Improve Qwen install fallback and clarify ISO licensing

Author: madkoding

README.md

@@ -138,6 +138,10 @@ Layout contract used by madOS:
 
 This project is licensed under `AGPL-3.0-only` (GNU Affero General Public License v3.0 only).
 See [LICENSE](LICENSE) for the full text.
+
+madOS is licensed under `AGPL-3.0-only`; the ISO image may include third-party software subject to different licenses.
+
+Third-party packages included in the ISO may use different licenses. See [THIRD_PARTY_LICENSES.md](THIRD_PARTY_LICENSES.md).
 ## Resources
 
 - [GitHub](https://github.com/madkoding/mad-os)

THIRD_PARTY_LICENSES.md

@@ -0,0 +1,57 @@
+# Third-Party Licenses
+
+This document summarizes the license status of third-party software included or installed by default in madOS builds.
+
+## madOS License
+
+- madOS project code (this repository): `AGPL-3.0-only`
+- File: `LICENSE`
+
+The madOS repository license applies to madOS code and assets, not automatically to all third-party packages shipped in the ISO.
+
+## Third-Party Components (Not Exhaustive)
+
+### Components that are not fully free or are commonly treated as non-free
+
+- `intel-ucode` (CPU microcode)
+- `amd-ucode` (CPU microcode)
+- `linux-firmware` (firmware blobs)
+- `alsa-firmware` (firmware blobs)
+- `sof-firmware` (firmware blobs)
+- `steam` (proprietary client/software distribution platform)
+- `code` (official Visual Studio Code build)
+
+These components are included for hardware compatibility and user experience, but they may not satisfy strict "100% free software" criteria.
+
+### Components with license/distribution status that should be reviewed periodically
+
+- `opencode`
+- `ollama`
+- Tools installed by `airootfs/root/customize_airootfs.d/09-ai-tools.sh`:
+  - `openclaw` (npm)
+  - `forge` / `forgecode` (remote install script)
+  - `qwen` (remote install script)
+
+Because these tools can change distribution method, packaging, or terms over time, verify upstream license and redistribution terms before release.
+
+## Upstream Sources in Build Scripts
+
+madOS build scripts clone/install third-party projects from upstream repositories (for example, GitHub). Their licenses are defined by each upstream project and may differ from `AGPL-3.0-only`.
+
+Examples include:
+
+- madOS native app repos installed by `airootfs/root/customize_airootfs.d/03-apps.sh`
+- Qylock theme assets installed by `airootfs/root/customize_airootfs.d/04-sddm-qylock.sh`
+- Theme assets installed from `theme-imperative-dots`
+
+## Policy Notes
+
+- Keeping madOS under `AGPL-3.0-only` is compatible with distributing third-party software under different licenses.
+- For strict free-software distributions, create a separate package profile that removes non-free firmware, microcode, and proprietary apps.
+
+## Maintainer Checklist Before Release
+
+- Review `packages.x86_64` for proprietary/non-free packages.
+- Review `airootfs/root/customize_airootfs.d/09-ai-tools.sh` for external installers.
+- Confirm upstream licenses for dynamically cloned/installed projects.
+- Update this file if package selections change.

airootfs/root/customize_airootfs.d/09-ai-tools.sh

@@ -39,6 +39,27 @@ install_qwen_fallback() {
     fi
 }
 
+install_qwen_npm_fallback() {
+    echo "  Falling back to npm install..."
+    if command -v npm &>/dev/null; then
+        if npm install -g @qwen-code/qwen-code@latest 2>&1; then
+            echo "✓ Qwen installed via npm (@qwen-code/qwen-code)"
+            return 0
+        fi
+
+        if npm install -g qwen-code@latest 2>&1; then
+            echo "✓ Qwen installed via npm (qwen-code)"
+            return 0
+        fi
+
+        echo "WARNING: Qwen npm install also failed"
+        echo "  Users can install manually: npm install -g @qwen-code/qwen-code"
+    else
+        echo "  npm not available, cannot fallback. Install manually after boot."
+    fi
+    return 1
+}
+
 ensure_forge_global_command() {
     local forge_src=""
 
@@ -63,6 +84,33 @@ ensure_forge_global_command() {
     return 0
 }
 
+ensure_qwen_global_command() {
+    local qwen_src=""
+
+    if command -v qwen &>/dev/null; then
+        qwen_src="$(command -v qwen)"
+    else
+        for candidate in /root/.local/bin/qwen /home/liveuser/.local/bin/qwen /root/.qwen/bin/qwen /home/liveuser/.qwen/bin/qwen; do
+            if [[ -x "$candidate" ]]; then
+                qwen_src="$candidate"
+                break
+            fi
+        done
+    fi
+
+    if [[ -z "$qwen_src" ]]; then
+        echo "  WARNING: qwen binary not found after install"
+        return 1
+    fi
+
+    if [[ "$qwen_src" != "/usr/local/bin/qwen" ]]; then
+        install -m 755 "$qwen_src" /usr/local/bin/qwen
+        echo "  → Installed global qwen wrapper: /usr/local/bin/qwen"
+    fi
+
+    return 0
+}
+
 install_openclaw() {
     echo "Installing OpenClaw..."
 
@@ -95,6 +143,12 @@ install_qwen() {
     fi
 
     install_qwen_fallback
+
+    if ! command -v qwen &>/dev/null; then
+        install_qwen_npm_fallback || true
+    fi
+
+    ensure_qwen_global_command || true
 }
 
 configure_ai_tools_permissions() {