4 files changed, 10 insertions, 0 deletions
diff --git a/packages/meshbay-client/package.json b/packages/meshbay-client/package.json
index 8a1fec7..a13c0ab 100644
--- a/packages/meshbay-client/package.json
+++ b/packages/meshbay-client/package.json
@@ -53,6 +53,10 @@
         {
           "from": "../../packaging/win/ensure-node-path.ps1",
           "to": "ensure-node-path.ps1"
+        },
+        {
+          "from": "../../LICENSE",
+          "to": "LICENSE.txt"
         }
       ]
     },
diff --git a/packages/meshbay-client/src/argon2-wasm.js b/packages/meshbay-client/src/argon2-wasm.js
index c68e994..4660414 100644
--- a/packages/meshbay-client/src/argon2-wasm.js
+++ b/packages/meshbay-client/src/argon2-wasm.js
@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: LGPL-3.0-or-later
+// Part of MeshBay's protocol layer, under the LGPL so that any client may use it.
 /**
  * Argon2id for the main process, from the page's own WebAssembly build.
  *
diff --git a/packages/meshbay-client/src/keyring.js b/packages/meshbay-client/src/keyring.js
index ec37fd4..c9997aa 100644
--- a/packages/meshbay-client/src/keyring.js
+++ b/packages/meshbay-client/src/keyring.js
@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: LGPL-3.0-or-later
+// Part of MeshBay's protocol layer, under the LGPL so that any client may use it.
 /**
  * The account's keys in the desktop application: the bundle master key `M` and
  * the identity on every node, held here and never handed to the page.
diff --git a/packages/meshbay-client/src/transcripts.js b/packages/meshbay-client/src/transcripts.js
index 8b0f6ef..a58cb24 100644
--- a/packages/meshbay-client/src/transcripts.js
+++ b/packages/meshbay-client/src/transcripts.js
@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: LGPL-3.0-or-later
+// Part of MeshBay's protocol layer, under the LGPL so that any client may use it.
 /**
  * What a node identity signs, built here from named fields — never bytes the
  * page chose.