kody-exchange

The exact PR comment now writes the commenter onto and re-runs the check. Jobs use glanceable emoji (, ) to match Validate/Preview. Matches kentcdodds/kody#1468. [!NOTE] Medium Risk The job can push commits to with , so correctness of phrase matching and concurrency on matter; scope is limited to the signers file and existing CLA rules. Overview Individual CLA signing no longer needs a maintainer to edit . Contributors still comment the exact phrase ; a new job on (PR comments from human users containing that phrase) validates the comment via , commits the signer to , posts or updates a confirmation comment, and re-runs the PR workflow when possible. The existing PR job is unchanged in behavior (still checks identities against signers on the base branch) but is limited to events; workflow copy now tells contributors the workflow records them automatically. gains recording, exact-phrase matching, idempotent signer append, and stable serialization of the signers file; tests cover recording and serialization. Contributor docs and ADR 0001** describe the automated path; maintainer steps now only cover entity CLAs. Reviewed by Cursor Bugbot for commit 1096e58e155e9f929f7cd1751d21ff90befba64a. Bugbot is set up for automated code reviews on this repo. Configure here.

Cloud Agent PRs are opened as but commits are authored as . That identity is Licensor automation, not an outside contributor. Matches kentcdodds/kody#1463. [!NOTE] Low Risk Config and documentation only; CLA enforcement behavior changes only for the new allowlisted identity, with no impact on external contributors. Overview Cursor Cloud Agent commits are authored as while PRs may still appear under . This change treats that login as Licensor automation so the CLA workflow does not block those PRs. is added to the GitHub allowlist in . Contributing docs (ADR 0001 and inbound-contributions) now list alongside existing bot/Licensor exceptions and clarify the Licensor path when commit author and PR opener differ. The CLA unit test asserts passes the allowlist check with the real signers file. No changes to logic—the existing allowlist lookup picks up the new entry. Reviewed by Cursor Bugbot for commit 9a2d974d0cd48e5b37e960112a75c283f8692de0. Bugbot is set up for automated code reviews on this repo. Configure here. Summary by CodeRabbit Documentation Updated contribution and licensing guidance to clarify how automated pull requests are handled. Added the relevant automated contributor identity to the approved signer information. Improved formatting and clarity of the contribution decision references. Tests** Added coverage to verify the approved automated contributor identity is recognized correctly.

Same inbound CLA process as kody#1460. Why Kody Exchange is Fair Source () with Kent C. Dodds as sole Licensor. GitHub TOS and a DCO do not grant relicensing rights, a contributor patent grant, or an employer-IP warranty. An inbound CLA is required before outside PRs merge. This repo also had no file even though and the README already said FSL-1.1-ALv2. This PR adds the license file copied from kody-video. What this adds (FSL-1.1-ALv2) Individual and Entity CLA text under Decision record Contributor and agent docs (empty until someone signs) workflow that reads signers from the base branch only Portable checker at plus a vitest self-test After merge Make the check required for in branch protection. [!NOTE] Low Risk Changes are legal text, contributor docs, and CI-only CLA gating with no impact on application runtime, auth, or data paths. Overview Adds FSL-1.1-ALv2 in (aligning with existing package/README claims) and an inbound Contributor License Agreement flow for outside PRs, mirroring the kody repo process. Enforcement: a workflow on pull requests checks out (not the PR branch), gathers PR author and commit identities, and runs against . Unsigned contributors get an auto-updated PR comment with signing steps; the job fails until maintainers add the GitHub login to on . Licensor/bot allowlists and / accounts skip signing. Docs: Individual/Entity CLA text, ADR , , and links from , , and setup docs. Reviewed by Cursor Bugbot for commit 083aba5f87239f86c99b249d17413211ec1ae91a. Bugbot is set up for automated code reviews on this repo. Configure here.