license: relicense door-kit from PolyForm-Noncommercial-1.0.0 to MIT

[claude]

Part of the org-wide collapse of the licence tiering to a single licence: every published @bounded-systems package declares MIT, the runtime included — bounded-systems/.github-private#669 (supersedes #659).

door-kit is one of only two packages still declaring PolyForm; guest-room is the other.

Why

The split held noncommercial protection on the door/room runtime for its option value — charging for it later. That option is not going to be exercised: profit, if pursued, comes from new software rather than from monetising this codebase.

Meanwhile PolyForm is not OSI-approved and not in GitHub's recognised licence set, so this repo currently reports no spdxIdentifier at all — no badge, "license": null in the API (verified today against GET /repos/bounded-systems/door-kit). That also excludes it from pkg.go.dev's redistributable allowlist and from clean crates.io metadata.

Scope

• jsr.json — license → MIT
• package.json — license → MIT
• add a root LICENSE with the standard MIT text, Copyright (c) 2026 Robert DeLanghe (matching the other eight relicensed repos; the org is not a legal entity, so copyright vests in the individual author). This repo has no LICENSE file at all today, even though jsr.json's publish.include already lists one — so published tarballs have been shipping without the licence they claim to include.
• minor version bump so the next published version carries MIT

One-way door

Per published version. Every version from here is MIT forever; already-published versions stay under PolyForm. Understood and intended.

Not in scope

Tagging/publishing. The lic gate reads each package's latest published version, so it stays red until door-kit is released — and releasing is gated on a broker credential that does not exist yet (bounded-systems/.github#243).

---

Generated by Claude Code

[claude]

🎫 Claimed by claude/license-mit-door-kit — claimed by hand, because the claim window was down.

The window was down. claim-ticket.yml in bounded-systems/.github could not be dispatched from this session. Every bounded-systems/.github API endpoint (contents, actions, workflow dispatches) returns 403 GitHub access to this repository is not enabled for this session, and the session tooling structurally refuses to attach it — a repository whose name begins with . cannot be added to a session. So the ticket window was unreachable, not merely red.

This is the hand fallback the org CLAUDE.md prescribes for exactly that case ("Window unreachable → claim by hand (assign + comment) and say the window was down"), recorded in the shape claim-ticket.yml defines a claim to be: the claimed label plus this marker comment naming the claimant. It carries none of the window's guarantees — there is no serializer behind it, so it does not defend against a racing claim. The issue was verified unassigned and unlabelled immediately before this comment.

Release by removing the claimed label (and unassigning) if work stops without a merged PR.

---

Generated by Claude Code