Update licensing to AGPL-3.0-only

.github/pull_request_template.md

@@ -0,0 +1,8 @@
+## Summary
+
+
+## Checklist
+
+- [ ] I have read and agree to the SecFlow Contributor License Agreement in `CLA.md`, or I have already accepted it through an approved CLA workflow.
+- [ ] I ran the relevant build and test commands for this change.
+

CLA.md

@@ -0,0 +1,82 @@
+# SecFlow Contributor License Agreement
+
+Thank you for contributing to SecFlow. This Contributor License Agreement
+("Agreement") explains the rights you grant when you submit source code,
+documentation, configuration, tests, issue text, pull request text, or other
+copyrightable material to the SecFlow project ("Contribution").
+
+This Agreement is intended to confirm that Contributions can be distributed as
+part of SecFlow under the project's open source license. It does not transfer
+copyright ownership of your Contribution.
+
+## 1. Definitions
+
+"You" means the individual or legal entity making a Contribution.
+
+"Maintainers" means Brian Corder, Ozark Security Labs, and any successor
+maintainer designated for the SecFlow project.
+
+"Project License" means the GNU Affero General Public License version 3 only
+(`AGPL-3.0-only`), as stated in the SecFlow repository.
+
+"Contribution" means any original work of authorship that you intentionally
+submit for inclusion in SecFlow, including any modifications or additions to
+existing project material.
+
+## 2. Copyright License
+
+You grant the Maintainers a perpetual, worldwide, non-exclusive, no-charge,
+royalty-free, irrevocable copyright license to reproduce, prepare derivative
+works of, publicly display, publicly perform, and distribute your Contribution
+and derivative works of your Contribution as part of SecFlow under the Project
+License. You agree that downstream recipients receive rights to your
+Contribution under the Project License.
+
+## 3. Patent License
+
+You grant the Maintainers and all recipients of SecFlow a perpetual,
+worldwide, non-exclusive, no-charge, royalty-free, irrevocable patent license
+to make, have made, use, offer to sell, sell, import, and otherwise transfer
+your Contribution, where such license applies only to patent claims that you
+can license and that are necessarily infringed by your Contribution alone or by
+combination of your Contribution with SecFlow as submitted.
+
+## 4. Your Representations
+
+By submitting a Contribution, you represent that at least one of the following
+is true:
+
+- You created the Contribution and have the right to submit it under this
+  Agreement.
+- The Contribution is based on previous work that is available under an
+  appropriate open source license, and you have the right to submit your
+  modifications under this Agreement.
+- The Contribution was provided to you by someone who certified that they had
+  the right to submit it, and you have not modified it.
+
+You also represent that:
+
+- If your employer or another party has rights to your Contribution, you have
+  received permission to submit it under this Agreement.
+- You are not knowingly submitting material that violates a third party's
+  copyright, patent, trademark, trade secret, or other rights.
+- You will identify any third-party material included in your Contribution when
+  that material is not already clearly identified in the submitted files.
+
+## 5. No Warranty
+
+Your Contribution is provided on an "AS IS" basis, without warranties or
+conditions of any kind, express or implied, including warranties of title,
+non-infringement, merchantability, or fitness for a particular purpose.
+
+## 6. Public Record
+
+You understand that Contributions, commit metadata, pull request comments, and
+records of CLA acceptance may be public and may be maintained indefinitely in
+connection with the SecFlow project.
+
+## 7. Acceptance
+
+You accept this Agreement by submitting a Contribution after this Agreement is
+published, by signing through an approved CLA workflow, or by confirming in a
+pull request that you have read and agree to this Agreement.

CONTRIBUTING.md

@@ -0,0 +1,30 @@
+# Contributing to SecFlow
+
+Thank you for helping improve SecFlow.
+
+## License
+
+SecFlow is licensed under the GNU Affero General Public License version 3 only
+(`AGPL-3.0-only`). By contributing to SecFlow, you agree that your
+Contribution is submitted under the SecFlow Contributor License Agreement in
+[CLA.md](CLA.md).
+
+## Contributor License Agreement
+
+All non-trivial contributions require CLA acceptance before merge. You can
+accept the CLA by signing through an approved CLA workflow, or by confirming in
+your pull request that you have read and agree to [CLA.md](CLA.md).
+
+If you are contributing on behalf of an employer or another organization,
+please make sure you are authorized to submit the contribution under the CLA.
+
+## Development
+
+Install dependencies, build, and run tests before opening a pull request:
+
+```bash
+npm install
+npm run build
+npm test
+```
+