Contributing

Use Node.js 22.14+ (22 or 24) and the lockfile.

npm ci
npm run build
npm run test:coverage
npm audit --audit-level=moderate

Tests use real DuckDB spatial reads and temporary GeoParquet/GeoJSON fixtures; first run needs official extension-repository access. No ArcGIS/cloud account is needed locally.

Update API/configuration/operational docs with behavior changes. Add regression tests for correctness, authorization, native behavior, and lifecycle/resource failures. Keep user values parameterized, identifiers restricted, IDs stable, and full-fetch complete.

Core files live directly under src. Experimental modules must remain outside the runtime/package until their roadmap acceptance criteria are met. Promotion requires real adapters, integration tests, documented authorization/resource boundaries, and operational qualification.

Inspect npm pack --dry-run before releasing. CI validates Helm and blocks dependency/image security findings. Canonical documentation is linked from README; historical samples/marketing claims are not executable specifications. External release gates are tracked in production review.