Contributing

Thank you for your interest in contributing.

This repository is dual-licensed — runner/, mcp/, and packs/ under the Apache License 2.0, everything else under the Business Source License 1.1 (see NOTICE.md). Contributions are welcome, but contributions must follow the applicable license, this guide, and any Contributor License Agreement required by the maintainers.

Ground Rules

By contributing, you agree that:

1. you have the right to submit the contribution;
2. your contribution does not violate any third-party license, employment agreement, confidentiality obligation, NDA, invention assignment agreement, or law;
3. your contribution is submitted under the repository license and any required Contributor License Agreement;
4. your contribution may be used, modified, relicensed, sublicensed, commercialized, or removed by the project owner;
5. your contribution is not submitted for the purpose of reproducing, cloning, competing with, or extracting the project;
6. your contribution does not intentionally include malicious code, backdoors, secrets, credentials, tracking beacons, or undisclosed telemetry.

Contributor License Agreement

Before a contribution can be merged, you may be required to sign CLA.md or another CLA approved by the project owner.

A CLA helps confirm that:

• you are allowed to contribute;
• the project can use and redistribute your contribution;
• the project can relicense or commercialize the contribution if needed;
• contribution ownership is clear.

AI-Assisted Contributions

You may use AI-assisted developer tools only if all of the following are true:

1. you have the legal right to submit the generated or assisted work;
2. the tool's terms allow your use and submission;
3. the work does not copy protected third-party code or confidential material;
4. the contribution is reviewed and understood by you;
5. you disclose material AI assistance when requested by maintainers.

Do not submit AI-generated code that you do not understand.

Do not submit code generated from another project's proprietary, source-available, or incompatible licensed code.

Development Process

1. Open an issue for significant changes before starting work.
2. Keep pull requests focused and small.
3. Include tests for behavior changes.
4. Update documentation when behavior changes.
5. Follow the project's formatting and linting rules.
6. Avoid introducing new dependencies unless necessary.
7. Explain the motivation and tradeoffs in the pull request description.

Pull Request Checklist

Before opening a pull request, confirm:

• I have read LICENSE.md (and, for runner//mcp//packs/, the Apache-2.0 LICENSE there).
• I have read and agree to this CONTRIBUTING.md.
• I have the right to submit this contribution.
• This contribution does not include confidential information.
• This contribution does not include secrets, credentials, private keys, tokens, or production data.
• This contribution does not include third-party code without compatible licensing and attribution.
• Tests and documentation are updated where appropriate.
• I have disclosed material AI assistance if applicable.

Security Issues

Do not report security vulnerabilities in public issues.

Follow SECURITY.md.

Code of Conduct

Be respectful, direct, and constructive.

Maintainers may close issues, reject pull requests, or block users for harassment, spam, abuse, legal risk, security risk, or conduct that harms the project.

License

By submitting a contribution, you agree that it may be used under the repository license and any additional rights granted in the applicable Contributor License Agreement.