Open source & Apache-2.0
Built to be contributed to - safely.
Comis is a security-first platform, which usually means contributing is intimidating. We built it so it isn't: the rules run as a command, the engineering protocol is written down, and every place you'd extend is a real, typed interface. You can land a change with confidence on your first try.
Why it's safe to contribute
Safety is in the architecture, not in a checklist.
The rules are executable
One command - pnpm validate - runs the exact gates CI does: a clean build, dependency-cycle checks, the security lint, and per-package coverage floors. You find out before you push, not after a reviewer does. No guessing what "good" looks like.
$ pnpm validateThe protocol is written down
AGENTS.md is the engineering contract - Result<T, E> for errors, tests-first, the security rules, the naming and logging conventions. There's no tribal knowledge to absorb and no maintainer you have to ping to learn "how we do things here."
Read AGENTS.md →Extension points are real interfaces
Adding to Comis means implementing a typed port, not patching a monolith. A new chat channel is a ChannelPort. A new tool is a manifest plus a handler. A new backend (a model provider, a store) is a port adapter. The compiler tells you when you've implemented it correctly.
Get it running
Three commands to a working checkout.
Comis is a TypeScript monorepo. Clone it, install the workspace, build, and run the tests - you're ready to make a change. Node.js 22.19+ and pnpm are the only prerequisites.
# 1. Clone
$ git clone https://github.com/comisai/comis.git
# 2. Install + build the workspace
$ cd comis && pnpm install && pnpm build
# 3. Run the tests + the security lint
$ pnpm test && pnpm lint:securityWhere help lands hardest
The highest-leverage places to start.
Channel adapters
New messaging platforms beyond the 9 we ship today - implement ChannelPort and wire it into the composition root.
Skills & MCP integrations
New built-in tools (a manifest + handler) or integrations with the MCP ecosystem - 50+ servers exist; you choose which to wire in.
Docs
Clear, accurate documentation is a force multiplier - and a great first contribution. If a page is wrong or missing, fixing it counts.
The flow
Fork, branch, validate, PR.
feature/your-change → pnpm validate → PR against main
A green pnpm validate means your PR passes
the same deterministic gates CI will run - so review is about the idea,
not the plumbing.
Community
Come say hello.
Questions, ideas, or just want to share what you built? Find us here.
Haven't run it yet?
The fastest way to find something worth contributing is to use Comis first. The one-line installer gets you there quickly on macOS and Linux.
Try it first →