feat: bundle XeXTool with xorloser attribution

CHANGELOG.md

@@ -7,6 +7,8 @@ Notable changes to UnityScraper are documented here. The project follows
 
 ### Added
 
+- Bundled Windows XeXTool 6.3 integration with automatic discovery, xorloser
+  attribution, provenance, checksum, and preserved third-party license.
 - External Tools workspace with XeXTool inspection presets, custom CLI
   arguments, command previews, captured output, cancellation, and timeouts.
 - Project creator attribution and a community message from TrapEmAll in About.

EXTERNAL_TOOLS.md

@@ -5,10 +5,15 @@ interface. Open **External Tools** from the sidebar.
 
 ## XeXTool
 
-XeXTool is not distributed with UnityScraper. Its redistribution terms are not
-clear enough for this project to package the executable. Obtain it lawfully,
-review it with your usual security tools, and select your local copy using
-**Browse**.
+The Windows build includes XeXTool 6.3, created by **xorloser**, so the XeXTool
+preset works without separate setup. The executable was sourced from the
+GPL-3.0-licensed
+[XboxChef/XexToolGUI](https://github.com/XboxChef/XexToolGUI) project.
+UnityScraper preserves its source license and records the exact binary checksum
+in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).
+
+Use **Browse** to select a different lawfully obtained build at any time. A
+missing or invalid saved path automatically falls back to the bundled copy.
 
 The XeXTool preset provides:
 
@@ -33,8 +38,9 @@ Each placeholder becomes part of one argument after parsing. UnityScraper
 starts the executable directly with `shell=False`; it does not send the command
 through PowerShell, Command Prompt, Bash, or another command shell.
 
-The configured XeXTool path is stored in the normal application configuration.
-Tool binaries are never copied into UnityScraper's data folder.
+Custom XeXTool and CLI paths are stored in the normal application
+configuration. The bundled executable remains inside UnityScraper's packaged
+resources and is not copied into the user data folder.
 
 ## Safety
 
@@ -49,6 +55,7 @@ Tool binaries are never copied into UnityScraper's data folder.
 ## Platform Notes
 
 The external tool must be executable on the current operating system.
-Windows `.exe` files do not run natively on Linux. UnityScraper does not
-automatically install or invoke Wine. Linux users can select native tools or a
-trusted wrapper executable they configured themselves.
+The bundled XeXTool executable is enabled on Windows. Windows `.exe` files do
+not run natively on Linux, so Linux users can select a native tool or a trusted
+wrapper they configured themselves. UnityScraper does not automatically
+install or invoke Wine.

README.md

@@ -57,16 +57,20 @@ service exposes. UnityScraper does not silently substitute HTTPS URLs.
 
 ### External Tools
 
-- Runs user-supplied Xbox command-line utilities inside the desktop interface.
-- Includes a XeXTool workspace for basic or extended XEX information.
+- Runs Xbox command-line utilities inside the desktop interface.
+- Includes XeXTool 6.3 by xorloser for basic or extended XEX information on
+  Windows.
 - Supports custom executables and argument templates for other community tools.
 - Shows the exact command, captures standard output and errors, and supports
   cancellation and timeouts.
 - Executes argument vectors directly without using a command shell.
 
-Third-party binaries such as XeXTool are not bundled. Select an executable you
-obtained lawfully and trust. See [EXTERNAL_TOOLS.md](EXTERNAL_TOOLS.md) for
-setup, placeholders, platform notes, and safety guidance.
+The bundled executable was sourced from
+[XboxChef/XexToolGUI](https://github.com/XboxChef/XexToolGUI). A locally
+selected XeXTool build or another trusted utility can still be used instead.
+See [EXTERNAL_TOOLS.md](EXTERNAL_TOOLS.md) and
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) for provenance, credits,
+checksums, platform notes, and safety guidance.
 
 ### Collection Intelligence and Preservation
 

THIRD_PARTY_NOTICES.md

@@ -0,0 +1,23 @@
+# Third-Party Notices
+
+UnityScraper includes and interoperates with software and community data from
+other projects. This file records bundled components that require prominent
+credit or separate provenance.
+
+## XeXTool 6.3
+
+- **Creator:** xorloser
+- **Purpose:** Inspecting and transforming Xbox 360 XEX executables
+- **Bundled file:** `assets/tools/xextool/xextool.exe`
+- **Source:** [XboxChef/XexToolGUI](https://github.com/XboxChef/XexToolGUI)
+- **Source project license:** GNU General Public License version 3
+- **SHA-256:** `D93C1B814AD6FF124834F4235BF8AAC9F09DBA8D69C335EBECC8D6EFE8D5A062`
+
+The source project describes the bundled executable as xorloser's XeXTool 6.3
+and credits xorloser as the original XeXTool developer. Its GPL-3.0 license is
+preserved at
+`assets/tools/xextool/XexToolGUI-GPL-3.0.txt`.
+
+UnityScraper's GUI integration is independent code. Users may select a
+different lawfully obtained XeXTool build or another command-line utility.
+

UnityScraper.spec

@@ -9,7 +9,12 @@ a = Analysis(
     ['desktop_app.py'],
     pathex=[],
     binaries=[],
-    datas=[('JSON.txt', '.'), ('VERSION', '.'), ('assets', 'assets')],
+    datas=[
+        ('JSON.txt', '.'),
+        ('VERSION', '.'),
+        ('THIRD_PARTY_NOTICES.md', '.'),
+        ('assets', 'assets'),
+    ],
     hiddenimports=[
         'backup_gui',
         'backup_manager',