Contributing

Vibe Bar is early public-release software. Focused provider adapters, fixtures, tests, and interface refinements are welcome.

Before you start

Read these repository documents:

• CONTRIBUTING.md
• AGENTS.md
• SECURITY.md

Development principles

• Keep heavy logic in VibeBarCore and UI glue in VibeBarApp.
• Keep JSONL scanning linear.
• Scope live timers to visible UI surfaces.
• Preserve consistent provider layouts and semantics.
• Treat provider contracts as unstable and cover adapters with fixtures.

Privacy rules

Do not commit:

• real tokens, cookies, JWTs, organization IDs, account IDs, or email addresses;
• personal /Users/<name> paths;
• raw credentials or unsanitized session logs.

Use /Users/example/... when a fixture needs a home-directory path.

Branch and verification

Create a focused topic branch from the latest main. Before opening a pull request, run:

swift build
swift test
./Scripts/build_app.sh release
codesign -d --entitlements - ".build/Vibe Bar.app"

Explain the affected provider or workflow, the evidence used to verify it, and any remaining compatibility risk in the pull request.

Security reports

Use GitHub private vulnerability reporting when available. Otherwise, open a minimal public issue without secrets and request a private channel.