secureagentics · shahtajkhalid · Jul 24, 2026 · Jul 22, 2026
@@ -1,6 +1,8 @@
 # Adrian pre-commit hooks. Run on every `git commit` once `pre-commit
 # install` has been run from this repo's root (see CONTRIBUTING.md).
-# Scoped to Python files under `sdk/python/` and `scripts/`.
+# Formatting/lint hooks are scoped to Python files under `sdk/python/`
+# and `scripts/`; the licence-header hook covers Go, Python, TypeScript,
+# JavaScript, proto and shell sources repo-wide.
 
 default_install_hook_types: [pre-commit]
 default_language_version:
@@ -34,6 +36,14 @@ repos:
 
   - repo: local
     hooks:
+      - id: license-header
+        name: licence header
+        entry: python3 scripts/add_license_header.py
+        language: system
+        files: \.(go|py|pyi|ts|tsx|js|mjs|cjs|proto|sh)$
+        # Vendored code keeps its own licence; generated proto bindings
+        # would lose the header on regeneration.
+        exclude: (^|/)vendor/|(^|/)node_modules/|\.pb\.go$|_pb2(_grpc)?\.pyi?$
       - id: basedpyright
         name: basedpyright
         entry: basedpyright

@@ -42,9 +42,12 @@ See [`sdk/typescript/README.md`](sdk/typescript/README.md) for usage examples.
 
 After `pre-commit install`, every `git commit` runs the configured hooks on
 staged files: `ruff format`, `ruff check --fix`, `basedpyright` on
-`sdk/python/adrian/`, plus the standard whitespace / YAML / TOML checks. Hooks that
-modify files (formatter, autofix) leave the commit aborted; re-stage the files
-and commit again.
+`sdk/python/adrian/`, plus the standard whitespace / YAML / TOML checks. A
+licence-header hook prepends the Apache-2.0 SPDX header to any staged Go,
+Python, TypeScript, JavaScript, proto or shell file that lacks one (vendored
+code and generated proto bindings excluded). Hooks that
+modify files (formatter, autofix, header) leave the commit aborted; re-stage
+the files and commit again.
 
 To run the hooks across the whole tree on demand without committing:
 
@@ -53,7 +56,8 @@ pre-commit run --all-files
 ```
 
 The config lives at [`.pre-commit-config.yaml`](.pre-commit-config.yaml).
-Only Python files under `sdk/python/` and `scripts/` are in scope.
+Formatting and lint hooks cover Python under `sdk/python/` and `scripts/`;
+the licence-header hook covers source files repo-wide.
 
 ## Style
 

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 syntax = "proto3";
 
 package adrian.core_api.v1;

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Adrian with a LangChain agent (``create_agent``).
 
 The current LangChain agent constructor

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Adrian Human Review example: human-in-the-loop tool gating.
 
 Builds a small LangGraph agent (gpt-4o-mini + a ``send_email`` tool)

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Adrian with manual instrumentation (``auto_instrument=False``).
 
 Mirrors :mod:`quickstart` but opts out of the SDK's import-time

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Adrian quickstart: a single async LLM call captured by the SDK.
 
 The simplest possible agent code Adrian can monitor: a bare

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Adrian with a LangGraph ReAct agent (``create_react_agent``).
 
 ``langgraph.prebuilt.create_react_agent`` is the long-standing prebuilt

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 /**
  * Adrian Human Review example (TypeScript): human-in-the-loop tool gating.
  *

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useMemo, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useMemo, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 import type { Metadata } from 'next'
 import './globals.css'
 import { ThemeProvider, themeInitScript } from '@/components/theme-provider'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { resolveAlert, useMadAlerts, type MadAlert } from '@/lib/mad-alerts'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 export function Badge({ label, className }: { label: string; className: string }) {
   return (
     <span className={`inline-block px-2 py-0.5 text-[13px] font-medium rounded ${className}`}>

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 // ClickUp uses a three-color gradient mark. Inline SVG keeps the gradient
 // IDs scoped via a stable unique suffix to avoid clashes when the icon is
 // rendered multiple times on the same page.

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 export function DiscordIcon({ size = 28 }: { size?: number }) {
   return (
     <svg xmlns="http://www.w3.org/2000/svg" width={size} height={size} viewBox="0 0 24 24" aria-hidden>

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 export function TelegramIcon({ size = 28 }: { size?: number }) {
   return (
     <svg xmlns="http://www.w3.org/2000/svg" width={size} height={size} viewBox="0 0 24 24" aria-hidden>

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 // JsonBlock renders a value as a pretty-printed, syntax-highlighted
 // <pre>. Tokenises the JSON.stringify output with a single regex
 // pass and wraps each token in a span with a Tailwind colour class:

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 export function Pagination({

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useEffect, useState } from 'react'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 // Minimal theme provider — no deps. Persists choice to localStorage and

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 // Three-way segmented toggle: light / system / dark.

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 export type TimeRange = '1h' | '24h' | '7d' | '30d' | 'custom'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 import { useRouter } from 'next/navigation'

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 'use client'
 
 // Minimal accessible-ish modal primitive. We intentionally skip Radix - the

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 /**
  * Starter templates for the Agent Profile editor.
  *

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 export function timeAgo(date: string | Date): string {
   const seconds = Math.floor((Date.now() - new Date(date).getTime()) / 1000)
   if (seconds < 60) return `${seconds}s ago`

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   output: 'standalone',

@@ -2,6 +2,7 @@
   "name": "adrian-dashboard",
   "version": "1.0.0",
   "private": true,
+  "license": "Apache-2.0",
   "scripts": {
     "dev": "next dev --port 3000",
     "build": "next build",

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 module.exports = {
   plugins: {
     tailwindcss: {},

@@ -1,3 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 SecureAgentics
+
 import type { Config } from 'tailwindcss'
 
 const config: Config = {

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Adrian for Claude Code - runtime security monitoring via hooks.
 
 Intercepts Claude Code tool calls through the native hooks system,

@@ -1,4 +1,7 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Adrian CC Plugin - Claude Code hook handler.
 
 Each hook invocation:

@@ -0,0 +1,2 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
@@ -1 +1,4 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Vendored buf.validate protobuf stubs."""
@@ -1 +1,4 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Vendored buf.validate protobuf validation stubs."""
@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Stateful tracker for Claude Code sessions.
 
 Maintains three pieces of state across hook calls within a daemon:

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Transcript parser - extracts reasoning, user prompts, and invocation context.
 
 Claude Code's transcript is a JSONL file where each line is a

@@ -1,4 +1,6 @@
 #!/usr/bin/env sh
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
 # Cross-platform launcher for the Adrian Claude Code plugin.
 # Linux/macOS run this directly. On Windows, Claude Code's default hook shell
 # is Git Bash, which runs this too (the adrian-python.cmd sibling covers

@@ -0,0 +1,2 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 # pyright: reportPrivateUsage=false
 """Tests for the hook agent - event building, verdict handling, mode logic."""
 

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Integration tests - full hook flow against the live Adrian backend.
 
 These tests require the Adrian backend running on localhost:8080 with

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 """Multi-agent integration tests - nested sub-agents, parallel agents, full DB verification.
 
 Tests the complete flow: Claude Code → Plugin → Adrian Backend with

@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) 2026 SecureAgentics
+
 # pyright: reportPrivateUsage=false
 """Tests for the state locking/atomic-write machinery, the sub-agent hierarchy
 stack helpers, and the deterministic transcript-by-agent_id prompt recovery."""
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		# SPDX-License-Identifier: Apache-2.0
		# Copyright (c) 2026 SecureAgentics