[ChefControl]

Part of #149 (plan item 1.6). The web build's part is done; the Electron part waits for the wrapper (#159), and is written down there.

What

• Licences list in the game. Settings → Credits & Copyrights ends with "Open-source licences": one line per package the build bundled (name, version, licence, a link to its site) and a link to The full licence texts (licences.txt, written beside index.html). Firebase's 8 packages share one line and one Apache 2.0 text. It's built from what's in the bundle, not package.json: dev tools never show, and the Steam build without Firebase (Steam: one build switch for web and Steam #160) drops it by itself. The dev server shows "Listed in the built game."
• Build check. npm run build (CI's build job) fails on a bundled package under a GPL, LGPL or AGPL licence, or one it can't read, or one with no licence text. APPROVED in scripts/licences.ts is the owner's allowlist: a package name and the licence approved for it, with the reason.
• Ready for Electron. licences({ extra }) takes the wrapper's own notices (Electron, Chromium, ffmpeg), checked the same way.

Today's list: firebase 12.19.0 (8 packages, Apache-2.0), html2canvas 1.4.1 (MIT), idb 7.1.1 (ISC), re2js 2.8.6 (MIT), three 0.186.1 (MIT), plus Vite's preload helper and Rolldown's runtime (both MIT), which also end up in the bundle.

How

• scripts/licences.ts: a small Vite plugin, no new dependency. It maps each bundled module to its node_modules package (the bundler's virtual helpers to Vite and Rolldown), reads license and the LICENSE/COPYING/NOTICE files, and checks the SPDX expression ("A OR B" passes if either does; "A AND B" needs both).
• scripts/licences/Apache-2.0.txt: Firebase's packages ship no LICENSE file, so the standard text is used for them.
• README.md, LICENSE, docs/game.md: the fonts are under the OFL (they came in with Bundle the fonts, and draw every emoji as the game's own icon (#148) #210 and weren't mentioned yet), and the open-source libraries built into the game keep their own licences, listed in Credits and licences.txt. The guide explains the list and the GPL check.
• index.html: one heading and a placeholder comment in the credits, in the existing credits style. No design-system change (no new token, component or rule).
• test/licences.test.ts: real Vite builds of a tiny game: a GPL, an LGPL and an unknown package each fail the build; an approved one ships; the Electron extra notices are checked too.

Left for #159 (Electron wrapper)

Hand in Electron's and Chromium's notices and ffmpeg (LGPL) as extra, get Valve's agreement for ffmpeg and add it to APPROVED, keep Electron's licence files in the package, and open the credits links from the app. Details are in a comment on #159.

Checked

• tsc, test/licences.test.ts, test/ui.test.ts and test/fonts.test.ts locally, after merging main (with Bundle the fonts, and draw every emoji as the game's own icon (#148) #210's fonts in Credits). The full suite runs on CI.
• The built game in the browser: the credits show the list, and licences.txt loads.

🤖 Generated with Claude Code