Files
Meldwork/CONTRIBUTING.md
Ryder Sun eac015dbfa refactor: remove the managed shared Provider capability
Each Agent CLI now runs only with its own native credentials. The central
path of configuring one provider inside Meldwork for every Agent added
instability without being realistic to maintain, and it depended on
machine-local configuration details.

- Delete the provider store/options modules, the local-agent-provider IPC
  handlers and preload API, per-CLI env injection (CODEBUDDY_*/ANTHROPIC_*/
  KIMI_* ...), the managed OpenClaw provider runtime, and shared-provider
  catalog gating; startup removes the legacy encrypted
  meldwork-provider.json.
- OpenClaw always resolves its native runtime now; native credential
  passthrough, the isolated gateway/guard runtime, and the
  runtime-auth-failure state machine stay unchanged.
- Remove the Provider settings UI, onboarding slide, providerMode display,
  ~100 i18n keys per language, provider CSS, and update the architecture,
  security, and discoverability docs to the native-credentials boundary.

Checks: npm --prefix desktop test (1512 pass), npm --prefix frontend test
(325 pass), frontend build and build:desktop, desktop pack.
2026-10-14 16:59:21 +08:00

1.2 KiB

Contributing

Meldwork is licensed under the Apache License 2.0. Contributions are welcome when they improve the local-first desktop product, documentation, tests, or security posture.

Unless a separate written agreement applies, a contribution accepted into this repository is available under the repository license. Opening a pull request does not transfer copyright beyond the rights granted by the Apache License 2.0.

Ground Rules

  • Keep changes small and tied to a clear product or engineering need.
  • Do not submit secrets, tokens, private logs, private prompts, or user data.
  • Do not add remote services, telemetry, credential collection, or server dependencies without explicit project approval.
  • Preserve the local-first boundary: renderer code must not gain unrestricted filesystem, shell, credential, or executable-path access.
  • Include focused tests for behavior, security boundary, storage, or IPC changes.
  • Confirm that all submitted code and assets are yours to contribute and do not introduce incompatible license obligations.

Community Standards

Please follow the Code of Conduct in issues, pull requests, discussions, and other project spaces.