# Leylana Third-Party Notices

Leylana includes or distributes the third-party software and model assets
listed below. The application does not relicense these components. Their
copyright and license terms remain with their respective authors.

This notice covers the Windows preview installer payload. The exact installed
package versions are recorded by each Python distribution's `METADATA` file.
License texts shipped by Python distributions remain in their corresponding
`.dist-info\licenses` directories under the installed runtime trees.

### What the installer actually ships

The installer payload has two trees:

- `app\` — the application, the embedded Blender Python runtime under
  `tools\blender-5.2.2-windows-x64\`, and the Kerbal Space Program client
  packages under `tools\ksp-python\`.
- `user-runtime\` — the Kokoro voice runtime, the Whisper speech-recognition
  runtime, their Python dependencies, and their model weights, installed
  into the user's local application data directory.

Both trees are redistributed by the installer. Every Python distribution in
either tree keeps its own `METADATA` and license files.

## Python runtimes and packages

### Kokoro voice runtime

- `kokoro-onnx` 0.6.1 — MIT License  
  https://github.com/thewh1teagle/kokoro-onnx
- `onnxruntime` 1.30.0 — MIT License  
  https://onnxruntime.ai
- `soundfile` 0.14.0 — BSD 3-Clause License  
  https://github.com/bastibe/python-soundfile
- `phonemizer` 3.4.0 — **GNU General Public License v3.0 or later**.
  License text:
  `user-runtime\kokoro\site-packages\phonemizer-3.4.0.dist-info\licenses\LICENSE`.
  Leylana calls phonemizer as a separate component through its published
  interface and does not incorporate its code. Corresponding source for this
  exact version is available from the upstream project.  
  https://github.com/bootphon/phonemizer
- `espeakng-loader` 0.2.4 — the Python wrapper itself is MIT, but the
  distribution bundles the **eSpeak NG** shared library
  (`espeakng_loader\espeak-ng.dll`) and its `espeak-ng-data` dictionary
  files. eSpeak NG is licensed under the **GNU General Public License v3.0
  or later**. The complete GPL-3.0 text is installed as
  `licenses\blender-runtime\spdx\GPL-3.0-or-later.txt`. Corresponding source
  for eSpeak NG is available from the upstream project.  
  https://github.com/espeak-ng/espeak-ng  
  https://github.com/thewh1teagle/espeakng-loader
- NumPy and its bundled components — BSD-3-Clause, 0BSD, MIT, Zlib,
  and CC0-1.0 components. See NumPy's installed license files. The voice and
  Whisper runtimes ship NumPy 2.5.3; the embedded Blender runtime ships
  NumPy 2.3.4.  
  https://numpy.org
- Other packages shipped in `user-runtime\kokoro\site-packages\`, all
  permissively licensed, retaining their own license files: `attrs` (MIT),
  `cffi` (MIT-0), `cloudpickle` (BSD-3-Clause), `colorama` (BSD),
  `dlinfo` (MIT), `flatbuffers` (Apache-2.0), `joblib` (BSD-3-Clause),
  `packaging` (Apache-2.0 OR BSD-2-Clause), `protobuf` (BSD-3-Clause),
  `pycparser` (BSD-3-Clause), `typing_extensions` (PSF-2.0).

The Kokoro model card and Hugging Face repository metadata identify the model
weights as Apache-2.0. The upstream card was reviewed on October 11, 2026.
The complete license is installed as `licenses\Apache-2.0.txt`.

- https://huggingface.co/hexgrad/Kokoro-82M
- Upstream revision reviewed: `f3ff3571791e39611d31c381e3a41a3af07b4987`
- Upstream v1.0 model SHA-256 stated by the card:
  `496dba118d1a58f5f3db2efc88dbdc216e0483fc89fe6e47ee1f2c53f18ad1e4`
- Shipped converted ONNX SHA-256:
  `7d5df8ecf7d4b1878015a32686053fd0eebe2bc377234608764cc0ef3636a6c5`
- Shipped voice bundle SHA-256:
  `bca610b8308e8d99f32e6fe4197e7ec01679264efed0cac9140fe9c29f1fbf7d`

Leylana uses the American English `af_heart` voice. The upstream voice table
assigns it an overall A grade. The table does not identify `af_heart` as a
custom clone or associate it with a named person.

The model card states that Kokoro v1.0 was trained on permissive or
non-copyrighted audio, including public-domain, permissively licensed, and
synthetic data, and states that it did not use custom voice clones. The card
also identifies these CC BY sources:

- **Koniwa (`tnc`)**, less than one hour used — CC BY 3.0. Koniwa is an open
  collection of annotated Japanese voices.  
  https://github.com/koniwa/koniwa  
  License: `licenses\CC-BY-3.0.txt`
- **The SIWIS French Speech Synthesis Database**, less than eleven hours used —
  CC BY 4.0. Creators: Junichi Yamagishi, Pierre-Edouard Honnet, Philip Garner,
  and Alexandros Lazaridis. Published by the University of Edinburgh, School
  of Informatics, Centre for Speech Technology Research.  
  https://doi.org/10.7488/ds/1705  
  License: `licenses\CC-BY-4.0.txt`

Kokoro's training converted and combined these sources into model weights;
Leylana does not distribute the original training recordings. These
attributions do not imply endorsement by the dataset creators.

### Whisper local speech recognition

- `faster-whisper` 1.2.1 — MIT License  
  https://github.com/SYSTRAN/faster-whisper
- `ctranslate2` 4.8.2 — MIT License  
  https://github.com/OpenNMT/CTranslate2
- `av` / PyAV 18.1.0 and 19.0.1 — BSD 3-Clause License  
  https://github.com/PyAV-Org/PyAV
- `sounddevice` 0.5.6 — MIT License  
  https://github.com/spatialaudio/python-sounddevice
- SciPy 1.18.1 — BSD license  
  https://scipy.org
- NumPy 2.5.3 and its bundled components — see the Kokoro section.
- Other packages shipped in `user-runtime\whisper-packages\`, all
  permissively licensed, retaining their own license files: `anyio` (MIT),
  `click` (BSD-3-Clause), `filelock` (MIT), `fsspec` (BSD-3-Clause),
  `h11` (MIT), `hf-xet` (Apache-2.0), `httpcore2` (BSD-3-Clause),
  `httpx2` (BSD-3-Clause), `huggingface_hub` (Apache-2.0),
  `idna` (BSD-3-Clause), `PyYAML` (MIT), `truststore` (MIT), and
  `typing_extensions` (PSF-2.0).
- `tqdm` 4.70.1 — **MPL-2.0 AND MIT**. License text ships as `LICENCE` in
  its distribution directory; the complete Mozilla Public License 2.0 is
  also installed as `licenses\blender-runtime\spdx\MPL-2.0.txt`.  
  https://github.com/tqdm/tqdm

The following distributions in `user-runtime\` declare a license in their
`METADATA` but ship no license text of their own: `ctranslate2` (MIT),
`onnxruntime` 1.30.0 and 1.31.0 (MIT), `tokenizers` (Apache-2.0),
`flatbuffers` (Apache-2.0), and `espeakng-loader` (which declares no license
field at all). Reference copies of the MIT and Apache-2.0 texts are
installed as `licenses\blender-runtime\spdx\MIT.txt` and
`licenses\Apache-2.0.txt`. The eSpeak NG terms bundled inside
`espeakng-loader` are addressed in the Kokoro section above.

The Whisper Large V3 model is the OpenAI model distributed through the
SYSTRAN faster-whisper conversion:

- OpenAI Whisper — MIT License  
  https://github.com/openai/whisper/blob/main/LICENSE
- SYSTRAN conversion and model card  
  https://huggingface.co/Systran/faster-whisper-large-v3

### Kerbal Space Program integration (installed under `tools\ksp-python\`)

- `krpc` 0.6.0 — LGPL-3.0-only. License texts: `COPYING`, `COPYING.LESSER`,
  and `LICENSE` in `tools\ksp-python\krpc-0.6.0.dist-info\licenses\`.
  Corresponding source is available from the upstream project at this exact
  version.  
  https://krpc.github.io/krpc
- `protobuf` 7.36.2 — BSD 3-Clause License  
  https://developers.google.com/protocol-buffers/

KSP itself and external KSP game mods are not included in the installer.

## Blender embedded runtime

The bundled Blender Python runtime is distributed with Blender's license and
copyright notices. The installer retains those notices under:

- `licenses\blender-runtime`
- `licenses\blender-copyright.txt`

Blender project:

- https://www.blender.org/about/license/

The app-local Visual C++ runtime files copied from Blender's distribution
remain subject to their own Microsoft notices and redistribution terms.

### Python packages inside the embedded Blender runtime

Blender's bundled `site-packages` tree ships additional Python
distributions. Each keeps its own `METADATA` and license files inside its
`.dist-info` or `.egg-info` directory, which the installer preserves. The
following components carry reciprocal or weak-copyleft terms and are named
here explicitly:

- `pycdlib` 1.22.0 — **LGPL-2.1-only**. License text:
  `tools\blender-5.2.2-windows-x64\5.2\python\lib\site-packages\pycdlib-1.22.0.dist-info\licenses\COPYING`  
  https://github.com/clalancette/pycdlib
- `autocommand` 2.2.2 — **LGPL-3.0** (vendored by setuptools). License text:
  `...\site-packages\setuptools\_vendor\autocommand-2.2.2.dist-info\LICENSE`  
  https://github.com/Lucretiel/autocommand
- `certifi` 2025.4.26 — **MPL-2.0**. License text:
  `...\site-packages\certifi-2025.4.26.dist-info\licenses\LICENSE`. The
  complete Mozilla Public License 2.0 is also installed as
  `licenses\blender-runtime\spdx\MPL-2.0.txt`.  
  https://github.com/certifi/python-certifi
- `docutils` 0.22.4 — dual Public Domain / BSD-2-Clause / **GPL** components.
  License text:
  `...\site-packages\docutils-0.22.4.dist-info\licenses\COPYING.rst`  
  https://docutils.sourceforge.io

These components are used unmodified and are dynamically loaded by the
embedded CPython interpreter. Their license texts are redistributed with the
installer. Corresponding source for the LGPL and GPL components is available
from the upstream projects linked above and from the Python Package Index at
the exact versions listed.

The remaining bundled distributions are permissively licensed (MIT, BSD,
Apache-2.0, PSF-2.0) and retain their license files in place: `attrs`,
`autopep8`, `backports.tarfile`, `cattrs`, `charset-normalizer`, `Cython`,
`fastjsonschema`, `idna`, `importlib_metadata`, `inflect`,
`jaraco.collections`, `jaraco.context`, `jaraco.functools`, `jaraco.text`,
`meson`, `meson-python`, `more-itertools`, `numpy`, `packaging`, `pip`,
`platformdirs`, `pycodestyle`, `pyproject-metadata`, `requests`,
`setuptools`, `tomli`, `tomli_w`, `typeguard`, `typing_extensions`,
`urllib3`, `wheel`, `zipp`, and `zstandard`.

`Cython`, `meson-python`, and `zstandard` declare a `License-File` that their
installed distribution directory does not contain. `Cython` and `zstandard`
are covered by Blender's own `licenses\blender-runtime\license.md`;
`meson-python` is MIT and its terms are reproduced at
`licenses\blender-runtime\spdx\MIT.txt`.

## Application and asset attribution

- The original Leylana character model is by Massimo Javer and is licensed
  under CC BY 4.0. See [CREDITS.md](CREDITS.md).
- Leylana's program code and original application assets are not granted a
  third-party license by this notice.

## Compliance note

Before public or commercial publication, review every installed
`.dist-info\METADATA` and license file against the final payload inventory.
Do not remove or replace those files, and retain this notice with any
redistribution of the installer.

The payload of build `release-20261011-222431-f6b88c84` was audited against
this notice on October 12, 2026. That audit enumerated 86 installed
distributions — 41 under `app\` and 45 under `user-runtime\` — and
reconciled every `Name`, `Version`, `License`, `License-Expression`, and
`Classifier: License ::` value, together with the license texts each
distribution ships, against the entries above. Repeat this audit across
**both** payload trees whenever the payload changes.

Unresolved before paid distribution: the payload redistributes GPL-3.0
components (`phonemizer`, and the eSpeak NG shared library bundled inside
`espeakng-loader`) and LGPL components (`krpc`, `pycdlib`, `autocommand`).
A written offer for corresponding source, or equivalent upstream source
links, must accompany the released installer, and counsel should confirm
that Leylana's use of these components is mere aggregation rather than a
combined work.