license: complete SPDX/REUSE coverage for the remaining files

REUSE.toml

@@ -0,0 +1,43 @@
+# REUSE.toml — machine-readable license annotations for files without an inline header.
+# The Rust, TypeScript, SCSS, and JavaScript sources carry their own SPDX headers; this
+# file covers generated code, configuration, documentation, lockfiles, and the bundled
+# license copy. See https://reuse.software/spec/ for the REUSE specification.
+
+version = 1
+
+# --- Files without an inline header (config, templates, docs, manifests, lockfiles, this file) ---
+[[annotations]]
+path = [
+    ".cargo/config.toml",
+    ".github/workflows/ci.yml",
+    ".gitignore",
+    "Cargo.toml",
+    "Cargo.lock",
+    "README.md",
+    "REUSE.toml",
+    "docs/**",
+    "examples/mcp-ui-demo/Cargo.toml",
+    "web/.prettierignore",
+    "web/.prettierrc.json",
+    "web/eslint.config.js",
+    "web/package.json",
+    "web/package-lock.json",
+    "web/src/index.html.tera",
+    "web/tsconfig.json",
+]
+SPDX-FileCopyrightText = "Stefan Grönke <stefan@gronke.net>"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+# --- Generated TypeScript bindings (ts-rs output; regenerated, never hand-edited) ---
+[[annotations]]
+path = "web/src/shell/generated/**"
+SPDX-FileCopyrightText = "Stefan Grönke <stefan@gronke.net>"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+# --- The verbatim license copy kept at the repository root so GitHub detects the license.
+# --- The canonical copy for REUSE lives at LICENSES/AGPL-3.0-or-later.txt; this duplicate
+# --- carries the GNU AGPLv3 text, whose copyright is held by the Free Software Foundation. ---
+[[annotations]]
+path = "LICENSE"
+SPDX-FileCopyrightText = "2007 Free Software Foundation, Inc. <https://fsf.org/>"
+SPDX-License-Identifier = "AGPL-3.0-or-later"

examples/mcp-ui-demo/Cargo.toml

@@ -2,6 +2,8 @@
 name = "mcp-ui-demo"
 version = "0.1.0"
 edition = "2021"
+authors = ["Stefan Grönke <stefan@gronke.net>"]
+license = "AGPL-3.0-or-later"
 publish = false
 
 [dependencies]

examples/mcp-ui-demo/web/components.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Stefan Grönke <stefan@gronke.net>
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
 // The consumer MCP's registration manifest, default-exported. Plain ES module - no build
 // step. Bare specifiers (`lit`, `mcp-ui`) resolve through the shell's import map.
 //

examples/mcp-ui-demo/web/echo-detail.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Stefan Grönke <stefan@gronke.net>
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
 import { LitElement, html } from "lit";
 
 // A custom override component (registered via an `esm` ContentRef). Receives the selected

examples/mcp-ui-demo/web/items-list.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Stefan Grönke <stefan@gronke.net>
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
 import { html } from "lit";
 import { ListElement } from "mcp-ui";