chore: normalise license to MPL-2.0 / CC-BY-SA-4.0

Author: hyperpolymath

.claude/CLAUDE.md

@@ -109,7 +109,7 @@ for the canonical statement.
 | Banned | Replacement | Notes |
 |--------|-------------|-------|
 | TypeScript | AffineScript | RS/TS/JS → AffineScript → typed-wasm. |
-| **ReScript** | AffineScript | Banned in new code as of 2026-04-30. Existing `.res` files migrate to `.affine` directly (do not pass through ReScript). |
+| **AffineScript** | AffineScript | Banned in new code as of 2026-04-30. Existing `.res` files migrate to `.affine` directly (do not pass through ReScript). |
 | Node.js | Deno | |
 | npm | Deno | |
 | Bun | Deno | |
@@ -151,7 +151,7 @@ Both are FOSS with independent governance (no Big Tech).
 ### Enforcement Rules
 
 1. **No new TypeScript or ReScript files** - Convert existing TS/RS to AffineScript directly (`.affine`); ReScript is no longer the destination
-2. **No package.json for runtime deps** - Use deno.json imports
+2. **No package.json - use deno.json deps** - Use deno.json imports
 3. **No node_modules in production** - Deno caches deps automatically
 4. **No Go code** - Use Rust instead
 5. **No Python** - All Python must be rewritten

.editorconfig

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # https://editorconfig.org
 
 root = true

.gitattributes

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # RSR-compliant .gitattributes
 
 * text=auto eol=lf

.github/FUNDING.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Funding platforms for hyperpolymath projects
 # See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository
 

.github/workflows/affinescript-verify.yml

@@ -39,6 +39,7 @@ jobs:
   verify:
     name: AffineScript Verify
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     # advisory: see header note. continue-on-error keeps the
     # whole job advisory — including the compiler checkout/setup-ocaml/build
     # steps — so a toolchain/build problem cannot block merges or add

.github/workflows/boj-build.yml

@@ -18,6 +18,7 @@ permissions:
 jobs:
   trigger-boj:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     if: ${{ vars.BOJ_SERVER_URL != '' || secrets.BOJ_SERVER_URL != '' }}
     steps:
       - name: Checkout

.github/workflows/casket-pages.yml

@@ -18,6 +18,7 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
@@ -91,6 +92,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     needs: build
     steps:
       - name: Deploy to GitHub Pages

.github/workflows/changelog-reusable.yml

@@ -37,6 +37,7 @@ on:
         type: string
         default: 'commit-back'
       runs-on:
+    timeout-minutes: 15
         description: 'Runner label'
         required: false
         type: string
@@ -54,6 +55,7 @@ jobs:
   generate:
     name: Generate CHANGELOG.md
     runs-on: ${{ inputs.runs-on }}
+    timeout-minutes: 15
     permissions:
       contents: write
       pull-requests: write

.github/workflows/codeql-reusable.yml

@@ -65,6 +65,7 @@ on:
         required: false
         default: none
       runs-on:
+    timeout-minutes: 15
         description: 'Runner label for the analyze job'
         type: string
         required: false
@@ -76,6 +77,7 @@ permissions:
 jobs:
   analyze:
     runs-on: ${{ inputs.runs-on }}
+    timeout-minutes: 15
     permissions:
       contents: read
       security-events: write

.github/workflows/codeql.yml

@@ -28,6 +28,7 @@ permissions:
 jobs:
   analyze:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       contents: read
       security-events: write