soturail 1.0.0 → 1.0.1

package/LICENSE

@@ -1,15 +1,17 @@
-SotuRail Reserved Rights Notice
-
-Copyright (c) 2026 Rafael Ryan Ramos de Souza.
-All rights reserved.
-
-No open-source license is currently granted for this repository or for future unreleased versions unless a later LICENSE file or written agreement explicitly says otherwise.
-
-This repository may be publicly visible for portfolio, planning, research, documentation, and evaluation purposes, but public visibility does not grant permission to copy, redistribute, sublicense, sell, commercialize, or create derivative works from the source code, documentation, assets, designs, roadmap, benchmarks, or related project materials.
-
-You may view the repository through GitHub according to GitHub's platform terms. Any additional use requires explicit written permission from the copyright holder.
-
-Important historical note:
-Previous published versions or copies of SotuRail that were explicitly released under the MIT License remain governed by the license terms that applied to those specific versions at the time of release. This notice is intended for the current repository state and future versions unless changed later.
-
-This notice is not legal advice. For commercial distribution, open-source release, dual licensing, or contributor agreements, consult a qualified legal professional.
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+Copyright 2026 Rafael Ryan Ramos de Souza
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -6,7 +6,7 @@
 
 [![Node.js >=20](https://img.shields.io/badge/node-%3E%3D20-3c873a)](package.json)
 [![TypeScript](https://img.shields.io/badge/TypeScript-strict-3178c6)](tsconfig.json)
-[![License: Reserved Rights](https://img.shields.io/badge/license-reserved--rights-red)](LICENSE)
+[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
 [![CI](https://github.com/Soturine/soturail/actions/workflows/ci.yml/badge.svg)](https://github.com/Soturine/soturail/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/soturail.svg)](https://www.npmjs.com/package/soturail)
 [![npm downloads](https://img.shields.io/npm/dm/soturail.svg)](https://www.npmjs.com/package/soturail)
@@ -698,12 +698,12 @@ v1.5.0  Governance And Cost Rail
 
 See [CONTRIBUTING.md](CONTRIBUTING.md). Reducers, hooks and rules should include tests, safety notes and benchmark impact when relevant.
 
-## License Status
+## License
 
-SotuRail is not currently licensed as open source for the current repository state or future versions.
+SotuRail is licensed under the [Apache License 2.0](LICENSE).
 
-All rights are reserved unless a later LICENSE file or written agreement explicitly grants permissions. This repository may be public for portfolio, planning, research, documentation and evaluation visibility, but broad copying, redistribution, sublicensing, commercial use or derivative works are not granted by default.
+This means you can use, copy, modify, distribute and build on the project under the Apache-2.0 terms, including commercial use, as long as the license notice is preserved.
 
-Important: older SotuRail versions or copies that were explicitly released under MIT remain governed by the MIT terms that applied to those specific versions at the time of release.
+Older releases remain governed by the license terms that applied at the time of each release.
 
 See [docs/licensing-strategy.md](docs/licensing-strategy.md).

package/dist/core/version.d.ts

@@ -1 +1 @@
-export declare const SOTURAIL_VERSION = "1.0.0";
+export declare const SOTURAIL_VERSION = "1.0.1";

package/dist/core/version.js

@@ -1,3 +1,3 @@
 // Generated by scripts/sync-version.mjs from package.json. Do not edit manually.
-export const SOTURAIL_VERSION = "1.0.0";
+export const SOTURAIL_VERSION = "1.0.1";
 //# sourceMappingURL=version.js.map

package/docs/licensing-strategy.md

@@ -2,134 +2,206 @@
 
 This document explains the current licensing position of SotuRail.
 
-It is not legal advice. For commercial distribution, open-source release, dual licensing, contributor agreements, or enforcement, consult a qualified legal professional.
+It is not legal advice. For commercial distribution, dual licensing, contributor agreements, enforcement, or company usage decisions, consult a qualified legal professional.
 
 ## Current decision
 
-SotuRail is moving away from MIT for the current repository state and future versions.
+SotuRail is distributed under the **Apache License 2.0**.
 
 Current stance:
 
 ```text
-All rights reserved.
-No broad open-source permission is granted by default.
+Apache-2.0
+Permissive open-source license.
+Commercial use is allowed.
+Modification and redistribution are allowed under the license terms.
+Patent grant is included under the Apache-2.0 terms.
 ```
 
-The repository can remain public for portfolio, planning, research, documentation and evaluation visibility, but public visibility does not grant broad reuse rights.
+The repository can remain public for development, documentation, evaluation, community feedback and adoption. Public visibility is now backed by an explicit open-source license instead of an all-rights-reserved notice.
 
-## Why not MIT now?
+## Why Apache-2.0?
 
-MIT is a permissive open-source license. It is good when the goal is adoption, forks, reuse, contributions and commercial use by others.
+Apache-2.0 is a good fit for SotuRail because the project is a developer tool, CLI package and local-first framework for AI coding agents.
 
-MIT is not a good fit when the goal is to prevent people from copying, repackaging, sublicensing, selling or commercializing the project.
+It allows:
 
-## Historical MIT note
+* personal use;
+* commercial use;
+* modification;
+* redistribution;
+* private use;
+* forks and integrations;
+* use in developer tooling and internal company workflows.
 
-Previous published versions or copies that were explicitly released under MIT remain governed by the MIT terms that applied to those specific versions at the time of release.
+It also includes an explicit patent grant, which makes it more suitable than a very minimal permissive license for a tool that may be used by companies, agent hosts, CI systems, plugin ecosystems and automation workflows.
 
-A later reserved-rights notice does not retroactively remove permissions already granted for previous MIT releases.
+## Historical license note
+
+Older published versions or copies remain governed by the license terms that applied to those specific versions at the time of release.
 
 This means:
 
 ```text
-Old MIT releases stay MIT.
-Current and future repository state can use a stricter notice.
+Old releases keep their original license terms.
+Current and future releases use Apache-2.0 unless changed later.
 ```
 
+A later license change does not retroactively remove permissions that were already granted for older versions.
+
 ## package.json status
 
-For future versions, `package.json` should use:
+`package.json` should use:
 
 ```json
 {
-  "license": "UNLICENSED"
+  "license": "Apache-2.0"
 }
 ```
 
-This communicates that the package is not being distributed under a standard open-source license.
+The root package entry in `package-lock.json` should also reflect:
+
+```json
+{
+  "license": "Apache-2.0"
+}
+```
 
 ## Repository notice
 
-The root `LICENSE` file now acts as a reserved-rights notice instead of an MIT grant.
+The root `LICENSE` file should contain the full Apache License 2.0 text.
+
+Recommended README badge:
+
+```md
+[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
+```
 
 Recommended README language:
 
 ```text
-SotuRail is not currently licensed as open source for the current repository state or future versions. All rights are reserved unless a later LICENSE file or written agreement explicitly grants permissions.
+SotuRail is licensed under the Apache License 2.0.
+```
+
+Or:
+
+```text
+SotuRail is distributed under the Apache License 2.0. You may use, copy, modify, distribute and build on the project under the Apache-2.0 terms.
 ```
 
 ## What is allowed by default?
 
-Allowed by default:
+Apache-2.0 allows, under its terms:
+
+* viewing the repository;
+* copying the source code;
+* modifying the source code;
+* redistributing the project;
+* using the project commercially;
+* creating derivative works;
+* using the project privately;
+* contributing improvements;
+* integrating SotuRail into other developer workflows.
+
+Users must still follow the Apache-2.0 license requirements, including preserving copyright and license notices.
+
+## What is not provided?
+
+Apache-2.0 does not provide:
+
+* warranty;
+* liability protection for users;
+* trademark rights;
+* permission to misuse SotuRail branding;
+* a guarantee that the software is fit for a particular purpose;
+* a guarantee that future versions will remain under the exact same license forever.
+
+## Branding and trademark note
+
+The Apache-2.0 license covers the software license. It does not automatically grant broad trademark or branding rights.
+
+The names **SotuRail**, **Soturine**, logos, mascots and visual identity should be treated as project branding. If broader branding rules become necessary, add a separate trademark or brand usage policy.
+
+## Contributor policy
 
-- viewing the repository through GitHub;
-- reading documentation for evaluation;
-- discussing the project;
-- linking to the project.
+If outside contributors are accepted later, the project should define contribution terms clearly.
 
-Not granted by default:
+Possible options:
 
-- copying the source code;
-- redistributing the project;
-- sublicensing the project;
-- selling the project;
-- repackaging the project;
-- commercial use;
-- creating derivative works;
-- using assets or branding in another product.
+* Developer Certificate of Origin, DCO;
+* Contributor License Agreement, CLA;
+* explicit statement that contributions are accepted under Apache-2.0;
+* GitHub pull request template confirming contribution terms.
+
+Recommended lightweight approach for now:
+
+```text
+By contributing to SotuRail, you agree that your contribution is submitted under the Apache License 2.0.
+```
+
+This can be added to `CONTRIBUTING.md`.
+
+## Dependency warning
+
+SotuRail must continue respecting the licenses of dependencies, models, datasets, copied snippets and benchmark fixtures.
+
+Before adding dependencies, check:
+
+* package license;
+* model license;
+* dataset license;
+* benchmark license;
+* compatibility with Apache-2.0 distribution;
+* whether attribution or notice files are required.
 
 ## Future options
 
-SotuRail can later choose a different model:
+SotuRail can later choose a different model if the project direction changes.
 
-### Keep all rights reserved
+### Continue with Apache-2.0
 
-Best for strict control while the product direction is still forming.
+Best for broad adoption, community use, company usage, agent-host integrations and npm distribution.
 
 ### Dual license
 
+Possible if a future commercial edition exists.
+
 Example:
 
 ```text
-Community source-available license for public visibility.
-Commercial license for paid/private usage.
+Apache-2.0 for the open-source core.
+Commercial license for private enterprise modules or hosted services.
 ```
 
 ### Open-core
 
+Possible if advanced hosted, cloud, governance, native performance, team dashboard or enterprise policy features are added later.
+
 Example:
 
 ```text
-Core reducers open source.
-Advanced memory, governance, CI automation, cloud features or native performance modules commercial/private.
+Core local Context OS under Apache-2.0.
+Optional commercial/private modules for enterprise workflows.
 ```
 
 ### AGPL-3.0
 
-Useful if you want open-source sharing obligations, especially for network/server modifications, but it still allows copying under its terms.
-
-### MIT or Apache-2.0 later
-
-Useful if broad adoption becomes more important than control.
-
-## Contributor warning
-
-If outside contributors are accepted later, the project should define contribution terms first.
+Useful only if the goal becomes strong copyleft obligations, especially for network/server modifications. This is not the current SotuRail direction because SotuRail is currently a local-first CLI/developer tool.
 
-Possible requirements:
+## Current recommendation
 
-- Contributor License Agreement, CLA;
-- Developer Certificate of Origin, DCO;
-- explicit statement that contributions are accepted under the project's current license terms.
+Keep SotuRail under:
 
-## Dependency warning
-
-Even with all rights reserved, SotuRail must respect the licenses of dependencies, models, datasets and copied snippets.
+```text
+Apache-2.0
+```
 
-Before adding dependencies, check:
+This is the best balance for the current project:
 
-- package license;
-- model license;
-- dataset license;
-- benchmark license;
-- compatibility with SotuRail's distribution model.
+* permissive;
+* professional;
+* npm-friendly;
+* company-friendly;
+* compatible with open-source adoption;
+* clearer around patent rights than MIT;
+* suitable for developer tooling and AI agent workflows.

package/docs/releases/RELEASE_NOTES_v1.0.1.md

@@ -0,0 +1,11 @@
+# SotuRail v1.0.1
+
+## Changed
+
+- Updated package and repository licensing metadata to Apache-2.0.
+- Aligned README license badge and license section with Apache-2.0.
+- Aligned `docs/licensing-strategy.md` with the Apache-2.0 licensing decision.
+
+## Notes
+
+This is a small metadata/documentation release after v1.0.0. No runtime behavior changes are intended.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "soturail",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Local-first context rails for AI coding agents: reversible terminal compression, progressive repo reading, SDD workflows, hooks, benchmarks, memory and cache-friendly payloads.",
   "type": "module",
   "bin": {
@@ -55,7 +55,7 @@
     "soturail"
   ],
   "author": "Rafael Ryan Ramos de Souza",
-  "license": "UNLICENSED",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Soturine/soturail.git"