devague 0.17.0__tar.gz → 0.17.2__tar.gz

{devague-0.17.0 → devague-0.17.2}/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 Format follows [Keep a Changelog](https://keepachangelog.com/). This project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.17.2] - 2026-07-07
+
+### Changed
+
+- Changed the project license from MIT to Apache-2.0, added a retained MIT notice for vendored inbound skills, and updated package metadata and documentation references accordingly.
+
+## [0.17.1] - 2026-07-10
+
+### Fixed
+
+- **`devague export` / `devague plan export` now emit markdownlint-safe markdown (#64).** Both renderers interpolate free-form claim/task/honesty prose straight into headings, blockquotes, and bullets, which tripped markdownlint's MD026 (no-trailing-punctuation) whenever a heading came from a sentence (the announcement, a task summary) and MD034 (no-bare-urls) whenever prose carried a bare `http(s)://` URL. Downstream repos (league-of-agents-platform) were hand-fixing every export before committing it. New shared helper `devague/render/_md_safety.py`: `heading_safe()` strips trailing punctuation from the `#`/`###` line only (blockquote/body copy keeps the sentence verbatim); `autolink_urls()` wraps a bare URL in `<...>` unless it is already inside `<>`, already the destination of a `[text](url)` link, or inside a code span. Both rules are pinned empirically against markdownlint-cli2 v0.21.0 (markdownlint v0.40.0). Rendering only — Frame/Plan JSON keeps the original text verbatim. New `tests/test_md_safety.py` (unit), hostile-input cases added to `tests/test_render.py` / `tests/test_render_plan.py`, and `tests/test_export_markdownlint_integration.py` (drives the real CLI end to end and shells out to `markdownlint-cli2`, skipping cleanly when it is not on PATH). Closes #64.
+
 ## [0.17.0] - 2026-07-09
 
 Skills release plus one correctness fix. No new CLI verbs and no new CLI docs;

{devague-0.17.0 → devague-0.17.2}/CLAUDE.md

@@ -226,7 +226,7 @@ directly into those workflows.
 
 ## Ecosystem context
 
-devague belongs to the **AgentCulture** family (MIT, `Copyright (c) 2026
+devague belongs to the **AgentCulture** family (Apache-2.0, `Copyright 2026
 AgentCulture`); the GitHub remote is `origin/main` and lives under
 `github.com/agentculture/devague`. Its closest structural analogs in this
 workspace are the small Python CLI agents `agtag`, `appsec`, `seer-cli`, and

devague-0.17.2/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 AgentCulture
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

devague-0.17.0/LICENSE → devague-0.17.2/LICENSES/MIT-guildmaster-skills.txt

@@ -1,4 +1,9 @@
-MIT License
+MIT License notice for vendored guildmaster skills
+=================================================
+
+This repository vendors inbound skill files from agentculture/guildmaster under
+.claude/skills/, as documented in docs/skill-sources.md. Those vendored inbound
+skills are distributed under the MIT License with the following attribution:
 
 Copyright (c) 2026 AgentCulture
 

{devague-0.17.0 → devague-0.17.2}/PKG-INFO

@@ -1,15 +1,16 @@
 Metadata-Version: 2.4
 Name: devague
-Version: 0.17.0
+Version: 0.17.2
 Summary: devague — turns a vague feature idea into a buildable spec, then a buildable plan.
 Project-URL: Homepage, https://github.com/agentculture/devague
 Project-URL: Issues, https://github.com/agentculture/devague/issues
 Author: AgentCulture
-License-Expression: MIT
+License-Expression: Apache-2.0
 License-File: LICENSE
+License-File: LICENSES/MIT-guildmaster-skills.txt
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
+Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: Software Development
 Requires-Python: >=3.12

devague-0.17.2/devague/render/_md_safety.py

@@ -0,0 +1,104 @@
+"""Shared rendering-time markdown-safety helpers for the export renderers (#64).
+
+``devague export`` (spec-md, ``docs/specs/*.md``) and ``devague plan export``
+(plan-md, ``docs/plans/*.md``) both interpolate free-form claim/task/honesty
+prose straight into markdown — headings, blockquotes, and bullets. Prose
+written as a sentence ("Ship the feature.") trips markdownlint's MD026
+(no-trailing-punctuation) when it lands in a heading, and a URL written bare
+("see https://example.com") trips MD034 (no-bare-urls) wherever it lands.
+Downstream repos that commit exported specs/plans and gate PRs on
+markdownlint were hand-fixing every export until this landed.
+
+Both functions are applied **only** at render time — the underlying Frame/Plan
+JSON keeps the original text verbatim (rendering never mutates state).
+
+The exact rules here are pinned against markdownlint-cli2 v0.21.0
+(markdownlint v0.40.0) behavior, verified empirically, not just read from docs.
+"""
+
+from __future__ import annotations
+
+import re
+
+# markdownlint's MD026 default punctuation set is "all punctuation minus '?'"
+# (ASCII + full-width) — see markdownlint's `allPunctuationNoQuestion` helper
+# (`allPunctuation.replace(/[?？]/gu, "")`, where `allPunctuation` is
+# ".,;:!?。，；：！？"). '?' is intentionally excluded — a heading ending in '?'
+# is not flagged, so it is never stripped here.
+_HEADING_TRAILING_PUNCT_RE = re.compile(r"\s*[.,;:!。，；：！]+$")
+
+# A bare http(s) URL, not already the destination of a markdown link
+# ("...](url)") and not already inside "<...>" — both excluded via a
+# fixed-width negative lookbehind. The character class stops at whitespace,
+# angle brackets, and parens so a match never swallows surrounding markdown
+# syntax.
+_BARE_URL_RE = re.compile(r"(?<!<)(?<!\]\()https?://[^\s<>()]+")
+
+# Trailing characters GFM's autolink-literal extension (the thing MD034 is
+# built on) does not treat as part of the URL — kept *outside* the "<...>"
+# wrap so the rendered text tokenizes the same way markdownlint itself would.
+_URL_TRAILING_PUNCT = ".,;:!?'\""
+
+# Code spans (`...`) are left untouched — a URL inside backticks is literal
+# text, never a markdownlint "bare URL", and rewriting it would change
+# rendered content markdownlint never asked us to change.
+_CODE_SPAN_RE = re.compile(r"`[^`]*`")
+
+
+def _strip_url_trailing_punct(url: str) -> tuple[str, str]:
+    """Split a matched URL into ``(url, trailing)`` the way GFM's
+    autolink-literal extension would: trailing sentence punctuation, and an
+    unmatched closing paren, are not part of the URL.
+    """
+    trail = ""
+    while url:
+        ch = url[-1]
+        if ch in _URL_TRAILING_PUNCT:
+            trail = ch + trail
+            url = url[:-1]
+        elif ch == ")" and url.count("(") < url.count(")"):
+            trail = ch + trail
+            url = url[:-1]
+        else:
+            break
+    return url, trail
+
+
+def _autolink_segment(segment: str) -> str:
+    def _wrap(match: "re.Match[str]") -> str:
+        url, trail = _strip_url_trailing_punct(match.group(0))
+        return f"<{url}>{trail}"
+
+    return _BARE_URL_RE.sub(_wrap, segment)
+
+
+def autolink_urls(text: str) -> str:
+    """Wrap bare ``http(s)://`` URLs in ``<...>`` (MD034).
+
+    Skips a URL that is already inside ``<>``, already the destination of a
+    ``[text](url)`` markdown link, or already inside a code span. Plain
+    parens with no preceding ``[text]`` do **not** protect a bare URL —
+    markdownlint still flags those, and so do we.
+    """
+    if "https://" not in text and "http://" not in text:
+        return text
+    parts: list[str] = []
+    last = 0
+    for m in _CODE_SPAN_RE.finditer(text):
+        parts.append(_autolink_segment(text[last : m.start()]))
+        parts.append(m.group(0))  # code span: verbatim, never rewritten
+        last = m.end()
+    parts.append(_autolink_segment(text[last:]))
+    return "".join(parts)
+
+
+def heading_safe(text: str) -> str:
+    """Render-only heading text: URLs autolinked first (MD034), then any
+    trailing punctuation markdownlint's MD026 flags is stripped.
+
+    URLs must be wrapped before the punctuation strip runs — a heading ending
+    in a bare URL still needs MD034's fix, and once wrapped, a trailing
+    sentence '.' immediately after the closing '>' still trips MD026 (pinned
+    empirically against markdownlint-cli2: ``# Ship <url>.`` still errors).
+    """
+    return _HEADING_TRAILING_PUNCT_RE.sub("", autolink_urls(text))

{devague-0.17.0 → devague-0.17.2}/devague/render/plan_md.py

@@ -12,6 +12,7 @@ from typing import Optional
 
 from devague.frame import Frame
 from devague.plan import Plan, Task
+from devague.render._md_safety import autolink_urls, heading_safe
 
 
 def _topo_order(tasks: list[Task]) -> list[Task]:
@@ -58,15 +59,15 @@ def _task_lines(task: Task) -> list[str]:
         # t9), mirroring t6's nested ``- instruction:`` bullet in spec_md.py /
         # frame_md.py. A task is a heading rather than a claim bullet, so the
         # instruction renders as the first body bullet, immediately under it.
-        body.append(f"- instruction: {task.instruction}")
+        body.append(f"- instruction: {autolink_urls(task.instruction)}")
     if task.deps:
         body.append(f"- depends on: {', '.join(task.deps)}")
     if task.covers:
         body.append(f"- covers: {', '.join(task.covers)}")
     if task.acceptance_criteria:
         body.append("- acceptance:")
-        body.extend(f"  - {a}" for a in task.acceptance_criteria)
-    lines = [f"### {task.id} — {task.summary}{mark}"]
+        body.extend(f"  - {autolink_urls(a)}" for a in task.acceptance_criteria)
+    lines = [f"### {task.id} — {heading_safe(task.summary)}{mark}"]
     if body:
         # Blank line between the heading and its list (MD022/MD032).
         lines += ["", *body]
@@ -76,14 +77,14 @@ def _task_lines(task: Task) -> list[str]:
 
 def render_plan(plan: Plan, frame: Optional[Frame]) -> str:
     out = [
-        f"# Build Plan — {plan.title}",
+        f"# Build Plan — {heading_safe(plan.title)}",
         "",
         f"slug: `{plan.slug}` · status: `{plan.status}` · from frame: `{plan.frame_slug}`",
         "",
     ]
     ann = _announcement(frame)
     if ann:
-        out += ["> " + ann, ""]
+        out += ["> " + autolink_urls(ann), ""]
 
     tasks = [t for t in plan.tasks if t.status != "rejected"]
     if tasks:
@@ -95,7 +96,7 @@ def render_plan(plan: Plan, frame: Optional[Frame]) -> str:
         out += ["## Risks", ""]
         for r in plan.risks:
             suffix = f" (task {r.task_id})" if r.task_id else ""
-            out.append(f"- [{r.kind}] {r.text}{suffix}")
+            out.append(f"- [{r.kind}] {autolink_urls(r.text)}{suffix}")
         out.append("")
 
     return "\n".join(out).rstrip() + "\n"

{devague-0.17.0 → devague-0.17.2}/devague/render/spec_md.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 from devague.frame import Claim, Frame, HonestyCondition
+from devague.render._md_safety import autolink_urls, heading_safe
 
 
 def _claims(frame: Frame, kind: str) -> list[Claim]:
@@ -14,13 +15,13 @@ def _instruction_lines(instruction: str, indent: str = "  ") -> list[str]:
     when the item carries no instruction — never fabricated filler (#53 t1/t6,
     c10/h3).
     """
-    return [f"{indent}- instruction: {instruction}"] if instruction else []
+    return [f"{indent}- instruction: {autolink_urls(instruction)}"] if instruction else []
 
 
 def _claim_bullets(claims: list[Claim], prefix: str = "") -> list[str]:
     out: list[str] = []
     for c in claims:
-        out.append(f"- {prefix}{c.text}")
+        out.append(f"- {prefix}{autolink_urls(c.text)}")
         out += _instruction_lines(c.instruction)
     return out
 
@@ -32,7 +33,7 @@ def _text_section(heading: str, texts: list[str]) -> list[str]:
     """
     if not texts:
         return []
-    return [f"## {heading}", "", *[f"- {t}" for t in texts], ""]
+    return [f"## {heading}", "", *[f"- {autolink_urls(t)}" for t in texts], ""]
 
 
 def _claim_section(heading: str, claims: list[Claim]) -> list[str]:
@@ -62,12 +63,12 @@ def _requirements_block(frame: Frame) -> list[str]:
         return []
     out = ["## Requirements", ""]
     for c in reqs:
-        out.append(f"- {c.text}")
+        out.append(f"- {autolink_urls(c.text)}")
         out += _instruction_lines(c.instruction)
         for h in c.honesty_conditions:
             if h.status != "confirmed":
                 continue
-            out.append(f"  - honesty: {h.text}")
+            out.append(f"  - honesty: {autolink_urls(h.text)}")
             out += _instruction_lines(h.instruction, indent="    ")
     return out + [""]
 
@@ -95,14 +96,14 @@ def _honesty_section(heading: str, honesties: list[HonestyCondition]) -> list[st
         return []
     out = [f"## {heading}", ""]
     for h in honesties:
-        out.append(f"- {h.text}")
+        out.append(f"- {autolink_urls(h.text)}")
         out += _instruction_lines(h.instruction)
     return out + [""]
 
 
 def _hard_questions(frame: Frame) -> list[str]:
     hqs = [q for c in frame.claims for q in c.hard_questions]
-    bullets = [f"- {q.text}" + (" (blocking)" if q.blocking else "") for q in hqs]
+    bullets = [f"- {autolink_urls(q.text)}" + (" (blocking)" if q.blocking else "") for q in hqs]
     return ["## Hard questions", "", *bullets, ""] if hqs else []
 
 
@@ -119,20 +120,20 @@ def _scope_section(frame: Frame) -> list[str]:
         return []
     out = ["## Scope exploration", ""]
     for e in frame.scope_entries:
-        out.append(f"- `{e.id}` — `{e.surface}`: {e.finding}")
+        out.append(f"- `{e.id}` — `{e.surface}`: {autolink_urls(e.finding)}")
         if e.seeds:
             out.append(f"  - seeds: {', '.join(f'`{s}`' for s in e.seeds)}")
     return out + [""]
 
 
 def render_spec(frame: Frame) -> str:
-    out: list[str] = [f"# {frame.title}", ""]
+    out: list[str] = [f"# {heading_safe(frame.title)}", ""]
     ann_claims = _claims(frame, "announcement")
     if ann_claims:
         ann = ann_claims[0]
-        out.append("> " + ann.text)
+        out.append("> " + autolink_urls(ann.text))
         if ann.instruction:
-            out.append(f"> instruction: {ann.instruction}")
+            out.append(f"> instruction: {autolink_urls(ann.instruction)}")
         out.append("")
     out += _claim_section("Audience", _claims(frame, "audience"))
     out += _before_after(frame)

{devague-0.17.0 → devague-0.17.2}/docs/skill-sources.md

@@ -11,7 +11,7 @@ explicitly — these copies do not auto-update.
 
 **Upstream provenance.** All eight inbound skills come from
 [`agentculture/guildmaster`](https://github.com/agentculture/guildmaster),
-**MIT**-licensed (the same license as devague). The canonical kit (`cicd`,
+**MIT**-licensed; the retained MIT notice is in `LICENSES/MIT-guildmaster-skills.txt`. devague itself is Apache-2.0 licensed. The canonical kit (`cicd`,
 `communicate`, `version-bump`, `run-tests`, `sonarclaude`, `doc-test-alignment`)
 was first vendored from `steward` at commit
 [`21414a9`](https://github.com/agentculture/steward/commit/21414a9) (2026-05-22)
@@ -20,7 +20,7 @@ and re-synced from the guildmaster checkout at commit
 (2026-05-24, guildmaster 0.5.1); `agent-config` and `pypi-maintainer` were
 vendored fresh from the same guildmaster checkout. The table records each skill's
 re-vendor path, the vendoring date, and any local divergence; license (MIT) and
-upstream repo are shared across all rows.
+upstream repo are shared across all inbound rows.
 
 | Skill | Re-vendor from | Vendored | Runtime backing & notes |
 |-------|----------------|----------|-------------------------|

{devague-0.17.0 → devague-0.17.2}/pyproject.toml

@@ -1,15 +1,17 @@
 [project]
 name = "devague"
-version = "0.17.0"
+version = "0.17.2"
+
 description = "devague — turns a vague feature idea into a buildable spec, then a buildable plan."
 readme = "README.md"
-license = "MIT"
+license = "Apache-2.0"
+license-files = ["LICENSE", "LICENSES/*"]
 requires-python = ">=3.12"
 authors = [{name = "AgentCulture"}]
 classifiers = [
     "Development Status :: 3 - Alpha",
     "Programming Language :: Python :: 3.12",
-    "License :: OSI Approved :: MIT License",
+    "License :: OSI Approved :: Apache Software License",
     "Topic :: Software Development",
     "Intended Audience :: Developers",
 ]