@kungfu-tech/buildchain 2.9.1 → 2.10.0

package/dist/site/public-surface-audit.json

@@ -3,11 +3,11 @@
   "contract": "kungfu-buildchain-public-surface-reverse-audit",
   "status": "passed",
   "summary": {
-    "cliCommandCount": 46,
+    "cliCommandCount": 52,
     "workflowCount": 35,
     "actionCount": 4,
-    "sitePageCount": 42,
-    "docCommandRefCount": 164,
+    "sitePageCount": 43,
+    "docCommandRefCount": 180,
     "failureCount": 0
   },
   "enumerated": {
@@ -127,6 +127,36 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain inspect release --passport <file-or-url> [--json]"
       },
+      {
+        "id": "kfd-3",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd-3"
+      },
+      {
+        "id": "kfd-3-audit",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd-3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]"
+      },
+      {
+        "id": "kfd-3-detect",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd-3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]"
+      },
+      {
+        "id": "kfd-3-query",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd-3 query [<product>] [--cwd <dir>] [--registry <path>]"
+      },
+      {
+        "id": "kfd-3-register",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd-3 register <node-api|python-api|cli|binary|documentation|site-bundle>"
+      },
+      {
+        "id": "kfd-3-witness",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain kfd-3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact]"
+      },
       {
         "id": "lifecycle",
         "source": "bin/buildchain.mjs",
@@ -1043,6 +1073,10 @@
         "id": "manual:install",
         "category": "manual"
       },
+      {
+        "id": "manual:kfd-support",
+        "category": "manual"
+      },
       {
         "id": "manual:lifecycle-protocol",
         "category": "manual"
@@ -1536,6 +1570,86 @@
         "path": "docs/cli.md",
         "command": "buildchain inspect release"
       },
+      {
+        "id": "kfd-3-audit",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd-3 audit"
+      },
+      {
+        "id": "kfd-3-audit",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 audit"
+      },
+      {
+        "id": "kfd-3-detect",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd-3 detect"
+      },
+      {
+        "id": "kfd-3-detect",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 detect"
+      },
+      {
+        "id": "kfd-3-detect",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 detect"
+      },
+      {
+        "id": "kfd-3-query",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd-3 query"
+      },
+      {
+        "id": "kfd-3-query",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 query"
+      },
+      {
+        "id": "kfd-3-query",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 query"
+      },
+      {
+        "id": "kfd-3-query",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 query"
+      },
+      {
+        "id": "kfd-3-register",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd-3 register"
+      },
+      {
+        "id": "kfd-3-register",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 register"
+      },
+      {
+        "id": "kfd-3-register",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 register"
+      },
+      {
+        "id": "kfd-3-register",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 register"
+      },
+      {
+        "id": "kfd-3-witness",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd-3 witness"
+      },
+      {
+        "id": "kfd-3-witness",
+        "path": "docs/kfd-support.md",
+        "command": "buildchain kfd-3 witness"
+      },
+      {
+        "id": "kfd-3",
+        "path": "docs/cli.md",
+        "command": "buildchain kfd-3"
+      },
       {
         "id": "lifecycle",
         "path": "docs/cli.md",
@@ -1947,9 +2061,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "7119de47a94f1b5903b79b7e6281cb205edce8712631efbc5e243ada3d64e817",
+    "cliRegistryDigest": "d86d5cc6f0ef0e711a81edc8dec6178cd3f16f0c46ec4fdadbe8133bdc69789d",
     "workflowRegistryDigest": "a53dd3b746f8d697eaa79fb23efcbbeaa6018efb2c3af0d875526ab6bef939ad",
-    "pageRegistryDigest": "26ec63af6a85354720e125a3ba5bb23a8af135d7b8a9dcc6421d5ee6139b4326"
+    "pageRegistryDigest": "9777d75469b33e843a0bd0aa814b45dbdb046ad60393b0aa54782563cb2b9bb7"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/release-provenance.json

@@ -17,6 +17,7 @@
       "./diagnostics": "./packages/core/diagnostics.js",
       "./homebrew": "./packages/core/homebrew.js",
       "./issue-reporting": "./packages/core/issue-reporting.js",
+      "./kfd-3-surfaces": "./packages/core/kfd3-surface-register.js",
       "./release-line-bootstrap": "./packages/core/release-line-bootstrap.js",
       "./readme-badges": "./packages/core/readme-badges.js",
       "./public-surface-audit": "./packages/core/public-surface-audit.js",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-07-08T03:54:10.872Z",
-  "publishedAt": "2026-07-08T03:54:10.872Z",
+  "generatedAt": "2026-07-08T04:41:25.510Z",
+  "publishedAt": "2026-07-08T04:41:25.510Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "5a698dae6a95bf881b0579b6dc29b58fab6e324c",
+  "sourceRevision": "95af4dcd440cec6d84a9a352e7aa6677ff580809",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "2.9.1",
+    "version": "2.10.0",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -53,7 +53,7 @@
       "path": "docs/MAP.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:10292c42c2778e9d164c698a0967c8ae3c50d5e4814170bd5c1426b0d240000a"
+      "digest": "sha256:3712026dcfcf44c16bc4def2acf246caee1ec036543c0fea265fa17b19d4de31"
     },
     {
       "id": "install",
@@ -165,7 +165,7 @@
       "path": "docs/cli.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:1922537563582f59e08b7c69c8a1549ea2b438229097b1111110b421a7ad84d8"
+      "digest": "sha256:85e014b7e053b74b620e5b438d54453e20b22f758a33dfd5ae970403fa41d9d7"
     },
     {
       "id": "build-facts",
@@ -175,6 +175,14 @@
       "exists": true,
       "digest": "sha256:75dcf7a6628dac9e982a455de9966044ae771611d4efc04e7264a2d4adb0bd3e"
     },
+    {
+      "id": "kfd-support",
+      "title": "KFD support and KFD-3 surface registration",
+      "path": "docs/kfd-support.md",
+      "plane": "verify",
+      "exists": true,
+      "digest": "sha256:4bb33e408a2129e1534e92bea78d3cc0e4d8f986b0fbb27fe73ae6eae46b9ca3"
+    },
     {
       "id": "lifecycle-protocol",
       "title": "Lifecycle protocol",
@@ -237,7 +245,7 @@
       "path": "docs/web-surface-deployments.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:b56fedfdf6784855e5854a747e7e869d746e6b0a9f419047bcc799945052eb8d"
+      "digest": "sha256:8ba3ab4715844df2d5ca07121cde4875f89be55bb44be27d63bae404611f3112"
     }
   ],
   "facts": [

package/docs/MAP.md

@@ -22,6 +22,7 @@ manuals explain those facts and give operator examples.
 | --- | --- | --- |
 | KFD-1 / KFD-2 / KFD-3 release-passport gates | `dist/site/kfd-claims.json`, `dist/site/buildchain-contract.json`, `dist/site/artifact-schemas.json` | [`release-passport.md`](release-passport.md) |
 | KFD-3 public surface reverse audit | `dist/site/public-surface-audit.json`, `dist/site/cli-registry.json`, `dist/site/workflow-registry.json`, `dist/site/page-registry.json` | [`cli.md`](cli.md), [`site-bundle-contract.md`](site-bundle-contract.md) |
+| KFD-3 surface registration and capability query | `buildchain.kfd3.json`, `dist/site/kfd-claims.json`, `buildchain.release.json` | [`kfd-support.md`](kfd-support.md) |
 | Floating `@v2` drift detection and compatibility issues | `dist/site/buildchain-contract.json` | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) |
 | npm publish transactions, evidence, dist-tags, and recovery | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`publish-transaction.md`](publish-transaction.md) |
 | Git/source/version/module/product build facts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-module-build-facts`, `kungfu-buildchain-product-build-facts` | [`build-facts.md`](build-facts.md) |
@@ -62,6 +63,7 @@ replace them.
 | How do I gate release artifacts with KFD-1 contract-world witnesses? | [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate) | verify/use | stable |
 | How do I audit public KFD-2 release trust claims? | [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit) + [`cli.md`](cli.md) | verify/use | stable |
 | How do I gate KFD-3 collaboration-interface releases? | [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate) + [`cli.md`](cli.md) | verify/use | stable |
+| How do I detect, register, audit, witness, or query KFD-3 product surfaces? | [`kfd-support.md`](kfd-support.md) + [`cli.md`](cli.md) | verify/use | stable |
 | How do I keep `@v2` floating refs while detecting Buildchain contract drift? | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) | verify/use | stable |
 | How do I propagate finalized upstream releases to downstream package/site PRs? | [`release-propagation.md`](release-propagation.md) | use | preview |
 | How do I generate KFD / Release Passport badge bundles without hand-maintaining Markdown? | [`readme-badges.md`](readme-badges.md) + [`cli.md`](cli.md) | use | stable |

package/docs/cli.md

@@ -168,6 +168,24 @@ import {
 assertPublicSurfaceReverseAudit(collectPublicSurfaceReverseAudit({ root: process.cwd() }));
 ```
 
+`buildchain kfd-3` is the product-facing registration and query entrypoint for
+KFD-3 surfaces. It is separate from Buildchain's self reverse audit: products
+can detect standard public surfaces, register the accepted boundary, audit the
+current source or artifact tree, generate a release-passport-compatible witness,
+and expose a capability map for agents:
+
+```bash
+buildchain kfd-3 detect --kind node-api --kind cli --json
+buildchain kfd-3 register node-api --product Buildchain
+buildchain kfd-3 audit --json
+buildchain kfd-3 witness --kind prebuild --output .buildchain/kfd-3/collaboration-interface.prebuild.json
+buildchain kfd-3 query buildchain --json
+```
+
+The public Node API is exported from
+`@kungfu-tech/buildchain/kfd-3-surfaces`. See [`kfd-support.md`](kfd-support.md)
+for the detected / declared / enforced model and the agent query flow.
+
 Lifecycle runs also write a Buildchain observability JSONL log at
 `.buildchain/logs/events.jsonl` by default. Framework events use
 `source=buildchain`; consumer lifecycle commands use `source=user`. This lets a

package/docs/kfd-support.md

@@ -0,0 +1,163 @@
+# KFD Support
+
+Buildchain implements KFD support as release evidence and product capability
+facts, not as README prose. The machine-readable sources are:
+
+- `dist/site/kfd-claims.json` for Buildchain-owned public claims and KFD-3
+  collaboration surfaces;
+- `dist/site/public-surface-audit.json` for reverse enumeration of exposed CLI,
+  workflow, action, site, and documented command surfaces;
+- `buildchain.release.json` for release-specific KFD-1, KFD-2, and KFD-3
+  passport results;
+- `buildchain.kfd3.json` for product-owned KFD-3 surface registration.
+
+## KFD-1
+
+KFD-1 proves that a product release is bound to one contract world. Buildchain
+uses KFD-1 for its runtime contract, release-passport schemas, packaged docs,
+Node exports, workflows, actions, and site-consumption facts.
+
+For Buildchain itself, the source registry lives in
+`packages/core/buildchain-kfd-claims.js` and is projected to
+`dist/site/kfd-claims.json`. Release promotion binds that registry to exact
+source and artifact hashes in the release passport.
+
+## KFD-2
+
+KFD-2 requires public trust claims to be backed by machine-readable evidence.
+Buildchain release passports fail or downgrade claims that only have prose.
+
+Every public claim binds:
+
+- declared source files;
+- machine-readable evidence;
+- source, evidence, and artifact hashes;
+- artifact coordinates;
+- verification result;
+- audit boundary;
+- responsibility state;
+- residual risk.
+
+## KFD-3
+
+KFD-3 closes participant-facing collaboration surfaces over a declared public
+interface. Buildchain supports two complementary KFD-3 layers.
+
+The first layer is Buildchain self-verification. Buildchain reverse-enumerates
+real CLI commands, reusable workflow inputs, action inputs, site pages, and
+documented command references, then compares those facts with the generated
+registries in `dist/site/`. A missing registry entry fails `pnpm run check`.
+
+The second layer is product surface registration. Products can ask Buildchain to
+detect standard public surfaces, write a small product-owned registry, audit the
+registry against the current artifact/source tree, generate a release-passport
+compatible witness, and query the resulting capability map.
+
+## Detected, Declared, Enforced
+
+KFD-3 surface registration uses three states.
+
+| State | Meaning |
+| --- | --- |
+| `detected` | Buildchain found a candidate public surface from package metadata, wheel metadata, CLI bins, binary artifacts, docs, or site bundle facts. |
+| `declared` | The product owner accepted that candidate into `buildchain.kfd3.json`. |
+| `enforced` | The product has promoted a declared surface to a hard release boundary. Missing enforced surfaces fail release verification. |
+
+Detection does not silently become product intent. `register` is the boundary
+decision. Existing consumers are unaffected until they opt in.
+
+## CLI
+
+Detect public surface candidates:
+
+```bash
+buildchain kfd-3 detect --json
+buildchain kfd-3 detect --kind node-api --kind cli --json
+```
+
+Register standard surface classes:
+
+```bash
+buildchain kfd-3 register node-api --product Buildchain
+buildchain kfd-3 register cli
+buildchain kfd-3 register python-api --artifact dist/wheel-unpacked
+```
+
+Audit detected, declared, and enforced surfaces:
+
+```bash
+buildchain kfd-3 audit --json
+```
+
+Generate a witness for release passport collection:
+
+```bash
+buildchain kfd-3 witness \
+  --kind prebuild \
+  --output .buildchain/kfd-3/collaboration-interface.prebuild.json
+```
+
+Query capability facts for agents or downstream sites:
+
+```bash
+buildchain kfd-3 query buildchain --json
+buildchain kfd-3 query --passport buildchain.release.json --json
+```
+
+## Node API
+
+The CLI is a thin wrapper over the public Node API:
+
+```js
+import {
+  auditKfd3Surfaces,
+  createKfd3SurfaceWitness,
+  detectKfd3Surfaces,
+  queryKfd3Capabilities,
+  registerKfd3Surfaces,
+} from "@kungfu-tech/buildchain/kfd-3-surfaces";
+```
+
+Agents should prefer `queryKfd3Capabilities()` when deciding whether a product
+capability is usable. The query result connects each capability to:
+
+- KFD-3 surface identity and state;
+- KFD-1 basis facts such as source and artifact paths or digests;
+- KFD-2 trust evidence when a release passport is attached;
+- residual risk and recommended agent action.
+
+## Standard Detectors
+
+The initial detector set is intentionally conservative:
+
+- npm packages: `package.json` `exports`, `main`, `types`, and `bin`;
+- Python wheels: unpacked `.dist-info/METADATA`, `RECORD`,
+  `entry_points.txt`, and `top_level.txt`;
+- CLI binaries: `package.json#bin` and files under `bin/`;
+- standalone binaries and archives: common binary/archive outputs under
+  artifact directories such as `dist/`;
+- documentation: `README.md`, `AGENTS.md`, and `docs/*.md`;
+- site bundles: `dist/site/*.json`.
+
+Python importability alone is not considered public API. A product can extend
+the registry over time, but the first boundary is metadata-based.
+
+## Buildchain Self Dogfood
+
+Buildchain dogfoods this model in two ways:
+
+- `dist/site/kfd-claims.json` declares Buildchain's own KFD-3 collaboration
+  surface;
+- `buildchain kfd-3 query buildchain --json` resolves the packaged
+  Buildchain capability map from that site fact source.
+
+This lets downstream agents discover Buildchain's supported CLI, Node API,
+release passport, workflow, and site bundle surfaces from the npm package
+instead of scraping source files or README examples.
+
+## Known Gaps
+
+Archive unpacking for `.whl`, `.tar.gz`, `.zip`, and platform-native installers
+is intentionally not part of the first detector. Callers can point
+`--artifact` at an unpacked artifact directory. Future Buildchain versions can
+add archive readers without changing the registry contract.

package/docs/web-surface-deployments.md

@@ -384,15 +384,15 @@ and `pr-29/buildchain/docs/`. This makes surface-host requests for `/` and
 `/docs/` resolve to the surface's `index.html` files even when the CloudFront
 origin is an S3 REST origin rather than an S3 website endpoint.
 
-For host-per-surface previews, Buildchain also ensures each configured
-CloudFront distribution has `DefaultRootObject = "index.html"` before syncing
-the surface payload. This is required because the child surface host root
-request (`https://buildchain-pr-29.preview.libkungfu.dev/`) must first resolve
-to `/index.html`; the existing host/prefix mapping can then serve the object
-`pr-29/buildchain/index.html`, the same object that explicit
-`/index.html` requests already reach. The operation is idempotent per
-distribution and is emitted once even when multiple surfaces share the same
-CloudFront distribution.
+Buildchain does not mutate the shared CloudFront distribution as part of a
+consumer preview apply. In particular, it does not require preview roles to
+update `DefaultRootObject`. Shared distribution and origin-request routing are
+infrastructure prerequisites; the consumer workflow owns only its surface
+payload, prefix alias objects, deployment manifests, invalidations, and health
+checks. If root or nested surface routing still fails, the reusable workflow
+uploads `buildchain-web-surface-*-diagnostics` artifacts containing the apply
+and health JSON so the failing AWS operation or HTTP check is visible from the
+consumer run.
 
 It can also execute a previously saved deploy plan. In that mode Buildchain
 recomputes the local artifact hash before running AWS commands and fails closed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "2.9.1",
+  "version": "2.10.0",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",
@@ -20,6 +20,7 @@
     "./diagnostics": "./packages/core/diagnostics.js",
     "./homebrew": "./packages/core/homebrew.js",
     "./issue-reporting": "./packages/core/issue-reporting.js",
+    "./kfd-3-surfaces": "./packages/core/kfd3-surface-register.js",
     "./release-line-bootstrap": "./packages/core/release-line-bootstrap.js",
     "./readme-badges": "./packages/core/readme-badges.js",
     "./public-surface-audit": "./packages/core/public-surface-audit.js",

package/packages/core/buildchain-kfd-claims.js

@@ -27,6 +27,7 @@ export const BUILDCHAIN_AGENT_MANUALS = Object.freeze([
   { id: "product-mechanism", title: "Product mechanism", path: "docs/product-mechanism.md", plane: "why" },
   { id: "cli", title: "CLI and npm package", path: "docs/cli.md", plane: "use" },
   { id: "build-facts", title: "Build Facts", path: "docs/build-facts.md", plane: "use" },
+  { id: "kfd-support", title: "KFD support and KFD-3 surface registration", path: "docs/kfd-support.md", plane: "verify" },
   { id: "lifecycle-protocol", title: "Lifecycle protocol", path: "docs/lifecycle-protocol.md", plane: "use" },
   { id: "reusable-build-surface", title: "Reusable build surface", path: "docs/reusable-build-surface.md", plane: "use" },
   { id: "publish-transaction", title: "Publish transaction", path: "docs/publish-transaction.md", plane: "verify" },
@@ -60,6 +61,7 @@ const SCHEMA_AND_STANDARD_FILES = Object.freeze([
   "packages/core/release-passport.js",
   "packages/core/buildchain-contract.js",
   "packages/core/buildchain-kfd-claims.js",
+  "packages/core/kfd3-surface-register.js",
   "packages/core/public-surface-audit.js",
   "dist/site/artifact-schemas.json",
   "dist/site/buildchain-contract.json",
@@ -80,6 +82,7 @@ const EXTRA_KFD1_FILES = Object.freeze([
   "packages/core/index.js",
   "packages/core/homebrew.js",
   "packages/core/build-facts.js",
+  "packages/core/kfd3-surface-register.js",
   "packages/core/release-propagation.js",
   "scripts/generate-site-bundle.mjs",
   "scripts/ensure-github-release.mjs",
@@ -282,6 +285,22 @@ export function createBuildchainPublicClaimDefinitions() {
         "dist/site/kfd-claims.json",
       ],
     },
+    {
+      id: "claim:buildchain-kfd-3-surface-registration",
+      claim: "Buildchain provides KFD-3 surface detection, registration, audit, witness, and query APIs so products can declare agent-facing public capability surfaces without hand-writing full witness registries.",
+      sourcePaths: [
+        "packages/core/kfd3-surface-register.js",
+        "bin/buildchain.mjs",
+        "docs/kfd-support.md",
+        "docs/cli.md",
+      ],
+      artifactPaths: [
+        "dist/site/cli-registry.json",
+        "dist/site/node-api-registry.json",
+        "dist/site/kfd-claims.json",
+        "dist/site/public-surface-audit.json",
+      ],
+    },
     {
       id: "claim:buildchain-readme-badge-facts",
       claim: "Buildchain README status badges are generated from repository-owned facts and verified release-passport evidence, not hand-maintained README prose.",

package/packages/core/index.js

@@ -256,6 +256,21 @@ export {
   updateHomebrewTap,
 } from "./homebrew.js";
 
+export {
+  KFD3_CAPABILITY_QUERY_CONTRACT,
+  KFD3_DEFAULT_REGISTRY_PATH,
+  KFD3_SURFACE_AUDIT_CONTRACT,
+  KFD3_SURFACE_DETECTION_CONTRACT,
+  KFD3_SURFACE_REGISTRY_CONTRACT,
+  auditKfd3Surfaces,
+  createKfd3SurfaceWitness,
+  detectKfd3Surfaces,
+  queryKfd3Capabilities,
+  readKfd3SurfaceRegistry,
+  registerKfd3Surfaces,
+  writeKfd3SurfaceRegistry,
+} from "./kfd3-surface-register.js";
+
 export {
   RELEASE_PROPAGATION_GRAPH_CONTRACT,
   RELEASE_PROPAGATION_LOCK_CONTRACT,