chore(ci): add PR lint workflow and SPDX header pre-commit hook

.githooks/pre-commit

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+#
+# Pre-commit checks:
+#   1. cargo fmt --check
+#   2. SPDX license headers on staged source files
+#
+# Bypass with: git commit --no-verify
+
+if command -v cargo >/dev/null 2>&1; then
+  if ! cargo fmt --all --check 2>/dev/null; then
+    echo "pre-commit: cargo fmt found unformatted code."
+    echo ""
+    echo "  Run: cargo fmt --all"
+    echo "  Bypass with: git commit --no-verify"
+    exit 1
+  fi
+fi
+
+# Check SPDX license headers on staged source files
+mapfile -t staged < <(
+    git diff --cached --name-only --diff-filter=d -- '*.rs' '*.proto' '*.py' '*.sh' '**/Dockerfile*'
+)
+
+if [ ${#staged[@]} -gt 0 ]; then
+  REPO_ROOT="$(git rev-parse --show-toplevel)"
+  "$REPO_ROOT/scripts/check-license-headers.sh" "${staged[@]}" || exit 1
+fi

.github/workflows/pr-lint.yml

@@ -0,0 +1,37 @@
+name: PR Lint
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize]
+
+permissions:
+  contents: read
+
+jobs:
+  validate-pr-title:
+    runs-on: ubuntu-latest
+    env:
+      PATTERN: "^(feat|fix|docs|style|refactor|perf|test|build|ci|chore|revert)(\\([a-zA-Z0-9_-]+\\))?!?: .+$"
+
+    steps:
+      - name: Validate PR title
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          echo "Checking PR title: '$PR_TITLE'"
+          if ! echo "$PR_TITLE" | grep -Eq "$PATTERN"; then
+            echo "FAIL: PR title does not match conventional commits format."
+            echo "Expected: type(scope): description  (e.g. 'feat(spur-cloud-api): add session API')"
+            echo "Valid types: feat fix docs style refactor perf test build ci chore revert"
+            exit 1
+          fi
+          echo "PASS: PR title is valid."
+
+  license-headers:
+    name: SPDX License Headers
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check SPDX license headers
+        run: ./scripts/check-license-headers.sh

crates/spur-cloud-api/src/auth/github.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{
     extract::{Query, State},
     http::StatusCode,

crates/spur-cloud-api/src/auth/jwt.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use chrono::{Duration, Utc};
 use jsonwebtoken::{decode, encode, DecodingKey, EncodingKey, Header, Validation};
 use serde::{Deserialize, Serialize};

crates/spur-cloud-api/src/auth/middleware.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{
     extract::{Request, State},
     http::StatusCode,

crates/spur-cloud-api/src/auth/mod.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 pub mod github;
 pub mod jwt;
 pub mod middleware;

crates/spur-cloud-api/src/auth/oidc_common.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::http::HeaderMap;
 use serde::Deserialize;
 use tracing::debug;

crates/spur-cloud-api/src/auth/okta.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{
     extract::{Query, State},
     http::StatusCode,

crates/spur-cloud-api/src/auth/principal.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use uuid::Uuid;
 
 /// Authenticated caller normalized at the application boundary.

crates/spur-cloud-api/src/config.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use serde::Deserialize;
 
 #[derive(Debug, Clone, Deserialize, Default, PartialEq)]

crates/spur-cloud-api/src/db/billing_repo.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use chrono::{DateTime, Utc};
 use serde::Serialize;
 use sqlx::PgPool;

crates/spur-cloud-api/src/db/migrations.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use sqlx::PgPool;
 use tracing::info;
 

crates/spur-cloud-api/src/db/mod.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 pub mod billing_repo;
 pub mod migrations;
 pub mod session_repo;

crates/spur-cloud-api/src/db/session_repo.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use chrono::Utc;
 use sqlx::PgPool;
 use uuid::Uuid;

crates/spur-cloud-api/src/db/ssh_key_repo.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use sqlx::PgPool;
 use uuid::Uuid;
 

crates/spur-cloud-api/src/db/user_repo.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use sqlx::PgPool;
 use uuid::Uuid;
 

crates/spur-cloud-api/src/main.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 mod auth;
 mod config;
 mod db;

crates/spur-cloud-api/src/models/mod.rs

@@ -1,2 +1,5 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 pub mod session;
 pub mod user;

crates/spur-cloud-api/src/models/session.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use chrono::{DateTime, Utc};
 use serde::Serialize;
 use uuid::Uuid;

crates/spur-cloud-api/src/models/user.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use chrono::{DateTime, Utc};
 use serde::{Deserialize, Serialize};
 use uuid::Uuid;

crates/spur-cloud-api/src/routes/admin.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::extract::State;
 use axum::{http::StatusCode, response::IntoResponse, Extension, Json};
 use serde::Deserialize;

crates/spur-cloud-api/src/routes/auth.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{extract::State, http::StatusCode, response::IntoResponse, Json};
 use serde::{Deserialize, Serialize};
 

crates/spur-cloud-api/src/routes/billing.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{
     extract::{Query, State},
     http::StatusCode,

crates/spur-cloud-api/src/routes/gpus.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{extract::State, http::StatusCode, response::IntoResponse, Json};
 use tracing::error;
 

crates/spur-cloud-api/src/routes/health.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{extract::State, http::StatusCode, response::IntoResponse};
 
 use crate::state::AppState;

crates/spur-cloud-api/src/routes/mod.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 pub mod admin;
 pub mod auth;
 pub mod billing;

crates/spur-cloud-api/src/routes/sessions.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{
     extract::{Path, Query, State},
     http::StatusCode,

crates/spur-cloud-api/src/routes/users.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{
     extract::{Path, State},
     http::StatusCode,

crates/spur-cloud-api/src/routes/ws.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::{
     extract::{Path, State, WebSocketUpgrade},
     http::StatusCode,

crates/spur-cloud-api/src/spur_client.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use std::collections::{BTreeMap, HashMap};
 
 use kube::api::{Api, DeleteParams, PostParams};

crates/spur-cloud-api/src/ssh/mod.rs

@@ -1 +1,4 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 pub mod service_manager;

crates/spur-cloud-api/src/ssh/service_manager.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use k8s_openapi::api::core::v1::{Service, ServicePort, ServiceSpec};
 use k8s_openapi::apimachinery::pkg::util::intstr::IntOrString;
 use kube::api::{Api, DeleteParams, ObjectMeta, PostParams};

crates/spur-cloud-api/src/state.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use std::sync::Arc;
 
 use sqlx::PgPool;

crates/spur-cloud-api/src/terminal/mod.rs

@@ -1 +1,4 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 pub mod ws_handler;

crates/spur-cloud-api/src/terminal/ws_handler.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use axum::extract::ws::{Message, WebSocket};
 use futures_util::{SinkExt, StreamExt};
 use k8s_openapi::api::core::v1::Pod;

crates/spur-cloud-api/src/update.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 //! Auto-update check for spur-cloud-api.
 //!
 //! On startup, queries the GitHub releases API for ROCm/spur-cloud

crates/spur-cloud-common/src/gpu_types.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use serde::{Deserialize, Serialize};
 
 #[derive(Debug, Clone, Serialize, Deserialize)]

crates/spur-cloud-common/src/lib.rs

@@ -1,2 +1,5 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 pub mod gpu_types;
 pub mod session_types;

crates/spur-cloud-common/src/session_types.rs

@@ -1,3 +1,6 @@
+// Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
 use chrono::{DateTime, Utc};
 use serde::{Deserialize, Serialize};
 use uuid::Uuid;

deploy/docker/Dockerfile.api

@@ -1,3 +1,6 @@
+# Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 # Multi-stage build for spur-cloud-api
 FROM rust:1.88-bookworm AS builder
 

deploy/docker/Dockerfile.frontend

@@ -1,3 +1,6 @@
+# Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 # Multi-stage build for spur-cloud frontend
 FROM node:20-alpine AS builder
 

deploy/docker/Dockerfile.session

@@ -1,3 +1,6 @@
+# Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 # Base GPU session image with sshd
 # Build for AMD ROCm GPUs
 FROM rocm/pytorch:latest

deploy/docker/gpuaas-entrypoint.sh

@@ -1,4 +1,7 @@
 #!/bin/bash
+# Copyright (c) 2026 Advanced Micro Devices, Inc. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 set -e
 
 # Inject SSH keys from environment variable