[jtroup]

ENG-9384

what

Declare stacklet-mcp as Apache-2.0:

• Add a LICENSE file with the Apache 2.0 text.
• Set license and license-files in pyproject.toml, so the wheel
  and sdist carry License-Expression: Apache-2.0 and the LICENSE
  file.
• Add SPDX-License-Identifier: Apache-2.0 to the header template
  and apply it to every Python file through the add-license-header
  hook.
• Rename the template from license-header.tpl to .license-header
  to keep it out of the repository root listing.

why

The repository had no license. We published to PyPI with copyright
headers only, so a consumer had no statement of the terms. The SPDX
line gives scanners a per-file identifier that they can read.

testing

N/A

docs

No docs needed.

---

🤖 Generated with Claude Code

[cubic-dev-ai]

No issues found across 47 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

Architecture diagram

sequenceDiagram
    participant Dev as Developer
    participant Repo as Git Repository
    participant Hook as Pre-commit Hook
    participant Hatch as Hatchling Build
    participant PyPI as PyPI Registry

    Note over Dev,PyPI: License Declaration Flow

    Dev->>Repo: Commit Python source files
    Repo->>Hook: Trigger pre-commit (add-license-header)
    Hook->>Repo: Read .license-header template
    Hook->>Repo: Scan Python files for SPDX line
    alt Missing SPDX Identifier
        Hook->>Repo: Insert SPDX-License-Identifier: Apache-2.0
        Hook-->>Dev: Apply license header
    else Already present
        Hook-->>Dev: Skip file
    end
    Hook-->>Repo: Commit passes

    Note over Dev,Hatch: Packaging Flow

    Dev->>Hatch: Run build (sdist/wheel)
    Hatch->>Repo: Read pyproject.toml
    Hatch->>Repo: Extract license = "Apache-2.0"
    Hatch->>Repo: Locate LICENSE file via license-files
    Hatch->>Hatch: Generate METADATA with License-Expression
    Hatch-->>Dev: Produce wheel + sdist

    Note over Dev,PyPI: Distribution Flow

    Dev->>PyPI: Publish package
    PyPI->>PyPI: Store package with license metadata
    PyPI-->>Consumer: Expose license info

    Note over Consumer: Package consumer queries PyPI
    Consumer->>PyPI: Check package metadata
    PyPI-->>Consumer: License-Expression: Apache-2.0

Loading

_{Re-trigger cubic}