docs: adopt MIT license

Author: thonatos

LICENSE

@@ -1,7 +1,24 @@
-# License Status
+MIT License
 
-No open source license has been selected for the current `cnode-next` repository yet.
+Copyright (c) 2026 CNode contributors
 
-Until a license is explicitly added by the project maintainers, this repository is all rights reserved by its respective copyright holders. Do not assume MIT, Apache-2.0, or any other license.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
 
-The legacy `../nodeclub/` directory is outside this repository and is used only as a behavioral reference during migration. Its presence on the same machine does not define or change the license status of this repository, and this repository does not grant rights to that external code.
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Legacy `../nodeclub/` reference code is outside this repository and is not
+licensed by this file.

docs/deployments/release-readiness-2026-07-28.md

@@ -52,12 +52,12 @@ flowchart LR
 | API reference and OAS | Pass |
 | Web/OAS contract integration | Pass |
 | CONTRIBUTING | Pass |
-| LICENSE status | Pass, no project license selected yet |
+| LICENSE status | Pass, MIT |
 | SECURITY reporting entry | Pass |
 
 ## Known Residual Risks
 
-- Final release commit and image SHA tags cannot be filled until the changes are committed and GHCR images are published.
+- Final release commit and image SHA tags cannot be filled until the latest changes are committed and GHCR images are published.
 - Production deployment still requires an explicit operator action on the server and must not print real `.env` values.
 - `pnpm-lock.yaml` still contains `drizzle-orm` optional peer dependency names for SQLite packages; these are package metadata from Drizzle, not active runtime dependencies or configured install paths.
 - React Router build prints future v8 warnings; the project remains on React Router v7.

openspec/changes/reach-production-grade-release-readiness/design.md

@@ -130,4 +130,4 @@ Rollback 策略：生产部署前记录当前 `CNODE_API_IMAGE`、`CNODE_WEB_IMA
 - GitHub Actions 是否继续保留 `latest` 便利 tag，还是完全停止推送 `latest`？生产必须不依赖它。
 - `/health` 是否需要提供深度依赖检查模式，例如 `/health?deep=1` 检查 PostgreSQL 和 Redis？
 - 部署审计记录放在仓库 `docs/deployments/`、服务器目录，还是外部运维日志？
-- `LICENSE` 采用 MIT、Apache-2.0 还是沿用 legacy CNode/nodeclub 的许可证策略？
+- `LICENSE` 已采用 MIT，并明确 legacy `../nodeclub/` 参考代码不受当前仓库许可证约束。

package.json

@@ -2,6 +2,7 @@
   "name": "cnode-next",
   "version": "0.1.0",
   "private": true,
+  "license": "MIT",
   "type": "module",
   "scripts": {
     "dev": "concurrently -n web,api -c blue,green \"pnpm --filter @cnode/web dev\" \"pnpm --filter @cnode/api dev\"",