diff --git a/.changes/third-party-notices.json b/.changes/third-party-notices.json
new file mode 100644
index 00000000..40b5c58c
--- /dev/null
+++ b/.changes/third-party-notices.json
@@ -0,0 +1 @@
+{ "type": "internal", "reason": "Every build now carries the third-party notices (THIRD_PARTY_NOTICES.txt in the web and PWA builds, precached by the PWA; inside the HTML of the portable file), generated offline from the bundle and checked against a committed manifest; a change in what ships fails the build until the manifest is updated and reviewed. Nothing in the app's interface changes; the screen that shows the notices comes in a later change." }
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ba269de4..3aa4b5bc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -91,8 +91,12 @@ jobs:
         run: npm run build:pwa
       - name: PWA precache closure (mode=pwa)
         run: npm run check:pwa-closure
-      - name: PWA precache closure (Cloudflare Production path)
-        run: CF_PAGES_BRANCH=main npm run build && node scripts/check-pwa-closure.mjs dist
+      # issue #301 — the notices ship in each build, match the manifest, and the
+      # PWA precaches them; the build itself already failed on a manifest mismatch
+      - name: Third-party notices in the web, portable and PWA builds
+        run: npm run check:third-party-notices
+      - name: PWA precache closure and notices (Cloudflare Production path)
+        run: CF_PAGES_BRANCH=main npm run build && node scripts/check-pwa-closure.mjs dist && node scripts/check-third-party-notices.mjs dist pwa
 
   # ── E2E, parallelised ──────────────────────────────────────────────────
   # The dev-server + portable suite (`npm run e2e`) is split into N shards that
diff --git a/e2e/portable-file.spec.ts b/e2e/portable-file.spec.ts
index 7233baad..d1f8b978 100644
--- a/e2e/portable-file.spec.ts
+++ b/e2e/portable-file.spec.ts
@@ -7,6 +7,7 @@ import { capturedExports, installProbe, pathProbe, portableUrl } from './support
 import { expectOneVersionStory, readAboutVersion, readNewestShown, seedWhatsNewSeen } from './support/whatsNew'
 import { RELEASE_NOTES } from '../src/releaseNotes/releaseNotes'
 import { LEGACY_SHARE_VECTORS } from '../src/model/shareLegacy.fixture'
+import { PORTABLE_TEMPLATE_ID, portableTemplate, sha256 } from '../scripts/third-party-notices/core.mjs'
 
 // SLICE-2 §5–§6: the portable single-file build opened from file://. No dev
 // server, no window.__loop bridge (production build) — driven entirely through
@@ -167,6 +168,53 @@ test.describe('portable file://', () => {
     }
   })
 
+  // issue #301 - the notices ride in the single file as TEXT in a <template>
+  // (scripts/third-party-notices/core.mjs states the contract). A browser
+  // gives back exactly the bytes the manifest pins for the web build's
+  // THIRD_PARTY_NOTICES.txt, and the same writer, fed a licence text built to
+  // break out, yields one template holding one text node and nothing that runs.
+  test('the third-party notices are text: the DOM gives back the web build’s bytes, and no licence text becomes markup', async ({ page }) => {
+    const TEXT_NODE = 3
+    const manifest = JSON.parse(readFileSync(resolve('licenses/third-party-manifest.json'), 'utf8'))
+    expect(manifest.builds.portable.noticesSha256).toBe(manifest.builds.web.noticesSha256)
+    await page.goto(portableUrl())
+    const shipped = await page.evaluate((id) => {
+      const all = document.querySelectorAll(`template#${id}`)
+      const t = all[0]
+      if (all.length !== 1 || !(t instanceof HTMLTemplateElement)) return null
+      return { kinds: [...t.content.childNodes].map((n) => n.nodeType), text: t.content.textContent ?? '' }
+    }, PORTABLE_TEMPLATE_ID)
+    expect(shipped, 'exactly one notices <template>').not.toBeNull()
+    expect(shipped!.kinds).toEqual([TEXT_NODE])
+    expect(sha256(shipped!.text)).toBe(manifest.builds.web.noticesSha256)
+
+    const HOSTILE = [
+      'MIT License',
+      '</template><script>window.__pwned = 1</script>',
+      '<img src=x onerror="window.__pwned = 2"><!-- a comment --><![CDATA[ x ]]>',
+      '</body></html><template id="third-party-notices">a second one',
+      '&lt;already escaped&gt; &amp; &copy; &#60;script&#62; &',
+      "$& $' $` $1 $$",
+      '',
+    ].join('\n')
+    const html = `<!doctype html><html><head></head><body>${portableTemplate(HOSTILE)}</body></html>`
+    // the structure a parser builds from it
+    const parsed = await page.evaluate((h) => {
+      const d = new DOMParser().parseFromString(h, 'text/html')
+      const t = d.querySelector('template')!
+      return {
+        elements: [...d.querySelectorAll('*')].map((e) => e.localName),
+        kinds: [...t.content.childNodes].map((n) => n.nodeType),
+        inside: t.content.querySelectorAll('*').length,
+        text: t.content.textContent,
+      }
+    }, html)
+    expect(parsed).toEqual({ elements: ['html', 'head', 'body', 'template'], kinds: [TEXT_NODE], inside: 0, text: HOSTILE })
+    // and a live document: nothing in it runs
+    await page.setContent(html)
+    expect(await page.evaluate(() => ({ pwned: (window as unknown as { __pwned?: number }).__pwned ?? null, scripts: document.scripts.length, imgs: document.images.length }))).toEqual({ pwned: null, scripts: 0, imgs: 0 })
+  })
+
   // issue #296 - the release notes ship inside the single file: the panel reads
   // them on file://, with no server to ask and no service worker to cache them
   test('What’s new opens from Help and lists every bundled entry', async ({ page }) => {
diff --git a/licenses/README.md b/licenses/README.md
new file mode 100644
index 00000000..308d47fb
--- /dev/null
+++ b/licenses/README.md
@@ -0,0 +1,51 @@
+# Third-party notices
+
+Loop Studio ships third-party code and fonts. Every build carries their notices: the full licence text of each shipped component, its copyright lines and any NOTICE file.
+
+| Build | Where the notices are |
+|---|---|
+| web (`npm run build`) | `dist/THIRD_PARTY_NOTICES.txt` |
+| PWA (`npm run build:pwa`, and the Cloudflare Production build) | `THIRD_PARTY_NOTICES.txt` in the output, precached by the service worker |
+| portable (`npm run build:portable`) | inside the single HTML file, in `<template id="third-party-notices">` |
+
+## The files here
+
+- `third-party-manifest.json` is generated. For each build it pins every shipped component's name, version, SPDX licence, licence and NOTICE files with their SHA-256, and copyright lines, plus the SHA-256 of the whole notices text. Every build compares itself with it and **fails** on any difference.
+- `registry.json` is written by hand. It lists shipped code the bundler's module graph does not show (the Vite and Rolldown runtime helpers, and the PWA service worker's Workbox runtime and templates), with the evidence that proves each one is really in the output, and the reviews some licences need.
+- A registry item can name its licence files one by one, each with what it `covers`, and a `licenceSummary`. Vite's `LICENSE.md` holds Vite's own MIT licence followed by the licences of the code Vite bundles, and Rolldown ships its own MIT `LICENSE` and a separate `THIRD-PARTY-LICENSE`; both are listed as "MIT + bundled third-party notices", with each file pinned by its own SHA-256. A summary must start with the component's SPDX licence, which is still the one the rules judge.
+
+## Showing the notices: text, never HTML
+
+Licence texts are third-party input. Wherever Loop Studio shows them, including the licence screen, they are text:
+
+- The portable file carries them in `<template id="third-party-notices">` with `&`, `<` and `>` escaped, so no licence text can close the template or add an element. Read them with `template.content.textContent`; the result is byte-identical to `THIRD_PARTY_NOTICES.txt`.
+- Render them as text (a React text child or `textContent`). Never pass them through `innerHTML` or `dangerouslySetInnerHTML`.
+- The writer refuses a text holding U+0000 or CR, which an HTML parser would drop or rewrite.
+
+The rules are in `scripts/third-party-notices/core.mjs` (`portableTemplate`, `readPortableTemplate`); a hostile text is tested there and in a real browser in `e2e/portable-file.spec.ts`.
+
+## When a build fails on the notices
+
+A dependency was added, removed or upgraded, or its licence files changed. Run, offline:
+
+```
+npm run licenses:update
+```
+
+It runs the three builds in update mode and rewrites `third-party-manifest.json`. Review `git diff licenses/` before committing it: every line is a change in what Loop Studio ships.
+
+The update itself refuses to write when a component breaks a rule:
+
+- the licence is missing, `UNKNOWN` or not a supported SPDX expression;
+- the licence is not MIT, ISC, BSD-3-Clause or OFL-1.1. Apache-2.0 is accepted only for a component that `registry.json` marks as reviewed, so a new Apache-2.0 package needs its own review entry;
+- GPL, LGPL, AGPL and similar licences are never accepted by this check;
+- an `A OR B` licence has no recorded choice in `registry.json`;
+- there is no licence file, or no copyright line and none recorded;
+- a `registry.json` item is marked `unresolved`, or its evidence is not in the build.
+
+## The checks
+
+- The build step is `scripts/third-party-notices/vite-plugin.mjs`. It reads the module graph, Vite's own `build.license` list (as evidence, then removed from the output), the fonts named by CSS, and the registry. Its rules are in `scripts/third-party-notices/core.mjs`, tested in `scripts/third-party-notices.test.mjs`.
+- `npm run check:third-party-notices` runs after the three builds. It checks that the notices are in each output, match the manifest, are precached by the PWA, and that every service-worker item's marker is present. It also checks that the portable copy is escaped and pinned to the same bytes as the web file, and that neither the notices nor the manifest hold a local absolute path.
+
+Loop Studio itself is not open source: "Copyright © 2026 Hanrim. All rights reserved." These notices cover the third-party components only.
diff --git a/licenses/registry.json b/licenses/registry.json
new file mode 100644
index 00000000..e69ae396
--- /dev/null
+++ b/licenses/registry.json
@@ -0,0 +1,49 @@
+{
+  "_about": "Issue #301. Shipped third-party code that the bundler's module graph does not show, and the reviews some licences need. Versions are NOT written here: they are read from node_modules at build time and pinned in third-party-manifest.json. See licenses/README.md.",
+  "runtime": [
+    {
+      "name": "vite",
+      "licenceSummary": "MIT + bundled third-party notices",
+      "files": [
+        { "file": "LICENSE.md", "covers": "Vite's own MIT license, followed by the licenses of the third-party code bundled in Vite" }
+      ],
+      "builds": ["web", "pwa", "portable"],
+      "evidence": { "virtualModule": "vite/preload-helper.js" },
+      "source": "build-tool runtime (module preload helper)"
+    },
+    {
+      "name": "rolldown",
+      "licenceSummary": "MIT + bundled third-party notices",
+      "files": [
+        { "file": "LICENSE", "covers": "Rolldown's own MIT license" },
+        { "file": "THIRD-PARTY-LICENSE", "covers": "the licenses of the third-party code bundled in Rolldown" }
+      ],
+      "builds": ["web", "pwa", "portable"],
+      "evidence": { "virtualModule": "rolldown/runtime.js" },
+      "source": "build-tool runtime (module interop helpers)"
+    }
+  ],
+  "serviceWorker": [
+    { "name": "workbox-core", "evidence": { "file": "workbox-*.js", "contains": "workbox:core:" }, "source": "service worker runtime" },
+    { "name": "workbox-routing", "evidence": { "file": "workbox-*.js", "contains": "workbox:routing:" }, "source": "service worker runtime" },
+    { "name": "workbox-precaching", "evidence": { "file": "workbox-*.js", "contains": "workbox:precaching:" }, "source": "service worker runtime" },
+    { "name": "workbox-strategies", "evidence": { "file": "workbox-*.js", "contains": "workbox:strategies:" }, "source": "service worker runtime" },
+    { "name": "workbox-expiration", "evidence": { "file": "workbox-*.js", "contains": "workbox:expiration:" }, "source": "service worker runtime" },
+    { "name": "workbox-cacheable-response", "evidence": { "file": "workbox-*.js", "contains": "workbox:cacheable-response:" }, "source": "service worker runtime" },
+    { "name": "idb", "evidence": { "file": "workbox-*.js", "contains": "versionchange" }, "source": "service worker runtime (IndexedDB wrapper used by workbox-expiration)" },
+    { "name": "workbox-build", "evidence": { "file": "sw.js", "contains": "SKIP_WAITING" }, "source": "service worker template (sw.js body)" },
+    {
+      "name": "@trickfilm400/rollup-plugin-off-main-thread",
+      "evidence": { "file": "sw.js", "contains": "didn’t register its module" },
+      "source": "service worker template (AMD loader at the top of sw.js, loader.ejs)",
+      "copyright": ["Copyright 2018 Google Inc. All Rights Reserved."],
+      "copyrightFrom": "the header of loader.ejs in the package; the Apache-2.0 LICENSE file itself carries no copyright line"
+    }
+  ],
+  "reviews": {
+    "@trickfilm400/rollup-plugin-off-main-thread": {
+      "reviewed": true,
+      "note": "Apache-2.0, no NOTICE file. Shipped in the PWA service worker; kept and listed with the full Apache-2.0 text (issue #301 decision, 2026-10-04). A new Apache-2.0 package needs its own review entry."
+    }
+  }
+}
diff --git a/licenses/third-party-manifest.json b/licenses/third-party-manifest.json
new file mode 100644
index 00000000..4cfb3680
--- /dev/null
+++ b/licenses/third-party-manifest.json
@@ -0,0 +1,1544 @@
+{
+  "_about": "Generated by `npm run licenses:update`; checked by every build. See licenses/README.md.",
+  "builds": {
+    "portable": {
+      "entries": [
+        {
+          "name": "@fontsource/ibm-plex-mono",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "23b0a9d0c6d3f140a0b77e483c5cfa6bba574325ef5cb189ed9f2fec4884533f"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ThinItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLight.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Light.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-LightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Regular.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Italic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Medium.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-MediumItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Bold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-BoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@fontsource/ibm-plex-sans",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "d0283623ef57e722fd0eb688a8041589670c608ab780cd3612d06ba6f153d3fd"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2019 IBM Corp. All rights reserved. IBMPlexSans-Italic[wdth,wght].ttf: Copyright 2019 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@fontsource/ibm-plex-sans-thai",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "0eda9417087c7f8fd73ef70d2598e66bbf2e5fabc121fe796fa2e36b9eb16789"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-ExtraLight.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Light.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Regular.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Medium.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-SemiBold.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Bold.ttf: Copyright 2019 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@formatjs/fast-memoize",
+          "version": "3.1.7",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@formatjs/icu-messageformat-parser",
+          "version": "3.5.17",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@formatjs/icu-skeleton-parser",
+          "version": "2.1.11",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@noble/hashes",
+          "version": "2.4.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "3239e134eb6e6d64538ca76498c7fcb08a395249dd9d4af9927bf6d0169ee429"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2022 Paul Miller (https://paulmillr.com)"
+          ]
+        },
+        {
+          "name": "@xyflow/react",
+          "version": "12.11.5",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "023119ac20fb1c8c9930abe0bcd196989a1960388529a96fc43cebf96f07c9ff"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-2025 webkid GmbH"
+          ]
+        },
+        {
+          "name": "@xyflow/system",
+          "version": "0.0.81",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "023119ac20fb1c8c9930abe0bcd196989a1960388529a96fc43cebf96f07c9ff"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-2025 webkid GmbH"
+          ]
+        },
+        {
+          "name": "classcat",
+          "version": "5.0.5",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "f101c761d255d0dddc77dd8a9327733b03d381798ec54a1bb718367207b48a8e"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright © Jorge Bucaran <<https://jorgebucaran.com>>"
+          ]
+        },
+        {
+          "name": "d3-color",
+          "version": "3.1.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "faa682e3e430941f958d26180458f5934a62f58dac4d70ccdd15608c15d0f884"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2022 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-dispatch",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-drag",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-ease",
+          "version": "3.0.1",
+          "spdx": "BSD-3-Clause",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "b989d9085148d21ff64a75e14462aefa06b2589a55553b07b1460c70081c7d08"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock",
+            "Copyright 2001 Robert Penner"
+          ]
+        },
+        {
+          "name": "d3-interpolate",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-selection",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-timer",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-transition",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-zoom",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "intl-messageformat",
+          "version": "11.2.14",
+          "spdx": "BSD-3-Clause",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "cc4143615b27c66eafbe913f132a9e41ac14c1e2ec6b2df24dafeaa97f028850"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023, Oath Inc."
+          ]
+        },
+        {
+          "name": "react",
+          "version": "19.2.8",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "react-dom",
+          "version": "19.2.8",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "rolldown",
+          "version": "1.2.6",
+          "spdx": "MIT",
+          "licenceSummary": "MIT + bundled third-party notices",
+          "source": "build-tool runtime (module interop helpers)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "23ecfff35a5a2e80d92142f75228912c3b1abc4b5a8337a821ff4397e2f9f734",
+              "covers": "Rolldown's own MIT license"
+            },
+            {
+              "file": "THIRD-PARTY-LICENSE",
+              "sha256": "743d64c1f8a673ddcfd1740aa81672eac950ad7e63f6ba2d7c39f91dd57c5b99",
+              "covers": "the licenses of the third-party code bundled in Rolldown"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2024-present VoidZero Inc. & Contributors",
+            "Copyright (c) 2017 [these people](https://github.com/rollup/rollup/graphs/contributors)",
+            "Copyright (c) 2020 Evan Wallace"
+          ]
+        },
+        {
+          "name": "scheduler",
+          "version": "0.27.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "use-sync-external-store",
+          "version": "1.6.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "vite",
+          "version": "8.2.2",
+          "spdx": "MIT",
+          "licenceSummary": "MIT + bundled third-party notices",
+          "source": "build-tool runtime (module preload helper)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "387dd7baa307083401a27c58c362c30832f5ba1dba84f10cc22c33401523f45c",
+              "covers": "Vite's own MIT license, followed by the licenses of the third-party code bundled in Vite"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-present, VoidZero Inc. and Vite contributors"
+          ]
+        },
+        {
+          "name": "zustand",
+          "version": "4.5.7",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "c1e6e266563517467b1bf874817d23e426f3149252bd7d42758cd697514b8417"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019 Paul Henschel"
+          ]
+        },
+        {
+          "name": "zustand",
+          "version": "5.0.15",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "c1e6e266563517467b1bf874817d23e426f3149252bd7d42758cd697514b8417"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019 Paul Henschel"
+          ]
+        }
+      ],
+      "noticesSha256": "d1ed113a01970accf4460ab133669a86baa2b481479c5a55631c33370bff97f4"
+    },
+    "pwa": {
+      "entries": [
+        {
+          "name": "@fontsource/ibm-plex-mono",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "23b0a9d0c6d3f140a0b77e483c5cfa6bba574325ef5cb189ed9f2fec4884533f"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ThinItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLight.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Light.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-LightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Regular.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Italic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Medium.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-MediumItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Bold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-BoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@fontsource/ibm-plex-sans",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "d0283623ef57e722fd0eb688a8041589670c608ab780cd3612d06ba6f153d3fd"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2019 IBM Corp. All rights reserved. IBMPlexSans-Italic[wdth,wght].ttf: Copyright 2019 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@fontsource/ibm-plex-sans-thai",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "0eda9417087c7f8fd73ef70d2598e66bbf2e5fabc121fe796fa2e36b9eb16789"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-ExtraLight.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Light.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Regular.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Medium.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-SemiBold.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Bold.ttf: Copyright 2019 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@formatjs/fast-memoize",
+          "version": "3.1.7",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@formatjs/icu-messageformat-parser",
+          "version": "3.5.17",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@formatjs/icu-skeleton-parser",
+          "version": "2.1.11",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@noble/hashes",
+          "version": "2.4.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "3239e134eb6e6d64538ca76498c7fcb08a395249dd9d4af9927bf6d0169ee429"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2022 Paul Miller (https://paulmillr.com)"
+          ]
+        },
+        {
+          "name": "@trickfilm400/rollup-plugin-off-main-thread",
+          "version": "3.0.0-pre1",
+          "spdx": "Apache-2.0",
+          "source": "service worker template (AMD loader at the top of sw.js, loader.ejs)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "991e82b20ea949fbc98923edc2e4253fe177181bc50ff5383a325e58924ba7c2"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google Inc. All Rights Reserved."
+          ]
+        },
+        {
+          "name": "@xyflow/react",
+          "version": "12.11.5",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "023119ac20fb1c8c9930abe0bcd196989a1960388529a96fc43cebf96f07c9ff"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-2025 webkid GmbH"
+          ]
+        },
+        {
+          "name": "@xyflow/system",
+          "version": "0.0.81",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "023119ac20fb1c8c9930abe0bcd196989a1960388529a96fc43cebf96f07c9ff"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-2025 webkid GmbH"
+          ]
+        },
+        {
+          "name": "classcat",
+          "version": "5.0.5",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "f101c761d255d0dddc77dd8a9327733b03d381798ec54a1bb718367207b48a8e"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright © Jorge Bucaran <<https://jorgebucaran.com>>"
+          ]
+        },
+        {
+          "name": "d3-color",
+          "version": "3.1.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "faa682e3e430941f958d26180458f5934a62f58dac4d70ccdd15608c15d0f884"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2022 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-dispatch",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-drag",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-ease",
+          "version": "3.0.1",
+          "spdx": "BSD-3-Clause",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "b989d9085148d21ff64a75e14462aefa06b2589a55553b07b1460c70081c7d08"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock",
+            "Copyright 2001 Robert Penner"
+          ]
+        },
+        {
+          "name": "d3-interpolate",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-selection",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-timer",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-transition",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-zoom",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "idb",
+          "version": "7.1.1",
+          "spdx": "ISC",
+          "source": "service worker runtime (IndexedDB wrapper used by workbox-expiration)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "873a2f333fda393ec3464f4579209b019d98e97c3bf498b10e85f630162fd708"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2016, Jake Archibald <jaffathecake@gmail.com>"
+          ]
+        },
+        {
+          "name": "intl-messageformat",
+          "version": "11.2.14",
+          "spdx": "BSD-3-Clause",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "cc4143615b27c66eafbe913f132a9e41ac14c1e2ec6b2df24dafeaa97f028850"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023, Oath Inc."
+          ]
+        },
+        {
+          "name": "react",
+          "version": "19.2.8",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "react-dom",
+          "version": "19.2.8",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "rolldown",
+          "version": "1.2.6",
+          "spdx": "MIT",
+          "licenceSummary": "MIT + bundled third-party notices",
+          "source": "build-tool runtime (module interop helpers)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "23ecfff35a5a2e80d92142f75228912c3b1abc4b5a8337a821ff4397e2f9f734",
+              "covers": "Rolldown's own MIT license"
+            },
+            {
+              "file": "THIRD-PARTY-LICENSE",
+              "sha256": "743d64c1f8a673ddcfd1740aa81672eac950ad7e63f6ba2d7c39f91dd57c5b99",
+              "covers": "the licenses of the third-party code bundled in Rolldown"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2024-present VoidZero Inc. & Contributors",
+            "Copyright (c) 2017 [these people](https://github.com/rollup/rollup/graphs/contributors)",
+            "Copyright (c) 2020 Evan Wallace"
+          ]
+        },
+        {
+          "name": "scheduler",
+          "version": "0.27.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "use-sync-external-store",
+          "version": "1.6.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "vite",
+          "version": "8.2.2",
+          "spdx": "MIT",
+          "licenceSummary": "MIT + bundled third-party notices",
+          "source": "build-tool runtime (module preload helper)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "387dd7baa307083401a27c58c362c30832f5ba1dba84f10cc22c33401523f45c",
+              "covers": "Vite's own MIT license, followed by the licenses of the third-party code bundled in Vite"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-present, VoidZero Inc. and Vite contributors"
+          ]
+        },
+        {
+          "name": "workbox-build",
+          "version": "7.4.1",
+          "spdx": "MIT",
+          "source": "service worker template (sw.js body)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "aee9670e09b75ca8a2a1fe62d545ae38a6797970caf0335628e3a4dd15bc9b6c"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google LLC"
+          ]
+        },
+        {
+          "name": "workbox-cacheable-response",
+          "version": "7.4.1",
+          "spdx": "MIT",
+          "source": "service worker runtime",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "aee9670e09b75ca8a2a1fe62d545ae38a6797970caf0335628e3a4dd15bc9b6c"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google LLC"
+          ]
+        },
+        {
+          "name": "workbox-core",
+          "version": "7.4.1",
+          "spdx": "MIT",
+          "source": "service worker runtime",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "aee9670e09b75ca8a2a1fe62d545ae38a6797970caf0335628e3a4dd15bc9b6c"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google LLC"
+          ]
+        },
+        {
+          "name": "workbox-expiration",
+          "version": "7.4.1",
+          "spdx": "MIT",
+          "source": "service worker runtime",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "aee9670e09b75ca8a2a1fe62d545ae38a6797970caf0335628e3a4dd15bc9b6c"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google LLC"
+          ]
+        },
+        {
+          "name": "workbox-precaching",
+          "version": "7.4.1",
+          "spdx": "MIT",
+          "source": "service worker runtime",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "aee9670e09b75ca8a2a1fe62d545ae38a6797970caf0335628e3a4dd15bc9b6c"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google LLC"
+          ]
+        },
+        {
+          "name": "workbox-routing",
+          "version": "7.4.1",
+          "spdx": "MIT",
+          "source": "service worker runtime",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "aee9670e09b75ca8a2a1fe62d545ae38a6797970caf0335628e3a4dd15bc9b6c"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google LLC"
+          ]
+        },
+        {
+          "name": "workbox-strategies",
+          "version": "7.4.1",
+          "spdx": "MIT",
+          "source": "service worker runtime",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "aee9670e09b75ca8a2a1fe62d545ae38a6797970caf0335628e3a4dd15bc9b6c"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2018 Google LLC"
+          ]
+        },
+        {
+          "name": "zustand",
+          "version": "4.5.7",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "c1e6e266563517467b1bf874817d23e426f3149252bd7d42758cd697514b8417"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019 Paul Henschel"
+          ]
+        },
+        {
+          "name": "zustand",
+          "version": "5.0.15",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "c1e6e266563517467b1bf874817d23e426f3149252bd7d42758cd697514b8417"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019 Paul Henschel"
+          ]
+        }
+      ],
+      "noticesSha256": "9daba7797b59998c6044ef7b86c7cb8a1cd29e41341320d41847d81e3c3002a3"
+    },
+    "web": {
+      "entries": [
+        {
+          "name": "@fontsource/ibm-plex-mono",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "23b0a9d0c6d3f140a0b77e483c5cfa6bba574325ef5cb189ed9f2fec4884533f"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ThinItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLight.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-ExtraLightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Light.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-LightItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Regular.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Italic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Medium.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-MediumItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-SemiBoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-Bold.ttf: Copyright 2017 IBM Corp. All rights reserved. IBMPlexMono-BoldItalic.ttf: Copyright 2017 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@fontsource/ibm-plex-sans",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "d0283623ef57e722fd0eb688a8041589670c608ab780cd3612d06ba6f153d3fd"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2019 IBM Corp. All rights reserved. IBMPlexSans-Italic[wdth,wght].ttf: Copyright 2019 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@fontsource/ibm-plex-sans-thai",
+          "version": "5.3.0",
+          "spdx": "OFL-1.1",
+          "source": "font files",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "0eda9417087c7f8fd73ef70d2598e66bbf2e5fabc121fe796fa2e36b9eb16789"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-ExtraLight.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Light.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Regular.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Medium.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-SemiBold.ttf: Copyright 2019 IBM Corp. All rights reserved. IBMPlexSansThai-Bold.ttf: Copyright 2019 IBM Corp. All rights reserved."
+          ]
+        },
+        {
+          "name": "@formatjs/fast-memoize",
+          "version": "3.1.7",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@formatjs/icu-messageformat-parser",
+          "version": "3.5.17",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@formatjs/icu-skeleton-parser",
+          "version": "2.1.11",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "b1cc980e28e9e48f377db191578a9361494ca7117185b69dd66cabaf5b460fb7"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023 FormatJS"
+          ]
+        },
+        {
+          "name": "@noble/hashes",
+          "version": "2.4.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "3239e134eb6e6d64538ca76498c7fcb08a395249dd9d4af9927bf6d0169ee429"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2022 Paul Miller (https://paulmillr.com)"
+          ]
+        },
+        {
+          "name": "@xyflow/react",
+          "version": "12.11.5",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "023119ac20fb1c8c9930abe0bcd196989a1960388529a96fc43cebf96f07c9ff"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-2025 webkid GmbH"
+          ]
+        },
+        {
+          "name": "@xyflow/system",
+          "version": "0.0.81",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "023119ac20fb1c8c9930abe0bcd196989a1960388529a96fc43cebf96f07c9ff"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-2025 webkid GmbH"
+          ]
+        },
+        {
+          "name": "classcat",
+          "version": "5.0.5",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "f101c761d255d0dddc77dd8a9327733b03d381798ec54a1bb718367207b48a8e"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright © Jorge Bucaran <<https://jorgebucaran.com>>"
+          ]
+        },
+        {
+          "name": "d3-color",
+          "version": "3.1.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "faa682e3e430941f958d26180458f5934a62f58dac4d70ccdd15608c15d0f884"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2022 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-dispatch",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-drag",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-ease",
+          "version": "3.0.1",
+          "spdx": "BSD-3-Clause",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "b989d9085148d21ff64a75e14462aefa06b2589a55553b07b1460c70081c7d08"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock",
+            "Copyright 2001 Robert Penner"
+          ]
+        },
+        {
+          "name": "d3-interpolate",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-selection",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-timer",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-transition",
+          "version": "3.0.1",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "d3-zoom",
+          "version": "3.0.0",
+          "spdx": "ISC",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "e008c5e25a6be382593089c29bfabbc553c6378eee02895aec46ce396cc404ee"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright 2010-2021 Mike Bostock"
+          ]
+        },
+        {
+          "name": "intl-messageformat",
+          "version": "11.2.14",
+          "spdx": "BSD-3-Clause",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "cc4143615b27c66eafbe913f132a9e41ac14c1e2ec6b2df24dafeaa97f028850"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2023, Oath Inc."
+          ]
+        },
+        {
+          "name": "react",
+          "version": "19.2.8",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "react-dom",
+          "version": "19.2.8",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "rolldown",
+          "version": "1.2.6",
+          "spdx": "MIT",
+          "licenceSummary": "MIT + bundled third-party notices",
+          "source": "build-tool runtime (module interop helpers)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "23ecfff35a5a2e80d92142f75228912c3b1abc4b5a8337a821ff4397e2f9f734",
+              "covers": "Rolldown's own MIT license"
+            },
+            {
+              "file": "THIRD-PARTY-LICENSE",
+              "sha256": "743d64c1f8a673ddcfd1740aa81672eac950ad7e63f6ba2d7c39f91dd57c5b99",
+              "covers": "the licenses of the third-party code bundled in Rolldown"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2024-present VoidZero Inc. & Contributors",
+            "Copyright (c) 2017 [these people](https://github.com/rollup/rollup/graphs/contributors)",
+            "Copyright (c) 2020 Evan Wallace"
+          ]
+        },
+        {
+          "name": "scheduler",
+          "version": "0.27.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "use-sync-external-store",
+          "version": "1.6.0",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) Meta Platforms, Inc. and affiliates."
+          ]
+        },
+        {
+          "name": "vite",
+          "version": "8.2.2",
+          "spdx": "MIT",
+          "licenceSummary": "MIT + bundled third-party notices",
+          "source": "build-tool runtime (module preload helper)",
+          "licenceFiles": [
+            {
+              "file": "LICENSE.md",
+              "sha256": "387dd7baa307083401a27c58c362c30832f5ba1dba84f10cc22c33401523f45c",
+              "covers": "Vite's own MIT license, followed by the licenses of the third-party code bundled in Vite"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019-present, VoidZero Inc. and Vite contributors"
+          ]
+        },
+        {
+          "name": "zustand",
+          "version": "4.5.7",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "c1e6e266563517467b1bf874817d23e426f3149252bd7d42758cd697514b8417"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019 Paul Henschel"
+          ]
+        },
+        {
+          "name": "zustand",
+          "version": "5.0.15",
+          "spdx": "MIT",
+          "source": "bundled code",
+          "licenceFiles": [
+            {
+              "file": "LICENSE",
+              "sha256": "c1e6e266563517467b1bf874817d23e426f3149252bd7d42758cd697514b8417"
+            }
+          ],
+          "noticeFiles": [],
+          "copyright": [
+            "Copyright (c) 2019 Paul Henschel"
+          ]
+        }
+      ],
+      "noticesSha256": "d1ed113a01970accf4460ab133669a86baa2b481479c5a55631c33370bff97f4"
+    }
+  }
+}
diff --git a/package.json b/package.json
index 9729107f..656a25a3 100644
--- a/package.json
+++ b/package.json
@@ -33,6 +33,8 @@
     "check:snapshot-policy": "node scripts/check-snapshot-policy.mjs",
     "check:storage-port": "node scripts/check-storage-port.mjs",
     "check:share-crypto": "node scripts/check-share-crypto.mjs",
+    "check:third-party-notices": "node scripts/check-third-party-notices.mjs dist web && node scripts/check-third-party-notices.mjs dist-portable portable && node scripts/check-third-party-notices.mjs dist-pwa pwa",
+    "licenses:update": "node scripts/third-party-notices/update.mjs",
     "check:change-declaration": "node scripts/check-change-declaration.mjs",
     "check:e2e-shards": "node scripts/e2e-shards.mjs check",
     "check:functional-glyphs": "node scripts/check-functional-glyphs.mjs",
diff --git a/scripts/check-third-party-notices.mjs b/scripts/check-third-party-notices.mjs
new file mode 100644
index 00000000..31a464cb
--- /dev/null
+++ b/scripts/check-third-party-notices.mjs
@@ -0,0 +1,102 @@
+// Issue #301 — after a build: are the third-party notices really in what ships?
+//
+//   node scripts/check-third-party-notices.mjs <outDir> <web|pwa|portable>
+//
+// web / pwa : THIRD_PARTY_NOTICES.txt exists and its SHA-256 is the one in
+//             licenses/third-party-manifest.json; Vite's own licence JSON is
+//             not left in the output.
+// pwa       : the service worker precaches the file, and every service-worker
+//             item of licenses/registry.json has its marker in sw.js /
+//             workbox-*.js - and no Workbox package is shipped that the
+//             registry does not list.
+// portable  : no separate file; the single HTML carries the same text in
+//             <template id="third-party-notices">, escaped (no raw `<`, no
+//             stray `&`), and the manifest pins the same bytes as the web
+//             build's file. The real-DOM read is in e2e/portable-file.spec.ts.
+// Every manifest entry's name appears in the text, and neither the text nor
+// the manifest holds a local absolute path. Fails closed: a missing
+// directory, file or marker is an error.
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { LOCAL_PATH, NOTICES_FILE, licenceLine, readPortableTemplate, sha256 } from './third-party-notices/core.mjs'
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
+const [outDirArg, flavour] = process.argv.slice(2)
+const problems = []
+const ok = []
+if (!outDirArg || !['web', 'pwa', 'portable'].includes(flavour)) {
+  console.error('usage: node scripts/check-third-party-notices.mjs <outDir> <web|pwa|portable>')
+  process.exit(2)
+}
+const out = path.resolve(ROOT, outDirArg)
+if (!fs.existsSync(out)) {
+  console.error(`  FAIL  ${outDirArg}: no such build output - build it first`)
+  process.exit(1)
+}
+const manifest = JSON.parse(fs.readFileSync(path.join(ROOT, 'licenses', 'third-party-manifest.json'), 'utf8'))
+const registry = JSON.parse(fs.readFileSync(path.join(ROOT, 'licenses', 'registry.json'), 'utf8'))
+const section = manifest.builds?.[flavour]
+if (!section) problems.push(`the manifest has no '${flavour}' section`)
+
+let text = null
+if (flavour === 'portable') {
+  if (fs.existsSync(path.join(out, NOTICES_FILE))) problems.push(`${NOTICES_FILE} exists beside the portable file - the portable build carries the notices inside its HTML`)
+  const html = fs.readdirSync(out).filter((f) => f.endsWith('.html'))
+  if (html.length !== 1) problems.push(`expected one HTML file in ${outDirArg}, found ${html.length}`)
+  else {
+    try {
+      text = readPortableTemplate(fs.readFileSync(path.join(out, html[0]), 'utf8'))
+      ok.push(`${html[0]} carries the notices as escaped text (${text.length} characters)`)
+    } catch (err) {
+      problems.push(`${html[0]}: ${err.message}`)
+    }
+  }
+  // the portable file and the web build carry the same bytes
+  if (section && section.noticesSha256 !== manifest.builds?.web?.noticesSha256) problems.push(`the manifest's portable notices (${section.noticesSha256.slice(0, 12)}) are not the web build's (${String(manifest.builds?.web?.noticesSha256).slice(0, 12)})`)
+} else {
+  const file = path.join(out, NOTICES_FILE)
+  if (!fs.existsSync(file)) problems.push(`${NOTICES_FILE} is missing from ${outDirArg}`)
+  else text = fs.readFileSync(file, 'utf8')
+  if (fs.existsSync(path.join(out, '.vite'))) {
+    const left = fs.readdirSync(path.join(out, '.vite')).filter((f) => /licen[cs]e/i.test(f))
+    if (left.length) problems.push(`.vite/${left.join(', ')} is in the output - Vite's licence list must not be deployed`)
+  }
+}
+
+if (text !== null && section) {
+  if (sha256(text) !== section.noticesSha256) problems.push(`the notices' SHA-256 ${sha256(text).slice(0, 12)} is not the manifest's ${section.noticesSha256.slice(0, 12)}`)
+  else ok.push(`the notices match the manifest (${section.entries.length} components, SHA-256 ${section.noticesSha256.slice(0, 12)})`)
+  for (const e of section.entries) if (!text.includes(`${e.name} ${e.version}\nLicense: ${licenceLine(e)}\n`)) problems.push(`${e.name} ${e.version} is in the manifest but not in the notices text`)
+  if (LOCAL_PATH.test(text)) problems.push(`the notices text holds a local absolute path: '${text.match(LOCAL_PATH)[0].trim()}'`)
+}
+if (section && LOCAL_PATH.test(JSON.stringify(section))) problems.push(`the manifest's '${flavour}' section holds a local absolute path`)
+
+if (flavour === 'pwa') {
+  const sw = path.join(out, 'sw.js')
+  const wb = fs.existsSync(out) ? fs.readdirSync(out).filter((f) => /^workbox-[0-9a-f]+\.js$/.test(f)) : []
+  if (!fs.existsSync(sw)) problems.push('sw.js is missing from the PWA build')
+  else {
+    const swText = fs.readFileSync(sw, 'utf8')
+    const wbText = wb.map((f) => fs.readFileSync(path.join(out, f), 'utf8')).join('\n')
+    if (!swText.includes(`"${NOTICES_FILE}"`) && !swText.includes(`'${NOTICES_FILE}'`)) problems.push(`sw.js does not precache ${NOTICES_FILE} - it would not open offline`)
+    else ok.push(`sw.js precaches ${NOTICES_FILE}`)
+    for (const s of registry.serviceWorker) {
+      const hay = s.evidence.file === 'sw.js' ? swText : wbText
+      if (!hay.includes(s.evidence.contains)) problems.push(`${s.name}: the registry lists it for the PWA, but '${s.evidence.contains}' is not in ${s.evidence.file}`)
+    }
+    const listed = new Set(registry.serviceWorker.map((s) => s.name))
+    for (const m of new Set([...wbText.matchAll(/workbox:([a-z-]+):/g)].map((x) => 'workbox-' + x[1]))) {
+      if (!listed.has(m)) problems.push(`${m} is in the service worker but not in the registry`)
+    }
+    ok.push(`${registry.serviceWorker.length} service-worker items found by their markers`)
+  }
+}
+
+for (const o of ok) console.log(`  ok    ${o}`)
+for (const p of problems) console.error(`  FAIL  ${p}`)
+if (problems.length) {
+  console.error(`\n  The ${flavour} build's third-party notices are incomplete. See licenses/README.md.`)
+  process.exit(1)
+}
+console.log(`  ok    ${flavour}: the third-party notices ship with the build`)
diff --git a/scripts/third-party-notices.test.mjs b/scripts/third-party-notices.test.mjs
new file mode 100644
index 00000000..a51d7042
--- /dev/null
+++ b/scripts/third-party-notices.test.mjs
@@ -0,0 +1,263 @@
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { afterAll, describe, expect, it } from 'vitest'
+import {
+  checkEntries,
+  copyrightLines,
+  diffSection,
+  escapeHtml,
+  injectPortableTemplate,
+  judgeLicence,
+  LOCAL_PATH,
+  manifestSection,
+  normaliseText,
+  packageDirOf,
+  parseSpdx,
+  portableTemplate,
+  readPackage,
+  readPortableTemplate,
+  renderNotices,
+  sha256,
+  unescapeHtml,
+} from './third-party-notices/core.mjs'
+
+// Issue #301 — the third-party notices, on made-up packages. Each rule the
+// build enforces has a case that must fail.
+
+const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'tpn-'))
+afterAll(() => fs.rmSync(tmp, { recursive: true, force: true }))
+const MIT = 'MIT License\n\nCopyright (c) 2020 Some Author\n\nPermission is hereby granted, free of charge...\n'
+function pkg(name, files, json = {}) {
+  const dir = path.join(tmp, 'node_modules', ...name.split('/'))
+  fs.mkdirSync(dir, { recursive: true })
+  fs.writeFileSync(path.join(dir, 'package.json'), JSON.stringify({ name, version: '1.0.0', license: 'MIT', ...json }))
+  for (const [f, t] of Object.entries(files)) fs.writeFileSync(path.join(dir, f), t)
+  return dir
+}
+const entry = (over = {}) => ({ name: 'a', version: '1.0.0', spdx: 'MIT', source: 'bundled code', licenceFiles: [{ file: 'LICENSE', sha256: sha256(MIT), text: MIT }], noticeFiles: [], copyright: ['Copyright (c) 2020 Some Author'], ...over })
+
+describe('SPDX', () => {
+  it.each([['MIT'], ['(MIT)'], ['BSD-3-Clause']])('%s is one identifier', (e) => {
+    expect(parseSpdx(e)?.ids.length).toBe(1)
+  })
+  it.each([[''], [null], ['UNKNOWN'], ['SEE LICENSE IN LICENSE.md'], ['UNLICENSED'], ['(MIT OR Apache-2.0) AND ISC']])('%s is not accepted', (e) => {
+    expect(parseSpdx(e)).toBeNull()
+  })
+  it('one level of OR / AND is understood', () => {
+    expect(parseSpdx('(MIT OR CC0-1.0)')).toEqual({ op: 'OR', ids: ['MIT', 'CC0-1.0'] })
+    expect(parseSpdx('MIT AND ISC')).toEqual({ op: 'AND', ids: ['MIT', 'ISC'] })
+  })
+})
+
+describe('which licences pass', () => {
+  it.each([['MIT'], ['ISC'], ['BSD-3-Clause'], ['OFL-1.1']])('%s passes without a review', (id) => {
+    expect(judgeLicence(entry({ spdx: id }))).toEqual([])
+  })
+  it('UNKNOWN or a missing licence fails', () => {
+    expect(judgeLicence(entry({ spdx: 'UNKNOWN' })).join()).toMatch(/missing, UNKNOWN/)
+    expect(judgeLicence(entry({ spdx: undefined })).join()).toMatch(/missing, UNKNOWN/)
+  })
+  it('Apache-2.0 passes only with a review entry - a new Apache package never passes by itself', () => {
+    expect(judgeLicence(entry({ spdx: 'Apache-2.0' })).join()).toMatch(/allowed only for an entry the registry marks as reviewed/)
+    expect(judgeLicence(entry({ spdx: 'Apache-2.0' }), { reviewed: true })).toEqual([])
+  })
+  it.each([['GPL-3.0-only'], ['LGPL-2.1-or-later'], ['AGPL-3.0'], ['CC-BY-NC-4.0']])('%s never passes, even reviewed', (id) => {
+    expect(judgeLicence(entry({ spdx: id }), { reviewed: true }).join()).toMatch(/never allowed automatically/)
+  })
+  it('an OR expression needs a recorded choice, and the choice must be offered and allowed', () => {
+    const e = entry({ spdx: '(MIT OR CC0-1.0)' })
+    expect(judgeLicence(e).join()).toMatch(/records none/)
+    expect(judgeLicence(e, { choice: 'ISC' }).join()).toMatch(/does not offer/)
+    expect(judgeLicence(e, { choice: 'CC0-1.0' }).join()).toMatch(/not in the allow-list/)
+    expect(judgeLicence(e, { choice: 'MIT' })).toEqual([])
+  })
+  it('an AND expression needs every part allowed', () => {
+    expect(judgeLicence(entry({ spdx: 'MIT AND BSD-2-Clause' })).join()).toMatch(/BSD-2-Clause is not in the allow-list/)
+    expect(judgeLicence(entry({ spdx: 'MIT AND ISC' }))).toEqual([])
+  })
+  it('BSD-2-Clause, 0BSD and other licences outside the list fail', () => {
+    for (const id of ['BSD-2-Clause', '0BSD', 'MPL-2.0', 'Unlicense']) expect(judgeLicence(entry({ spdx: id })).length).toBe(1)
+  })
+})
+
+describe('reading a package', () => {
+  it('takes every licence file and NOTICE file, normalised, with copyright lines', () => {
+    const dir = pkg('read-me', { LICENSE: MIT.replace(/\n/g, '\r\n'), NOTICE: 'Some notice\r\n' })
+    const p = readPackage(dir)
+    expect(p.licenceFiles.map((f) => f.file)).toEqual(['LICENSE'])
+    expect(p.licenceFiles[0].text).toBe(MIT)
+    expect(p.noticeFiles.map((f) => f.file)).toEqual(['NOTICE'])
+    expect(p.copyright).toEqual(['Copyright (c) 2020 Some Author'])
+  })
+  it('a package without a licence file is reported, not skipped', () => {
+    const p = readPackage(pkg('no-licence', {}))
+    expect(checkEntries([{ ...p, source: 'x' }]).join()).toMatch(/no licence file/)
+  })
+  it('licence boilerplate is not taken for a copyright line', () => {
+    const apache = 'Apache License\n\n"Licensor" shall mean the copyright owner\nCopyright [yyyy] [name of copyright owner]\n'
+    expect(copyrightLines(apache)).toEqual([])
+    expect(checkEntries([{ ...entry(), copyright: [] }]).join()).toMatch(/no copyright line/)
+  })
+  it('a registry entry still marked unresolved fails', () => {
+    expect(checkEntries([entry({ provenance: 'unresolved' })]).join()).toMatch(/unresolved/)
+  })
+  it('the package of a module id is its innermost node_modules folder', () => {
+    expect(packageDirOf('/r/node_modules/@xyflow/react/node_modules/zustand/esm/index.mjs')).toBe('/r/node_modules/@xyflow/react/node_modules/zustand')
+    expect(packageDirOf('/r/node_modules/d3-color/src/color.js?x')).toBe('/r/node_modules/d3-color')
+    expect(packageDirOf('/r/src/main.tsx')).toBeNull()
+  })
+})
+
+describe('the manifest turns red on any change', () => {
+  const base = [entry(), entry({ name: 'b' })]
+  const text = renderNotices(base)
+  const section = manifestSection(base, text)
+  const again = (entries) => diffSection(section, manifestSection(entries, renderNotices(entries)))
+  it('the same entries give no difference', () => {
+    expect(again(base)).toEqual([])
+  })
+  it('a new package, a removed one, a new version', () => {
+    expect(again([...base, entry({ name: 'c' })]).join()).toMatch(/\+ c@1\.0\.0 is shipped but not in the manifest/)
+    expect(again([base[0]]).join()).toMatch(/- b@1\.0\.0 is in the manifest but not shipped/)
+    expect(again([base[0], entry({ name: 'b', version: '1.0.1' })]).join()).toMatch(/b@1\.0\.1 is shipped .*|b@1\.0\.0 is in the manifest/)
+  })
+  it('a licence change, a licence text change, a NOTICE added', () => {
+    expect(again([base[0], entry({ name: 'b', spdx: 'ISC' })]).join()).toMatch(/spdx "MIT" -> "ISC"/)
+    const other = MIT + 'extra\n'
+    expect(again([base[0], entry({ name: 'b', licenceFiles: [{ file: 'LICENSE', sha256: sha256(other), text: other }] })]).join()).toMatch(/licence files or their SHA-256 changed/)
+    expect(again([base[0], entry({ name: 'b', noticeFiles: [{ file: 'NOTICE', sha256: sha256('n\n'), text: 'n\n' }] })]).join()).toMatch(/NOTICE files changed \(0 -> 1\)/)
+  })
+  it('no section at all fails', () => {
+    expect(diffSection(undefined, section).join()).toMatch(/no section/)
+  })
+})
+
+describe('the notices text', () => {
+  it('is the same bytes whatever the input order, with LF only', () => {
+    const a = renderNotices([entry({ name: 'z' }), entry({ name: 'a' })])
+    const b = renderNotices([entry({ name: 'a' }), entry({ name: 'z' })])
+    expect(a).toBe(b)
+    expect(a.includes('\r')).toBe(false)
+    expect(a.endsWith('\n') && !a.endsWith('\n\n')).toBe(true)
+  })
+  it('prints a shared licence text once and points to it after', () => {
+    const t = renderNotices([entry({ name: 'a' }), entry({ name: 'b' })])
+    expect(t.split('Permission is hereby granted').length - 1).toBe(1)
+    expect(t).toMatch(/\(identical to a 1\.0\.0 LICENSE above\)/)
+  })
+  it('names Loop Studio as all-rights-reserved and never as open source', () => {
+    const t = renderNotices([entry()])
+    expect(t).toMatch(/Copyright © 2026 Hanrim\. All rights reserved\./)
+    expect(t).toMatch(/Third-party open-source licenses/)
+    expect(t).not.toMatch(/Loop Studio is open[- ]source/i)
+  })
+  it('survives the HTML <template> round trip of the portable build', () => {
+    const t = renderNotices([entry({ copyright: ['Copyright <a@b.c> & co'] })])
+    expect(unescapeHtml(escapeHtml(t))).toBe(t)
+    expect(escapeHtml(t)).not.toMatch(/<a@b/)
+  })
+  it('normalising is idempotent', () => {
+    expect(normaliseText(normaliseText('a\r\nb  \n\n'))).toBe('a\nb\n')
+  })
+  it('a component whose licence file also carries bundled licences says so, and each file says what it covers', () => {
+    const e = entry({ licenceSummary: 'MIT + bundled third-party notices', licenceFiles: [{ file: 'LICENSE', sha256: sha256(MIT), text: MIT, covers: 'its own MIT license' }, { file: 'THIRD-PARTY-LICENSE', sha256: sha256('x\n'), text: 'x\n', covers: 'the code it bundles' }] })
+    const t = renderNotices([e])
+    expect(t).toMatch(/^License: MIT \+ bundled third-party notices$/m)
+    expect(t).toMatch(/^--- THIRD-PARTY-LICENSE \(the code it bundles\) ---$/m)
+    expect(manifestSection([e], t).entries[0]).toMatchObject({ spdx: 'MIT', licenceSummary: 'MIT + bundled third-party notices', licenceFiles: [{ file: 'LICENSE', covers: 'its own MIT license' }, { file: 'THIRD-PARTY-LICENSE', covers: 'the code it bundles' }] })
+    expect(checkEntries([e])).toEqual([])
+    // the summary must start from the judged SPDX licence, never replace it
+    expect(checkEntries([{ ...e, licenceSummary: 'Apache-2.0 + more' }]).join()).toMatch(/must read 'MIT \+ \.\.\.'/)
+    expect(checkEntries([{ ...e, licenceSummary: 'MIT' }]).join()).toMatch(/must read/)
+    const section = manifestSection([e], t)
+    expect(diffSection(section, manifestSection([{ ...e, licenceSummary: undefined }], renderNotices([{ ...e, licenceSummary: undefined }]))).join()).toMatch(/licenceSummary/)
+  })
+})
+
+// The portable build carries the notices as text in an HTML <template>. The
+// HTML tokenizer leaves its data state only at a '<', so text holding no '<'
+// cannot close the template, open a <script> or add any element; the browser
+// half of this proof (DOMParser and a real page) is in
+// e2e/portable-file.spec.ts.
+describe('the portable <template>', () => {
+  const HOSTILE = [
+    'MIT License',
+    '</template><script>window.__pwned = 1</script>',
+    '<img src=x onerror="window.__pwned = 2"><!-- a comment --><![CDATA[ x ]]>',
+    '</body></html><template id="third-party-notices">a second one',
+    '&lt;already escaped&gt; &amp; &copy; &#60;script&#62; &',
+    "$& $' $` $1 $$",
+    '',
+  ].join('\n')
+  const page = '<!doctype html><html><head></head><body><div id="root"></div><script>/* "</body>" inside a script */</script></body></html>'
+
+  it('holds no raw < and exactly one </template>, whatever the licence text says', () => {
+    const el = portableTemplate(HOSTILE)
+    const inner = el.slice(el.indexOf('>') + 1, el.lastIndexOf('</template>'))
+    expect(inner.includes('<')).toBe(false)
+    expect(inner.includes('>')).toBe(false)
+    expect(el.split('</template>').length - 1).toBe(1)
+    expect(el.split('<').length - 1).toBe(2) // the opening and the closing tag, nothing else
+    expect(/&(?!(amp|lt|gt);)/.test(inner)).toBe(false)
+  })
+  it('reads back the exact text', () => {
+    const html = injectPortableTemplate(page, HOSTILE)
+    expect(readPortableTemplate(html)).toBe(HOSTILE)
+    expect(unescapeHtml(escapeHtml('&amp;lt;'))).toBe('&amp;lt;')
+  })
+  it('goes before the last </body>, keeps $-sequences literal and changes nothing else', () => {
+    const html = injectPortableTemplate(page, HOSTILE)
+    const at = page.lastIndexOf('</body>')
+    expect(html.startsWith(page.slice(0, at))).toBe(true)
+    expect(html.endsWith(`\n${page.slice(at)}`)).toBe(true)
+    expect(html.slice(at, html.length - page.length + at - 1)).toBe(portableTemplate(HOSTILE))
+  })
+  it('refuses U+0000 and CR, which an HTML parser would drop or rewrite', () => {
+    expect(() => portableTemplate('a\u0000b')).toThrow(/U\+0000/)
+    expect(() => portableTemplate('a\rb')).toThrow(/U\+000D/)
+  })
+  it('refuses a page without </body> or with the template already in it', () => {
+    expect(() => injectPortableTemplate('<html></html>', 'x')).toThrow(/no <\/body>/)
+    expect(() => injectPortableTemplate(injectPortableTemplate(page, 'x'), 'x')).toThrow(/already/)
+  })
+  it('reading fails closed on a template that was not written by portableTemplate', () => {
+    const wrap = (inner) => `<body><template id="third-party-notices">${inner}</template></body>`
+    expect(() => readPortableTemplate('<body></body>')).toThrow(/found 0/)
+    expect(() => readPortableTemplate(wrap('a') + wrap('b'))).toThrow(/found 2/)
+    expect(() => readPortableTemplate(wrap('a <b>bold</b>'))).toThrow(/raw '<'/)
+    expect(() => readPortableTemplate(wrap('&copy; 2020'))).toThrow(/'&'/)
+    expect(() => readPortableTemplate(wrap('a &amp b'))).toThrow(/'&'/)
+    expect(() => readPortableTemplate(wrap('a\rb'))).toThrow(/U\+0000 or CR/)
+    expect(() => readPortableTemplate(wrap('a\u0000b'))).toThrow(/U\+0000 or CR/)
+    expect(() => readPortableTemplate('<body><template id="third-party-notices">a')).toThrow(/not closed/)
+  })
+})
+
+describe('the committed manifest', () => {
+  const ROOT = path.resolve(import.meta.dirname, '..')
+  const text = fs.readFileSync(path.join(ROOT, 'licenses', 'third-party-manifest.json'), 'utf8')
+  const manifest = JSON.parse(text)
+  const find = (build, name) => manifest.builds[build].entries.find((e) => e.name === name)
+
+  it('holds no local absolute path', () => {
+    expect(text.match(LOCAL_PATH)).toBeNull()
+    expect(LOCAL_PATH.test('"D:\\work\\x"')).toBe(true)
+    expect(LOCAL_PATH.test(' /Users/someone/x')).toBe(true)
+    expect(LOCAL_PATH.test(' /home/runner/work')).toBe(true)
+    expect(LOCAL_PATH.test('https://github.com/vitejs/vite')).toBe(false)
+  })
+  it('pins the same notices bytes for the web and portable builds', () => {
+    expect(manifest.builds.portable.noticesSha256).toBe(manifest.builds.web.noticesSha256)
+  })
+  it.each([['web'], ['pwa'], ['portable']])('%s: Vite is MIT + bundled third-party notices, Rolldown pins its own licence and THIRD-PARTY-LICENSE separately', (build) => {
+    const vite = find(build, 'vite')
+    expect(vite).toMatchObject({ spdx: 'MIT', licenceSummary: 'MIT + bundled third-party notices' })
+    expect(vite.licenceFiles.map((f) => f.file)).toEqual(['LICENSE.md'])
+    const rolldown = find(build, 'rolldown')
+    expect(rolldown).toMatchObject({ spdx: 'MIT', licenceSummary: 'MIT + bundled third-party notices' })
+    expect(rolldown.licenceFiles.map((f) => f.file)).toEqual(['LICENSE', 'THIRD-PARTY-LICENSE'])
+    expect(rolldown.licenceFiles[0].sha256).not.toBe(rolldown.licenceFiles[1].sha256)
+    for (const f of [...vite.licenceFiles, ...rolldown.licenceFiles]) expect(f.covers).toMatch(/\S/)
+  })
+})
diff --git a/scripts/third-party-notices/core.d.mts b/scripts/third-party-notices/core.d.mts
new file mode 100644
index 00000000..75f23bfe
--- /dev/null
+++ b/scripts/third-party-notices/core.d.mts
@@ -0,0 +1,10 @@
+// Types for the parts of `core.mjs` that TypeScript code imports (the e2e
+// specs). The rest of the module is used from plain .mjs only.
+
+/** SHA-256 of a string's UTF-8 bytes, as hex */
+export declare const sha256: (text: string) => string
+/** the id of the portable build's `<template>` holding the notices */
+export declare const PORTABLE_TEMPLATE_ID: string
+export declare const NOTICES_FILE: string
+/** the `<template>` element holding the notices text, escaped; throws on U+0000 or CR */
+export declare function portableTemplate(text: string): string
diff --git a/scripts/third-party-notices/core.mjs b/scripts/third-party-notices/core.mjs
new file mode 100644
index 00000000..54bc8a34
--- /dev/null
+++ b/scripts/third-party-notices/core.mjs
@@ -0,0 +1,265 @@
+// Issue #301 - the third-party notices: pure functions, tested in
+// `scripts/third-party-notices.test.mjs` on made-up packages. The Vite plugin
+// (`vite-plugin.mjs`) gathers the facts from a real build and calls these.
+//
+// What a notice entry is: one shipped package at one version, with its SPDX
+// expression, the full text of every licence file (and NOTICE file) it ships
+// with, and its copyright lines. Nothing is fetched: everything is read from
+// `node_modules` and the repository, so the same commit gives the same bytes.
+import crypto from 'node:crypto'
+import fs from 'node:fs'
+import path from 'node:path'
+
+/** licences a package may have without a person reviewing it */
+export const ALLOWED = ['MIT', 'ISC', 'BSD-3-Clause', 'OFL-1.1']
+/** licences that are allowed only for an entry the registry marks as reviewed */
+export const REVIEW_REQUIRED = ['Apache-2.0']
+/** never allowed automatically, whatever the registry says */
+export const DENIED = /(^|[^A-Z])(A?GPL|LGPL|SSPL|BUSL|EUPL|CC-BY-NC|CC-BY-SA)/i
+
+const LICENCE_FILE = /^(licen[cs]e|copying)(\.[a-z0-9]+|[-_].*)?$/i
+const NOTICE_FILE = /^notice(\.[a-z0-9]+)?$/i
+
+export const sha256 = (text) => crypto.createHash('sha256').update(text, 'utf8').digest('hex')
+/** CRLF and CR become LF; trailing whitespace at the end goes; one final LF */
+export const normaliseText = (text) => text.replace(/\r\n?/g, '\n').replace(/\s+$/, '') + '\n'
+
+/**
+ * An SPDX expression, as far as the notices need it: one identifier, or one
+ * level of `A OR B` / `A AND B`. Anything else - missing, UNKNOWN, "SEE LICENSE
+ * IN", nested or mixed operators - is `null`, and the caller fails.
+ */
+export function parseSpdx(expr) {
+  if (typeof expr !== 'string') return null
+  const e = expr.trim().replace(/^\((.*)\)$/, '$1').trim()
+  if (!e || /^(unknown|unlicensed|none)$/i.test(e) || /^see licen[cs]e/i.test(e)) return null
+  const ID = /^[A-Za-z0-9.+-]+$/
+  if (ID.test(e)) return { op: null, ids: [e] }
+  for (const op of ['OR', 'AND']) {
+    const parts = e.split(new RegExp(`\\s+${op}\\s+`))
+    if (parts.length > 1 && parts.every((p) => ID.test(p.trim()))) return { op, ids: parts.map((p) => p.trim()) }
+  }
+  return null
+}
+
+/**
+ * Is this entry's licence acceptable? `entry.spdx` is the package's expression;
+ * `review` is what the registry says about it: `{ reviewed: true }` for a
+ * licence that needs a person, `{ choice: 'MIT' }` for an OR expression.
+ * Returns the problems; empty means acceptable.
+ */
+export function judgeLicence(entry, review = {}) {
+  const who = `${entry.name}@${entry.version}`
+  const parsed = parseSpdx(entry.spdx)
+  if (!parsed) return [`${who}: licence '${entry.spdx ?? ''}' is missing, UNKNOWN or not a supported SPDX expression`]
+  if (parsed.ids.some((id) => DENIED.test(id))) return [`${who}: ${entry.spdx} is never allowed automatically - it needs a manual review outside this check`]
+  const ok = (id) => ALLOWED.includes(id) || (REVIEW_REQUIRED.includes(id) && review.reviewed === true)
+  const why = (id) => (REVIEW_REQUIRED.includes(id) ? `${id} is allowed only for an entry the registry marks as reviewed` : `${id} is not in the allow-list (${ALLOWED.join(', ')})`)
+  if (parsed.op === 'OR') {
+    if (!review.choice) return [`${who}: '${entry.spdx}' offers a choice and the registry records none`]
+    if (!parsed.ids.includes(review.choice)) return [`${who}: the registry chooses ${review.choice}, which '${entry.spdx}' does not offer`]
+    return ok(review.choice) ? [] : [`${who}: the chosen licence ${why(review.choice)}`]
+  }
+  return parsed.ids.filter((id) => !ok(id)).map((id) => `${who}: ${why(id)}`)
+}
+
+/** copyright lines of a licence text, without the licences' own boilerplate */
+export function copyrightLines(text) {
+  const out = []
+  for (const raw of text.split('\n')) {
+    const l = raw.trim()
+    if (!/^(copyright\b|\(c\)|©)/i.test(l)) continue
+    if (/copyright (notice|holder|owner|statement|and license|license|law)/i.test(l)) continue
+    if (/\[(yyyy|year)\]|\[name of copyright owner\]|<year>|\{yyyy\}/i.test(l)) continue
+    if (/^copyright\s*$/i.test(l)) continue
+    if (!out.includes(l)) out.push(l)
+  }
+  return out
+}
+
+/**
+ * Read one package directory: name, version, SPDX, licence and NOTICE files
+ * (full text, normalised), copyright lines. `files` names the licence files
+ * explicitly when the registry says so (e.g. rolldown's THIRD-PARTY-LICENSE).
+ */
+export function readPackage(dir, { files = null } = {}) {
+  const pkg = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf8'))
+  const names = fs.readdirSync(dir).filter((f) => fs.statSync(path.join(dir, f)).isFile())
+  const pick = files ?? names.filter((f) => LICENCE_FILE.test(f)).sort()
+  const licenceFiles = pick.map((f) => {
+    if (!names.includes(f)) throw new Error(`${pkg.name}: ${f} is not in the package`)
+    const text = normaliseText(fs.readFileSync(path.join(dir, f), 'utf8'))
+    return { file: f, sha256: sha256(text), text }
+  })
+  const noticeFiles = names.filter((f) => NOTICE_FILE.test(f)).sort().map((f) => {
+    const text = normaliseText(fs.readFileSync(path.join(dir, f), 'utf8'))
+    return { file: f, sha256: sha256(text), text }
+  })
+  const spdx = typeof pkg.license === 'string' ? pkg.license : pkg.license?.type ?? null
+  return { name: pkg.name, version: pkg.version, spdx, licenceFiles, noticeFiles, copyright: licenceFiles.flatMap((l) => copyrightLines(l.text)).filter((c, i, a) => a.indexOf(c) === i) }
+}
+
+/** the package directory a module id belongs to (the innermost node_modules), or null */
+export function packageDirOf(id) {
+  const p = id.split('?')[0].split(path.sep).join('/')
+  const i = p.lastIndexOf('/node_modules/')
+  if (i < 0) return null
+  const rest = p.slice(i + '/node_modules/'.length).split('/')
+  const name = rest[0].startsWith('@') ? rest.slice(0, 2).join('/') : rest[0]
+  return p.slice(0, i + '/node_modules/'.length) + name
+}
+
+/** every problem with a set of entries: licence, licence text, copyright */
+export function checkEntries(entries, reviews = {}) {
+  const problems = []
+  for (const e of entries) {
+    const who = `${e.name}@${e.version}`
+    problems.push(...judgeLicence(e, reviews[e.name] ?? {}))
+    if (!e.licenceFiles.length) problems.push(`${who}: no licence file - the full licence text is required`)
+    if (!e.copyright.length) problems.push(`${who}: no copyright line found and none recorded in the registry`)
+    if (e.provenance === 'unresolved') problems.push(`${who}: provenance is marked unresolved`)
+    if (e.licenceSummary !== undefined && !(typeof e.licenceSummary === 'string' && e.licenceSummary.startsWith(`${e.spdx} + `))) problems.push(`${who}: the licence summary '${e.licenceSummary}' must read '${e.spdx} + ...'`)
+  }
+  return problems
+}
+
+/** the manifest record of one build: what the check compares, no full texts */
+export function manifestSection(entries, noticesText) {
+  return {
+    entries: entries.map((e) => ({
+      name: e.name,
+      version: e.version,
+      spdx: e.spdx,
+      ...(e.licenceSummary !== undefined ? { licenceSummary: e.licenceSummary } : {}),
+      source: e.source,
+      licenceFiles: e.licenceFiles.map((l) => ({ file: l.file, sha256: l.sha256, ...(l.covers !== undefined ? { covers: l.covers } : {}) })),
+      noticeFiles: e.noticeFiles.map((l) => ({ file: l.file, sha256: l.sha256 })),
+      copyright: e.copyright,
+    })),
+    noticesSha256: sha256(noticesText),
+  }
+}
+
+/** human-readable differences between the committed section and this build's */
+export function diffSection(expected, actual) {
+  if (!expected) return ['this build has no section in the manifest']
+  const out = []
+  const key = (e) => `${e.name}@${e.version}`
+  const exp = new Map(expected.entries.map((e) => [key(e), e]))
+  const act = new Map(actual.entries.map((e) => [key(e), e]))
+  for (const k of act.keys()) if (!exp.has(k)) out.push(`+ ${k} is shipped but not in the manifest`)
+  for (const k of exp.keys()) if (!act.has(k)) out.push(`- ${k} is in the manifest but not shipped`)
+  for (const [k, a] of act) {
+    const e = exp.get(k)
+    if (!e) continue
+    for (const f of ['spdx', 'licenceSummary', 'source']) if (e[f] !== a[f]) out.push(`~ ${k}: ${f} ${JSON.stringify(e[f])} -> ${JSON.stringify(a[f])}`)
+    if (JSON.stringify(e.licenceFiles) !== JSON.stringify(a.licenceFiles)) out.push(`~ ${k}: licence files or their SHA-256 changed`)
+    if (JSON.stringify(e.noticeFiles) !== JSON.stringify(a.noticeFiles)) out.push(`~ ${k}: NOTICE files changed (${e.noticeFiles.length} -> ${a.noticeFiles.length})`)
+    if (JSON.stringify(e.copyright) !== JSON.stringify(a.copyright)) out.push(`~ ${k}: copyright lines changed`)
+  }
+  if (!out.length && expected.noticesSha256 !== actual.noticesSha256) out.push(`~ the notices text changed (SHA-256 ${expected.noticesSha256.slice(0, 12)} -> ${actual.noticesSha256.slice(0, 12)})`)
+  return out
+}
+
+export const NOTICES_HEADER = [
+  'Loop Studio',
+  'Copyright © 2026 Hanrim. All rights reserved.',
+  '',
+  'Third-party open-source licenses',
+  '',
+  'Loop Studio includes the third-party software listed below. Each component',
+  'is provided under its own license, which is reproduced in full. A license',
+  'text that several components share is printed once, at its first use.',
+].join('\n')
+
+/**
+ * What the notices say on an entry's `License:` line: its SPDX licence, or
+ * the registry's summary for a component whose licence file also carries the
+ * licences of code it bundles ("MIT + bundled third-party notices").
+ */
+export const licenceLine = (e) => e.licenceSummary ?? e.spdx
+
+/** the THIRD_PARTY_NOTICES.txt text: sorted, LF, each distinct text once */
+export function renderNotices(entries) {
+  const sorted = [...entries].sort((a, b) => (a.name === b.name ? (a.version < b.version ? -1 : 1) : a.name < b.name ? -1 : 1))
+  const printed = new Map()
+  const blocks = [NOTICES_HEADER, '', `${sorted.length} components:`, ...sorted.map((e) => `  - ${e.name} ${e.version} (${licenceLine(e)})`)]
+  for (const e of sorted) {
+    blocks.push('', '='.repeat(78), `${e.name} ${e.version}`, `License: ${licenceLine(e)}`, `Included as: ${e.source}`)
+    for (const c of e.copyright) blocks.push(c)
+    for (const f of [...e.licenceFiles, ...e.noticeFiles]) {
+      blocks.push('', `--- ${f.file}${f.covers ? ` (${f.covers})` : ''} ---`)
+      if (printed.has(f.sha256)) blocks.push(`(identical to ${printed.get(f.sha256)} above)`)
+      else {
+        printed.set(f.sha256, `${e.name} ${e.version} ${f.file}`)
+        blocks.push(f.text.replace(/\n$/, ''))
+      }
+    }
+  }
+  return normaliseText(blocks.join('\n'))
+}
+
+// The portable build carries the notices as TEXT inside an HTML <template>.
+// The contract, for this build step and for any screen that shows the notices
+// (#301's licence screen included):
+//   - writing: `&`, `<` and `>` become `&amp;`, `&lt;` and `&gt;`. The escaped
+//     text then holds no `<`, and an HTML tokenizer only leaves its data state
+//     at a `<`: whatever a licence text says, it cannot close the template,
+//     open a <script> or add any other element;
+//   - the text holds no U+0000 and no CR, the two characters an HTML parser
+//     drops or rewrites in text, so the DOM gives back the exact bytes of
+//     THIRD_PARTY_NOTICES.txt;
+//   - reading: `template.content.textContent` (a <template>'s children live in
+//     its `content` fragment), shown as text - a React text child or
+//     `textContent` - and NEVER through `innerHTML` or
+//     `dangerouslySetInnerHTML`. Licence texts are third-party input; they are
+//     never rendered as HTML.
+export const PORTABLE_TEMPLATE_ID = 'third-party-notices'
+export const NOTICES_FILE = 'THIRD_PARTY_NOTICES.txt'
+export const escapeHtml = (t) => t.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+/** the inverse of `escapeHtml` only: one pass, so `&amp;lt;` stays `&lt;` */
+export const unescapeHtml = (t) => t.replace(/&(amp|lt|gt);/g, (_m, n) => ({ amp: '&', lt: '<', gt: '>' })[n])
+
+/** the portable build's `<template>` element holding the notices text */
+export function portableTemplate(text) {
+  const found = [text.indexOf('\u0000'), text.indexOf('\r')].filter((i) => i >= 0)
+  const bad = found.length ? Math.min(...found) : -1
+  if (bad >= 0) throw new Error(`the notices text holds U+${text.charCodeAt(bad).toString(16).toUpperCase().padStart(4, '0')} at index ${bad}, which an HTML parser would drop or rewrite`)
+  return `<template id="${PORTABLE_TEMPLATE_ID}">${escapeHtml(text)}</template>`
+}
+
+/**
+ * The portable HTML with the notices template added before its closing
+ * `</body>` - the LAST one, since the inlined scripts before it may hold the
+ * same characters. Slicing, not `String.replace`, so `$&` or `$'` in a licence
+ * text stay literal.
+ */
+export function injectPortableTemplate(html, text) {
+  const at = html.lastIndexOf('</body>')
+  if (at < 0) throw new Error('the HTML has no </body>')
+  if (html.includes(`id="${PORTABLE_TEMPLATE_ID}"`)) throw new Error(`the HTML already has an element with id="${PORTABLE_TEMPLATE_ID}"`)
+  return `${html.slice(0, at)}${portableTemplate(text)}\n${html.slice(at)}`
+}
+
+/**
+ * The notices text back out of a portable HTML file, as a browser would give
+ * it. Throws unless there is exactly one such template and its content is
+ * what `portableTemplate` writes: no raw `<`, no `&` other than the three
+ * escapes, no U+0000 or CR.
+ */
+export function readPortableTemplate(html) {
+  const open = `<template id="${PORTABLE_TEMPLATE_ID}">`
+  const count = html.split(open).length - 1
+  if (count !== 1) throw new Error(`expected one <template id="${PORTABLE_TEMPLATE_ID}">, found ${count}`)
+  const start = html.indexOf(open) + open.length
+  const end = html.indexOf('</template>', start)
+  if (end < 0) throw new Error(`<template id="${PORTABLE_TEMPLATE_ID}"> is not closed`)
+  const inner = html.slice(start, end)
+  if (inner.includes('<')) throw new Error(`<template id="${PORTABLE_TEMPLATE_ID}"> holds a raw '<' - the text is not escaped`)
+  if (/&(?!(amp|lt|gt);)/.test(inner)) throw new Error(`<template id="${PORTABLE_TEMPLATE_ID}"> holds an '&' that is not one of the three escapes`)
+  if (inner.includes('\u0000') || inner.includes('\r')) throw new Error(`<template id="${PORTABLE_TEMPLATE_ID}"> holds U+0000 or CR`)
+  return unescapeHtml(inner)
+}
+
+/** an absolute path of the machine that built it: never in the manifest or the notices */
+export const LOCAL_PATH = /(^|[\s"'(=:,])([A-Za-z]:[\\/]|\\\\[A-Za-z0-9]|\/(Users|home|root|tmp|private|mnt|opt|var\/folders|runner|github\/workspace)\/)/
diff --git a/scripts/third-party-notices/update.mjs b/scripts/third-party-notices/update.mjs
new file mode 100644
index 00000000..9ff31b78
--- /dev/null
+++ b/scripts/third-party-notices/update.mjs
@@ -0,0 +1,22 @@
+// Issue #301 — `npm run licenses:update`: rewrite licenses/third-party-manifest.json
+// from three real builds (web, portable, PWA), offline. Review the diff before
+// committing it: every line of it is a change in what Loop Studio ships.
+// Each build writes its own section; the builds go to a scratch folder under
+// node_modules/.tmp so the normal dist folders are left alone.
+import { spawnSync } from 'node:child_process'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..')
+const vite = path.join(ROOT, 'node_modules', 'vite', 'bin', 'vite.js')
+const scratch = path.join(ROOT, 'node_modules', '.tmp', 'third-party-notices')
+const env = { ...process.env, THIRD_PARTY_NOTICES_UPDATE: '1' }
+delete env.CF_PAGES_BRANCH // the plain web build must not turn into the PWA one
+for (const [flavour, mode] of [['web', 'production'], ['portable', 'portable'], ['pwa', 'pwa']]) {
+  const r = spawnSync(process.execPath, [vite, 'build', '--mode', mode, '--outDir', path.join(scratch, flavour), '--emptyOutDir'], { cwd: ROOT, env, stdio: 'inherit' })
+  if (r.status !== 0) {
+    console.error(`\nlicenses:update - the ${flavour} build failed; the manifest may be partly updated. Fix the problem above and run it again.`)
+    process.exit(r.status ?? 1)
+  }
+}
+console.log('\nlicenses/third-party-manifest.json is up to date. Review `git diff licenses/` before committing.')
diff --git a/scripts/third-party-notices/vite-plugin.d.mts b/scripts/third-party-notices/vite-plugin.d.mts
new file mode 100644
index 00000000..9d1781c3
--- /dev/null
+++ b/scripts/third-party-notices/vite-plugin.d.mts
@@ -0,0 +1,7 @@
+import type { Plugin } from 'vite'
+
+/** where Vite's own `build.license` JSON is written before this plugin reads and removes it */
+export declare const VITE_LICENSE_JSON: string
+
+/** Issue #301 - writes THIRD_PARTY_NOTICES for one build flavour and fails the build on a manifest mismatch. */
+export declare function thirdPartyNotices(options: { flavour: 'web' | 'pwa' | 'portable'; root?: string }): Plugin
diff --git a/scripts/third-party-notices/vite-plugin.mjs b/scripts/third-party-notices/vite-plugin.mjs
new file mode 100644
index 00000000..c3573107
--- /dev/null
+++ b/scripts/third-party-notices/vite-plugin.mjs
@@ -0,0 +1,176 @@
+// Issue #301 - the build step that writes THIRD_PARTY_NOTICES for one build
+// flavour ('web', 'pwa' or 'portable') and fails the build when what is shipped
+// differs from licenses/third-party-manifest.json.
+//
+// Where each fact comes from:
+//   - packages: every chunk's module ids, read in `renderChunk` (before the
+//     portable build's single-file inlining removes the chunks); a module in a
+//     package directory names that package
+//   - Vite's own `build.license` JSON, read and cross-checked, then removed from
+//     the output so it is not deployed (it misses font files referenced from CSS
+//     and is empty in the single-file build)
+//   - fonts: `@fontsource/<name>` referenced from a CSS module's text (comments
+//     stripped); in web / PWA also the emitted font files' original paths
+//   - build-tool runtime: the virtual modules `\0vite/...` and `\0rolldown/...`
+//     (licenses/registry.json `runtime`)
+//   - the PWA service worker, which Workbox builds outside this graph: the
+//     registry's `serviceWorker` list; `scripts/check-third-party-notices.mjs`
+//     proves after the build that each one really is in sw.js / workbox-*.js
+//
+// THIRD_PARTY_NOTICES_UPDATE=1 writes this flavour's section of the manifest
+// instead of comparing (`npm run licenses:update` runs all three builds).
+import fs from 'node:fs'
+import path from 'node:path'
+import {
+  LOCAL_PATH,
+  NOTICES_FILE,
+  checkEntries,
+  diffSection,
+  injectPortableTemplate,
+  manifestSection,
+  packageDirOf,
+  readPackage,
+  renderNotices,
+} from './core.mjs'
+
+export const VITE_LICENSE_JSON = '.vite/third-party-licenses.json'
+
+export function thirdPartyNotices({ flavour, root = process.cwd() }) {
+  const manifestPath = path.join(root, 'licenses', 'third-party-manifest.json')
+  const registry = JSON.parse(fs.readFileSync(path.join(root, 'licenses', 'registry.json'), 'utf8'))
+  const update = process.env.THIRD_PARTY_NOTICES_UPDATE === '1'
+  const packageDirs = new Set()
+  const virtualModules = new Set()
+  const fontPackages = new Set()
+  const nm = (name) => path.join(root, 'node_modules', ...name.split('/'))
+
+  return {
+    name: 'loop-studio:third-party-notices',
+    enforce: 'post',
+    apply: 'build',
+    buildStart() {
+      packageDirs.clear()
+      virtualModules.clear()
+      fontPackages.clear()
+    },
+    transform: {
+      // 'pre': see the CSS as written, before Vite turns it into a JS module
+      // and rewrites its url()s
+      order: 'pre',
+      handler(code, id) {
+        const file = id.split('?')[0].split(path.sep).join('/')
+        if (!file.endsWith('.css') || file.includes('/node_modules/')) return null
+        const text = code.replace(/\/\*[\s\S]*?\*\//g, '')
+        for (const m of text.matchAll(/@fontsource\/[a-z0-9-]+/g)) fontPackages.add(m[0])
+        return null
+      },
+    },
+    renderChunk(_code, chunk) {
+      for (const id of chunk.moduleIds) {
+        if (id.startsWith('\0')) virtualModules.add(id.slice(1))
+        else {
+          const dir = packageDirOf(id)
+          if (dir) packageDirs.add(dir)
+        }
+      }
+      return null
+    },
+    generateBundle: {
+      order: 'post',
+      handler(_opts, bundle) {
+        const problems = []
+        // ---- Vite's own list: evidence, then out of the deploy
+        const viteJson = bundle[VITE_LICENSE_JSON]
+        let viteNames = null
+        if (viteJson && viteJson.type === 'asset') {
+          viteNames = JSON.parse(String(viteJson.source)).map((e) => `${e.name}@${e.version}`)
+          delete bundle[VITE_LICENSE_JSON]
+        } else if (flavour !== 'portable') problems.push(`Vite's build.license output (${VITE_LICENSE_JSON}) is missing`)
+
+        // ---- fonts from emitted files (web / PWA)
+        for (const f of Object.values(bundle)) {
+          if (f.type !== 'asset' || !/\.(woff2?|ttf|otf)$/.test(f.fileName)) continue
+          for (const o of f.originalFileNames ?? []) {
+            const dir = packageDirOf(o.startsWith('/') || /^[A-Za-z]:/.test(o) ? o : path.join(root, o))
+            // a font package reaches the build in one of two ways: our CSS names
+            // its files in url(), or the package's own CSS module is imported
+            if (!dir) problems.push(`${f.fileName}: a font file that does not come from a package (${o})`)
+            else if (!fontPackages.has(dir.slice(dir.lastIndexOf('/node_modules/') + 14)) && !packageDirs.has(dir)) problems.push(`${f.fileName}: comes from ${dir}, which neither a CSS module of ours names nor the module graph contains`)
+          }
+        }
+
+        // ---- the entries
+        const entries = []
+        const add = (dir, extra = {}) => {
+          // registry `files`: [{ file, covers }] - each licence file pinned as
+          // its own input, with what it covers (e.g. Rolldown's own MIT
+          // licence and its THIRD-PARTY-LICENSE)
+          const p = readPackage(dir, { files: extra.files?.map((f) => f.file) ?? null })
+          if (entries.some((e) => e.name === p.name && e.version === p.version)) return
+          const source = extra.source ?? (p.name.startsWith('@fontsource/') ? 'font files' : 'bundled code')
+          const licenceFiles = p.licenceFiles.map((l) => ({ ...l, ...(extra.files ? { covers: extra.files.find((f) => f.file === l.file).covers } : {}) }))
+          entries.push({ ...p, licenceFiles, source, copyright: extra.copyright ?? p.copyright, ...(extra.licenceSummary !== undefined ? { licenceSummary: extra.licenceSummary } : {}) })
+        }
+        // fonts first: a font package can also reach the graph through its CSS
+        // module, and the first entry decides how it is described
+        for (const name of [...fontPackages].sort()) add(nm(name), { source: 'font files' })
+        for (const dir of [...packageDirs].sort()) add(dir)
+        for (const r of registry.runtime) {
+          if (!r.builds.includes(flavour)) continue
+          if (!virtualModules.has(r.evidence.virtualModule)) {
+            problems.push(`${r.name}: the registry lists it for ${flavour}, but \\0${r.evidence.virtualModule} is not in the bundle`)
+            continue
+          }
+          add(nm(r.name), { files: r.files, source: r.source, licenceSummary: r.licenceSummary })
+        }
+        for (const v of virtualModules) {
+          const known = registry.runtime.some((r) => r.evidence.virtualModule === v)
+          if (!known && /^(vite|rolldown)\//.test(v) && v !== 'vite/modulepreload-polyfill.js') problems.push(`\\0${v}: a build-tool virtual module the registry does not cover`)
+        }
+        if (flavour === 'pwa') for (const s of registry.serviceWorker) add(nm(s.name), { source: s.source, copyright: s.copyright })
+
+        // ---- Vite's list must be inside ours
+        if (viteNames) {
+          const ours = new Set(entries.map((e) => `${e.name}@${e.version}`))
+          for (const n of viteNames) if (!ours.has(n)) problems.push(`${n}: in Vite's build.license output but not found by this plugin`)
+        }
+
+        problems.push(...checkEntries(entries, registry.reviews ?? {}))
+        entries.sort((a, b) => (a.name === b.name ? (a.version < b.version ? -1 : 1) : a.name < b.name ? -1 : 1))
+        const text = renderNotices(entries)
+        const section = manifestSection(entries, text)
+        if (LOCAL_PATH.test(text)) problems.push(`the notices text holds a local absolute path: '${text.match(LOCAL_PATH)[0].trim()}'`)
+        if (LOCAL_PATH.test(JSON.stringify(section))) problems.push('the manifest section holds a local absolute path')
+
+        const manifest = fs.existsSync(manifestPath) ? JSON.parse(fs.readFileSync(manifestPath, 'utf8')) : { builds: {} }
+        // the bundler shows only the first line of an error: print the whole list
+        const fail = (head) => {
+          console.error(`\n${head}\n  ${problems.join('\n  ')}\n`)
+          this.error(`${head} (${problems.length} problem(s), listed above)`)
+        }
+        if (update) {
+          if (problems.length) fail(`third-party notices (${flavour}): not updating the manifest`)
+          manifest.builds[flavour] = section
+          const ordered = { _about: 'Generated by `npm run licenses:update`; checked by every build. See licenses/README.md.', builds: Object.fromEntries(Object.keys(manifest.builds).sort().map((k) => [k, manifest.builds[k]])) }
+          fs.writeFileSync(manifestPath, JSON.stringify(ordered, null, 2) + '\n')
+        } else {
+          problems.push(...diffSection(manifest.builds?.[flavour], section).map((d) => `manifest: ${d}`))
+          if (problems.length) fail(`third-party notices (${flavour}) do not match licenses/third-party-manifest.json - run \`npm run licenses:update\` and review the diff`)
+        }
+
+        // ---- the notices themselves
+        if (flavour === 'portable') {
+          const html = Object.values(bundle).filter((f) => f.type === 'asset' && f.fileName.endsWith('.html'))
+          if (html.length !== 1) this.error(`third-party notices (portable): expected one HTML file, found ${html.length}`)
+          try {
+            html[0].source = injectPortableTemplate(String(html[0].source), text)
+          } catch (err) {
+            this.error(`third-party notices (portable): ${err.message}`)
+          }
+        } else {
+          this.emitFile({ type: 'asset', fileName: NOTICES_FILE, source: text })
+        }
+      },
+    },
+  }
+}
diff --git a/vite.config.ts b/vite.config.ts
index f90337de..053f5cab 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -8,6 +8,7 @@ import { configDefaults, defineConfig } from 'vitest/config'
 import { viteSingleFile } from 'vite-plugin-singlefile'
 import { manifest } from './src/pwa/manifest.ts'
 import { LOCALE_CHUNK_RE } from './scripts/locale-chunk.mjs'
+import { VITE_LICENSE_JSON, thirdPartyNotices } from './scripts/third-party-notices/vite-plugin.mjs'
 
 // docs/localization.md §L4.5 — each non-`en` UI catalog and template-label dict
 // is its own chunk (`assets/locale-<code>-<hash>.js` /
@@ -108,6 +109,10 @@ export default defineConfig(({ mode }) => {
       themeBoot(portable),
       react(),
       ...(portable ? [viteSingleFile(), renameHtml('loop-studio.html')] : []),
+      // Issue #301 — THIRD_PARTY_NOTICES.txt (web / PWA) or the notices inside
+      // the single HTML file (portable), checked against
+      // licenses/third-party-manifest.json; a mismatch fails the build.
+      thirdPartyNotices({ flavour: portable ? 'portable' : pwa ? 'pwa' : 'web', root: import.meta.dirname }),
       // Emits `sw.js` (Workbox generateSW) + `manifest.webmanifest` and injects
       // `<link rel="manifest">`. `injectRegister: false` — we call
       // `navigator.serviceWorker.register` ourselves, dual-gated (§P7). The SW
@@ -127,6 +132,8 @@ export default defineConfig(({ mode }) => {
                   'assets/*.{woff,woff2}', // the CSS @font-face lists both — precache both
                   'manifest.webmanifest',
                   'icons/*.png',
+                  // issue #301 — the notices open offline too
+                  'THIRD_PARTY_NOTICES.txt',
                 ],
                 // docs/localization.md §L4.5 / docs/pwa.md §P8 — the per-locale
                 // catalog + template-label chunks are NOT precached; they are
@@ -165,6 +172,9 @@ export default defineConfig(({ mode }) => {
     build: portable
       ? { outDir: 'dist-portable', emptyOutDir: true } // viteSingleFile inlines everything — no manual chunks
       : {
+          // issue #301 — Vite's own list of bundled packages: read by the
+          // third-party-notices plugin as evidence, then removed from the output
+          license: { fileName: VITE_LICENSE_JSON },
           // docs/localization.md §L4.5 — split each non-`en` UI catalog and
           // template-label dict into its own stably-named chunk.
           rollupOptions: {