# Contributing

Run formatting, linting, type checks, tests, and the AppImage build before submission. Use deterministic mocked server/API fixtures.
The client uses Prettier for formatting and `svelte-check` for the lint/check
gate. Run `npm run format:check`, `npm run lint`, `npm run check`, and
`npm run build` before pushing changes.

The server address is treated as untrusted input. Client requests accept only
HTTP(S) origins without embedded credentials, query strings, or fragments.