tools: REUSE gate checks the inline SPDX header

[futurebuildai]

Problem

A review found two new Go test files merged with no SPDX header, yet the License (REUSE) job passed. The cause: REUSE.toml annotates whole trees (core/**, web/apps/**, web/packages/** and so on), so reuse lint counts every file as licensed whether or not it carries the matching identifier and copyright lines inline. The house rule (BRIEF-COMMON: every new file carries the SPDX header its directory's licence row in LICENSE-MAP.md gives) is therefore invisible to the existing gate.

Fix

.github/scripts/reuse_gate.py now runs a second pass over git ls-files. A tracked file whose name ends in one of .go, .ts, .tsx, .js, .mjs, .sql, .py or .sh must carry an SPDX-License-Identifier: line and an SPDX-FileCopyrightText: line somewhere in its first ten lines. Anything that misses one or both is reported under a new missing_inline_header category and makes the gate exit 1. The module docstring was extended to explain why the inline check exists (so a future reader does not delete it thinking it duplicates reuse lint).

.github/workflows/ci.yml now runs the unit tests under the License (REUSE) job, before the gate itself.

Exempt list

Path	Reason
web/packages/api-client/src/schema.d.ts	generated by npm run generate (openapi-typescript); the generator owns the whole file and would overwrite any inline header on every run. The licence is supplied by the web/packages/** annotation in REUSE.toml.

Adding another generated file later is a one-line addition to INLINE_EXEMPT with a one-line reason.

Flagged list on origin/refactor/v1 before this change

Exactly one tracked file was missing the inline header: web/packages/api-client/src/schema.d.ts (the exempt file above). Nothing else was flagged.

Test

.github/scripts/test_reuse_gate.py (its own SPDX header copied from reuse_gate.py) uses unittest only and a throwaway git repository. The five cases are:

1. a file with both lines present passes;
2. a file missing the identifier line fails;
3. a file missing the copyright line fails;
4. an exempt file at the production exempt location passes;
5. a file in a non-matching extension (README.md, schema.json) is ignored.

Run it with python3 .github/scripts/test_reuse_gate.py from the checkout root, or with the discover form (python3 -m unittest discover -s .github/scripts -p test_reuse_gate.py from the same root).

🤖 Generated with Claude Code