# Third-party notices and provenance

## App lineage

This application derives from [Max Bittker’s RS-SDK](https://github.com/MaxBittker/rs-sdk), itself based on [LostCityRS/Server](https://github.com/LostCityRS/Server). The root [MIT LICENSE](LICENSE), copyright Lost City (2025), is retained. Max’s upstream credit is distinct from the copyright text and must not be lost during extraction or fresh-history publication.

## World renderer

`scripts/build-viewer.sh` pins [MaxBittker/rs-world](https://github.com/MaxBittker/rs-world) at `7e4c9f711ba2f5a1f8e354c6083b8a471530383b`. That viewer credits [dennisdev/rs-map-viewer](https://github.com/dennisdev/rs-map-viewer) for terrain, locations and camera foundations. Retain the [BSD-2-Clause license](docs/rs-world-LICENSE.txt), copyright dennisdev (2022–2023), and any upstream notices when building or distributing it.

## Copied Dithercn engine

`src/lib/dither` contains source installed from the Dithercn registry, rather than an npm dependency. [Dithercn](https://github.com/opencoredev/dithercn) is maintained by Leo and published by OpenCore. Its [MIT license](docs/dithercn-LICENSE.txt) is included here with both notices: Leo (2026) and Shadcn Labs (2026, startercn).

License provenance checked on 2026-10-27: [upstream LICENSE at 10d7af5](https://github.com/opencoredev/dithercn/blob/10d7af5ce9b044e82345ae89bf78631845810821/LICENSE). This pins the reviewed notice, not a claim that the installed or locally adapted engine matches that entire upstream commit byte-for-byte.

## Package dependencies

React, Frosted/Whop, Radix, Tailwind, Mastra, AI SDK, OpenUI, Recharts and other dependencies retain their respective package licenses. The lockfile records resolved packages. Preserve the relevant notices when distributing bundled software; the root MIT license does not replace them. A complete dependency and viewer distribution inventory remains a release gate.

## Game assets and screenshots

Game definitions, item sprites, branding images, screenshots containing game art and downloaded game cache files have separate provenance/ownership. No blanket redistribution permission is asserted. Complete the asset review before a stable/binary distribution. Cache files are obtained from the configured public upstream during the local viewer build and are excluded from the source export.

README captures show the local application and public game observations. They do not establish permission to redistribute upstream game art or guarantee future live-data availability. See [screenshot notes](docs/screenshots/README.md).

Fresh Git history must not erase source attribution. `EXPORT-MANIFEST.json` records source/output hashes without carrying private Git history. This community project is not affiliated with Palantir Technologies, BlackRock, Whop or Jagex.