    See CONTENT-TYPE-LICENSE.txt.
  playwright-core 1.64.0
    Apache-2.0. Bundled in source form inside worker/vendor/pkg/browser-host.cjs
    with its browsers.json and package.json registry data at worker/vendor/;
    see PLAYWRIGHT-CORE-LICENSE.txt and the package's ThirdPartyNotices.
    The official playwright-core artifact prebuilds MIT-licensed
    @modelcontextprotocol/sdk validation code with ajv and ajv-formats into
    lib/utilsBundle.js. The Bridge's managed CDP path never uses that
    embedded MCP/ajv content, and the vendored bundle currently carries it
    untrimmed rather than modifying upstream's prebuilt file.