* docs: add AGPL extension exception for third-party plugins
Extensions that interact solely through the documented Extension API
(Extension interface, ExtensionContext, event bus) are not considered
derivative works and may be licensed under any terms, including
proprietary. Core modifications remain fully AGPL-3.0.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* docs: address review — explicit route path, precise irrevocability, revert security email
- Name the catch-all route file explicitly in the extension exception
- Clarify that irrevocability binds the copyright holder, not downstream
redistributors (per AGPL section 7 removal rights)
- Revert SECURITY.md to role-based security@arcim.io alias
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Add LICENSE (AGPL-3.0-or-later), CONTRIBUTING.md, SECURITY.md, DCO, and NOTICE files.
Rewrite README for open-source audience with self-hosting instructions.
Redesign color palette to grayscale chrome theme across all components.
Add transaction uncategorize API route with tests.
Fix VAT account name mismatches in migration 052.
Improve import page with SIE file support and loading skeleton.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
