# Contributing

Install Bun 1.3.14 or newer and Node.js 24, then run:

```sh
bun install --frozen-lockfile
npm ci --prefix editors/vscode
bun run typecheck
bun run lint
bun run format:check
bun run test:all
bun run validate:0.8
```

Keep migrations conservative, backed up, idempotent, and covered by fixtures. Generated files
must be produced by their documented `generate:*` command and committed with their source change.
Security issues follow `SECURITY.md` and must not be disclosed publicly before a coordinated fix.