chore: relicense from FSL-1.1-ALv2 to Apache 2.0 + MIT

[jeevanpillay]

Summary

Drop the Functional Source License (FSL-1.1-ALv2) and fully commit to open source. Platform moves to Apache 2.0; SDKs and shared libraries stay MIT. DCO replaces the prior FSL contributor grant — no CLA paperwork.

Plan: thoughts/shared/plans/2026-04-19-relicense-to-apache-2.md

Changes

• Root LICENSE replaced with verbatim Apache 2.0 text + copyright appendix (Copyright 2025 Lightfast Pty Ltd).
• LICENSING.md removed — per-package LICENSE files + SPDX license fields in package.json carry the full story.
• core/{lightfast,cli,mcp}/LICENSE added as MIT, byte-identical to the existing core/ai-sdk/LICENSE. This fixes the missing-LICENSE-in-tarball bug for three published packages.
• 24 package.json files: "license": "FSL-1.1-Apache-2.0" → "license": "Apache-2.0".
• README.md: badge switched to Apache 2.0 blue; License section rewritten for the split.
• CONTRIBUTING.md: FSL contributor clause replaced with a DCO clause (git commit -s).

DCO is live on main

• DCO GitHub App is installed on the org.
• Branch ruleset Protect main (ID 15254385) requires DCO, CI, Core CI; 1 approval; linear history; force-push and deletion blocked.
• Every commit on this branch is signed off.

Test plan

• pnpm install
• pnpm typecheck
• pnpm check
• pnpm build:app
• pnpm build:platform
• rg -F "FSL" returns zero results outside thoughts/, node_modules/, .git/
• md5 of all four core/*/LICENSE files match
• npm pack --dry-run in core/lightfast, core/cli, core/mcp includes LICENSE
• GitHub repo sidebar detects "Apache-2.0" (visible after merge)
• /LICENSE renders with GitHub's "Apache License 2.0" banner
• README Apache 2.0 blue badge renders on lightfastai/lightfast

Notes

• Existing open PRs (Test: propagation check #558, refactor: migrate route handlers to internal tRPC procedures #585, chore(deps): bump hono from 4.12.5 to 4.12.14 #598) will need a re-push to trigger the new DCO check before they can merge.
• Previously-tagged FSL releases stay FSL forever (their 2-year Apache 2.0 auto-conversion clause still ticks). The relicense applies from this commit onward.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
lightfast-app	Ready	Preview, Comment	Apr 19, 2026 3:06am
lightfast-platform	Ready	Preview, Comment	Apr 19, 2026 3:06am
lightfast-www	Ready	Preview, Comment	Apr 19, 2026 3:06am

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: a987aef4-4b8f-4da4-bcc0-96db99f33521

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)

Validation error: Unrecognized key(s) in object: 'tools', 'finishing_touches'

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/relicense-to-apache-2

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}