chore(legal): add NOTICE + SPDX headers across web/ (#93)

Codify attribution before the sidebar gets more visibility. NOTICE is the
single human-readable source of truth — copyright statement, plain-English
attribution request with a copy-pasteable credit line, pointer to LICENSE
and forks/THIRD_PARTY.md so it shows the project respects others'
attribution too.

SPDX-FileCopyrightText / SPDX-License-Identifier headers added at the top
of every web/*.js (entry point + sidebar/ + ai_pipeline) so license
scanners (GitHub, FOSSA, reuse-tool) parse each file correctly and
stripped-attribution forks become an obviously deliberate act rather than
"I forgot to copy a file."

GPL-3.0-only matches the LICENSE file (no "or later" wording in it). Year
range 2025-2026 spans first commit (2025-09-28) to today.

Comment-only change — no runtime impact.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

NOTICE

@@ -0,0 +1,34 @@
+ComfyUI-Koolook — NOTICE
+========================
+
+Copyright (C) 2025-2026 Kforge Labs (https://github.com/malkuthro)
+Project: https://github.com/malkuthro/ComfyUI-Koolook
+
+This package is licensed under GPL-3.0 — see LICENSE for the full text.
+
+
+Attribution
+-----------
+
+If you fork, redistribute, or build on top of this code — including the
+"Kforge Labs" ComfyUI sidebar (web/koolook_sidebar.js + web/sidebar/) —
+please:
+
+  1. Keep the SPDX header at the top of each source file intact.
+
+  2. Credit the origin in your README or about page, for example:
+
+       Includes work from Kforge Labs / ComfyUI-Koolook
+       (https://github.com/malkuthro/ComfyUI-Koolook), licensed GPL-3.0.
+
+  3. Release your derivative under GPL-3.0 (per LICENSE §5).
+
+
+Third-party code
+----------------
+
+Third-party code incorporated into this package is tracked in
+forks/THIRD_PARTY.md and forks/forks_manifest.yaml. Each entry lists
+its upstream license and verification date. We ask the same courtesy
+of attribution for our own work that we extend to the upstreams we
+build on.

web/ai_pipeline.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 import { app } from "../../../scripts/app.js";
 import { ComfyWidgets } from "../../../scripts/widgets.js";
 

web/koolook_sidebar.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Koolook curated-nodes sidebar — entry point.
 //

web/sidebar/canvas_io.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Canvas IO — anything that touches `app.graph` or `app.canvas` directly.
 // Selection serialization prunes cross-boundary links so a saved selection

web/sidebar/canvas_menu.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Right-click context menu on canvas nodes — adds to favorites.
 //

web/sidebar/constants.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Configuration — static "always shown" entries.
 //

web/sidebar/installer.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // ComfyUI-Manager API client + pick → install resolver.
 //

web/sidebar/modals.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Modal + context-menu DOM. The shell takes care of the Escape-key / overlay-
 // click / Cancel / OK dismissal paths and ties the document-level keydown

web/sidebar/node_preview.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Node preview — hover card for sidebar leaf rows.
 //

web/sidebar/picks_store.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // User picks (localStorage, browser-local persistence)
 // =============================================================================

web/sidebar/snapshot.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Snapshot / preset library (#46 item 1).
 //

web/sidebar/tree.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Sidebar tree — section-registry engine, data gathering, DOM row factories,
 // folder builder, context menus for workflow/directory rows, and the panel

web/sidebar/workflows_store.js

@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: 2025-2026 Kforge Labs <https://github.com/malkuthro/ComfyUI-Koolook>
+// SPDX-License-Identifier: GPL-3.0-only
+
 // =============================================================================
 // Workflows storage (ComfyUI /userdata API with localStorage fallback) +
 // transaction layer + in-memory mutation operations.