@kungfu-tech/buildchain 3.0.4 → 3.0.5-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/site/buildchain-contract.json +23 -18
- package/dist/site/buildchain-site.json +29 -24
- package/dist/site/controller-registry.json +6 -2
- package/dist/site/kfd-claims.json +6 -4
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +6 -6
- package/dist/site/node-api-registry.json +96 -5
- package/dist/site/page-registry.json +19 -14
- package/dist/site/public-surface-audit.json +12 -8
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +10 -10
- package/dist/site/workflow-registry.json +10 -6
- package/docs/auditable-demo.md +7 -0
- package/docs/aws-us-elastic-runner-burst-plane.md +32 -1
- package/docs/node-api-reference.md +12 -3
- package/docs/publish-transaction.md +7 -5
- package/docs/release-flow.md +4 -0
- package/docs/release-governance.md +7 -0
- package/docs/release-propagation.md +34 -0
- package/package.json +1 -1
- package/packages/core/release-propagation-capture.js +150 -0
- package/packages/core/release-propagation-stage-evidence.js +1 -1
- package/packages/core/release-propagation.js +5 -0
- package/scripts/auditable-demo-renditions.mjs +2 -3
- package/scripts/aws-macos-jit-controller-core.mjs +389 -0
- package/scripts/aws-macos-jit-controller-runtime.mjs +82 -0
- package/scripts/aws-macos-jit-controller.mjs +558 -0
- package/scripts/aws-macos-jit-job-controller.mjs +401 -0
- package/scripts/capture-package-release-propagation.mjs +240 -0
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"contract": "kungfu-buildchain-site-bundle",
|
|
4
|
-
"generatedAt": "2026-08-
|
|
5
|
-
"publishedAt": "2026-08-
|
|
4
|
+
"generatedAt": "2026-08-02T02:26:15.287Z",
|
|
5
|
+
"publishedAt": "2026-08-02T02:26:15.287Z",
|
|
6
6
|
"reproducible": true,
|
|
7
7
|
"timestampPolicy": "ci-injected",
|
|
8
8
|
"deterministicInputs": [
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"declared Buildchain surface manifest contract"
|
|
20
20
|
],
|
|
21
21
|
"sourceDateEpoch": "0",
|
|
22
|
-
"sourceRevision": "
|
|
22
|
+
"sourceRevision": "8b96fb02e587124bad0f9055f9de6eb7c6b8081c",
|
|
23
23
|
"timestampPolicyDetails": {
|
|
24
24
|
"contract": "kungfu-buildchain-surface-timestamp-policy",
|
|
25
25
|
"timestampFields": [
|
|
@@ -37,7 +37,7 @@
|
|
|
37
37
|
},
|
|
38
38
|
"package": {
|
|
39
39
|
"name": "@kungfu-tech/buildchain",
|
|
40
|
-
"version": "3.0.
|
|
40
|
+
"version": "3.0.5-alpha.1",
|
|
41
41
|
"versionSource": "package.json#version"
|
|
42
42
|
},
|
|
43
43
|
"source": {
|
|
@@ -395,7 +395,7 @@
|
|
|
395
395
|
],
|
|
396
396
|
"maturity": "preview",
|
|
397
397
|
"sourcePath": "docs/auditable-demo.md",
|
|
398
|
-
"digest": "sha256:
|
|
398
|
+
"digest": "sha256:4d32c82b652decfbb26b441c203fe34e70daa86022bb4baed9da02a5d6cf5831",
|
|
399
399
|
"headings": [
|
|
400
400
|
{
|
|
401
401
|
"level": 1,
|
|
@@ -433,7 +433,7 @@
|
|
|
433
433
|
"anchor": "failure-evidence"
|
|
434
434
|
}
|
|
435
435
|
],
|
|
436
|
-
"markdown": "---\nstatus: draft\nperiod: 2026-07\ntheme: auditable-demo-pipeline\ndoc_type: technical-contract\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-31\n invisible_context_boundary: No hidden model build, parameter count, or private corpus is asserted.\n---\n\n# Auditable Demo Pipeline\n\nBuildchain's auditable demo workflow turns an exact GitHub build artifact into\ntwo distinct evidence products:\n\n1. a required qualified Gate bundle; and\n2. an optional rendered media bundle that can exist only after that exact Gate\n bundle passes.\n\nThe public reusable workflow is\n`.github/workflows/.auditable-demo.yml`. It is consumer-neutral: Buildchain\ndoes not know how a Kungfu, library, service, or application artifact should be\ninterpreted. The consumer owns a small checked-in executable adapter.\n\n## Authority Boundary\n\nThe retained build output is authoritative. The adapter reads that exact\nartifact and projects three files:\n\n```text\ncomplete-transcript.txt\npublic-projection.json\nscene.json\n```\n\nIt may additionally emit one declared `terminal-capture.json` using\n`kungfu.terminal-capture/v1`. The optional capture is bounded to 60 seconds,\nfixed 80-200 by 24-80 terminal cells, 10,000 events, and 4 MiB of canonical\nbase64 bytes. It must contain a passed completion sentinel and an explicitly\nempty authority-grant list. Existing three-file adapters remain valid.\n\nTerminal bytes are volatile observations, not Work, Warrant, capability, or\npublication authority. First-party or System identity, KFD compliance, Product\nSystem metadata, package metadata, scan output, registry history, and\nstandalone generation remain non-authoritative unless an exact higher-level\ncontract independently admits them.\n\nThe adapter must not rebuild or rerun the product. It receives:\n\n```text\n--artifact-root PATH\n--output PATH\n--source-coordinate PATH\n```\n\nConsumers with one shared adapter for several deterministic demos may also set\n`adapter-arguments-json` to a bounded JSON array. Buildchain parses the array,\nrejects malformed values, newlines, NUL bytes, more than 32 arguments, values\nlonger than 256 bytes, and attempts to override the three coordinate flags\nabove, then appends the accepted strings directly to the adapter argv. It never\nevaluates a shell command. The exact argument vector and its content root are\nretained in `adapter.json`; the Gate receipt binds that root. Adapter arguments\nselect consumer-owned capture behavior only and grant no authority.\n\n`--source-coordinate` identifies the caller repository, run, artifact id,\nartifact name, upload digest, expiry, and exact source SHA. The workflow finds\nexactly one live artifact with the requested name in the current caller run and\nrejects a digest mismatch before invoking the adapter. Callers must pass the\ndigest emitted by their own `upload-artifact` step; a name resolved later from\nthe Actions API is discovery evidence, not a substitute for that producer\noutput.\n\nBuildchain's reusable build workflow exposes `artifact-coordinates-json` after\nall resolved platform uploads complete. That producer-owned output binds every\nplatform id to its same-run artifact id, name, upload digest, URL, and expiry,\nso a consumer that delegates its build to Buildchain can pass an exact\ncoordinate without rediscovering authority in a downstream job. The build\naggregate fails closed if any declared platform lacks one live, digest-bearing\nartifact coordinate. The compact coordinate set is sorted by platform id so\ndownstream machine consumers do not depend on matrix completion order.\n\nThe adapter runs with a disposable Home/XDG/npm prefix, a minimal environment,\nand no GitHub, npm, or cloud credential injection. It must be a regular,\nnon-symlink, executable file inside the exact checked-out consumer source.\n\n## Required Gate\n\nThe Gate:\n\n- checks out the exact consumer source and exact called-workflow SHA;\n- resolves and downloads one exact same-run GitHub Artifact;\n- invokes the checked-in adapter by argv, never as an evaluated shell string;\n- rejects undeclared adapter outputs, symlinks, invalid UTF-8, invalid scene or\n projection or terminal-capture schemas, implicit capture grants,\n out-of-range transcript references, and oversized input;\n- derives a one-second compatibility scene from the consumer projection;\n- anonymously pulls an immutable `image@sha256:digest` renderer;\n- runs it as non-root with `--network none`, a read-only root filesystem, and a\n bounded tmpfs;\n- verifies the renderer manifest, media probe, exact input roots, exact output\n member set, and complete checksums;\n- uploads a content-addressed qualified bundle plus an independent GitHub\n Artifact id, URL, archive digest, and expiry-bearing source coordinate.\n\nThe Gate bundle contains the complete consumer transcript/projection/scene,\nsource artifact coordinate, adapter identity, bounded renderer evidence, a\npassed gate receipt, and checksums covering every member exactly once.\n\n## Selective Render\n\n`render-media: true` enables the second job. It downloads the just-uploaded Gate\nbundle by its content-addressed name, recomputes the Gate member root, verifies\nthe exact source SHA and renderer digest, and only then renders the complete\nqualified scene.\n\nThe media bundle contains MP4, WebM, GIF, poster, probe, renderer manifest,\nrenderer checksums, passed Gate receipt, a versioned media receipt, and\ndistribution checksums. A web-delivery profile also retains\n`media-inspection.json`, whose content root is bound into the receipt.\n`render-media: false` does not weaken or skip the Gate.\n\nWhen the Gate bundle contains a qualified terminal capture, the render job\npasses it read-only to the immutable renderer. The renderer manifest binds the\ncapture root and terminal-state-machine version, but raw capture bytes remain\nin the Gate bundle rather than being copied into the public media bundle.\n\n## Media Qualification Profiles\n\nThe single machine-readable source is\n`contracts/auditable-demo-media-profiles-v1.json`. Callers select one reviewed\nprofile through `media-profile`; they cannot pass ffmpeg commands, codec flags,\nshell fragments, arbitrary profile paths, or transcoding instructions.\n\n| Profile | Meaning |\n| --- | --- |\n| `archive-v1` | Default compatibility contract. Retains the exact renderer outputs and classifies GIF as README compatibility evidence without making a browser-delivery claim. |\n| `web-delivery-v1` | Independently qualifies H.264 MP4 and VP9 WebM playback sources, forbids audio, requires exact scene dimensions and bounded duration/frame-rate drift, checks per-rendition byte ceilings, and proves MP4 `moov` precedes `mdat`. PNG remains the lossless evidence poster. |\n| `responsive-web-delivery-v1` | Extends `web-delivery-v1` with exact 1280x720 H.264 MP4 and VP9 WebM responsive sources plus a 1280x720 README GIF while keeping the primary MP4/WebM and evidence poster at the source scene dimensions. Every declared downscale must preserve the scene aspect ratio and may never upscale. |\n| `site-hero-v1` | Extends `web-delivery-v1` and additionally requires a qualified WebP browser poster. The current Build Images v1 renderer does not emit that member, so selecting this profile fails closed until the producer adds it. |\n\nFor web-delivery profiles, Buildchain runs its own fixed `ffprobe` invocation\ninside the same immutable, network-disabled renderer image. That command is\nBuildchain-controlled; the producer cannot inject flags. The resulting witness\nrecords exact roots and byte counts plus container, codec, pixel format,\ndimensions, duration, frame rate, audio stream count, and progressive-download\nevidence. Finalization re-hashes the retained bytes, rechecks the witness root,\nand parses MP4 top-level boxes itself. The producer's `media-probe.json.passed`\nfield remains supporting evidence, never sufficient authority.\n\nThe default `archive-v1` path preserves the existing v1 media receipt exactly.\nAn explicitly selected web-delivery profile emits a v2 media receipt with a\ncontent-addressed rendition list and explicit roles, MIME types, dimensions,\nand dimension policy. Agents and site builds select `primary-video`,\n`alternate-video`, `responsive-primary-video`,\n`responsive-alternate-video`, `browser-poster`, or evidence-only roles from\nthat receipt; they do not infer semantics from extensions or filenames.\nProfile-declared responsive renditions must match their exact dimensions,\nremain within the source scene, and preserve its aspect ratio. Additional\nproducer-declared renditions remain bounded by the selected profile and cannot\nraise their own byte ceiling. Unbound outputs, implicit upscales, aspect-ratio\ndrift, duplicate singleton roles, unknown profiles, or unsupported required\nversions fail closed.\n\nThe required Gate binds the exact selected media profile and the smoke media\nqualification root before optional full rendering starts. Gate-only validation\nand full rendering therefore exercise the same profile contract; a later media\njob cannot silently switch rendition authority.\n\nInitial byte ceilings are derived from the checked-in\n`auditable-demo-web-delivery-v1` fixture rendered by Build Images\n`v1.3.0-alpha.16` at its exact source SHA and image digest. GIF, MP4, WebM, and\nPNG ceilings are the next power of two above sixteen times the measured member\nbytes. The not-yet-produced WebP poster uses eight times the measured lossless\nPNG as its conservative proxy. The path-scoped qualification workflow\nregenerates the content-addressed evidence and fails on any byte or fact drift.\nIts matrix retains the original 1280x720 web-delivery baseline on the renderer\nthat produced it and separately measures the responsive profile against a\n1920x1080 fixture and the first exact renderer release that emits both\nsource-resolution and 720p renditions. This keeps historical budget evidence\nreproducible while giving the responsive contract its own immutable\nqualification root.\n\n## Consumer Example\n\nThe build job must expose both the exact artifact name and the digest returned\nby `upload-artifact`:\n\n```yaml\njobs:\n build:\n runs-on: ubuntu-24.04\n outputs:\n artifact-name: product-linux-${{ github.sha }}\n artifact-digest: ${{ steps.upload.outputs.artifact-digest }}\n steps:\n - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09\n - run: ./scripts/build-product\n - id: upload\n uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\n with:\n name: product-linux-${{ github.sha }}\n path: dist\n if-no-files-found: error\n retention-days: 14\n compression-level: 0\n\n auditable-demo:\n needs: build\n permissions:\n actions: read\n contents: read\n uses: kungfu-systems/buildchain/.github/workflows/.auditable-demo.yml@BUILDCHAIN_EXACT_SHA\n with:\n source-ref: ${{ github.sha }}\n source-artifact-name: ${{ needs.build.outputs.artifact-name }}\n source-artifact-digest: ${{ needs.build.outputs.artifact-digest }}\n adapter-path: scripts/auditable-demo-adapter\n adapter-arguments-json: '[\"--demo-id\",\"agent-work-lab\"]'\n renderer-image: ghcr.io/kungfu-systems/build-images/demo-renderer@sha256:RENDERER_DIGEST\n render-media: false\n media-profile: archive-v1\n```\n\nReplace both placeholders with reviewed immutable SHAs or digests. An eligible\nbuild should always call the reusable workflow. Selection policy changes only\n`render-media`; it must never condition away the Gate job.\n\nUse `web-delivery-v1` only when the rendered bundle is intended to become a\nqualified web-delivery source. Use `site-hero-v1` when an optimized browser\nposter is also required. Profile qualification does not prove browser playback,\nresponsive layout, reduced-motion behavior, accessibility, or production\ndeployment; those remain site responsibilities.\n\n## Failure Evidence\n\nGate and render jobs use bounded timeouts and non-cancelling concurrency.\nDiagnostics artifacts are attempted with `always()` so adapter stdout/stderr\nand the resolved source coordinate remain available when qualification fails.\nNo production deployment, publication authority, token, or provider mutation\nis part of this workflow."
|
|
436
|
+
"markdown": "---\nstatus: draft\nperiod: 2026-07\ntheme: auditable-demo-pipeline\ndoc_type: technical-contract\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-31\n invisible_context_boundary: No hidden model build, parameter count, or private corpus is asserted.\n---\n\n# Auditable Demo Pipeline\n\nBuildchain's auditable demo workflow turns an exact GitHub build artifact into\ntwo distinct evidence products:\n\n1. a required qualified Gate bundle; and\n2. an optional rendered media bundle that can exist only after that exact Gate\n bundle passes.\n\nThe public reusable workflow is\n`.github/workflows/.auditable-demo.yml`. It is consumer-neutral: Buildchain\ndoes not know how a Kungfu, library, service, or application artifact should be\ninterpreted. The consumer owns a small checked-in executable adapter.\n\n## Authority Boundary\n\nThe retained build output is authoritative. The adapter reads that exact\nartifact and projects three files:\n\n```text\ncomplete-transcript.txt\npublic-projection.json\nscene.json\n```\n\nIt may additionally emit one declared `terminal-capture.json` using\n`kungfu.terminal-capture/v1`. The optional capture is bounded to 60 seconds,\nfixed 80-200 by 24-80 terminal cells, 10,000 events, and 4 MiB of canonical\nbase64 bytes. It must contain a passed completion sentinel and an explicitly\nempty authority-grant list. Existing three-file adapters remain valid.\n\nThe completion sentinel names a consumer-owned versioned schema, the exact\n`qualified` status, a content root, and an event count. Buildchain validates\nthat envelope generically; it does not reinterpret a command-specific result\nas Agent Work Lab evidence or grant authority from the schema name. The\nconsumer projection and its retained source artifact remain responsible for\nthe exact claim boundary.\n\nTerminal bytes are volatile observations, not Work, Warrant, capability, or\npublication authority. First-party or System identity, KFD compliance, Product\nSystem metadata, package metadata, scan output, registry history, and\nstandalone generation remain non-authoritative unless an exact higher-level\ncontract independently admits them.\n\nThe adapter must not rebuild or rerun the product. It receives:\n\n```text\n--artifact-root PATH\n--output PATH\n--source-coordinate PATH\n```\n\nConsumers with one shared adapter for several deterministic demos may also set\n`adapter-arguments-json` to a bounded JSON array. Buildchain parses the array,\nrejects malformed values, newlines, NUL bytes, more than 32 arguments, values\nlonger than 256 bytes, and attempts to override the three coordinate flags\nabove, then appends the accepted strings directly to the adapter argv. It never\nevaluates a shell command. The exact argument vector and its content root are\nretained in `adapter.json`; the Gate receipt binds that root. Adapter arguments\nselect consumer-owned capture behavior only and grant no authority.\n\n`--source-coordinate` identifies the caller repository, run, artifact id,\nartifact name, upload digest, expiry, and exact source SHA. The workflow finds\nexactly one live artifact with the requested name in the current caller run and\nrejects a digest mismatch before invoking the adapter. Callers must pass the\ndigest emitted by their own `upload-artifact` step; a name resolved later from\nthe Actions API is discovery evidence, not a substitute for that producer\noutput.\n\nBuildchain's reusable build workflow exposes `artifact-coordinates-json` after\nall resolved platform uploads complete. That producer-owned output binds every\nplatform id to its same-run artifact id, name, upload digest, URL, and expiry,\nso a consumer that delegates its build to Buildchain can pass an exact\ncoordinate without rediscovering authority in a downstream job. The build\naggregate fails closed if any declared platform lacks one live, digest-bearing\nartifact coordinate. The compact coordinate set is sorted by platform id so\ndownstream machine consumers do not depend on matrix completion order.\n\nThe adapter runs with a disposable Home/XDG/npm prefix, a minimal environment,\nand no GitHub, npm, or cloud credential injection. It must be a regular,\nnon-symlink, executable file inside the exact checked-out consumer source.\n\n## Required Gate\n\nThe Gate:\n\n- checks out the exact consumer source and exact called-workflow SHA;\n- resolves and downloads one exact same-run GitHub Artifact;\n- invokes the checked-in adapter by argv, never as an evaluated shell string;\n- rejects undeclared adapter outputs, symlinks, invalid UTF-8, invalid scene or\n projection or terminal-capture schemas, implicit capture grants,\n out-of-range transcript references, and oversized input;\n- derives a one-second compatibility scene from the consumer projection;\n- anonymously pulls an immutable `image@sha256:digest` renderer;\n- runs it as non-root with `--network none`, a read-only root filesystem, and a\n bounded tmpfs;\n- verifies the renderer manifest, media probe, exact input roots, exact output\n member set, and complete checksums;\n- uploads a content-addressed qualified bundle plus an independent GitHub\n Artifact id, URL, archive digest, and expiry-bearing source coordinate.\n\nThe Gate bundle contains the complete consumer transcript/projection/scene,\nsource artifact coordinate, adapter identity, bounded renderer evidence, a\npassed gate receipt, and checksums covering every member exactly once.\n\n## Selective Render\n\n`render-media: true` enables the second job. It downloads the just-uploaded Gate\nbundle by its content-addressed name, recomputes the Gate member root, verifies\nthe exact source SHA and renderer digest, and only then renders the complete\nqualified scene.\n\nThe media bundle contains MP4, WebM, GIF, poster, probe, renderer manifest,\nrenderer checksums, passed Gate receipt, a versioned media receipt, and\ndistribution checksums. A web-delivery profile also retains\n`media-inspection.json`, whose content root is bound into the receipt.\n`render-media: false` does not weaken or skip the Gate.\n\nWhen the Gate bundle contains a qualified terminal capture, the render job\npasses it read-only to the immutable renderer. The renderer manifest binds the\ncapture root and terminal-state-machine version, but raw capture bytes remain\nin the Gate bundle rather than being copied into the public media bundle.\n\n## Media Qualification Profiles\n\nThe single machine-readable source is\n`contracts/auditable-demo-media-profiles-v1.json`. Callers select one reviewed\nprofile through `media-profile`; they cannot pass ffmpeg commands, codec flags,\nshell fragments, arbitrary profile paths, or transcoding instructions.\n\n| Profile | Meaning |\n| --- | --- |\n| `archive-v1` | Default compatibility contract. Retains the exact renderer outputs and classifies GIF as README compatibility evidence without making a browser-delivery claim. |\n| `web-delivery-v1` | Independently qualifies H.264 MP4 and VP9 WebM playback sources, forbids audio, requires exact scene dimensions and bounded duration/frame-rate drift, checks per-rendition byte ceilings, and proves MP4 `moov` precedes `mdat`. PNG remains the lossless evidence poster. |\n| `responsive-web-delivery-v1` | Extends `web-delivery-v1` with exact 1280x720 H.264 MP4 and VP9 WebM responsive sources plus a 1280x720 README GIF while keeping the primary MP4/WebM and evidence poster at the source scene dimensions. Every declared downscale must preserve the scene aspect ratio and may never upscale. |\n| `site-hero-v1` | Extends `web-delivery-v1` and additionally requires a qualified WebP browser poster. The current Build Images v1 renderer does not emit that member, so selecting this profile fails closed until the producer adds it. |\n\nFor web-delivery profiles, Buildchain runs its own fixed `ffprobe` invocation\ninside the same immutable, network-disabled renderer image. That command is\nBuildchain-controlled; the producer cannot inject flags. The resulting witness\nrecords exact roots and byte counts plus container, codec, pixel format,\ndimensions, duration, frame rate, audio stream count, and progressive-download\nevidence. Finalization re-hashes the retained bytes, rechecks the witness root,\nand parses MP4 top-level boxes itself. The producer's `media-probe.json.passed`\nfield remains supporting evidence, never sufficient authority.\n\nThe default `archive-v1` path preserves the existing v1 media receipt exactly.\nAn explicitly selected web-delivery profile emits a v2 media receipt with a\ncontent-addressed rendition list and explicit roles, MIME types, dimensions,\nand dimension policy. Agents and site builds select `primary-video`,\n`alternate-video`, `responsive-primary-video`,\n`responsive-alternate-video`, `browser-poster`, or evidence-only roles from\nthat receipt; they do not infer semantics from extensions or filenames.\nProfile-declared responsive renditions must match their exact dimensions,\nremain within the source scene, and preserve its aspect ratio. Additional\nproducer-declared renditions remain bounded by the selected profile and cannot\nraise their own byte ceiling. Unbound outputs, implicit upscales, aspect-ratio\ndrift, duplicate singleton roles, unknown profiles, or unsupported required\nversions fail closed.\n\nThe required Gate binds the exact selected media profile and the smoke media\nqualification root before optional full rendering starts. Gate-only validation\nand full rendering therefore exercise the same profile contract; a later media\njob cannot silently switch rendition authority.\n\nInitial byte ceilings are derived from the checked-in\n`auditable-demo-web-delivery-v1` fixture rendered by Build Images\n`v1.3.0-alpha.16` at its exact source SHA and image digest. GIF, MP4, WebM, and\nPNG ceilings are the next power of two above sixteen times the measured member\nbytes. The not-yet-produced WebP poster uses eight times the measured lossless\nPNG as its conservative proxy. The path-scoped qualification workflow\nregenerates the content-addressed evidence and fails on any byte or fact drift.\nIts matrix retains the original 1280x720 web-delivery baseline on the renderer\nthat produced it and separately measures the responsive profile against a\n1920x1080 fixture and the first exact renderer release that emits both\nsource-resolution and 720p renditions. This keeps historical budget evidence\nreproducible while giving the responsive contract its own immutable\nqualification root.\n\n## Consumer Example\n\nThe build job must expose both the exact artifact name and the digest returned\nby `upload-artifact`:\n\n```yaml\njobs:\n build:\n runs-on: ubuntu-24.04\n outputs:\n artifact-name: product-linux-${{ github.sha }}\n artifact-digest: ${{ steps.upload.outputs.artifact-digest }}\n steps:\n - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09\n - run: ./scripts/build-product\n - id: upload\n uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\n with:\n name: product-linux-${{ github.sha }}\n path: dist\n if-no-files-found: error\n retention-days: 14\n compression-level: 0\n\n auditable-demo:\n needs: build\n permissions:\n actions: read\n contents: read\n uses: kungfu-systems/buildchain/.github/workflows/.auditable-demo.yml@BUILDCHAIN_EXACT_SHA\n with:\n source-ref: ${{ github.sha }}\n source-artifact-name: ${{ needs.build.outputs.artifact-name }}\n source-artifact-digest: ${{ needs.build.outputs.artifact-digest }}\n adapter-path: scripts/auditable-demo-adapter\n adapter-arguments-json: '[\"--demo-id\",\"agent-work-lab\"]'\n renderer-image: ghcr.io/kungfu-systems/build-images/demo-renderer@sha256:RENDERER_DIGEST\n render-media: false\n media-profile: archive-v1\n```\n\nReplace both placeholders with reviewed immutable SHAs or digests. An eligible\nbuild should always call the reusable workflow. Selection policy changes only\n`render-media`; it must never condition away the Gate job.\n\nUse `web-delivery-v1` only when the rendered bundle is intended to become a\nqualified web-delivery source. Use `site-hero-v1` when an optimized browser\nposter is also required. Profile qualification does not prove browser playback,\nresponsive layout, reduced-motion behavior, accessibility, or production\ndeployment; those remain site responsibilities.\n\n## Failure Evidence\n\nGate and render jobs use bounded timeouts and non-cancelling concurrency.\nDiagnostics artifacts are attempted with `always()` so adapter stdout/stderr\nand the resolved source coordinate remain available when qualification fails.\nNo production deployment, publication authority, token, or provider mutation\nis part of this workflow."
|
|
437
437
|
},
|
|
438
438
|
{
|
|
439
439
|
"id": "manual:aws-us-elastic-runner-burst-plane",
|
|
@@ -446,7 +446,7 @@
|
|
|
446
446
|
],
|
|
447
447
|
"maturity": "stable",
|
|
448
448
|
"sourcePath": "docs/aws-us-elastic-runner-burst-plane.md",
|
|
449
|
-
"digest": "sha256:
|
|
449
|
+
"digest": "sha256:e3176cefb04f69df971f75aac8b99782366d3fcc363ea32a3f5b1a2bd94887ab",
|
|
450
450
|
"headings": [
|
|
451
451
|
{
|
|
452
452
|
"level": 1,
|
|
@@ -483,6 +483,11 @@
|
|
|
483
483
|
"title": "Phase 3 contract",
|
|
484
484
|
"anchor": "phase-3-contract"
|
|
485
485
|
},
|
|
486
|
+
{
|
|
487
|
+
"level": 3,
|
|
488
|
+
"title": "Phase 3 lifecycle controller",
|
|
489
|
+
"anchor": "phase-3-lifecycle-controller"
|
|
490
|
+
},
|
|
486
491
|
{
|
|
487
492
|
"level": 2,
|
|
488
493
|
"title": "Provider lifecycle",
|
|
@@ -494,7 +499,7 @@
|
|
|
494
499
|
"anchor": "source-boundaries"
|
|
495
500
|
}
|
|
496
501
|
],
|
|
497
|
-
"markdown": "---\nstatus: draft\nperiod: 2026-07-28\ntheme: aws-us-elastic-runner-burst-plane\ndoc_type: design\nsource_level: local-files-and-provider-docs\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-30\n---\n\n# AWS US elastic runner burst plane\n\nThe local runner fleet remains the normal Kungfu build plane. This AWS US plane\nis an explicit, temporary overflow mechanism with sequential qualification:\n\n1. Linux CodeBuild proof of concept under USD 50.\n2. Windows EC2 one-job JIT runners.\n3. One bounded 24-hour EC2 Mac campaign.\n\nNo later phase can start from design intent alone. The preceding phase must\nproduce a qualifying source-bound receipt, actual cost, and zero-resource\ncleanup proof.\n\n## Phase 1 contract\n\n`aws-us-codebuild-linux` is a Linux-only runner preset. It requires the exact\nCodeBuild project name and resolves the runner label at workflow evaluation\ntime:\n\n```text\ncodebuild-<project>-<github.run_id>-<github.run_attempt>\n```\n\nThe GitHub-hosted `trust-gate` remains ahead of the matrix job. A fork pull\nrequest therefore fails or skips before the CodeBuild `runs-on` label exists as\na queued job. The dedicated consumer workflow is manual-only and does not add\nthe preset to dev, alpha, release, signing, notarization, deployment, or\npublication workflows.\n\nThe CodeBuild project is:\n\n- repository-scoped through an AWS CodeConnections GitHub App;\n- one ephemeral runner and one GitHub job per CodeBuild build;\n- outside a VPC, with no idle VM, NAT gateway, public ingress, SSH, or persistent\n workspace;\n- limited to two concurrent builds, 15 queued minutes, and 40 execution\n minutes;\n- allowed to write only its dedicated CloudWatch log group and request a token\n from its dedicated GitHub App connection;\n- forbidden from receiving signing, notarization, package publication, release,\n deploy, static AWS, long-lived GitHub, or SSH credentials.\n\nThe AWS-managed Ubuntu 24.04 standard image is the immutable base. Before a\nnative lifecycle starts, Buildchain installs the distribution's `gcc-14` and\n`g++-14` packages, exposes only per-job `gcc`/`g++` aliases, and downloads the\npinned Kitware CMake 3.31.6 archive after verifying its reviewed SHA256. The\nresolved package manager, versions, and CMake source digest are retained as\n`aws-native-toolchain.json`; no toolchain state survives the ephemeral\nCodeBuild execution. The toolchain adapter also retains the reviewed Amazon\nLinux 2023 `gcc14` path for compatible projects.\n\n## Cost and kill-switch envelope\n\nThe 2026-07-28 AWS Price List entry for\n`BUILD_GENERAL1_XLARGE` Linux in `us-east-1` is USD 0.0798 per build minute.\nThe contract rounds that rate up to USD 0.08. Twelve fully timed-out accepted\nbuilds reserve at most USD 38.40. At project concurrency two, the fail-closed\ncontroller can see at most two over-cap builds. The envelope conservatively\ncharges both race builds for their complete 40-minute timeout rather than\nassuming fast EventBridge delivery. The bounded CodeBuild maximum is therefore\nUSD 44.80, below the dedicated USD 49 budget and leaving USD 4.20 for the small\ncontroller, state, notification, and log charges.\n\nThe controller stores an idempotent build-id ledger, an atomic accepted-build\ncounter, and worst-case reservation in DynamoDB. Duplicate EventBridge delivery\ndoes not consume the bounded build allowance. It deletes the CodeBuild webhook\nand stops the triggering build when:\n\n- the accepted-build or reserved-cost cap is reached;\n- actual-cost telemetry is missing or more than six hours old;\n- actual CodeBuild spend reaches the budget;\n- AWS Budgets sends the 80% or 95% actual-spend notification;\n- the kill switch was already set.\n\nThe stack starts fail closed: it has no cost telemetry item and CloudFormation\ndoes not create the webhook. Before arming the webhook, the operator must write\na current Cost Explorer observation to the `COST` item, clear only the dedicated\ncontroller's killed state, and create the exact workflow-filtered webhook.\nRe-arming after any kill is a separate provider mutation and requires a new\nexplicit approval.\n\n## Qualification evidence\n\nEach successful job uploads `aws-runner-burst.json`, binding:\n\n- consumer repository, exact source SHA and ref;\n- GitHub run id, attempt and job;\n- CodeBuild project, build id, build ARN and initiator;\n- observation timestamp and canonical digest.\n\nLinux qualification requires:\n\n- at least 10 trusted exact-source successful jobs;\n- observed concurrency of at least two;\n- p95 queue-to-start of at most five minutes;\n- actual incremental AWS spend below USD 49;\n- no idle build and no active cloud residue.\n\n`node scripts/aws-runner-burst.mjs verify-linux --input <snapshot.json>` fails\nclosed when cost telemetry is missing/stale or any acceptance predicate is\nfalse.\n\n### Phase 1 recorded outcome\n\nThe Linux phase passed on 2026-07-29. Ten trusted exact-source Kungfu jobs\ncompleted successfully, including four overlapping two-job waves. The observed\nCodeBuild queue-to-start p95 was 0.696 seconds. All 16 paid executions,\nincluding six diagnostic runs, produced a conservative incremental compute\nupper bound of USD 25.798 by rounding every execution up to a whole minute at\nthe live AWS Price List rate.\n\nThe global webhook kill switch was exercised after the tenth qualifying job.\nThe project then reported no webhook or in-progress build, and the card-owned\nEC2 inventory was empty. AWS Billing and Cost Explorer still reported an\nestimated zero during their provider ingestion delay; the retained\nexecution-derived upper bound is therefore the immediate cost proof and must be\nreconciled with the eventual AWS line item in the final campaign report.\n\nThe source-bound evidence and deterministic phase receipt are:\n\n- `evidence/aws-us-elastic-runner-burst-plane/linux-codebuild-qualification-input.json`\n- `evidence/aws-us-elastic-runner-burst-plane/linux-codebuild-qualification-receipt.json`\n\n## Phase 2 contract\n\nThe Windows phase uses the explicit `aws-us-ec2-windows-jit` runner preset.\nIts caller supplies one bounded label under\n`aws-us-ec2-windows-jit-<qualification-id>`, and Buildchain resolves exactly\none Windows x64 native lane. The reusable trust gate still runs on a\nGitHub-hosted runner before the JIT label can select EC2.\n\nThe provider creates repository-level GitHub JIT configuration for\n`kungfu-systems/kungfu`. Its `labels` request must contain all four scheduling\nlabels: `self-hosted`, `Windows`, `X64`, and the card-scoped\n`aws-us-ec2-windows-jit-<qualification-id>` label. GitHub's JIT endpoint does\nnot infer the default OS and architecture labels when they are omitted. The\nencoded configuration is never placed in EC2 user data, a tag, a command log,\nor an artifact. The operator writes it to a card-scoped SSM SecureString under\n`/kungfu/burst/windows/`; the instance role can read and delete only that\nprefix. Bootstrap reads the value once, deletes the parameter immediately, and\npasses it only to the pinned runner process.\n\nEach runner uses:\n\n- Amazon's current Windows Server 2025 Full Base AMI, resolved through the\n public SSM AMI parameter and retained by exact AMI id and name;\n- `c7i.4xlarge`, one instance and one JIT runner per job;\n- GitHub Actions Runner 2.336.0 with the official Windows x64 SHA256;\n- PowerShell 7.6.4 with the official Windows x64 MSI SHA256 and Microsoft\n Authenticode verification;\n- pinned PortableGit 2.55.0.3 with its GitHub release SHA256, exposing only its\n `cmd` directory so POSIX compatibility tools cannot shadow Windows tools;\n- a Microsoft Authenticode-verified Visual Studio 2022 Build Tools bootstrap;\n- IMDSv2, an encrypted root volume with delete-on-termination, no inbound\n security-group rule, no key pair, and no warm Auto Scaling capacity.\n\nRunner diagnostics and a redacted lifecycle record are uploaded to the\nprovider's encrypted, private evidence bucket. The runner process exits after\none job, Windows shuts down, and EC2's instance-initiated shutdown behavior is\nset to `terminate`. A five-minute reaper terminates card-owned stopped or\nthree-hour-old instances and deletes only their dedicated JIT parameter.\n\nAt the 2026-07-29 AWS Price List rate of USD 1.45 per Windows\n`c7i.4xlarge` hour, six accepted three-hour instances reserve USD 26.10. The\ntwo-instance race envelope reserves another USD 8.70, producing a USD 34.80\nworst case below the dedicated USD 40 budget. Budget notifications at 80% and\n95% invoke the same card-scoped global kill switch.\n\nQualification requires one runner-profile smoke, three trusted exact-source\nfull Windows jobs, independent cancellation and timeout cleanup exercises, and\nzero repository runner, EC2 instance, disposable volume, min capacity, and\ndesired capacity within 15 minutes of the final job.\n\n## Phase 3 contract\n\nThe macOS phase uses the explicit `aws-us-ec2-macos-jit` runner preset. Its\ncaller supplies one unique label under\n`aws-us-ec2-macos-jit-<qualification-id>`, and Buildchain resolves exactly one\nnative macOS ARM64 lane with `self-hosted`, `macOS`, `ARM64`, and the unique\ncampaign label. The reusable trust gate remains ahead of the JIT runner.\n\nUnlike Windows, the Mac campaign deliberately reuses one instance on one\n`mac2.metal` Dedicated Host. The operator allocates exactly one tagged host,\nlaunches exactly one tagged instance, and sends three sequential SSM bootstrap\ncommands. Each command consumes and immediately deletes a distinct repository\nJIT SecureString under `/kungfu/burst/macos/`, then runs GitHub Actions Runner\n2.336.0 for exactly one job. The runner archive is pinned to the official\nmacOS ARM64 SHA256. No GitHub, signing, notarization, publication, SSH, or\nstatic AWS credential is admitted to the instance.\n\nThe instance uses the exact retained Amazon EC2 macOS AMI, IMDSv2, an encrypted\ndelete-on-termination root volume, no inbound security-group rule, and the\nAMI's preinstalled SSM Agent and AWS CLI v2. The three accepted jobs must bind\nto the same host id, instance id, AMI id, source SHA, and campaign. At least one\njob must exercise the full native lifecycle.\n\nAWS imposes a 24-hour minimum Dedicated Host allocation. The contract therefore\nkeeps the one host for at least 24 hours even if all three jobs finish earlier.\nAt the recorded USD 0.6498 hourly rate, the minimum commitment rounds to USD\n15.60. A 30-hour fail-closed ceiling rounds to USD 19.49, below the dedicated\nUSD 25 budget. A ten-minute reaper terminates an expired campaign instance and\nretries host release after the minimum allocation and Apple scrub constraints\nallow it. Budget notifications at 80% and 95% invoke the same card-scoped kill\nswitch.\n\nQualification requires three trusted exact-source one-job JIT runs on the one\nhost, including at least one full run, plus proof that:\n\n- the instance terminated and the encrypted disposable volume disappeared;\n- Apple host scrub completed;\n- the Dedicated Host was released between 24 and 30 hours after allocation;\n- the repository has no registered campaign runner;\n- AWS has no active campaign instance or allocated campaign host;\n- actual incremental spend remained below USD 25.\n\n## Provider lifecycle\n\nThe three infrastructure templates live under\n`infra/aws-us-elastic-runner-burst-plane/`. Creating a change set is the review\nboundary. Executing it, completing the GitHub App connection, creating or\nre-arming a webhook, allocating or releasing a Dedicated Host, writing cost\ntelemetry, dispatching paid jobs, operating a kill switch, and deleting a stack\nare all explicit provider mutations.\n\nThe reviewed Phase 1 provider sequence is below. It deliberately separates\nconnection creation, change-set inspection, stack execution, cost observation,\nand webhook arming:\n\n```bash\nburst_profile=us\nburst_region=us-east-1\nburst_stack=kungfu-buildchain-linux-burst-poc\nburst_project=kungfu-buildchain-linux-burst-poc\nburst_connection_name=kungfu-linux-burst-poc\nburst_change_set=phase1-linux-codebuild-poc\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codeconnections create-connection \\\n --provider-type GitHub \\\n --connection-name \"$burst_connection_name\" \\\n --tags Key=kungfu:owner,Value=buildchain \\\n Key=kungfu:plane,Value=aws-us-elastic-runner-burst\n```\n\nThe returned connection is `PENDING` until an operator completes the GitHub App\nhandshake in AWS. Read back `ConnectionStatus=AVAILABLE` before creating the\nchange set. Do not put an OAuth token or GitHub token in the shell:\n\nAWS CodeConnections connection names are limited to 32 characters, so keep the\nshorter connection name even when the stack and project use the longer\nBuildchain-specific name.\n\n```bash\nburst_connection_arn=REPLACE_WITH_AVAILABLE_CONNECTION_ARN\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codeconnections get-connection \\\n --connection-arn \"$burst_connection_arn\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation create-change-set \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\" \\\n --change-set-type CREATE \\\n --template-body \\\n file://infra/aws-us-elastic-runner-burst-plane/codebuild-poc.template.yml \\\n --capabilities CAPABILITY_IAM \\\n --parameters \\\n ParameterKey=GitHubConnectionArn,ParameterValue=\"$burst_connection_arn\" \\\n ParameterKey=ProjectName,ParameterValue=\"$burst_project\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation wait change-set-create-complete \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation describe-change-set \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\"\n```\n\nOnly after the change-set resource list and IAM diff are accepted:\n\n```bash\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation execute-change-set \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation wait stack-create-complete \\\n --stack-name \"$burst_stack\"\n```\n\nArming requires a fresh, operator-observed CodeBuild cost value. `COST` is the\nonly mutable telemetry item and `CONTROL` is the only state cleared:\n\n```bash\nburst_table=$(\n aws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation describe-stacks \\\n --stack-name \"$burst_stack\" \\\n --query \"Stacks[0].Outputs[?OutputKey=='StateTable'].OutputValue\" \\\n --output text\n)\nburst_observed_at=$(date -u +%s)\nburst_actual_usd=REPLACE_WITH_CURRENT_CODEBUILD_ACTUAL_USD\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n dynamodb put-item \\\n --table-name \"$burst_table\" \\\n --item \"{\\\"pk\\\":{\\\"S\\\":\\\"COST\\\"},\\\"actual_usd\\\":{\\\"N\\\":\\\"$burst_actual_usd\\\"},\\\"observed_at\\\":{\\\"N\\\":\\\"$burst_observed_at\\\"}}\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n dynamodb delete-item \\\n --table-name \"$burst_table\" \\\n --key '{\"pk\":{\"S\":\"CONTROL\"}}'\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codebuild create-webhook \\\n --project-name \"$burst_project\" \\\n --filter-groups \\\n '[[{\"type\":\"EVENT\",\"pattern\":\"WORKFLOW_JOB_QUEUED\"},{\"type\":\"WORKFLOW_NAME\",\"pattern\":\"^AWS US Linux Burst Qualification$\"}]]'\n```\n\nThe immediate global kill is idempotent and targets only the dedicated project:\n\n```bash\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codebuild delete-webhook \\\n --project-name \"$burst_project\"\n```\n\nAfter preserving the qualification evidence and proving no build is in\nprogress, rollback removes only the card-owned stack and connection:\n\n```bash\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation delete-stack \\\n --stack-name \"$burst_stack\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation wait stack-delete-complete \\\n --stack-name \"$burst_stack\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codeconnections delete-connection \\\n --connection-arn \"$burst_connection_arn\"\n```\n\nPhase cleanup evidence must include:\n\n- CodeBuild batch/list results showing no in-progress build;\n- controller state and accepted-build ledger;\n- CodeBuild actual cost observation and its timestamp;\n- no EC2 instance, volume, launch template, Auto Scaling group, or dedicated\n host created by this phase;\n- the CodeBuild webhook deleted or the whole stack deleted.\n\n## Source boundaries\n\nThe design follows the current AWS CodeBuild GitHub Actions runner contract:\n`WORKFLOW_JOB_QUEUED` starts an ephemeral runner, the run id maps cancellation,\nand the build terminates after one job. It uses the current GitHub guidance to\nprefer ephemeral autoscaled self-hosted runners and to retain runner logs\nexternally. Provider documentation and the live AWS Price List query are the\nauthoritative external sources; this document is an auditable cache."
|
|
502
|
+
"markdown": "---\nstatus: draft\nperiod: 2026-07-28\ntheme: aws-us-elastic-runner-burst-plane\ndoc_type: design\nsource_level: local-files-and-provider-docs\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-08-01\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-08-01\n invisible_information: No hidden model checkpoint, parameters, or private training data were available.\n---\n\n# AWS US elastic runner burst plane\n\nThe local runner fleet remains the normal Kungfu build plane. This AWS US plane\nis an explicit, temporary overflow mechanism with sequential qualification:\n\n1. Linux CodeBuild proof of concept under USD 50.\n2. Windows EC2 one-job JIT runners.\n3. One bounded 24-hour EC2 Mac campaign.\n\nNo later phase can start from design intent alone. The preceding phase must\nproduce a qualifying source-bound receipt, actual cost, and zero-resource\ncleanup proof.\n\n## Phase 1 contract\n\n`aws-us-codebuild-linux` is a Linux-only runner preset. It requires the exact\nCodeBuild project name and resolves the runner label at workflow evaluation\ntime:\n\n```text\ncodebuild-<project>-<github.run_id>-<github.run_attempt>\n```\n\nThe GitHub-hosted `trust-gate` remains ahead of the matrix job. A fork pull\nrequest therefore fails or skips before the CodeBuild `runs-on` label exists as\na queued job. The dedicated consumer workflow is manual-only and does not add\nthe preset to dev, alpha, release, signing, notarization, deployment, or\npublication workflows.\n\nThe CodeBuild project is:\n\n- repository-scoped through an AWS CodeConnections GitHub App;\n- one ephemeral runner and one GitHub job per CodeBuild build;\n- outside a VPC, with no idle VM, NAT gateway, public ingress, SSH, or persistent\n workspace;\n- limited to two concurrent builds, 15 queued minutes, and 40 execution\n minutes;\n- allowed to write only its dedicated CloudWatch log group and request a token\n from its dedicated GitHub App connection;\n- forbidden from receiving signing, notarization, package publication, release,\n deploy, static AWS, long-lived GitHub, or SSH credentials.\n\nThe AWS-managed Ubuntu 24.04 standard image is the immutable base. Before a\nnative lifecycle starts, Buildchain installs the distribution's `gcc-14` and\n`g++-14` packages, exposes only per-job `gcc`/`g++` aliases, and downloads the\npinned Kitware CMake 3.31.6 archive after verifying its reviewed SHA256. The\nresolved package manager, versions, and CMake source digest are retained as\n`aws-native-toolchain.json`; no toolchain state survives the ephemeral\nCodeBuild execution. The toolchain adapter also retains the reviewed Amazon\nLinux 2023 `gcc14` path for compatible projects.\n\n## Cost and kill-switch envelope\n\nThe 2026-07-28 AWS Price List entry for\n`BUILD_GENERAL1_XLARGE` Linux in `us-east-1` is USD 0.0798 per build minute.\nThe contract rounds that rate up to USD 0.08. Twelve fully timed-out accepted\nbuilds reserve at most USD 38.40. At project concurrency two, the fail-closed\ncontroller can see at most two over-cap builds. The envelope conservatively\ncharges both race builds for their complete 40-minute timeout rather than\nassuming fast EventBridge delivery. The bounded CodeBuild maximum is therefore\nUSD 44.80, below the dedicated USD 49 budget and leaving USD 4.20 for the small\ncontroller, state, notification, and log charges.\n\nThe controller stores an idempotent build-id ledger, an atomic accepted-build\ncounter, and worst-case reservation in DynamoDB. Duplicate EventBridge delivery\ndoes not consume the bounded build allowance. It deletes the CodeBuild webhook\nand stops the triggering build when:\n\n- the accepted-build or reserved-cost cap is reached;\n- actual-cost telemetry is missing or more than six hours old;\n- actual CodeBuild spend reaches the budget;\n- AWS Budgets sends the 80% or 95% actual-spend notification;\n- the kill switch was already set.\n\nThe stack starts fail closed: it has no cost telemetry item and CloudFormation\ndoes not create the webhook. Before arming the webhook, the operator must write\na current Cost Explorer observation to the `COST` item, clear only the dedicated\ncontroller's killed state, and create the exact workflow-filtered webhook.\nRe-arming after any kill is a separate provider mutation and requires a new\nexplicit approval.\n\n## Qualification evidence\n\nEach successful job uploads `aws-runner-burst.json`, binding:\n\n- consumer repository, exact source SHA and ref;\n- GitHub run id, attempt and job;\n- CodeBuild project, build id, build ARN and initiator;\n- observation timestamp and canonical digest.\n\nLinux qualification requires:\n\n- at least 10 trusted exact-source successful jobs;\n- observed concurrency of at least two;\n- p95 queue-to-start of at most five minutes;\n- actual incremental AWS spend below USD 49;\n- no idle build and no active cloud residue.\n\n`node scripts/aws-runner-burst.mjs verify-linux --input <snapshot.json>` fails\nclosed when cost telemetry is missing/stale or any acceptance predicate is\nfalse.\n\n### Phase 1 recorded outcome\n\nThe Linux phase passed on 2026-07-29. Ten trusted exact-source Kungfu jobs\ncompleted successfully, including four overlapping two-job waves. The observed\nCodeBuild queue-to-start p95 was 0.696 seconds. All 16 paid executions,\nincluding six diagnostic runs, produced a conservative incremental compute\nupper bound of USD 25.798 by rounding every execution up to a whole minute at\nthe live AWS Price List rate.\n\nThe global webhook kill switch was exercised after the tenth qualifying job.\nThe project then reported no webhook or in-progress build, and the card-owned\nEC2 inventory was empty. AWS Billing and Cost Explorer still reported an\nestimated zero during their provider ingestion delay; the retained\nexecution-derived upper bound is therefore the immediate cost proof and must be\nreconciled with the eventual AWS line item in the final campaign report.\n\nThe source-bound evidence and deterministic phase receipt are:\n\n- `evidence/aws-us-elastic-runner-burst-plane/linux-codebuild-qualification-input.json`\n- `evidence/aws-us-elastic-runner-burst-plane/linux-codebuild-qualification-receipt.json`\n\n## Phase 2 contract\n\nThe Windows phase uses the explicit `aws-us-ec2-windows-jit` runner preset.\nIts caller supplies one bounded label under\n`aws-us-ec2-windows-jit-<qualification-id>`, and Buildchain resolves exactly\none Windows x64 native lane. The reusable trust gate still runs on a\nGitHub-hosted runner before the JIT label can select EC2.\n\nThe provider creates repository-level GitHub JIT configuration for\n`kungfu-systems/kungfu`. Its `labels` request must contain all four scheduling\nlabels: `self-hosted`, `Windows`, `X64`, and the card-scoped\n`aws-us-ec2-windows-jit-<qualification-id>` label. GitHub's JIT endpoint does\nnot infer the default OS and architecture labels when they are omitted. The\nencoded configuration is never placed in EC2 user data, a tag, a command log,\nor an artifact. The operator writes it to a card-scoped SSM SecureString under\n`/kungfu/burst/windows/`; the instance role can read and delete only that\nprefix. Bootstrap reads the value once, deletes the parameter immediately, and\npasses it only to the pinned runner process.\n\nEach runner uses:\n\n- Amazon's current Windows Server 2025 Full Base AMI, resolved through the\n public SSM AMI parameter and retained by exact AMI id and name;\n- `c7i.4xlarge`, one instance and one JIT runner per job;\n- GitHub Actions Runner 2.336.0 with the official Windows x64 SHA256;\n- PowerShell 7.6.4 with the official Windows x64 MSI SHA256 and Microsoft\n Authenticode verification;\n- pinned PortableGit 2.55.0.3 with its GitHub release SHA256, exposing only its\n `cmd` directory so POSIX compatibility tools cannot shadow Windows tools;\n- a Microsoft Authenticode-verified Visual Studio 2022 Build Tools bootstrap;\n- IMDSv2, an encrypted root volume with delete-on-termination, no inbound\n security-group rule, no key pair, and no warm Auto Scaling capacity.\n\nRunner diagnostics and a redacted lifecycle record are uploaded to the\nprovider's encrypted, private evidence bucket. The runner process exits after\none job, Windows shuts down, and EC2's instance-initiated shutdown behavior is\nset to `terminate`. A five-minute reaper terminates card-owned stopped or\nthree-hour-old instances and deletes only their dedicated JIT parameter.\n\nAt the 2026-07-29 AWS Price List rate of USD 1.45 per Windows\n`c7i.4xlarge` hour, six accepted three-hour instances reserve USD 26.10. The\ntwo-instance race envelope reserves another USD 8.70, producing a USD 34.80\nworst case below the dedicated USD 40 budget. Budget notifications at 80% and\n95% invoke the same card-scoped global kill switch.\n\nQualification requires one runner-profile smoke, three trusted exact-source\nfull Windows jobs, independent cancellation and timeout cleanup exercises, and\nzero repository runner, EC2 instance, disposable volume, min capacity, and\ndesired capacity within 15 minutes of the final job.\n\n## Phase 3 contract\n\nThe macOS phase uses the explicit `aws-us-ec2-macos-jit` runner preset. Its\ncaller supplies one unique label under\n`aws-us-ec2-macos-jit-<qualification-id>`, and Buildchain resolves exactly one\nnative macOS ARM64 lane with `self-hosted`, `macOS`, `ARM64`, and the unique\ncampaign label. The reusable trust gate remains ahead of the JIT runner.\n\nUnlike Windows, the Mac campaign deliberately reuses one instance on one\n`mac2.metal` Dedicated Host. The operator allocates exactly one tagged host,\nlaunches exactly one tagged instance, and sends three sequential SSM bootstrap\ncommands. Each command consumes and immediately deletes a distinct repository\nJIT SecureString under `/kungfu/burst/macos/`, then runs GitHub Actions Runner\n2.336.0 for exactly one job. The runner archive is pinned to the official\nmacOS ARM64 SHA256. No GitHub, signing, notarization, publication, SSH, or\nstatic AWS credential is admitted to the instance.\n\nThe instance uses the exact retained Amazon EC2 macOS AMI, IMDSv2, an encrypted\ndelete-on-termination root volume, no inbound security-group rule, and the\nAMI's preinstalled SSM Agent and AWS CLI v2. The three accepted jobs must bind\nto the same host id, instance id, AMI id, source SHA, and campaign. At least one\njob must exercise the full native lifecycle.\n\nAWS imposes a 24-hour minimum Dedicated Host allocation. The contract therefore\nkeeps the one host for at least 24 hours even if all three jobs finish earlier.\nAt the recorded USD 0.6498 hourly rate, the minimum commitment rounds to USD\n15.60. A 30-hour fail-closed ceiling rounds to USD 19.49, below the dedicated\nUSD 25 budget. A ten-minute reaper terminates an expired campaign instance and\nretries host release after the minimum allocation and Apple scrub constraints\nallow it. Budget notifications at 80% and 95% invoke the same card-scoped kill\nswitch.\n\nQualification requires three trusted exact-source one-job JIT runs on the one\nhost, including at least one full run, plus proof that:\n\n- the instance terminated and the encrypted disposable volume disappeared;\n- Apple host scrub completed;\n- the Dedicated Host was released between 24 and 30 hours after allocation;\n- the repository has no registered campaign runner;\n- AWS has no active campaign instance or allocated campaign host;\n- actual incremental spend remained below USD 25.\n\n### Phase 3 lifecycle controller\n\n`scripts/aws-macos-jit-controller.mjs` is the operator boundary for the paid\ncampaign. It has three explicit mutation modes:\n\n- `launch-campaign` binds the exact repository source, AMI, availability zone,\n tagged Dedicated Host, and reusable instance. It rejects pre-existing Mac\n capacity and requires successful `AllocateHosts` and `RunInstances` DryRuns\n before either real call.\n- `run-job` binds one queued exact-source GitHub job to the existing campaign\n host and instance. It writes the repository JIT configuration through a\n mode-0600 temporary file into a distinct SSM SecureString, sends only the\n credential-free bootstrap through SSM, and removes the parameter plus runner\n registration if command delivery fails.\n- `close-campaign` refuses execution before the provider's 24-hour minimum,\n verifies the encrypted delete-on-termination root volume, removes scoped JIT\n residue, terminates the exact instance, and requires a `ReleaseHosts` DryRun\n before release. If Apple host scrubbing is still in progress, it reports\n `release-pending`; the ten-minute card-scoped reaper remains the bounded\n retry path.\n\nEvery execute mode requires the exact source SHA and campaign id to be repeated\nthrough `--confirm-source-sha` and `--confirm-campaign-id`. `run-job` also\nrequires `--confirm-run-id`. Omitting `--execute` emits a deterministic plan\nwithout changing AWS or GitHub state.\n\n## Provider lifecycle\n\nThe three infrastructure templates live under\n`infra/aws-us-elastic-runner-burst-plane/`. Creating a change set is the review\nboundary. Executing it, completing the GitHub App connection, creating or\nre-arming a webhook, allocating or releasing a Dedicated Host, writing cost\ntelemetry, dispatching paid jobs, operating a kill switch, and deleting a stack\nare all explicit provider mutations.\n\nThe reviewed Phase 1 provider sequence is below. It deliberately separates\nconnection creation, change-set inspection, stack execution, cost observation,\nand webhook arming:\n\n```bash\nburst_profile=us\nburst_region=us-east-1\nburst_stack=kungfu-buildchain-linux-burst-poc\nburst_project=kungfu-buildchain-linux-burst-poc\nburst_connection_name=kungfu-linux-burst-poc\nburst_change_set=phase1-linux-codebuild-poc\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codeconnections create-connection \\\n --provider-type GitHub \\\n --connection-name \"$burst_connection_name\" \\\n --tags Key=kungfu:owner,Value=buildchain \\\n Key=kungfu:plane,Value=aws-us-elastic-runner-burst\n```\n\nThe returned connection is `PENDING` until an operator completes the GitHub App\nhandshake in AWS. Read back `ConnectionStatus=AVAILABLE` before creating the\nchange set. Do not put an OAuth token or GitHub token in the shell:\n\nAWS CodeConnections connection names are limited to 32 characters, so keep the\nshorter connection name even when the stack and project use the longer\nBuildchain-specific name.\n\n```bash\nburst_connection_arn=REPLACE_WITH_AVAILABLE_CONNECTION_ARN\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codeconnections get-connection \\\n --connection-arn \"$burst_connection_arn\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation create-change-set \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\" \\\n --change-set-type CREATE \\\n --template-body \\\n file://infra/aws-us-elastic-runner-burst-plane/codebuild-poc.template.yml \\\n --capabilities CAPABILITY_IAM \\\n --parameters \\\n ParameterKey=GitHubConnectionArn,ParameterValue=\"$burst_connection_arn\" \\\n ParameterKey=ProjectName,ParameterValue=\"$burst_project\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation wait change-set-create-complete \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation describe-change-set \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\"\n```\n\nOnly after the change-set resource list and IAM diff are accepted:\n\n```bash\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation execute-change-set \\\n --stack-name \"$burst_stack\" \\\n --change-set-name \"$burst_change_set\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation wait stack-create-complete \\\n --stack-name \"$burst_stack\"\n```\n\nArming requires a fresh, operator-observed CodeBuild cost value. `COST` is the\nonly mutable telemetry item and `CONTROL` is the only state cleared:\n\n```bash\nburst_table=$(\n aws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation describe-stacks \\\n --stack-name \"$burst_stack\" \\\n --query \"Stacks[0].Outputs[?OutputKey=='StateTable'].OutputValue\" \\\n --output text\n)\nburst_observed_at=$(date -u +%s)\nburst_actual_usd=REPLACE_WITH_CURRENT_CODEBUILD_ACTUAL_USD\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n dynamodb put-item \\\n --table-name \"$burst_table\" \\\n --item \"{\\\"pk\\\":{\\\"S\\\":\\\"COST\\\"},\\\"actual_usd\\\":{\\\"N\\\":\\\"$burst_actual_usd\\\"},\\\"observed_at\\\":{\\\"N\\\":\\\"$burst_observed_at\\\"}}\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n dynamodb delete-item \\\n --table-name \"$burst_table\" \\\n --key '{\"pk\":{\"S\":\"CONTROL\"}}'\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codebuild create-webhook \\\n --project-name \"$burst_project\" \\\n --filter-groups \\\n '[[{\"type\":\"EVENT\",\"pattern\":\"WORKFLOW_JOB_QUEUED\"},{\"type\":\"WORKFLOW_NAME\",\"pattern\":\"^AWS US Linux Burst Qualification$\"}]]'\n```\n\nThe immediate global kill is idempotent and targets only the dedicated project:\n\n```bash\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codebuild delete-webhook \\\n --project-name \"$burst_project\"\n```\n\nAfter preserving the qualification evidence and proving no build is in\nprogress, rollback removes only the card-owned stack and connection:\n\n```bash\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation delete-stack \\\n --stack-name \"$burst_stack\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n cloudformation wait stack-delete-complete \\\n --stack-name \"$burst_stack\"\n\naws --profile \"$burst_profile\" --region \"$burst_region\" \\\n codeconnections delete-connection \\\n --connection-arn \"$burst_connection_arn\"\n```\n\nPhase cleanup evidence must include:\n\n- CodeBuild batch/list results showing no in-progress build;\n- controller state and accepted-build ledger;\n- CodeBuild actual cost observation and its timestamp;\n- no EC2 instance, volume, launch template, Auto Scaling group, or dedicated\n host created by this phase;\n- the CodeBuild webhook deleted or the whole stack deleted.\n\n## Source boundaries\n\nThe design follows the current AWS CodeBuild GitHub Actions runner contract:\n`WORKFLOW_JOB_QUEUED` starts an ephemeral runner, the run id maps cancellation,\nand the build terminates after one job. It uses the current GitHub guidance to\nprefer ephemeral autoscaled self-hosted runners and to retain runner logs\nexternally. Provider documentation and the live AWS Price List query are the\nauthoritative external sources; this document is an auditable cache."
|
|
498
503
|
},
|
|
499
504
|
{
|
|
500
505
|
"id": "manual:binary-distribution",
|
|
@@ -2441,7 +2446,7 @@
|
|
|
2441
2446
|
],
|
|
2442
2447
|
"maturity": "stable",
|
|
2443
2448
|
"sourcePath": "docs/node-api-reference.md",
|
|
2444
|
-
"digest": "sha256:
|
|
2449
|
+
"digest": "sha256:38f051f579fb93dc7d8b4f2c70acd622c020e867394344b5e932568cd8d2ad83",
|
|
2445
2450
|
"headings": [
|
|
2446
2451
|
{
|
|
2447
2452
|
"level": 1,
|
|
@@ -2679,7 +2684,7 @@
|
|
|
2679
2684
|
"anchor": "kungfu-tech-buildchain-buildchain-kfd-claims"
|
|
2680
2685
|
}
|
|
2681
2686
|
],
|
|
2682
|
-
"markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-08-01\n invisible_context: not asserted\n---\n\n# Buildchain Node API Reference\n\n> Generated from `package.json#exports` and the exported ESM symbols in each target. Do not edit this file by hand.\n\nSignatures and source locations are mechanical. JavaScript return types remain conservative where the source declares no static type.\n\n## `@kungfu-tech/buildchain`\n\nTarget: `./packages/core/index.js`. Public symbols: 538.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:292` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:11` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:192` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:910` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:75` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:76` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:520` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:105` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:818` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:727` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2841` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:248` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:783` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:304` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:922` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:85` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:514` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:482` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:316` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/badges`\n\nTarget: `./packages/core/badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/build-facts`\n\nTarget: `./packages/core/build-facts.js`. Public symbols: 15.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:458` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:10` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:45` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:146` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:302` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:173` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:520` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:423` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:549` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:557` |\n\n## `@kungfu-tech/buildchain/core`\n\nTarget: `./packages/core/index.js`. Public symbols: 538.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:292` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:11` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:192` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:910` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:75` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:76` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:520` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:105` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:818` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:727` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2841` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:248` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:783` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:304` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:922` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:85` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:514` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:482` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:316` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/artifact-passport`\n\nTarget: `./packages/core/artifact-passport.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:9` |\n| `DEFAULT_NPM_REGISTRY_BASE_URL` | constant: const DEFAULT_NPM_REGISTRY_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_NPM_REGISTRY_BASE_URL } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:12` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:499` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:827` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:368` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:38` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:701` |\n\n## `@kungfu-tech/buildchain/artifact-verification-envelope`\n\nTarget: `./packages/core/artifact-verification-envelope.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:144` |\n\n## `@kungfu-tech/buildchain/github-artifact-attestation`\n\nTarget: `./packages/core/github-artifact-attestation.js`. Public symbols: 18.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:524` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:15` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:87` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:158` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:250` |\n| `stableJson` | function: function stableJson(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { stableJson } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:72` |\n| `stageGitHubArtifactAttestationInputs` | function: function stageGitHubArtifactAttestationInputs({ policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {}) | { policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { stageGitHubArtifactAttestationInputs } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:389` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:563` |\n\n## `@kungfu-tech/buildchain/artifact-signing`\n\nTarget: `./packages/core/artifact-signing.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:60` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:167` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:103` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:111` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:291` |\n\n## `@kungfu-tech/buildchain/artifact-signing-result`\n\nTarget: `./packages/core/artifact-signing-result.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:12` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:58` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:68` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:147` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:193` |\n\n## `@kungfu-tech/buildchain/detached-artifact-signature`\n\nTarget: `./packages/core/detached-artifact-signature.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:10` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:36` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:82` |\n\n## `@kungfu-tech/buildchain/anchored-version-material`\n\nTarget: `./packages/core/anchored-version-material.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:15` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:118` |\n\n## `@kungfu-tech/buildchain/buildchain-contract`\n\nTarget: `./packages/core/buildchain-contract.js`. Public symbols: 12.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:7` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:910` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:75` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:818` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:727` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:783` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:922` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:34` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:30` |\n\n## `@kungfu-tech/buildchain/candidate-timeline`\n\nTarget: `./packages/core/candidate-timeline.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:3` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:381` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:438` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:74` |\n\n## `@kungfu-tech/buildchain/channel-candidate`\n\nTarget: `./packages/core/channel-candidate.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:84` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:90` |\n\n## `@kungfu-tech/buildchain/cache-evidence`\n\nTarget: `./packages/core/cache-evidence.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:3` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:48` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:169` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:226` |\n\n## `@kungfu-tech/buildchain/controller-evidence`\n\nTarget: `./packages/core/controller-evidence.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:448` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:5` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:150` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:196` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:531` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:504` |\n\n## `@kungfu-tech/buildchain/diagnostics`\n\nTarget: `./packages/core/diagnostics.js`. Public symbols: 30.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:39` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1085` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:944` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:295` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1029` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:495` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1408` |\n| `createStructuredCacheEvidence` | function: function createStructuredCacheEvidence({ sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, }) | { sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createStructuredCacheEvidence } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:722` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1223` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1786` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1468` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:953` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1254` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:325` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1459` |\n\n## `@kungfu-tech/buildchain/homebrew`\n\nTarget: `./packages/core/homebrew.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:335` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:223` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:7` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:290` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:390` |\n\n## `@kungfu-tech/buildchain/issue-reporting`\n\nTarget: `./packages/core/issue-reporting.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:5` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:104` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:199` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:64` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:76` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:393` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:6` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:23` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:33` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:41` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:385` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:51` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:378` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:84` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:80` |\n\n## `@kungfu-tech/buildchain/kfd`\n\nTarget: `./packages/core/kfd.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:896` |\n| `checkKfdUpstreamFacts` | function: function checkKfdUpstreamFacts(aggregate = {}) | aggregate = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:798` |\n| `collectKfdAggregate` | function: function collectKfdAggregate({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdAggregate } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:868` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:902` |\n| `collectKfdUpstreamFacts` | function: function collectKfdUpstreamFacts({ cwd = process.cwd(), components = undefined, includeOwn = true } = {}) | { cwd = process.cwd(), components = undefined, includeOwn = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:689` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:464` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:546` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:561` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:663` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:681` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:905` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:492` |\n| `listKfdUpstreamRoles` | function: function listKfdUpstreamRoles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdUpstreamRoles } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:771` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:520` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:495` |\n| `upstream` | constant: const upstream | none | value | Import does not declare a throw contract. | none-on-import | `import { upstream } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:300` |\n\n## `@kungfu-tech/buildchain/kfd-product-gates`\n\nTarget: `./packages/core/kfd-product-gates.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:716` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:465` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:859` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:796` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:308` |\n\n## `@kungfu-tech/buildchain/kfd-agent-hub`\n\nTarget: `./packages/core/kfd-agent-hub.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:470` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:11` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:399` |\n\n## `@kungfu-tech/buildchain/buildchain-layout`\n\nTarget: `./packages/core/buildchain-layout.js`. Public symbols: 41.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:5` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:99` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:143` |\n| `firstExistingRepoPath` | function: function firstExistingRepoPath(cwd, candidates = []) | cwd, candidates = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { firstExistingRepoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:58` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:34` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:287` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:265` |\n| `repoPath` | function: function repoPath(cwd, relativePath) | cwd, relativePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { repoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:54` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:92` |\n| `toPosixPath` | function: function toPosixPath(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { toPosixPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:50` |\n\n## `@kungfu-tech/buildchain/release-line-bootstrap`\n\nTarget: `./packages/core/release-line-bootstrap.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:140` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:237` |\n\n## `@kungfu-tech/buildchain/readme-badges`\n\nTarget: `./packages/core/readme-badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/public-surface-audit`\n\nTarget: `./packages/core/public-surface-audit.js`. Public symbols: 8.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:292` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:11` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:192` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:105` |\n\n## `@kungfu-tech/buildchain/logging`\n\nTarget: `./packages/core/logging.js`. Public symbols: 13.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:67` |\n| `BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:8` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:7` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:300` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:41` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:45` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:75` |\n| `recordBuildchainControlPlaneOutcome` | function: function recordBuildchainControlPlaneOutcome({ domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {}) | { domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordBuildchainControlPlaneOutcome } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:160` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:33` |\n| `summarizeBuildchainControlPlaneEvents` | function: function summarizeBuildchainControlPlaneEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainControlPlaneEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:115` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:192` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:230` |\n\n## `@kungfu-tech/buildchain/portable-dev-cache`\n\nTarget: `./packages/core/portable-dev-cache.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:226` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:211` |\n\n## `@kungfu-tech/buildchain/publication-artifact`\n\nTarget: `./packages/core/publication-artifact.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:271` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:249` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:10` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:598` |\n\n## `@kungfu-tech/buildchain/publication-package`\n\nTarget: `./packages/core/publication-package.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:74` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:120` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:6` |\n\n## `@kungfu-tech/buildchain/publication-reproducibility`\n\nTarget: `./packages/core/publication-reproducibility.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:12` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:869` |\n\n## `@kungfu-tech/buildchain/publication-sealed-bundle`\n\nTarget: `./packages/core/publication-sealed-bundle.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:124` |\n\n## `@kungfu-tech/buildchain/paper`\n\nTarget: `./packages/core/paper.js`. Public symbols: 48.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPaperAgentEntry` | function: function collectPaperAgentEntry({ cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {}) | { cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:248` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1471` |\n| `createPaperAgentEntry` | function: function createPaperAgentEntry({ buildchainVersion, buildchainSha, developmentRef, }) | { buildchainVersion, buildchainSha, developmentRef, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:93` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2592` |\n| `createPaperProvisioningAuthority` | function: function createPaperProvisioningAuthority({ repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", }) | { repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperProvisioningAuthority } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:519` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:207` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:23` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:357` |\n| `mergePaperAgentEntryInstructions` | function: function mergePaperAgentEntryInstructions(current = \"\", { developmentRef }) | current = \"\", { developmentRef } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { mergePaperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:61` |\n| `PAPER_AGENT_ENTRY_CONTRACT` | constant: const PAPER_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:16` |\n| `PAPER_AGENT_ENTRY_SCHEMA_VERSION` | constant: const PAPER_AGENT_ENTRY_SCHEMA_VERSION | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SCHEMA_VERSION } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:17` |\n| `PAPER_AGENT_ENTRY_SECTION_END` | constant: const PAPER_AGENT_ENTRY_SECTION_END | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_END } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:20` |\n| `PAPER_AGENT_ENTRY_SECTION_START` | constant: const PAPER_AGENT_ENTRY_SECTION_START | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_START } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:18` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:83` |\n| `PAPER_PROVISIONING_CONTRACT` | constant: const PAPER_PROVISIONING_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PROVISIONING_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:87` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:19` |\n| `paperAgentEntryFiles` | function: function paperAgentEntryFiles({ cwd, buildchainVersion, buildchainSha, developmentRef = \"\", }) | { cwd, buildchainVersion, buildchainSha, developmentRef = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryFiles } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:150` |\n| `paperAgentEntryInstructions` | function: function paperAgentEntryInstructions({ developmentRef }) | { developmentRef } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:36` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:290` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:702` |\n| `resolvePaperBuildchainSha` | function: function resolvePaperBuildchainSha(buildchainRoot, buildchainSha = \"\") | buildchainRoot, buildchainSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperBuildchainSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:177` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:133` |\n| `resolvePaperRuntimeGitSha` | function: function resolvePaperRuntimeGitSha(buildchainRoot, buildchainVersion = \"\") | buildchainRoot, buildchainVersion = \"\" | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePaperRuntimeGitSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:245` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:847` |\n\n## `@kungfu-tech/buildchain/publication-authority`\n\nTarget: `./packages/core/publication-authority.js`. Public symbols: 24.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:20` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:991` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1035` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:166` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:104` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:22` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:408` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:14` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1096` |\n\n## `@kungfu-tech/buildchain/publication-control-plane-audit`\n\nTarget: `./packages/core/publication-control-plane-audit.js`. Public symbols: 4.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_RELEASE_RECONCILIATION_PATHS` | constant: const BUILDCHAIN_RELEASE_RECONCILIATION_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_RECONCILIATION_PATHS } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:3` |\n| `evaluateBuildchainReleaseReconciliation` | function: function evaluateBuildchainReleaseReconciliation({ repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {}) | { repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainReleaseReconciliation } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:41` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `matchesGithubDeploymentPolicy` | function: function matchesGithubDeploymentPolicy(policy, { ref, refType = \"branch\" } = {}) | policy, { ref, refType = \"branch\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { matchesGithubDeploymentPolicy } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:31` |\n\n## `@kungfu-tech/buildchain/buildchain-publication-authority`\n\nTarget: `./packages/core/buildchain-publication-authority.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:76` |\n\n## `@kungfu-tech/buildchain/github-governance-authority`\n\nTarget: `./packages/core/github-governance-authority.js`. Public symbols: 22.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1365` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:417` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:311` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:450` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:932` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1189` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:694` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:9` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:163` |\n| `githubRepositoryIdentityRoot` | function: function githubRepositoryIdentityRoot({ provider = \"github\", providerRepositoryId, } = {}) | { provider = \"github\", providerRepositoryId, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubRepositoryIdentityRoot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:540` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1095` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:401` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveGithubGovernanceTargetRefs` | function: function resolveGithubGovernanceTargetRefs({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetRefs } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:630` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:884` |\n\n## `@kungfu-tech/buildchain/kfd-gate`\n\nTarget: `./packages/core/kfd-gate.js`. Public symbols: 19.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:14` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1132` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:10` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:11` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:667` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2Metadata` | function: function resolveKfd2Metadata({ requireTrustTaxonomy = false } = {}) | { requireTrustTaxonomy = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd2Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:173` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:128` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:54` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:50` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2TrustTaxonomyEntry` | function: function validateKfd2TrustTaxonomyEntry(entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {}) | entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2TrustTaxonomyEntry } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:506` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1470` |\n\n## `@kungfu-tech/buildchain/release-candidate`\n\nTarget: `./packages/core/release-candidate.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:310` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:4` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:90` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:404` |\n\n## `@kungfu-tech/buildchain/stable-candidate-ledger`\n\nTarget: `./packages/core/stable-candidate-ledger.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:264` |\n\n## `@kungfu-tech/buildchain/release-passport`\n\nTarget: `./packages/core/release-passport.js`. Public symbols: 23.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:31` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:29` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1488` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1158` |\n| `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:201` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1214` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2812` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:30` |\n| `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:37` |\n| `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:38` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:36` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2841` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:32` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2694` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:28` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:216` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:138` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2853` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2743` |\n\n## `@kungfu-tech/buildchain/release-passport-contract`\n\nTarget: `./packages/core/release-passport-contract.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:147` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:7` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:256` |\n\n## `@kungfu-tech/buildchain/release-propagation`\n\nTarget: `./packages/core/release-propagation.js`. Public symbols: 22.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:111` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:163` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:248` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:304` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:190` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:514` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:482` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:316` |\n\n## `@kungfu-tech/buildchain/release-activation-transaction`\n\nTarget: `./packages/core/release-activation-transaction.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:277` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:103` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:217` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:5` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:38` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:290` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:146` |\n\n## `@kungfu-tech/buildchain/surface-manifest`\n\nTarget: `./packages/core/surface-manifest.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:79` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:34` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:1` |\n\n## `@kungfu-tech/buildchain/buildchain-kfd-claims`\n\nTarget: `./packages/core/buildchain-kfd-claims.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:226` |"
|
|
2687
|
+
"markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-08-01\n invisible_context: not asserted\n---\n\n# Buildchain Node API Reference\n\n> Generated from `package.json#exports` and the exported ESM symbols in each target. Do not edit this file by hand.\n\nSignatures and source locations are mechanical. JavaScript return types remain conservative where the source declares no static type.\n\n## `@kungfu-tech/buildchain`\n\nTarget: `./packages/core/index.js`. Public symbols: 541.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:292` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:11` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:192` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:910` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:75` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:76` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:520` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:101` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:105` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:818` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:727` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2841` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:17` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:248` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:783` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:304` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:922` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:85` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:514` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:482` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:316` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/badges`\n\nTarget: `./packages/core/badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/build-facts`\n\nTarget: `./packages/core/build-facts.js`. Public symbols: 15.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:458` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:10` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:45` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:146` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:302` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:173` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:520` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:423` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:549` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:557` |\n\n## `@kungfu-tech/buildchain/core`\n\nTarget: `./packages/core/index.js`. Public symbols: 541.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:292` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:11` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:192` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:910` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:75` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:76` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:520` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:101` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:105` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:818` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:727` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2841` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:17` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:248` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:783` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:304` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:922` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:85` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:514` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:482` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:316` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/artifact-passport`\n\nTarget: `./packages/core/artifact-passport.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:9` |\n| `DEFAULT_NPM_REGISTRY_BASE_URL` | constant: const DEFAULT_NPM_REGISTRY_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_NPM_REGISTRY_BASE_URL } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:12` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:499` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:827` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:368` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:38` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:701` |\n\n## `@kungfu-tech/buildchain/artifact-verification-envelope`\n\nTarget: `./packages/core/artifact-verification-envelope.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:144` |\n\n## `@kungfu-tech/buildchain/github-artifact-attestation`\n\nTarget: `./packages/core/github-artifact-attestation.js`. Public symbols: 18.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:524` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:15` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:87` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:158` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:250` |\n| `stableJson` | function: function stableJson(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { stableJson } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:72` |\n| `stageGitHubArtifactAttestationInputs` | function: function stageGitHubArtifactAttestationInputs({ policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {}) | { policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { stageGitHubArtifactAttestationInputs } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:389` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:563` |\n\n## `@kungfu-tech/buildchain/artifact-signing`\n\nTarget: `./packages/core/artifact-signing.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:60` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:167` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:103` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:111` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:291` |\n\n## `@kungfu-tech/buildchain/artifact-signing-result`\n\nTarget: `./packages/core/artifact-signing-result.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:12` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:58` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:68` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:147` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:193` |\n\n## `@kungfu-tech/buildchain/detached-artifact-signature`\n\nTarget: `./packages/core/detached-artifact-signature.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:10` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:36` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:82` |\n\n## `@kungfu-tech/buildchain/anchored-version-material`\n\nTarget: `./packages/core/anchored-version-material.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:15` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:118` |\n\n## `@kungfu-tech/buildchain/buildchain-contract`\n\nTarget: `./packages/core/buildchain-contract.js`. Public symbols: 12.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:7` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:910` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:752` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:75` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:818` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:727` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:803` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:783` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:922` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:34` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:30` |\n\n## `@kungfu-tech/buildchain/candidate-timeline`\n\nTarget: `./packages/core/candidate-timeline.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:3` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:381` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:438` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:74` |\n\n## `@kungfu-tech/buildchain/channel-candidate`\n\nTarget: `./packages/core/channel-candidate.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:84` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:90` |\n\n## `@kungfu-tech/buildchain/cache-evidence`\n\nTarget: `./packages/core/cache-evidence.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:3` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:48` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:169` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:226` |\n\n## `@kungfu-tech/buildchain/controller-evidence`\n\nTarget: `./packages/core/controller-evidence.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:448` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:5` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:150` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:196` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:531` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:504` |\n\n## `@kungfu-tech/buildchain/diagnostics`\n\nTarget: `./packages/core/diagnostics.js`. Public symbols: 30.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:39` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1085` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:944` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:295` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1029` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:495` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1408` |\n| `createStructuredCacheEvidence` | function: function createStructuredCacheEvidence({ sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, }) | { sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createStructuredCacheEvidence } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:722` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1223` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1786` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1468` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:953` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1254` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:325` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1459` |\n\n## `@kungfu-tech/buildchain/homebrew`\n\nTarget: `./packages/core/homebrew.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:335` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:223` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:7` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:290` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:390` |\n\n## `@kungfu-tech/buildchain/issue-reporting`\n\nTarget: `./packages/core/issue-reporting.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:5` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:104` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:199` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:64` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:76` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:393` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:6` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:23` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:33` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:41` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:385` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:51` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:378` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:84` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:80` |\n\n## `@kungfu-tech/buildchain/kfd`\n\nTarget: `./packages/core/kfd.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:896` |\n| `checkKfdUpstreamFacts` | function: function checkKfdUpstreamFacts(aggregate = {}) | aggregate = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:798` |\n| `collectKfdAggregate` | function: function collectKfdAggregate({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdAggregate } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:868` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:902` |\n| `collectKfdUpstreamFacts` | function: function collectKfdUpstreamFacts({ cwd = process.cwd(), components = undefined, includeOwn = true } = {}) | { cwd = process.cwd(), components = undefined, includeOwn = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:689` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:464` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:546` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:561` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:663` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:681` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:905` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:492` |\n| `listKfdUpstreamRoles` | function: function listKfdUpstreamRoles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdUpstreamRoles } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:771` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:520` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:495` |\n| `upstream` | constant: const upstream | none | value | Import does not declare a throw contract. | none-on-import | `import { upstream } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:300` |\n\n## `@kungfu-tech/buildchain/kfd-product-gates`\n\nTarget: `./packages/core/kfd-product-gates.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:716` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:465` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:859` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:796` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:308` |\n\n## `@kungfu-tech/buildchain/kfd-agent-hub`\n\nTarget: `./packages/core/kfd-agent-hub.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:470` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:11` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:399` |\n\n## `@kungfu-tech/buildchain/buildchain-layout`\n\nTarget: `./packages/core/buildchain-layout.js`. Public symbols: 41.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:5` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:99` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:143` |\n| `firstExistingRepoPath` | function: function firstExistingRepoPath(cwd, candidates = []) | cwd, candidates = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { firstExistingRepoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:58` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:34` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:287` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:265` |\n| `repoPath` | function: function repoPath(cwd, relativePath) | cwd, relativePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { repoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:54` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:92` |\n| `toPosixPath` | function: function toPosixPath(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { toPosixPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:50` |\n\n## `@kungfu-tech/buildchain/release-line-bootstrap`\n\nTarget: `./packages/core/release-line-bootstrap.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:140` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:237` |\n\n## `@kungfu-tech/buildchain/readme-badges`\n\nTarget: `./packages/core/readme-badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/public-surface-audit`\n\nTarget: `./packages/core/public-surface-audit.js`. Public symbols: 8.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:292` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:11` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:192` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:122` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:146` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:137` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:105` |\n\n## `@kungfu-tech/buildchain/logging`\n\nTarget: `./packages/core/logging.js`. Public symbols: 13.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:67` |\n| `BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:8` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:7` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:300` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:41` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:45` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:75` |\n| `recordBuildchainControlPlaneOutcome` | function: function recordBuildchainControlPlaneOutcome({ domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {}) | { domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordBuildchainControlPlaneOutcome } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:160` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:33` |\n| `summarizeBuildchainControlPlaneEvents` | function: function summarizeBuildchainControlPlaneEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainControlPlaneEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:115` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:192` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:230` |\n\n## `@kungfu-tech/buildchain/portable-dev-cache`\n\nTarget: `./packages/core/portable-dev-cache.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:226` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:211` |\n\n## `@kungfu-tech/buildchain/publication-artifact`\n\nTarget: `./packages/core/publication-artifact.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:271` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:249` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:10` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:598` |\n\n## `@kungfu-tech/buildchain/publication-package`\n\nTarget: `./packages/core/publication-package.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:74` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:120` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:6` |\n\n## `@kungfu-tech/buildchain/publication-reproducibility`\n\nTarget: `./packages/core/publication-reproducibility.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:12` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:869` |\n\n## `@kungfu-tech/buildchain/publication-sealed-bundle`\n\nTarget: `./packages/core/publication-sealed-bundle.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:124` |\n\n## `@kungfu-tech/buildchain/paper`\n\nTarget: `./packages/core/paper.js`. Public symbols: 48.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPaperAgentEntry` | function: function collectPaperAgentEntry({ cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {}) | { cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:248` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1471` |\n| `createPaperAgentEntry` | function: function createPaperAgentEntry({ buildchainVersion, buildchainSha, developmentRef, }) | { buildchainVersion, buildchainSha, developmentRef, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:93` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2592` |\n| `createPaperProvisioningAuthority` | function: function createPaperProvisioningAuthority({ repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", }) | { repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperProvisioningAuthority } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:519` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:207` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:23` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:357` |\n| `mergePaperAgentEntryInstructions` | function: function mergePaperAgentEntryInstructions(current = \"\", { developmentRef }) | current = \"\", { developmentRef } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { mergePaperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:61` |\n| `PAPER_AGENT_ENTRY_CONTRACT` | constant: const PAPER_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:16` |\n| `PAPER_AGENT_ENTRY_SCHEMA_VERSION` | constant: const PAPER_AGENT_ENTRY_SCHEMA_VERSION | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SCHEMA_VERSION } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:17` |\n| `PAPER_AGENT_ENTRY_SECTION_END` | constant: const PAPER_AGENT_ENTRY_SECTION_END | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_END } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:20` |\n| `PAPER_AGENT_ENTRY_SECTION_START` | constant: const PAPER_AGENT_ENTRY_SECTION_START | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_START } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:18` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:83` |\n| `PAPER_PROVISIONING_CONTRACT` | constant: const PAPER_PROVISIONING_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PROVISIONING_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:87` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:19` |\n| `paperAgentEntryFiles` | function: function paperAgentEntryFiles({ cwd, buildchainVersion, buildchainSha, developmentRef = \"\", }) | { cwd, buildchainVersion, buildchainSha, developmentRef = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryFiles } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:150` |\n| `paperAgentEntryInstructions` | function: function paperAgentEntryInstructions({ developmentRef }) | { developmentRef } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:36` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:290` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:702` |\n| `resolvePaperBuildchainSha` | function: function resolvePaperBuildchainSha(buildchainRoot, buildchainSha = \"\") | buildchainRoot, buildchainSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperBuildchainSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:177` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:133` |\n| `resolvePaperRuntimeGitSha` | function: function resolvePaperRuntimeGitSha(buildchainRoot, buildchainVersion = \"\") | buildchainRoot, buildchainVersion = \"\" | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePaperRuntimeGitSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:245` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:847` |\n\n## `@kungfu-tech/buildchain/publication-authority`\n\nTarget: `./packages/core/publication-authority.js`. Public symbols: 24.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:20` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:991` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1035` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:166` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:104` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:22` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:408` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:14` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1096` |\n\n## `@kungfu-tech/buildchain/publication-control-plane-audit`\n\nTarget: `./packages/core/publication-control-plane-audit.js`. Public symbols: 4.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_RELEASE_RECONCILIATION_PATHS` | constant: const BUILDCHAIN_RELEASE_RECONCILIATION_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_RECONCILIATION_PATHS } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:3` |\n| `evaluateBuildchainReleaseReconciliation` | function: function evaluateBuildchainReleaseReconciliation({ repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {}) | { repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainReleaseReconciliation } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:41` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `matchesGithubDeploymentPolicy` | function: function matchesGithubDeploymentPolicy(policy, { ref, refType = \"branch\" } = {}) | policy, { ref, refType = \"branch\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { matchesGithubDeploymentPolicy } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:31` |\n\n## `@kungfu-tech/buildchain/buildchain-publication-authority`\n\nTarget: `./packages/core/buildchain-publication-authority.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:51` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:76` |\n\n## `@kungfu-tech/buildchain/github-governance-authority`\n\nTarget: `./packages/core/github-governance-authority.js`. Public symbols: 22.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1365` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:417` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:311` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:450` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:932` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1189` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:694` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:9` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:163` |\n| `githubRepositoryIdentityRoot` | function: function githubRepositoryIdentityRoot({ provider = \"github\", providerRepositoryId, } = {}) | { provider = \"github\", providerRepositoryId, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubRepositoryIdentityRoot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:540` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1095` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:401` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveGithubGovernanceTargetRefs` | function: function resolveGithubGovernanceTargetRefs({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetRefs } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:630` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:884` |\n\n## `@kungfu-tech/buildchain/kfd-gate`\n\nTarget: `./packages/core/kfd-gate.js`. Public symbols: 19.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:14` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1132` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:10` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:11` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:667` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2Metadata` | function: function resolveKfd2Metadata({ requireTrustTaxonomy = false } = {}) | { requireTrustTaxonomy = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd2Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:173` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:128` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:54` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:50` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2TrustTaxonomyEntry` | function: function validateKfd2TrustTaxonomyEntry(entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {}) | entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2TrustTaxonomyEntry } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:506` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1470` |\n\n## `@kungfu-tech/buildchain/release-candidate`\n\nTarget: `./packages/core/release-candidate.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:310` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:4` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:90` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:404` |\n\n## `@kungfu-tech/buildchain/stable-candidate-ledger`\n\nTarget: `./packages/core/stable-candidate-ledger.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:264` |\n\n## `@kungfu-tech/buildchain/release-passport`\n\nTarget: `./packages/core/release-passport.js`. Public symbols: 23.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:31` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:29` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1488` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1158` |\n| `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:201` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1214` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2812` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:30` |\n| `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:37` |\n| `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:38` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:36` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2841` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:32` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2694` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:28` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:216` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:138` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2853` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2743` |\n\n## `@kungfu-tech/buildchain/release-passport-contract`\n\nTarget: `./packages/core/release-passport-contract.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:147` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:7` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:256` |\n\n## `@kungfu-tech/buildchain/release-propagation`\n\nTarget: `./packages/core/release-propagation.js`. Public symbols: 25.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:101` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:370` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:111` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:163` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:17` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:248` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:304` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:190` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:514` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:482` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:316` |\n\n## `@kungfu-tech/buildchain/release-activation-transaction`\n\nTarget: `./packages/core/release-activation-transaction.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:277` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:103` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:217` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:5` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:38` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:290` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:146` |\n\n## `@kungfu-tech/buildchain/surface-manifest`\n\nTarget: `./packages/core/surface-manifest.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:79` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:34` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:1` |\n\n## `@kungfu-tech/buildchain/buildchain-kfd-claims`\n\nTarget: `./packages/core/buildchain-kfd-claims.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:226` |"
|
|
2683
2688
|
},
|
|
2684
2689
|
{
|
|
2685
2690
|
"id": "manual:observed-evidence-patrol",
|
|
@@ -2934,7 +2939,7 @@
|
|
|
2934
2939
|
],
|
|
2935
2940
|
"maturity": "stable",
|
|
2936
2941
|
"sourcePath": "docs/publish-transaction.md",
|
|
2937
|
-
"digest": "sha256:
|
|
2942
|
+
"digest": "sha256:3a9ef099d5d93d9b558c7b6a0aa4403dfcce1479ce5d6fc36ecb3e34cdd5bb6d",
|
|
2938
2943
|
"headings": [
|
|
2939
2944
|
{
|
|
2940
2945
|
"level": 1,
|
|
@@ -2997,7 +3002,7 @@
|
|
|
2997
3002
|
"anchor": "build-images-follow-up"
|
|
2998
3003
|
}
|
|
2999
3004
|
],
|
|
3000
|
-
"markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-publish-transaction\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-31\n invisible_context: not asserted\n---\n\n# Publish Transaction\n\nBuildchain release promotion is not just tag movement. A release can also publish\nexternal artifacts: npm packages, Python wheels, OCI images, binary archives,\nmetadata manifests, or site deployment records. Those side effects are harder\nthan Git refs because most registries are append-only: a failed rerun must know\nwhich artifacts already exist, which are still missing, and whether any existing\nartifact conflicts with the release material.\n\nBuildchain v3 models that work as a release transaction.\n\n## Why This Exists\n\nThe old ABV workflow made Git refs the visible release authority. That was\nenough when \"release\" meant \"create a version commit, move tags, and let\ndownstream jobs react.\" It is not enough when a single publish run must also\nupload packages and images.\n\nThe failure mode to avoid is:\n\n1. publish an external artifact;\n2. fail before moving the exact release tag or floating channel refs;\n3. rerun from a new job id with no memory of the artifact;\n4. either republish something different or move refs without proving the\n already-published artifact matches the release.\n\nThe transaction gives reruns a stable identity and a machine-readable state so\nBuildchain can resume safely. The identity is:\n\n```text\nrepository + version + source_sha + target_ref\n```\n\nIt is not the GitHub Actions run id.\n\n## Durable State\n\n`actions/promote-buildchain-ref` stores release transaction state in a\nmachine-managed Git branch:\n\n```text\nrefs/heads/buildchain/release-state/<version>\n```\n\nThe branch contains:\n\n```text\nstate.json\nevidence.json # present after publish evidence exists\nsealed-bundle/<candidate-root>/files/** # present for build-once publication\n```\n\nThe local `.buildchain/release-state/...` and\n`.buildchain/release-evidence/...` files are working copies. They are useful for\nlocal inspection and lifecycle commands, but they are not the durable truth for\nGitHub-hosted reruns. On action startup, Buildchain reads the durable state ref\nfirst, restores the local working copies, and only then decides whether to\npublish, repair, or finalize.\n\nEvery meaningful state transition is written to the durable ref before public\nrelease refs move. Release-state GitHub API reads and writes use retry/backoff\nfor transient service failures such as HTTP 5xx responses, connection resets,\ntimeouts, and \"other side closed\" socket failures. If the durable write still\ncannot be persisted after retries, the action fails closed.\n\nFor a sealed publication, `state.json` also carries the typed sealed-bundle\nmanifest, its candidate root, publication milestones, stable\n`publication_state`, and an exact resume command. The durable ref stores every\ndeclared bundle file as binary Git blobs before the publish lifecycle starts.\nA fresh runner restores those blobs into\n`.buildchain/recovered-publication/<version>/`, verifies every size and SHA-256\nagainst the manifest, and only then supplies the recovered paths to the publish\nlifecycle. A missing or changed tarball, PDF, source bundle, or manifest fails\nbefore registry publication.\n\nDurable release-state refs reserve their exact version even when the public exact\ntag was never created. If a later machine run sees a failed or repair-required\nstate for `vX.Y.Z-alpha.N` and cannot resume it with the same transaction\nidentity, alpha version selection must advance to the next prerelease instead\nof reusing or overwriting that failed transaction slot.\n\n## Lifecycle\n\nRepositories declare publish work in `.buildchain/buildchain.toml`:\n\n```toml\n[publish]\nmode = \"publish-final-version\"\nauth = \"trusted-publishing\"\ndist_tag = \"latest\"\npackage_set_order = \"platforms-first-main-last\"\nmain_package = \"@kungfu-tech/libnode\"\n\n[lifecycle.publish]\ncommands = [\n \"python scripts/publish_wheels.py\",\n \"node scripts/publish-images.mjs\",\n \"node scripts/write-publish-evidence.mjs\",\n]\n```\n\n`actions/promote-buildchain-ref` runs `lifecycle.publish` only when\n`publish-transaction: \"true\"` is set or when a `publish-command` input is\nprovided. The action sets:\n\n```text\nBUILDCHAIN_VERSION\nBUILDCHAIN_CHANNEL\nBUILDCHAIN_SOURCE_SHA\nBUILDCHAIN_TARGET_REF\nBUILDCHAIN_RELEASE_STATE\nBUILDCHAIN_EVIDENCE_DIR\nBUILDCHAIN_RELEASE_SHA\nBUILDCHAIN_RELEASE_MATERIAL_SHA\nBUILDCHAIN_PUBLISH_TOOLING_SHA\nBUILDCHAIN_PUBLISH_EVIDENCE\nBUILDCHAIN_SEALED_BUNDLE_ROOT\nBUILDCHAIN_SEALED_NPM_TARBALL\nBUILDCHAIN_SEALED_NPM_INTEGRITY\nBUILDCHAIN_SEALED_NPM_SHA256\nBUILDCHAIN_REQUIRED_ARTIFACTS\nBUILDCHAIN_PUBLISH_MODE\nBUILDCHAIN_PUBLISH_AUTH\nBUILDCHAIN_NPM_DIST_TAG\nBUILDCHAIN_PACKAGE_SET_ORDER\nBUILDCHAIN_PACKAGE_SET_MAIN_PACKAGE\n```\n\nBuildchain itself uses this contract for npm publishing:\n\n```toml\n[lifecycle.publish]\ncommand = \"node scripts/npm-publish-transaction.mjs\"\n```\n\nThat script validates that `package.json` matches `BUILDCHAIN_VERSION`, runs\n`npm publish --access public --tag <BUILDCHAIN_NPM_DIST_TAG>` through npm Trusted\nPublishing, and writes npm artifact evidence before the promotion action moves\npublic refs. When the sealed npm variables are present, the script verifies and\npublishes that exact `.tgz` file. It does not run `npm pack` again.\n\n`BUILDCHAIN_RELEASE_MATERIAL_SHA` is the source material whose artifacts must\nmatch. `BUILDCHAIN_PUBLISH_TOOLING_SHA` identifies the publishing code. A repair\nrun may change tooling, but material drift fails closed.\n\n## Post-Publish Requirements And Artifact Provenance\n\n`publish-required-artifacts-json` is a pre-publish family declaration, not a\nrequest to guess registry digests. A descriptor must include `kind + name`; it\nmay omit `ref` and `digest`. The action resolves a missing `ref` to the exact\n`BUILDCHAIN_VERSION`. Registries whose exact refs add a stable prefix or suffix\nmay instead declare a `ref_template` containing exactly one `{version}`, such\nas `v{version}`. The template is expanded only after exact version selection,\nso a resumed alpha transaction receives the newly selected prerelease rather\nthan the checked-out version. Declaring both `ref` and `ref_template`, using\nanother placeholder, or leaving unmatched braces fails before\n`lifecycle.publish`. The action exports the normalized exact refs as\n`BUILDCHAIN_REQUIRED_ARTIFACTS`, runs `lifecycle.publish`, and then requires the\nfinal evidence to contain every exact member with a non-empty digest. Existing\ncallers may continue supplying exact refs and digests.\n\nOCI publishers can opt into strict per-artifact provenance by adding\n`action: built` or `action: reused`. Those artifacts carry two separate\ncoordinates:\n\n- `content`: the version, ref, source SHA, and material SHA that produced the\n immutable content;\n- `release`: the exact current version/ref, target ref, source SHA, and release\n material SHA that bind that content into this release.\n\nThis distinction permits truthful cross-version reuse without claiming that an\nold OCI config was rebuilt from current material. For an OCI artifact with an\naction, final evidence also requires `platform`, positive `contract_major`, and\n`verification` containing a public manifest result, exact ref and digest,\nplatform, contract major, optional parent digest, evidence location, and a\npassed named smoke policy. Buildchain cross-checks those values against the\nartifact and current transaction. Missing family members and ref, digest,\ncontent, release, or verification conflicts enter `repair_required` before\npublic refs move.\n\nExample reused OCI evidence entry (the pre-publish requirement may omit\n`ref`, `digest`, `release`, and the observed verification values):\n\n```json\n{\n \"group\": \"image\",\n \"kind\": \"oci\",\n \"name\": \"ghcr.io/kungfu-systems/base-linux\",\n \"ref\": \"1.2.0-alpha.3\",\n \"digest\": \"sha256:...\",\n \"action\": \"reused\",\n \"platform\": \"linux/amd64\",\n \"contract_major\": 1,\n \"content\": {\n \"version\": \"1.1.9\",\n \"ref\": \"1.1.9\",\n \"source_sha\": \"<source-sha>\",\n \"material_sha\": \"<material-sha>\"\n },\n \"release\": {\n \"version\": \"1.2.0-alpha.3\",\n \"ref\": \"1.2.0-alpha.3\",\n \"target_ref\": \"alpha/v1/v1.2\",\n \"source_sha\": \"<current-source-sha>\",\n \"material_sha\": \"<current-material-sha>\"\n },\n \"verification\": {\n \"public_manifest\": true,\n \"ref\": \"1.2.0-alpha.3\",\n \"digest\": \"sha256:...\",\n \"platform\": \"linux/amd64\",\n \"contract_major\": 1,\n \"evidence\": \"registry-inspect.json\",\n \"smoke\": {\n \"policy\": \"manifest-contract\",\n \"passed\": true,\n \"evidence\": \"smoke.json\"\n }\n }\n}\n```\n\n## Release Modes And Auth\n\nBuildchain distinguishes two npm release modes:\n\n| Mode | Use | Auth | npm operation |\n| --- | --- | --- | --- |\n| `publish-final-version` | normal alpha or stable publication | `trusted-publishing` | `npm publish --tag <alpha|vX.Y-alpha|latest>` |\n| `promote-existing-version` | same-version alpha-to-latest recovery | `npm-token` | `npm dist-tag add <pkg>@<version> latest` |\n\nThe normal libnode path is `publish-final-version`: publish an alpha package set\nsuch as `22.22.3-kf.3-alpha.0` with the `alpha` dist-tag, then publish a\ndistinct final package set such as `22.22.3-kf.3` with the `latest` dist-tag.\nGitHub-hosted npm Trusted Publishing can authorize those `npm publish` calls\nwhen the workflow grants `id-token: write`.\n\n`promote-existing-version` is deliberately separate. npm Trusted Publishing does\nnot authorize arbitrary registry-management operations such as `npm dist-tag\nadd`; it authorizes publish-time package provenance. Therefore same-version\npromotion must declare `auth = \"npm-token\"`. Buildchain runs an npm token\npreflight with `npm whoami` before it writes any release transaction state or\nmoves a dist-tag. Missing token auth fails early with a contract error instead\nof a late `E401` after publish evidence has started to move.\n\nFor package sets, `package_set_order = \"platforms-first-main-last\"` makes the\nmain package the visibility gate. Platform package side effects are planned or\nretried first, and the main package or main dist-tag move happens last.\n\nWhen the transaction reaches `complete`, `actions/promote-buildchain-ref`\ngenerates `.buildchain/release-passport/buildchain.release.json` and persists\nthe `release-passport/*` files into the durable `buildchain/release-state/...`\nref. The passport is the stable release artifact for agents and people: it\nlinks the package set, npm publish evidence, dist-tag evidence, build summary,\nplatform artifact manifests, trusted publishing metadata, release-state ref,\ndurable release-state SHA, and transaction result in one schema. Consumer\nrepositories can set `release-passport-product-name` so the passport names their\nproduct instead of the Buildchain default.\n\n## Evidence\n\nThe publish lifecycle must write JSON evidence. Buildchain validates common\nfields and required artifact identities before final refs move.\n\n```json\n{\n \"schema\": 1,\n \"version\": \"2.0.11\",\n \"channel\": \"release\",\n \"source_sha\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"release_sha\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\",\n \"target_ref\": \"release/v3/v3.0\",\n \"release_material_sha\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\",\n \"publish_tooling_sha\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\",\n \"artifacts\": [\n {\n \"group\": \"node\",\n \"kind\": \"npm\",\n \"name\": \"@kungfu-systems/example\",\n \"ref\": \"2.0.11\",\n \"digest\": \"sha256:...\"\n },\n {\n \"group\": \"image\",\n \"kind\": \"oci\",\n \"name\": \"ghcr.io/kungfu-systems/example\",\n \"ref\": \"2.0.11\",\n \"digest\": \"sha256:...\"\n }\n ]\n}\n```\n\nThe generic contract is intentionally small:\n\n- `version`, `channel`, `source_sha`, `release_sha`, and `target_ref` must match\n the promotion run;\n- dist-tag promotion evidence is written beside the publish evidence as\n `dist-tag-evidence.json` and is referenced from the generated passport;\n- required artifacts must appear in evidence;\n- evidence used by a GitHub-hosted rerun must either be stored in the durable\n state ref or be reconstructed by a machine-verifiable consumer command;\n- existing artifacts with the same identity and digest are accepted on rerun;\n- missing artifacts can be published by the next run;\n- an existing artifact with a different digest puts the transaction into\n `repair_required`.\n\nArtifact identity is `group + kind + name + ref`. A required artifact that omits\n`group` matches any group with the same `kind + name + ref`.\n\n## Registry Truth Contract\n\nBuildchain owns transaction orchestration, finalization ordering, durable state,\nand generic evidence validation. It does not embed registry clients for npm,\nPyPI, GHCR/OCI, GitHub Releases, S3, Conan, CMake packaging, or project-specific\ndownload pages.\n\nConsumer `lifecycle.publish` commands own registry truth. A valid consumer stage\nmust be idempotent and machine-verifiable:\n\n- inspect the target registry before publishing;\n- accept an existing exact artifact only when version, identity, digest, and\n release-source binding match;\n- publish missing required artifacts;\n- reject conflicting existing artifacts and write evidence that lets Buildchain\n move the transaction to `repair_required`;\n- write `BUILDCHAIN_PUBLISH_EVIDENCE` after every successful inspect/publish\n cycle;\n- leave floating aliases such as npm dist-tags, PyPI stable markers, OCI\n floating tags, GitHub Release \"published\" status, or download-page stable\n links to a finalization step after Buildchain evidence validation.\n\nThe first-class adapter surface is command-based. Projects may wrap npm, PyPI,\nGHCR/OCI, GitHub Release assets, archives, SBOMs, provenance, or checksums\nhowever they need, as long as they emit the common evidence contract.\n\n## States\n\nThe state machine is:\n\n```text\nprepared -> sealed -> publishing -> published -> finalizing -> complete\n | | |\n v v v\n publish_failed repair_required failed_permanently\n |\n v\n abandoned\n```\n\nSupported states:\n\n| State | Meaning |\n| -------------------- | -------------------------------------------------------------------------------------------------------- |\n| `prepared` | Transaction identity was created, but publish has not started. |\n| `sealed` | Exact candidate bytes and manifest are verified and durable; registry publication has not started. |\n| `publishing` | Publish lifecycle is running or may have been interrupted. |\n| `publish_failed` | Publish command failed before valid evidence was produced. |\n| `published` | Evidence is valid; refs have not necessarily finalized. |\n| `finalizing` | Buildchain is moving exact/floating refs or needs a later run to do it. |\n| `complete` | Required evidence is valid and refs have finalized. |\n| `repair_required` | Existing evidence or artifact state conflicts with expected release material. |\n| `abandoned` | A human or controlled process abandoned this transaction, usually because a newer version supersedes it. |\n| `failed_permanently` | Recovery should not continue without explicit override. |\n\n`repair_required`, `abandoned`, and `failed_permanently` fail closed unless the\noperator passes an explicit override. That override is for controlled repair\nruns, not normal retry behavior.\n\n`publication_state` is a stable operator-facing projection over the detailed\ntransaction state. Its successful progression is\n`prepared -> sealed -> package-published -> alpha-complete` for Alpha or\n`release-complete` for stable release. If npm succeeds but GitHub Release work\nis interrupted, the durable record remains `package-published`; the next run\nreuses the exact npm evidence and sealed release assets instead of rebuilding\nor republishing them.\n\n## Ref Ordering\n\nWhen publish transactions are enabled, promotion order is:\n\n1. verify target source and governance;\n2. create or reuse the version-state release commit;\n3. acquire or resume the release transaction;\n4. for build-once publication, verify and persist the complete sealed bundle;\n5. run `lifecycle.publish` from the exact sealed tarball or accept already-valid\n evidence;\n6. validate evidence and required artifacts;\n7. move exact release/prerelease tag;\n8. move floating tags and channel refs;\n9. mark the transaction `complete`;\n10. create or update the GitHub Release from restored sealed assets and record\n the `github_release` milestone.\n\nWhen a protected channel requires a generated version-state pull request, the\nfirst run can stop at `finalizing` after registry publication. If the reviewed\nmerge commit later contains that exact transaction release material but the\nexact tag is still absent, a retry performs finalization only: it reloads the\nsame durable source, release material, tooling, evidence, version, and target\nbindings; creates the exact and floating tags at the transaction release SHA;\nand completes the passport from the transaction source tree. It does not rerun\nthe provider mutation and does not authorize the newer composite channel tree\nas published material. A different source tree still requires a new version and\na fresh release candidate.\n\nDeferred binary dispatch, controller-evidence bundling, and any consumer\npublication commit are skipped while `finalization-needed=true`. They run only\nafter the exact public tag and complete release passport exist.\n\nConsumer products that expose a signed well-known channel can opt into one\nadditional, deliberately final step with `publication-commit-command`. Before\nthat command runs, Buildchain has already completed the transaction, created\nthe public GitHub Release, and uploaded every release-passport file plus the\nexplicit PR-stage payload files selected by\n`github-release-payload-patterns`. The command is therefore a commit point for\ndiscovery authority, not another artifact publisher.\n\nThe command receives the exact version, source SHA, release SHA, release tag,\nrelease passport path, and downloaded payload directory through\n`BUILDCHAIN_PUBLICATION_COMMIT_*`. Optional consumer-owned dispatch/API\ncredentials and private signing material are exposed separately as\n`BUILDCHAIN_PUBLICATION_COMMIT_TOKEN` and\n`BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY`; Buildchain never logs, persists,\nor interprets either value. The command must write\n`.buildchain/publication-commit/evidence.json` (or another declared path below\n`.buildchain/`) with this contract:\n\n```json\n{\n \"schema\": \"kungfu-buildchain-publication-commit-evidence/v1\",\n \"status\": \"passed\",\n \"identity\": {\n \"version\": \"4.0.0-alpha.2\",\n \"sourceSha\": \"<source-sha>\",\n \"releaseSha\": \"<release-sha>\",\n \"releaseTag\": \"v4.0.0-alpha.2\"\n },\n \"publication\": {\n \"url\": \"https://example.test/.well-known/product/alpha.json\",\n \"payloadRoot\": \"sha256:<64-lowercase-hex>\"\n },\n \"readback\": {\n \"status\": \"passed\",\n \"url\": \"https://example.test/.well-known/product/alpha.json\",\n \"payloadRoot\": \"sha256:<same-root>\"\n },\n \"recovery\": {\n \"previousAuthority\": \"preserved\",\n \"rollbackReference\": \"sha256:<previous-root>\"\n }\n}\n```\n\nBuildchain rejects stale evidence, identity drift, non-public or mutable URLs,\nread-back root drift, and missing recovery evidence. It also rejects\n`standalone-binary-distribution=true` with a final commit command because that\nwould queue product mutations after the authority moved. On any command or\nread-back failure, the consumer must leave the previous well-known document\nauthoritative; Buildchain does not retry the command behind a successful\nreceipt.\n\nIf protected branch finalization is interrupted after publish evidence is\nvalid, the transaction can stop in `finalizing` and output\n`finalization-needed=true`. A later run resumes from the same transaction state\nand completes ref movement without republishing matching artifacts. New\nBuildchain-managed promotions first try to finish generated version-state\nbookkeeping with the promotion token directly. Before patching a protected\ngenerated bookkeeping ref, Buildchain emits every configured required check on\nthe exact generated version-state commit so branch protection can\nvalidate the automation path without a second build, then uses the generated\nref update token for the protected ref PATCH. If release finalization\nbookkeeping is still rejected, Buildchain creates or reuses a same-repository\n`buildchain/version-state/*` PR and leaves the transaction resumable with\n`finalization-needed=true`. Strict alpha uses the same protected PR fallback\nfor both its target channel and subsequent dev reconciliation. A later\nidempotent run continues only after the provider shows that the PR reached the\nprotected branch. The reusable wrapper binds that token to the run-scoped\n`github.token` and rejects user, team, or alternate App bypass actors.\n\nIf finalization fails after an exact Git tag, a channel branch, or dev/alpha\nsync ref has already moved, the next run reads the durable `finalizing` state\nand continues from the recorded transaction. The current workflow SHA may be a\ngenerated version-state commit, or a historical version-state merge commit, that\ncontains or corresponds to the transaction's `release_material_sha`; it does not\nhave to equal the original `source_sha` or the transaction `release_sha`. Exact\ntags are accepted when they already point at the transaction release/material\nSHA or the finalized channel head. Floating\nchannel tags and dev/alpha refs are then retried idempotently, and the\ntransaction is marked `complete` only after those public refs are consistent.\nWriting `complete` clears any stale `failure` value from earlier attempts, so\nthe durable `state.json` represents the successful final state instead of the\nlast transient error seen before a rerun.\nAn exact tag at an unrelated SHA is still a material conflict and blocks\nrecovery.\n\nFor anchored package versions, the package version and internal line tag are\nseparate transaction coordinates. A retry can correct a stale internal tag on\nan unfinished `published` or `finalizing` transaction only when its validated\nevidence and complete artifact set match the same package version, source,\nrelease material, and target. Buildchain additionally requires that the stale\ntag does not already point at the transaction and that the newly selected tag\nis unclaimed or already points at accepted release material. No registry publish\ncommand is rerun during this exact-tag rebind.\n\nGoverned retries distinguish unrelated channel advancement from advancement\nmade by their own durable transaction. An unrelated descendant remains an\nauditable `superseded-promotion` no-op. When the target ref is exactly the\nrecorded `release_sha` for the requested source, target, and expected version,\nBuildchain resumes finalization, restores publish evidence, and emits the\nrelease-passport paths needed by downstream controller receipts.\n\nPublication authority planning applies the same occupied-version rule as the\nlater mutation step. If a current alpha transaction already contains published\nmaterial and regenerating version state would create new release material, the\nplanner advances to the next alpha before sealing authority. It never seals the\nold published version and then lets the publisher discover a different version\ninside the mutation boundary.\n\nIf finalization fails after an exact Git tag is created, the next run reads the\ndurable `finalizing` state, verifies the exact tag points at the recorded\nrelease SHA, and retries the remaining floating refs. An exact tag at a\ndifferent SHA is a material conflict and blocks recovery.\n\n## CLI Recovery\n\nLocal recovery commands operate on the same state/evidence files:\n\n```bash\nnode scripts/release-transaction.mjs inspect --version v3.0.2\nnode scripts/release-transaction.mjs recover --version v3.0.2\nnode scripts/release-transaction.mjs finalize --version v3.0.2\nnode scripts/release-transaction.mjs abort --version v3.0.2 --superseded-by v3.0.3\n```\n\nThe CLI is a diagnostic and local repair surface. It reports the durable\n`state_ref`, but remote durable-ref writes and public Git ref finalization are\nowned by `actions/promote-buildchain-ref`, because that action runs inside the\nsame governed GitHub permissions and branch-protection checks as release\npromotion. In other words, CLI `finalize` can mark the local transaction state\ncomplete after valid evidence; the machine-operated public finalization path is\nto rerun the promotion action.\n\nWhen no state file exists, creation commands also require:\n\n```bash\n--repository kungfu-systems/buildchain \\\n--source-sha <sha> \\\n--release-sha <sha> \\\n--target-ref release/v3/v3.0 \\\n--channel release\n```\n\n## Build-Images Follow-Up\n\n`build-images` should consume this contract rather than inventing a separate\nworkflow rule. The expected integration shape is:\n\n- image build writes OCI digests into publish evidence;\n- required image families are passed through `publish-required-artifacts-json`\n before their final digests are known;\n- mixed built/reused evidence preserves content provenance separately from the\n current release binding;\n- reruns check GHCR or the target registry and accept existing images only when\n tag and digest match;\n- preview or alpha image tags remain non-stable until the transaction evidence\n validates;\n- production image aliases move only after all required image artifacts are\n present and the Buildchain exact release tag has finalized."
|
|
3005
|
+
"markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-publish-transaction\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-31\n invisible_context: not asserted\n---\n\n# Publish Transaction\n\nBuildchain release promotion is not just tag movement. A release can also publish\nexternal artifacts: npm packages, Python wheels, OCI images, binary archives,\nmetadata manifests, or site deployment records. Those side effects are harder\nthan Git refs because most registries are append-only: a failed rerun must know\nwhich artifacts already exist, which are still missing, and whether any existing\nartifact conflicts with the release material.\n\nBuildchain v3 models that work as a release transaction.\n\n## Why This Exists\n\nThe old ABV workflow made Git refs the visible release authority. That was\nenough when \"release\" meant \"create a version commit, move tags, and let\ndownstream jobs react.\" It is not enough when a single publish run must also\nupload packages and images.\n\nThe failure mode to avoid is:\n\n1. publish an external artifact;\n2. fail before moving the exact release tag or floating channel refs;\n3. rerun from a new job id with no memory of the artifact;\n4. either republish something different or move refs without proving the\n already-published artifact matches the release.\n\nThe transaction gives reruns a stable identity and a machine-readable state so\nBuildchain can resume safely. The identity is:\n\n```text\nrepository + version + source_sha + target_ref\n```\n\nIt is not the GitHub Actions run id.\n\n## Durable State\n\n`actions/promote-buildchain-ref` stores release transaction state in a\nmachine-managed Git branch:\n\n```text\nrefs/heads/buildchain/release-state/<version>\n```\n\nThe branch contains:\n\n```text\nstate.json\nevidence.json # present after publish evidence exists\nsealed-bundle/<candidate-root>/files/** # present for build-once publication\n```\n\nThe local `.buildchain/release-state/...` and\n`.buildchain/release-evidence/...` files are working copies. They are useful for\nlocal inspection and lifecycle commands, but they are not the durable truth for\nGitHub-hosted reruns. On action startup, Buildchain reads the durable state ref\nfirst, restores the local working copies, and only then decides whether to\npublish, repair, or finalize.\n\nEvery meaningful state transition is written to the durable ref before public\nrelease refs move. Release-state GitHub API reads and writes use retry/backoff\nfor transient service failures such as HTTP 5xx responses, connection resets,\ntimeouts, and \"other side closed\" socket failures. If the durable write still\ncannot be persisted after retries, the action fails closed.\n\nFor a sealed publication, `state.json` also carries the typed sealed-bundle\nmanifest, its candidate root, publication milestones, stable\n`publication_state`, and an exact resume command. The durable ref stores every\ndeclared bundle file as binary Git blobs before the publish lifecycle starts.\nA fresh runner restores those blobs into\n`.buildchain/recovered-publication/<version>/`, verifies every size and SHA-256\nagainst the manifest, and only then supplies the recovered paths to the publish\nlifecycle. A missing or changed tarball, PDF, source bundle, or manifest fails\nbefore registry publication.\n\nDurable release-state refs reserve their exact version even when the public exact\ntag was never created. If a later machine run sees a failed or repair-required\nstate for `vX.Y.Z-alpha.N` and cannot resume it with the same transaction\nidentity, alpha version selection must advance to the next prerelease instead\nof reusing or overwriting that failed transaction slot.\n\n## Lifecycle\n\nRepositories declare publish work in `.buildchain/buildchain.toml`:\n\n```toml\n[publish]\nmode = \"publish-final-version\"\nauth = \"trusted-publishing\"\ndist_tag = \"latest\"\npackage_set_order = \"platforms-first-main-last\"\nmain_package = \"@kungfu-tech/libnode\"\n\n[lifecycle.publish]\ncommands = [\n \"python scripts/publish_wheels.py\",\n \"node scripts/publish-images.mjs\",\n \"node scripts/write-publish-evidence.mjs\",\n]\n```\n\n`actions/promote-buildchain-ref` runs `lifecycle.publish` only when\n`publish-transaction: \"true\"` is set or when a `publish-command` input is\nprovided. The action sets:\n\n```text\nBUILDCHAIN_VERSION\nBUILDCHAIN_CHANNEL\nBUILDCHAIN_SOURCE_SHA\nBUILDCHAIN_TARGET_REF\nBUILDCHAIN_RELEASE_STATE\nBUILDCHAIN_EVIDENCE_DIR\nBUILDCHAIN_RELEASE_SHA\nBUILDCHAIN_RELEASE_MATERIAL_SHA\nBUILDCHAIN_PUBLISH_TOOLING_SHA\nBUILDCHAIN_PUBLISH_EVIDENCE\nBUILDCHAIN_SEALED_BUNDLE_ROOT\nBUILDCHAIN_SEALED_NPM_TARBALL\nBUILDCHAIN_SEALED_NPM_INTEGRITY\nBUILDCHAIN_SEALED_NPM_SHA256\nBUILDCHAIN_REQUIRED_ARTIFACTS\nBUILDCHAIN_PUBLISH_MODE\nBUILDCHAIN_PUBLISH_AUTH\nBUILDCHAIN_NPM_DIST_TAG\nBUILDCHAIN_PACKAGE_SET_ORDER\nBUILDCHAIN_PACKAGE_SET_MAIN_PACKAGE\n```\n\nBuildchain itself uses this contract for npm publishing:\n\n```toml\n[lifecycle.publish]\ncommand = \"node scripts/npm-publish-transaction.mjs\"\n```\n\nThat script validates that `package.json` matches `BUILDCHAIN_VERSION`, runs\n`npm publish --access public --tag <BUILDCHAIN_NPM_DIST_TAG>` through npm Trusted\nPublishing, and writes npm artifact evidence before the promotion action moves\npublic refs. When the sealed npm variables are present, the script verifies and\npublishes that exact `.tgz` file. It does not run `npm pack` again.\n\n`BUILDCHAIN_RELEASE_MATERIAL_SHA` is the source material whose artifacts must\nmatch. `BUILDCHAIN_PUBLISH_TOOLING_SHA` identifies the publishing code. A repair\nrun may change tooling, but material drift fails closed.\n\n## Post-Publish Requirements And Artifact Provenance\n\n`publish-required-artifacts-json` is a pre-publish family declaration, not a\nrequest to guess registry digests. A descriptor must include `kind + name`; it\nmay omit `ref` and `digest`. The action resolves a missing `ref` to the exact\n`BUILDCHAIN_VERSION`. Registries whose exact refs add a stable prefix or suffix\nmay instead declare a `ref_template` containing exactly one `{version}`, such\nas `v{version}`. The template is expanded only after exact version selection,\nso a resumed alpha transaction receives the newly selected prerelease rather\nthan the checked-out version. Declaring both `ref` and `ref_template`, using\nanother placeholder, or leaving unmatched braces fails before\n`lifecycle.publish`. The action exports the normalized exact refs as\n`BUILDCHAIN_REQUIRED_ARTIFACTS`, runs `lifecycle.publish`, and then requires the\nfinal evidence to contain every exact member with a non-empty digest. Existing\ncallers may continue supplying exact refs and digests.\n\nOCI publishers can opt into strict per-artifact provenance by adding\n`action: built` or `action: reused`. Those artifacts carry two separate\ncoordinates:\n\n- `content`: the version, ref, source SHA, and material SHA that produced the\n immutable content;\n- `release`: the exact current version/ref, target ref, source SHA, and release\n material SHA that bind that content into this release.\n\nThis distinction permits truthful cross-version reuse without claiming that an\nold OCI config was rebuilt from current material. For an OCI artifact with an\naction, final evidence also requires `platform`, positive `contract_major`, and\n`verification` containing a public manifest result, exact ref and digest,\nplatform, contract major, optional parent digest, evidence location, and a\npassed named smoke policy. Buildchain cross-checks those values against the\nartifact and current transaction. Missing family members and ref, digest,\ncontent, release, or verification conflicts enter `repair_required` before\npublic refs move.\n\nExample reused OCI evidence entry (the pre-publish requirement may omit\n`ref`, `digest`, `release`, and the observed verification values):\n\n```json\n{\n \"group\": \"image\",\n \"kind\": \"oci\",\n \"name\": \"ghcr.io/kungfu-systems/base-linux\",\n \"ref\": \"1.2.0-alpha.3\",\n \"digest\": \"sha256:...\",\n \"action\": \"reused\",\n \"platform\": \"linux/amd64\",\n \"contract_major\": 1,\n \"content\": {\n \"version\": \"1.1.9\",\n \"ref\": \"1.1.9\",\n \"source_sha\": \"<source-sha>\",\n \"material_sha\": \"<material-sha>\"\n },\n \"release\": {\n \"version\": \"1.2.0-alpha.3\",\n \"ref\": \"1.2.0-alpha.3\",\n \"target_ref\": \"alpha/v1/v1.2\",\n \"source_sha\": \"<current-source-sha>\",\n \"material_sha\": \"<current-material-sha>\"\n },\n \"verification\": {\n \"public_manifest\": true,\n \"ref\": \"1.2.0-alpha.3\",\n \"digest\": \"sha256:...\",\n \"platform\": \"linux/amd64\",\n \"contract_major\": 1,\n \"evidence\": \"registry-inspect.json\",\n \"smoke\": {\n \"policy\": \"manifest-contract\",\n \"passed\": true,\n \"evidence\": \"smoke.json\"\n }\n }\n}\n```\n\n## Release Modes And Auth\n\nBuildchain distinguishes two npm release modes:\n\n| Mode | Use | Auth | npm operation |\n| --- | --- | --- | --- |\n| `publish-final-version` | normal alpha or stable publication | `trusted-publishing` | `npm publish --tag <alpha|vX.Y-alpha|latest>` |\n| `promote-existing-version` | same-version alpha-to-latest recovery | `npm-token` | `npm dist-tag add <pkg>@<version> latest` |\n\nThe normal libnode path is `publish-final-version`: publish an alpha package set\nsuch as `22.22.3-kf.3-alpha.0` with the `alpha` dist-tag, then publish a\ndistinct final package set such as `22.22.3-kf.3` with the `latest` dist-tag.\nGitHub-hosted npm Trusted Publishing can authorize those `npm publish` calls\nwhen the workflow grants `id-token: write`.\n\n`promote-existing-version` is deliberately separate. npm Trusted Publishing does\nnot authorize arbitrary registry-management operations such as `npm dist-tag\nadd`; it authorizes publish-time package provenance. Therefore same-version\npromotion must declare `auth = \"npm-token\"`. Buildchain runs an npm token\npreflight with `npm whoami` before it writes any release transaction state or\nmoves a dist-tag. Missing token auth fails early with a contract error instead\nof a late `E401` after publish evidence has started to move.\n\nFor package sets, `package_set_order = \"platforms-first-main-last\"` makes the\nmain package the visibility gate. Platform package side effects are planned or\nretried first, and the main package or main dist-tag move happens last.\n\nWhen the transaction reaches `complete`, `actions/promote-buildchain-ref`\ngenerates `.buildchain/release-passport/buildchain.release.json` and persists\nthe `release-passport/*` files into the durable `buildchain/release-state/...`\nref. The passport is the stable release artifact for agents and people: it\nlinks the package set, npm publish evidence, dist-tag evidence, build summary,\nplatform artifact manifests, trusted publishing metadata, release-state ref,\ndurable release-state SHA, and transaction result in one schema. Consumer\nrepositories can set `release-passport-product-name` so the passport names their\nproduct instead of the Buildchain default.\n\n## Evidence\n\nThe publish lifecycle must write JSON evidence. Buildchain validates common\nfields and required artifact identities before final refs move.\n\n```json\n{\n \"schema\": 1,\n \"version\": \"2.0.11\",\n \"channel\": \"release\",\n \"source_sha\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"release_sha\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\",\n \"target_ref\": \"release/v3/v3.0\",\n \"release_material_sha\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\",\n \"publish_tooling_sha\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\",\n \"artifacts\": [\n {\n \"group\": \"node\",\n \"kind\": \"npm\",\n \"name\": \"@kungfu-systems/example\",\n \"ref\": \"2.0.11\",\n \"digest\": \"sha256:...\"\n },\n {\n \"group\": \"image\",\n \"kind\": \"oci\",\n \"name\": \"ghcr.io/kungfu-systems/example\",\n \"ref\": \"2.0.11\",\n \"digest\": \"sha256:...\"\n }\n ]\n}\n```\n\nThe generic contract is intentionally small:\n\n- `version`, `channel`, `source_sha`, `release_sha`, and `target_ref` must match\n the promotion run;\n- dist-tag promotion evidence is written beside the publish evidence as\n `dist-tag-evidence.json` and is referenced from the generated passport;\n- required artifacts must appear in evidence;\n- evidence used by a GitHub-hosted rerun must either be stored in the durable\n state ref or be reconstructed by a machine-verifiable consumer command;\n- existing artifacts with the same identity and digest are accepted on rerun;\n- missing artifacts can be published by the next run;\n- an existing artifact with a different digest puts the transaction into\n `repair_required`.\n\nArtifact identity is `group + kind + name + ref`. A required artifact that omits\n`group` matches any group with the same `kind + name + ref`.\n\n## Registry Truth Contract\n\nBuildchain owns transaction orchestration, finalization ordering, durable state,\nand generic evidence validation. It does not embed registry clients for npm,\nPyPI, GHCR/OCI, GitHub Releases, S3, Conan, CMake packaging, or project-specific\ndownload pages.\n\nConsumer `lifecycle.publish` commands own registry truth. A valid consumer stage\nmust be idempotent and machine-verifiable:\n\n- inspect the target registry before publishing;\n- accept an existing exact artifact only when version, identity, digest, and\n release-source binding match;\n- publish missing required artifacts;\n- reject conflicting existing artifacts and write evidence that lets Buildchain\n move the transaction to `repair_required`;\n- write `BUILDCHAIN_PUBLISH_EVIDENCE` after every successful inspect/publish\n cycle;\n- leave floating aliases such as npm dist-tags, PyPI stable markers, OCI\n floating tags, GitHub Release \"published\" status, or download-page stable\n links to a finalization step after Buildchain evidence validation.\n\nThe first-class adapter surface is command-based. Projects may wrap npm, PyPI,\nGHCR/OCI, GitHub Release assets, archives, SBOMs, provenance, or checksums\nhowever they need, as long as they emit the common evidence contract.\n\n## States\n\nThe state machine is:\n\n```text\nprepared -> sealed -> publishing -> published -> finalizing -> complete\n | | |\n v v v\n publish_failed repair_required failed_permanently\n |\n v\n abandoned\n```\n\nSupported states:\n\n| State | Meaning |\n| -------------------- | -------------------------------------------------------------------------------------------------------- |\n| `prepared` | Transaction identity was created, but publish has not started. |\n| `sealed` | Exact candidate bytes and manifest are verified and durable; registry publication has not started. |\n| `publishing` | Publish lifecycle is running or may have been interrupted. |\n| `publish_failed` | Publish command failed before valid evidence was produced. |\n| `published` | Evidence is valid; refs have not necessarily finalized. |\n| `finalizing` | Buildchain is moving exact/floating refs or needs a later run to do it. |\n| `complete` | Required evidence is valid and refs have finalized. |\n| `repair_required` | Existing evidence or artifact state conflicts with expected release material. |\n| `abandoned` | A human or controlled process abandoned this transaction, usually because a newer version supersedes it. |\n| `failed_permanently` | Recovery should not continue without explicit override. |\n\n`repair_required`, `abandoned`, and `failed_permanently` fail closed unless the\noperator passes an explicit override. That override is for controlled repair\nruns, not normal retry behavior.\n\n`publication_state` is a stable operator-facing projection over the detailed\ntransaction state. Its successful progression is\n`prepared -> sealed -> package-published -> alpha-complete` for Alpha or\n`release-complete` for stable release. If npm succeeds but GitHub Release work\nis interrupted, the durable record remains `package-published`; the next run\nreuses the exact npm evidence and sealed release assets instead of rebuilding\nor republishing them.\n\n## Ref Ordering\n\nWhen publish transactions are enabled, promotion order is:\n\n1. verify target source and governance;\n2. create or reuse the version-state release commit;\n3. acquire or resume the release transaction;\n4. for build-once publication, verify and persist the complete sealed bundle;\n5. run `lifecycle.publish` from the exact sealed tarball or accept already-valid\n evidence;\n6. validate evidence and required artifacts;\n7. move exact release/prerelease tag;\n8. move floating tags and channel refs;\n9. mark the transaction `complete`;\n10. create or update the GitHub Release from restored sealed assets and record\n the `github_release` milestone.\n\nWhen a protected channel requires a generated version-state pull request, the\nfirst run can stop at `finalizing` after registry publication. If the reviewed\nmerge commit later contains that exact transaction release material but the\nexact tag is still absent, a retry performs finalization only: it reloads the\nsame durable source, release material, tooling, evidence, version, and target\nbindings; creates the exact tag at the transaction source SHA; moves floating\nrefs to the transaction release SHA; and completes the passport from the\ntransaction source tree. It does not rerun the provider mutation and does not\nauthorize the newer composite channel tree\nas published material. A different source tree still requires a new version and\na fresh release candidate.\n\nDeferred binary dispatch, controller-evidence bundling, and any consumer\npublication commit are skipped while `finalization-needed=true`. They run only\nafter the exact public tag and complete release passport exist.\n\nConsumer products that expose a signed well-known channel can opt into one\nadditional, deliberately final step with `publication-commit-command`. Before\nthat command runs, Buildchain has already completed the transaction, created\nthe public GitHub Release, and uploaded every release-passport file plus the\nexplicit PR-stage payload files selected by\n`github-release-payload-patterns`. The command is therefore a commit point for\ndiscovery authority, not another artifact publisher.\n\nThe command receives the exact version, source SHA, release SHA, release tag,\nrelease passport path, and downloaded payload directory through\n`BUILDCHAIN_PUBLICATION_COMMIT_*`. Optional consumer-owned dispatch/API\ncredentials and private signing material are exposed separately as\n`BUILDCHAIN_PUBLICATION_COMMIT_TOKEN` and\n`BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY`; Buildchain never logs, persists,\nor interprets either value. The command must write\n`.buildchain/publication-commit/evidence.json` (or another declared path below\n`.buildchain/`) with this contract:\n\n```json\n{\n \"schema\": \"kungfu-buildchain-publication-commit-evidence/v1\",\n \"status\": \"passed\",\n \"identity\": {\n \"version\": \"4.0.0-alpha.2\",\n \"sourceSha\": \"<source-sha>\",\n \"releaseSha\": \"<release-sha>\",\n \"releaseTag\": \"v4.0.0-alpha.2\"\n },\n \"publication\": {\n \"url\": \"https://example.test/.well-known/product/alpha.json\",\n \"payloadRoot\": \"sha256:<64-lowercase-hex>\"\n },\n \"readback\": {\n \"status\": \"passed\",\n \"url\": \"https://example.test/.well-known/product/alpha.json\",\n \"payloadRoot\": \"sha256:<same-root>\"\n },\n \"recovery\": {\n \"previousAuthority\": \"preserved\",\n \"rollbackReference\": \"sha256:<previous-root>\"\n }\n}\n```\n\nBuildchain rejects stale evidence, identity drift, non-public or mutable URLs,\nread-back root drift, and missing recovery evidence. It also rejects\n`standalone-binary-distribution=true` with a final commit command because that\nwould queue product mutations after the authority moved. On any command or\nread-back failure, the consumer must leave the previous well-known document\nauthoritative; Buildchain does not retry the command behind a successful\nreceipt.\n\nIf protected branch finalization is interrupted after publish evidence is\nvalid, the transaction can stop in `finalizing` and output\n`finalization-needed=true`. A later run resumes from the same transaction state\nand completes ref movement without republishing matching artifacts. New\nBuildchain-managed promotions first try to finish generated version-state\nbookkeeping with the promotion token directly. Before patching a protected\ngenerated bookkeeping ref, Buildchain emits every configured required check on\nthe exact generated version-state commit so branch protection can\nvalidate the automation path without a second build, then uses the generated\nref update token for the protected ref PATCH. If release finalization\nbookkeeping is still rejected, Buildchain creates or reuses a same-repository\n`buildchain/version-state/*` PR and leaves the transaction resumable with\n`finalization-needed=true`. Strict alpha uses the same protected PR fallback\nfor both its target channel and subsequent dev reconciliation. A later\nidempotent run continues only after the provider shows that the PR reached the\nprotected branch. The reusable wrapper binds that token to the run-scoped\n`github.token` and rejects user, team, or alternate App bypass actors.\n\nIf finalization fails after an exact Git tag, a channel branch, or dev/alpha\nsync ref has already moved, the next run reads the durable `finalizing` state\nand continues from the recorded transaction. The current workflow SHA may be a\ngenerated version-state commit, or a historical version-state merge commit, that\ncontains or corresponds to the transaction's `release_material_sha`; it does not\nhave to equal the original `source_sha` or the transaction `release_sha`. Exact\ntags are accepted when they already point at the transaction release/material\nSHA or the finalized channel head. Floating\nchannel tags and dev/alpha refs are then retried idempotently, and the\ntransaction is marked `complete` only after those public refs are consistent.\nWriting `complete` clears any stale `failure` value from earlier attempts, so\nthe durable `state.json` represents the successful final state instead of the\nlast transient error seen before a rerun.\nAn exact tag at an unrelated SHA is still a material conflict and blocks\nrecovery.\n\nFor anchored package versions, the package version and internal line tag are\nseparate transaction coordinates. A retry can correct a stale internal tag on\nan unfinished `published` or `finalizing` transaction only when its validated\nevidence and complete artifact set match the same package version, source,\nrelease material, and target. Buildchain additionally requires that the stale\ntag does not already point at the transaction and that the newly selected tag\nis unclaimed or already points at accepted release material. No registry publish\ncommand is rerun during this exact-tag rebind.\n\nGoverned retries distinguish unrelated channel advancement from advancement\nmade by their own durable transaction. An unrelated descendant remains an\nauditable `superseded-promotion` no-op. When the target ref is exactly the\nrecorded `release_sha` for the requested source, target, and expected version,\nBuildchain resumes finalization, restores publish evidence, and emits the\nrelease-passport paths needed by downstream controller receipts.\n\nPublication authority planning applies the same occupied-version rule as the\nlater mutation step. If a current alpha transaction already contains published\nmaterial and regenerating version state would create new release material, the\nplanner advances to the next alpha before sealing authority. It never seals the\nold published version and then lets the publisher discover a different version\ninside the mutation boundary.\n\nIf finalization fails after an exact Git tag is created, the next run reads the\ndurable `finalizing` state, verifies the exact tag points at the recorded\nsource SHA (while accepting legacy release/material targets for recovery), and\nretries the remaining floating refs. An exact tag at an unrelated SHA is a\nmaterial conflict and blocks recovery.\n\n## CLI Recovery\n\nLocal recovery commands operate on the same state/evidence files:\n\n```bash\nnode scripts/release-transaction.mjs inspect --version v3.0.2\nnode scripts/release-transaction.mjs recover --version v3.0.2\nnode scripts/release-transaction.mjs finalize --version v3.0.2\nnode scripts/release-transaction.mjs abort --version v3.0.2 --superseded-by v3.0.3\n```\n\nThe CLI is a diagnostic and local repair surface. It reports the durable\n`state_ref`, but remote durable-ref writes and public Git ref finalization are\nowned by `actions/promote-buildchain-ref`, because that action runs inside the\nsame governed GitHub permissions and branch-protection checks as release\npromotion. In other words, CLI `finalize` can mark the local transaction state\ncomplete after valid evidence; the machine-operated public finalization path is\nto rerun the promotion action.\n\nWhen no state file exists, creation commands also require:\n\n```bash\n--repository kungfu-systems/buildchain \\\n--source-sha <sha> \\\n--release-sha <sha> \\\n--target-ref release/v3/v3.0 \\\n--channel release\n```\n\n## Build-Images Follow-Up\n\n`build-images` should consume this contract rather than inventing a separate\nworkflow rule. The expected integration shape is:\n\n- image build writes OCI digests into publish evidence;\n- required image families are passed through `publish-required-artifacts-json`\n before their final digests are known;\n- mixed built/reused evidence preserves content provenance separately from the\n current release binding;\n- reruns check GHCR or the target registry and accept existing images only when\n tag and digest match;\n- preview or alpha image tags remain non-stable until the transaction evidence\n validates;\n- production image aliases move only after all required image artifacts are\n present and the Buildchain exact release tag has finalized."
|
|
3001
3006
|
},
|
|
3002
3007
|
{
|
|
3003
3008
|
"id": "manual:readme-badges",
|
|
@@ -3106,7 +3111,7 @@
|
|
|
3106
3111
|
],
|
|
3107
3112
|
"maturity": "stable",
|
|
3108
3113
|
"sourcePath": "docs/release-flow.md",
|
|
3109
|
-
"digest": "sha256:
|
|
3114
|
+
"digest": "sha256:dc54b8a264489341984ca6157b07d1956e934366f937b7412a21df7f025d2d8d",
|
|
3110
3115
|
"headings": [
|
|
3111
3116
|
{
|
|
3112
3117
|
"level": 1,
|
|
@@ -3164,7 +3169,7 @@
|
|
|
3164
3169
|
"anchor": "failure-boundaries"
|
|
3165
3170
|
}
|
|
3166
3171
|
],
|
|
3167
|
-
"markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-release-flow\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-31\n invisible_context: not asserted\n---\n\n# Release Flow Diagrams\n\nThis document describes the Buildchain v3 branch, tag, and version-state flow.\nSee [Release governance](release-governance.md) for the design rationale.\n\n## Architecture\n\n```mermaid\nflowchart TD\n Maintainer[\"Maintainer opens channel PR\"]\n Verify[\"Release - Verify\"]\n Review[\"Protected branch review\"]\n Merge[\"Merge PR into alpha or release\"]\n Promotion[\"Buildchain Ref Promotion\"]\n StableDecision{\"Release channel?\"}\n StableGate[\"Stable only: exact-alpha canaries + soak + cooldown\"]\n Action[\"promote-buildchain-ref action\"]\n VersionState[\"Version-state commit\"]\n ExactTag[\"Exact tag\"]\n FloatingRefs[\"Floating tags and channel branches\"]\n Consumers[\"Consumers pin stable or exact refs\"]\n\n Maintainer --> Verify\n Verify --> Review\n Review --> Merge\n Merge --> Promotion\n Promotion --> StableDecision\n StableDecision -->|yes| StableGate\n StableDecision -->|no: alpha| Action\n StableGate --> Action\n Action --> VersionState\n Action --> ExactTag\n Action --> FloatingRefs\n ExactTag --> Consumers\n FloatingRefs --> Consumers\n```\n\nBuildchain treats the PR merge as release intent and the promotion action as the\nonly component allowed to turn that intent into release refs.\n\n`StableGate` applies only to Buildchain's release channel. Alpha and train\niteration bypass it. See [Stable Release Throttle And Canary Gate](release-governance.md#stable-release-throttle-and-canary-gate)\nfor the versioned policy and evidence contract.\n\n## Ref State\n\n| Ref kind | Example | Mutability | Purpose |\n| --- | --- | --- | --- |\n| Development branch | `dev/v3/v3.0` | moves | next source state for a minor line |\n| Alpha branch | `alpha/v3/v3.0` | moves | latest test state for a minor line |\n| Release branch | `release/v3/v3.0` | moves | latest production state for a minor line |\n| Major gate branch | `publish-gate/major` | moves | reviewed administrator gate for publishing the next major |\n| Exact alpha tag | `v3.0.3-alpha.0` | immutable | audit ref for one tested prerelease |\n| Exact release tag | `v3.0.2` | immutable | audit ref for one production release |\n| Floating alpha tag | `v3.0-alpha` | moves | latest test channel for a minor line |\n| Floating major alpha tag | `v3-alpha` | moves | latest test channel on the highest published alpha minor for a major line |\n| Floating minor tag | `v3.0` | moves | latest production patch on a minor line |\n| Floating major tag | `v3` | moves | selected stable major entrypoint |\n\n## Ref Protection Contract\n\nRepository rulesets must distinguish immutable evidence refs from mutable\nchannel refs.\n\nProtect exact release and alpha tags as immutable evidence:\n\n```text\nrefs/tags/v*.*.*\n```\n\nDo not apply immutable-tag rulesets to every `refs/tags/v*` ref. Buildchain\nmust be able to update floating channel tags such as `v3`, `v3.0`, `v3.0-alpha`,\nand `v3-alpha` after the exact tag and publish evidence are valid. A ruleset that\nmatches all `v*` tags also matches floating tags, so release finalization can\nfail with GitHub protected-ref errors even though the exact release tag and\npublished artifacts are already durable.\n\nThe intended governance split is:\n\n- exact tags such as `v3.0.2` and `v3.0.3-alpha.0` are immutable audit refs;\n- floating tags such as `v3`, `v3.0`, `v3.0-alpha`, and `v3-alpha` are mutable channel refs\n owned by the Buildchain promotion token;\n- protected branches still require reviewed channel PRs before Buildchain can\n move any exact or floating release refs.\n\n## Opening a Minor Line\n\nNew minor lines should be opened through Buildchain instead of hand-created\nbranches. The reusable entrypoint is the `Release Line Bootstrap` workflow. It\ndefaults to dry-run so maintainers can inspect the planned refs, protection\ncontract, initial version, and first alpha PR before any mutation.\n\nThe workflow is backed by the CLI command:\n\n```bash\nbuildchain release line open \\\n --major 3 \\\n --minor 1 \\\n --source-ref release/v3/v3.0 \\\n --json\n```\n\nWhen the workflow is run with `apply=true`, Buildchain:\n\n- writes the initial version-state commit, such as `3.1.0-alpha.0`;\n- creates `dev/v3/v3.1` from that commit;\n- creates `alpha/v3/v3.1` and `release/v3/v3.1` from the selected source ref;\n- applies branch protection with one approving review and the configured\n required status check; dev starts strict, while alpha and release also require\n the pair-specific `verify` aggregate without a source-up-to-date ancestry loop;\n- reconciles the new dev branch's explicitly declared merge queue, or inherits\n the exact queue parameters and bypass actors from the current default dev\n branch when the policy is `inherit` or absent;\n- switches the repository default branch to the new dev line when requested;\n- opens the first `dev/v3/v3.1 -> alpha/v3/v3.1` channel PR when requested.\n\nThis makes minor-line creation a single audited operation. The channel PR still\ngoes through the normal verify/review/promotion path before an alpha is\npublished. Queue reconciliation runs after branch protection and before the\ndefault-branch switch, so a failed governance apply leaves the old active line\nin place and the idempotently created new refs can be retried.\n\n## Alpha Promotion\n\n```mermaid\nsequenceDiagram\n participant Dev as dev/vX/vX.Y\n participant PR as PR dev -> alpha\n participant Verify as Release - Verify\n participant Alpha as alpha/vX/vX.Y\n participant Promote as Buildchain Ref Promotion\n participant Tags as Tags\n\n Dev->>PR: open channel PR\n PR->>Verify: run verification checks\n Verify-->>PR: check succeeds\n PR->>Alpha: reviewed merge\n Alpha->>Promote: Verify workflow_run completed\n Promote->>Promote: validate same-repo merged PR\n Promote->>Promote: compute next vX.Y.Z-alpha.N\n Promote->>Promote: write and verify version state\n Promote->>Tags: create or reuse vX.Y.Z-alpha.N\n Promote->>Tags: move vX.Y-alpha\n Promote->>Tags: move vX-alpha when X.Y is the highest published alpha minor\n Promote->>Alpha: move alpha/vX/vX.Y\n Promote->>Dev: move dev/vX/vX.Y\n```\n\nResult:\n\n```text\nvX.Y.Z-alpha.N\nvX.Y-alpha\nvX-alpha when X.Y is the highest published alpha minor\nalpha/vX/vX.Y\ndev/vX/vX.Y\n```\n\nall point at the generated alpha version-state commit.\n\n## Release Promotion\n\n```mermaid\nsequenceDiagram\n participant Alpha as alpha/vX/vX.Y\n participant PR as PR alpha -> release\n participant Verify as Release - Verify\n participant Release as release/vX/vX.Y\n participant Promote as Buildchain Ref Promotion\n participant Tags as Tags\n participant Dev as dev/vX/vX.Y\n\n Alpha->>PR: open channel PR\n PR->>Verify: run verification checks\n Verify-->>PR: check succeeds\n PR->>Release: reviewed merge\n Release->>Promote: Verify workflow_run completed\n Promote->>Promote: validate same-repo merged PR\n Promote->>Promote: find same-patch alpha tag\n Promote->>Promote: compare release tree with tested alpha tree\n Promote->>Promote: write final version state or verify anchored material\n Promote->>Tags: create or reuse vX.Y.Z\n Promote->>Tags: move vX.Y\n Promote->>Tags: move vX when eligible\n Promote->>Release: move release/vX/vX.Y\n Promote->>Promote: prepare vX.Y.(Z+1)-alpha.0\n Promote->>Tags: create or reuse vX.Y.(Z+1)-alpha.0\n Promote->>Tags: move vX.Y-alpha\n Promote->>Tags: move vX-alpha when X.Y is the highest published alpha minor\n Promote->>Alpha: move alpha/vX/vX.Y\n Promote->>Dev: move dev/vX/vX.Y\n```\n\nResult:\n\n```text\nvX.Y.Z\nvX.Y\nvX\nrelease/vX/vX.Y\n```\n\npoint at the production version-state commit, while:\n\n```text\nvX.Y.(Z+1)-alpha.0\nvX.Y-alpha\nvX-alpha when X.Y is the highest published alpha minor\nalpha/vX/vX.Y\ndev/vX/vX.Y\n```\n\npoint at the next alpha version-state commit.\n\n## State Machine\n\n```mermaid\nstateDiagram-v2\n [*] --> Development: work lands on dev/vX/vX.Y\n Development --> AlphaCandidate: PR dev -> alpha\n AlphaCandidate --> AlphaPublished: Verify + review + merge + promotion\n AlphaPublished --> ReleaseCandidate: PR alpha -> release\n ReleaseCandidate --> ProductionPublished: Verify + review + merge + promotion\n ProductionPublished --> NextAlphaPrepared: prepare vX.Y.(Z+1)-alpha.0\n NextAlphaPrepared --> Development: dev and alpha refs move to next alpha\n```\n\nThe same minor line can loop through this state machine many times.\n\n## Version Examples\n\nAssume `v3.0.2-alpha.1` has been tested and a maintainer merges\n`alpha/v3/v3.0 -> release/v3/v3.0`.\n\nBuildchain should produce:\n\n```text\nv3.0.2 exact production tag\nv3.0 floating minor tag\nv3 floating major tag when v3.0 is the selected major line\nrelease/v3/v3.0 production channel branch\n```\n\nIt should also prepare:\n\n```text\nv3.0.3-alpha.0 exact next alpha tag\nv3.0-alpha floating alpha tag\nv3-alpha floating major alpha tag when v3.0 is the highest published alpha minor\nalpha/v3/v3.0 alpha channel branch\ndev/v3/v3.0 development channel branch\n```\n\nThis is expected behavior. A production release closes one patch and opens the\nnext test patch on the same minor line.\n\n## Major Gate Promotion\n\n```mermaid\nsequenceDiagram\n participant Release as release/vX/vX.Y\n participant PR as PR release -> publish-gate/major\n participant Verify as Release - Verify\n participant Gate as publish-gate/major\n participant Promote as Buildchain Ref Promotion\n participant Tags as Tags\n participant Next as dev/alpha/release v(X+1).0\n\n Release->>PR: open administrator PR\n PR->>Verify: run verification checks\n Verify-->>PR: check succeeds\n PR->>Gate: reviewed merge\n Gate->>Promote: Verify workflow_run completed\n Promote->>Promote: validate same-repo release -> publish-gate/major PR\n Promote->>Promote: write v(X+1).0.0 version state\n Promote->>Tags: create v(X+1).0.0\n Promote->>Tags: move v(X+1).0 and v(X+1)\n Promote->>Gate: move publish-gate/major to v(X+1).0.0\n Promote->>Next: move release/v(X+1)/v(X+1).0 to v(X+1).0.0\n Promote->>Promote: prepare v(X+1).0.1-alpha.0\n Promote->>Next: move alpha/dev v(X+1).0 to next alpha\n```\n\n`publish-gate/major` is intentionally not an active source branch. It is the PR\ntarget for the administrator's \"publish the next major\" decision. The older\n`major-gate` name is a compatibility alias only.\n\n## Failure Boundaries\n\nPromotion should stop before moving refs when:\n\n- the run is a non-dry-run manual dispatch;\n- the expected same-repository PR cannot be found;\n- the PR was not merged;\n- the branch pair is not a valid channel path;\n- the required status check did not pass;\n- a release tree does not match the same-patch alpha tag tree, except for the\n declared anchored/manual version files and anchor manifest that\n `lifecycle.verify` or `verification-command` validates;\n- version-state verification fails;\n- a required exact tag already exists at a commit unrelated to the active\n transaction or finalized channel head.\n\nThese failures are intentional. They protect consumers from refs that look\nreleased but do not have a complete evidence chain.\n\nDuring transaction finalization recovery, the current channel head may be a\ngenerated version-state merge commit. Buildchain validates that the durable\ntransaction version, exact tag, evidence, and release material match, and that\nthe current target ref contains or corresponds to the recorded\n`release_material_sha`. It must then tolerate exact tags, dev refs, or alpha\nrefs that have already moved and continue filling any missing floating tags\nbefore writing the transaction state as `complete`."
|
|
3172
|
+
"markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-release-flow\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-31\n invisible_context: not asserted\n---\n\n# Release Flow Diagrams\n\nThis document describes the Buildchain v3 branch, tag, and version-state flow.\nSee [Release governance](release-governance.md) for the design rationale.\n\n## Architecture\n\n```mermaid\nflowchart TD\n Maintainer[\"Maintainer opens channel PR\"]\n Verify[\"Release - Verify\"]\n Review[\"Protected branch review\"]\n Merge[\"Merge PR into alpha or release\"]\n Promotion[\"Buildchain Ref Promotion\"]\n StableDecision{\"Release channel?\"}\n StableGate[\"Stable only: exact-alpha canaries + soak + cooldown\"]\n Action[\"promote-buildchain-ref action\"]\n VersionState[\"Version-state commit\"]\n ExactTag[\"Exact tag\"]\n FloatingRefs[\"Floating tags and channel branches\"]\n Consumers[\"Consumers pin stable or exact refs\"]\n\n Maintainer --> Verify\n Verify --> Review\n Review --> Merge\n Merge --> Promotion\n Promotion --> StableDecision\n StableDecision -->|yes| StableGate\n StableDecision -->|no: alpha| Action\n StableGate --> Action\n Action --> VersionState\n Action --> ExactTag\n Action --> FloatingRefs\n ExactTag --> Consumers\n FloatingRefs --> Consumers\n```\n\nBuildchain treats the PR merge as release intent and the promotion action as the\nonly component allowed to turn that intent into release refs.\n\n`StableGate` applies only to Buildchain's release channel. Alpha and train\niteration bypass it. See [Stable Release Throttle And Canary Gate](release-governance.md#stable-release-throttle-and-canary-gate)\nfor the versioned policy and evidence contract.\n\n## Ref State\n\n| Ref kind | Example | Mutability | Purpose |\n| --- | --- | --- | --- |\n| Development branch | `dev/v3/v3.0` | moves | next source state for a minor line |\n| Alpha branch | `alpha/v3/v3.0` | moves | latest test state for a minor line |\n| Release branch | `release/v3/v3.0` | moves | latest production state for a minor line |\n| Major gate branch | `publish-gate/major` | moves | reviewed administrator gate for publishing the next major |\n| Exact alpha tag | `v3.0.3-alpha.0` | immutable | audit ref for one tested prerelease |\n| Exact release tag | `v3.0.2` | immutable | audit ref for one production release |\n| Floating alpha tag | `v3.0-alpha` | moves | latest test channel for a minor line |\n| Floating major alpha tag | `v3-alpha` | moves | latest test channel on the highest published alpha minor for a major line |\n| Floating minor tag | `v3.0` | moves | latest production patch on a minor line |\n| Floating major tag | `v3` | moves | selected stable major entrypoint |\n\n## Ref Protection Contract\n\nRepository rulesets must distinguish immutable evidence refs from mutable\nchannel refs.\n\nProtect exact release and alpha tags as immutable evidence:\n\n```text\nrefs/tags/v*.*.*\n```\n\nDo not apply immutable-tag rulesets to every `refs/tags/v*` ref. Buildchain\nmust be able to update floating channel tags such as `v3`, `v3.0`, `v3.0-alpha`,\nand `v3-alpha` after the exact tag and publish evidence are valid. A ruleset that\nmatches all `v*` tags also matches floating tags, so release finalization can\nfail with GitHub protected-ref errors even though the exact release tag and\npublished artifacts are already durable.\n\nThe intended governance split is:\n\n- exact tags such as `v3.0.2` and `v3.0.3-alpha.0` are immutable audit refs;\n- for publish transactions, the exact tag points to the transaction\n `source_sha`, matching package-registry source metadata such as npm\n `gitHead`; generated version-state commits remain on protected branches and\n floating channel refs;\n- floating tags such as `v3`, `v3.0`, `v3.0-alpha`, and `v3-alpha` are mutable channel refs\n owned by the Buildchain promotion token;\n- protected branches still require reviewed channel PRs before Buildchain can\n move any exact or floating release refs.\n\n## Opening a Minor Line\n\nNew minor lines should be opened through Buildchain instead of hand-created\nbranches. The reusable entrypoint is the `Release Line Bootstrap` workflow. It\ndefaults to dry-run so maintainers can inspect the planned refs, protection\ncontract, initial version, and first alpha PR before any mutation.\n\nThe workflow is backed by the CLI command:\n\n```bash\nbuildchain release line open \\\n --major 3 \\\n --minor 1 \\\n --source-ref release/v3/v3.0 \\\n --json\n```\n\nWhen the workflow is run with `apply=true`, Buildchain:\n\n- writes the initial version-state commit, such as `3.1.0-alpha.0`;\n- creates `dev/v3/v3.1` from that commit;\n- creates `alpha/v3/v3.1` and `release/v3/v3.1` from the selected source ref;\n- applies branch protection with one approving review and the configured\n required status check; dev starts strict, while alpha and release also require\n the pair-specific `verify` aggregate without a source-up-to-date ancestry loop;\n- reconciles the new dev branch's explicitly declared merge queue, or inherits\n the exact queue parameters and bypass actors from the current default dev\n branch when the policy is `inherit` or absent;\n- switches the repository default branch to the new dev line when requested;\n- opens the first `dev/v3/v3.1 -> alpha/v3/v3.1` channel PR when requested.\n\nThis makes minor-line creation a single audited operation. The channel PR still\ngoes through the normal verify/review/promotion path before an alpha is\npublished. Queue reconciliation runs after branch protection and before the\ndefault-branch switch, so a failed governance apply leaves the old active line\nin place and the idempotently created new refs can be retried.\n\n## Alpha Promotion\n\n```mermaid\nsequenceDiagram\n participant Dev as dev/vX/vX.Y\n participant PR as PR dev -> alpha\n participant Verify as Release - Verify\n participant Alpha as alpha/vX/vX.Y\n participant Promote as Buildchain Ref Promotion\n participant Tags as Tags\n\n Dev->>PR: open channel PR\n PR->>Verify: run verification checks\n Verify-->>PR: check succeeds\n PR->>Alpha: reviewed merge\n Alpha->>Promote: Verify workflow_run completed\n Promote->>Promote: validate same-repo merged PR\n Promote->>Promote: compute next vX.Y.Z-alpha.N\n Promote->>Promote: write and verify version state\n Promote->>Tags: create or reuse vX.Y.Z-alpha.N\n Promote->>Tags: move vX.Y-alpha\n Promote->>Tags: move vX-alpha when X.Y is the highest published alpha minor\n Promote->>Alpha: move alpha/vX/vX.Y\n Promote->>Dev: move dev/vX/vX.Y\n```\n\nResult:\n\n```text\nvX.Y.Z-alpha.N\nvX.Y-alpha\nvX-alpha when X.Y is the highest published alpha minor\nalpha/vX/vX.Y\ndev/vX/vX.Y\n```\n\nall point at the generated alpha version-state commit.\n\n## Release Promotion\n\n```mermaid\nsequenceDiagram\n participant Alpha as alpha/vX/vX.Y\n participant PR as PR alpha -> release\n participant Verify as Release - Verify\n participant Release as release/vX/vX.Y\n participant Promote as Buildchain Ref Promotion\n participant Tags as Tags\n participant Dev as dev/vX/vX.Y\n\n Alpha->>PR: open channel PR\n PR->>Verify: run verification checks\n Verify-->>PR: check succeeds\n PR->>Release: reviewed merge\n Release->>Promote: Verify workflow_run completed\n Promote->>Promote: validate same-repo merged PR\n Promote->>Promote: find same-patch alpha tag\n Promote->>Promote: compare release tree with tested alpha tree\n Promote->>Promote: write final version state or verify anchored material\n Promote->>Tags: create or reuse vX.Y.Z\n Promote->>Tags: move vX.Y\n Promote->>Tags: move vX when eligible\n Promote->>Release: move release/vX/vX.Y\n Promote->>Promote: prepare vX.Y.(Z+1)-alpha.0\n Promote->>Tags: create or reuse vX.Y.(Z+1)-alpha.0\n Promote->>Tags: move vX.Y-alpha\n Promote->>Tags: move vX-alpha when X.Y is the highest published alpha minor\n Promote->>Alpha: move alpha/vX/vX.Y\n Promote->>Dev: move dev/vX/vX.Y\n```\n\nResult:\n\n```text\nvX.Y.Z\nvX.Y\nvX\nrelease/vX/vX.Y\n```\n\npoint at the production version-state commit, while:\n\n```text\nvX.Y.(Z+1)-alpha.0\nvX.Y-alpha\nvX-alpha when X.Y is the highest published alpha minor\nalpha/vX/vX.Y\ndev/vX/vX.Y\n```\n\npoint at the next alpha version-state commit.\n\n## State Machine\n\n```mermaid\nstateDiagram-v2\n [*] --> Development: work lands on dev/vX/vX.Y\n Development --> AlphaCandidate: PR dev -> alpha\n AlphaCandidate --> AlphaPublished: Verify + review + merge + promotion\n AlphaPublished --> ReleaseCandidate: PR alpha -> release\n ReleaseCandidate --> ProductionPublished: Verify + review + merge + promotion\n ProductionPublished --> NextAlphaPrepared: prepare vX.Y.(Z+1)-alpha.0\n NextAlphaPrepared --> Development: dev and alpha refs move to next alpha\n```\n\nThe same minor line can loop through this state machine many times.\n\n## Version Examples\n\nAssume `v3.0.2-alpha.1` has been tested and a maintainer merges\n`alpha/v3/v3.0 -> release/v3/v3.0`.\n\nBuildchain should produce:\n\n```text\nv3.0.2 exact production tag\nv3.0 floating minor tag\nv3 floating major tag when v3.0 is the selected major line\nrelease/v3/v3.0 production channel branch\n```\n\nIt should also prepare:\n\n```text\nv3.0.3-alpha.0 exact next alpha tag\nv3.0-alpha floating alpha tag\nv3-alpha floating major alpha tag when v3.0 is the highest published alpha minor\nalpha/v3/v3.0 alpha channel branch\ndev/v3/v3.0 development channel branch\n```\n\nThis is expected behavior. A production release closes one patch and opens the\nnext test patch on the same minor line.\n\n## Major Gate Promotion\n\n```mermaid\nsequenceDiagram\n participant Release as release/vX/vX.Y\n participant PR as PR release -> publish-gate/major\n participant Verify as Release - Verify\n participant Gate as publish-gate/major\n participant Promote as Buildchain Ref Promotion\n participant Tags as Tags\n participant Next as dev/alpha/release v(X+1).0\n\n Release->>PR: open administrator PR\n PR->>Verify: run verification checks\n Verify-->>PR: check succeeds\n PR->>Gate: reviewed merge\n Gate->>Promote: Verify workflow_run completed\n Promote->>Promote: validate same-repo release -> publish-gate/major PR\n Promote->>Promote: write v(X+1).0.0 version state\n Promote->>Tags: create v(X+1).0.0\n Promote->>Tags: move v(X+1).0 and v(X+1)\n Promote->>Gate: move publish-gate/major to v(X+1).0.0\n Promote->>Next: move release/v(X+1)/v(X+1).0 to v(X+1).0.0\n Promote->>Promote: prepare v(X+1).0.1-alpha.0\n Promote->>Next: move alpha/dev v(X+1).0 to next alpha\n```\n\n`publish-gate/major` is intentionally not an active source branch. It is the PR\ntarget for the administrator's \"publish the next major\" decision. The older\n`major-gate` name is a compatibility alias only.\n\n## Failure Boundaries\n\nPromotion should stop before moving refs when:\n\n- the run is a non-dry-run manual dispatch;\n- the expected same-repository PR cannot be found;\n- the PR was not merged;\n- the branch pair is not a valid channel path;\n- the required status check did not pass;\n- a release tree does not match the same-patch alpha tag tree, except for the\n declared anchored/manual version files and anchor manifest that\n `lifecycle.verify` or `verification-command` validates;\n- version-state verification fails;\n- a required exact tag already exists at a commit unrelated to the active\n transaction or finalized channel head.\n\nThese failures are intentional. They protect consumers from refs that look\nreleased but do not have a complete evidence chain.\n\nDuring transaction finalization recovery, the current channel head may be a\ngenerated version-state merge commit. Buildchain validates that the durable\ntransaction version, exact tag, evidence, and release material match, and that\nthe current target ref contains or corresponds to the recorded\n`release_material_sha`. It must then tolerate exact tags, dev refs, or alpha\nrefs that have already moved and continue filling any missing floating tags\nbefore writing the transaction state as `complete`."
|
|
3168
3173
|
},
|
|
3169
3174
|
{
|
|
3170
3175
|
"id": "manual:release-governance",
|
|
@@ -3178,7 +3183,7 @@
|
|
|
3178
3183
|
],
|
|
3179
3184
|
"maturity": "stable",
|
|
3180
3185
|
"sourcePath": "docs/release-governance.md",
|
|
3181
|
-
"digest": "sha256:
|
|
3186
|
+
"digest": "sha256:96d78f800cd7d43d3a47a11863d4813711e360418ba33a4284688389c7e4b70c",
|
|
3182
3187
|
"headings": [
|
|
3183
3188
|
{
|
|
3184
3189
|
"level": 1,
|
|
@@ -3271,7 +3276,7 @@
|
|
|
3271
3276
|
"anchor": "operational-reading-order"
|
|
3272
3277
|
}
|
|
3273
3278
|
],
|
|
3274
|
-
"markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: buildchain-release-governance\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-27\n invisible_context: not asserted\n---\n\n# Release Governance\n\nBuildchain v3 preserves the release semantics of the older ABV workflow while\nmoving the implementation into one modern repository.\n\nThe central idea is simple: a reviewed merge into a release channel is the\nrelease intent. Automation must then create the version-state commit, exact tag,\nfloating tag, and next alpha state that make that intent true in Git.\n\n## Design Problem\n\nKungfu release automation has to keep four facts aligned:\n\n1. The source tree that was reviewed.\n2. The package version recorded in manifests such as `package.json` or\n `lerna.json`.\n3. The exact immutable release or prerelease tag.\n4. The floating channel refs that consumers actually use.\n\nIf any one of these facts is updated by hand, the system can split:\n\n- a consumer can fetch `v3.0` and receive a tree whose package version still\n says the previous release;\n- a maintainer can move `v3` without producing an exact `v3.0.N` audit tag;\n- an alpha can be promoted to production even though the release tree is not the\n same tree that was tested;\n- a protected branch merge can succeed while the follow-up version commit is\n missing, or a flow-internal generated `dev`/`alpha`/`release` ref update can\n fail after publish because the automation identity was not declared in the\n branch-protection review bypass allowance.\n\nThe older ABV workflow addressed this by letting GitHub PRs drive release\nstate. Buildchain keeps that choice because it makes release intent reviewable,\nobservable, and recoverable from Git history.\n\n## What ABV Contributed\n\nThe old ABV model was not just \"bump a version number.\" It encoded a governance\nloop:\n\n- release branches are named as channels: `dev`, `alpha`, `release`, and the\n administrative `publish-gate/major`;\n- a PR from one channel to the next is the release request;\n- verify jobs check that the branch pair is valid before merge;\n- a maintainer review is required before the branch moves;\n- after merge, automation writes the version change and moves tags;\n- exact tags and floating refs are aligned with the resulting commit;\n- the next development channel is prepared automatically.\n\nABV also kept the version-state mutation in the repository. For JavaScript\nrepositories that usually meant changing `lerna.json` and/or `package.json`.\nThat commit is important because the tag alone is not enough evidence: the\nsource tree should also declare the version that the tag advertises.\n\nBuildchain v3 treats that as a hard semantic requirement for its own release\nline.\n\n## Buildchain Implementation\n\nBuildchain implements the same governance loop with:\n\n- `.github/workflows/release-verify.yml` for PR verification;\n- `.github/workflows/buildchain-ref-promotion.yml` for post-verify ref\n promotion; this workflow dogfoods the declarative\n `release-candidate-promote.yml` wrapper and does not hand-wire resolver,\n artifact download, publish-gate, or promote action steps;\n- Buildchain self promotion enables `release-passport-buildchain-self-kfd`, so\n the promote action generates KFD-1 witnesses, KFD-2 public claim JSON, and\n KFD-3 collaboration-interface witnesses from the final version-state workspace\n before release passport finalization. The witness hashes therefore bind to the\n exact published package and site facts from\n `packages/core/buildchain-kfd-claims.js` instead of relying on prose release\n notes;\n- `actions/promote-buildchain-ref` for branch, tag, version-state, and\n governance checks;\n- package-manager adapters that can update version state for pnpm, npm, and\n yarn style repositories;\n- `buildchain.toml` lifecycle configuration for repositories whose version\n state or verification commands are not Node package-manager defaults.\n\nThe implementation is intentionally stricter than a local release script:\n\n- manual workflow dispatch can only do dry-run promotion;\n- non-dry-run promotion must be driven by a completed `Verify` workflow;\n- target branch protection details must be readable, and branch protection must\n apply to administrators as well as regular contributors;\n- `alpha/vX/vX.Y` and `release/vX/vX.Y` branch protection must require both the\n general `check` context and the Release Verify aggregate `verify` context, so\n an invalid channel pair cannot merge even when repository checks pass;\n- release targets keep those checks non-strict with respect to source-branch\n ancestry: generated channel bookkeeping intentionally makes the source and\n target histories diverge, while the pair-specific `verify` context validates\n the legal channel transition;\n- alpha promotion must come from a merged same-repository PR from\n `dev/vX/vX.Y` to `alpha/vX/vX.Y`;\n- release promotion must come from a merged same-repository PR from\n `alpha/vX/vX.Y` to `release/vX/vX.Y`;\n- major promotion must come from a merged same-repository PR from\n `release/vX/vX.Y` to `publish-gate/major`;\n- release promotion requires an existing same-patch alpha tag and checks the\n release source tree against that tested alpha tree;\n- generated version-state commits are verified before refs move.\n\n## Reconciling a protected line without rebuilding\n\nThe public `build.yml` channel router ends with a top-level job named\n`Summarize build contract`. Keeping this aggregate at the public router boundary\nprevents its required check context from changing when the internal reusable\nbuild workflow gains another nesting layer.\n\nFor an already-tested pull request whose protected target still requires an\nolder Buildchain aggregate context, inspect the exact candidate SHA first:\n\n```bash\nGH_TOKEN=\"$(gh auth token)\" npx @kungfu-tech/buildchain@latest \\\n release-governance reconcile \\\n --repository kungfu-systems/example \\\n --branch release/v3/v3.0 \\\n --candidate-sha <tested-pr-head-sha> \\\n --json\n```\n\nThe dry run reads the successful checks emitted for that SHA and reports the\nexact expected/actual context pair. It chooses the shallowest successful\n`Summarize build contract` context, so a new top-level router aggregate wins\nover the nested internal build summary. To apply the plan, rerun the same\ncommand with `--apply` using a token that can update branch protection.\n\nReconciliation changes only the required-status-check subresource. It replaces\nstale Buildchain aggregate contexts, preserves unrelated checks and strictness,\nand does not modify review requirements, administrator enforcement,\nconversation resolution, force-push policy, or deletion policy. The candidate\nmust still be the head of a pull request targeting the named managed branch;\nthe command fails closed otherwise. This lets a previously successful candidate\ncontinue from the same SHA without another native build or an administrator\nmerge bypass.\n\nRepositories may also expose a small caller workflow around\n`.github/workflows/release-governance-reconcile.yml@v3`. Pass `branch`,\n`candidate-sha`, and `apply`, and provide `governance-token` through the caller's\nsecrets. The reusable workflow uploads the JSON reconciliation receipt.\n\nExact publication planning installs the checked-out promotion source's declared\ndependencies before version-state verification. This keeps the pre-authority\nversion plan on the same package-manager boundary as the later promotion job,\nincluding repositories whose verification commands import production packages.\nThe planning pass may materialize and verify declared derived files locally,\nbut dry-run never creates Git blobs, trees, commits, refs, or tags.\n\nPromotion intents are serialized globally per caller repository with\n`cancel-in-progress: false`. A queued intent re-reads its protected target ref\nbefore checkout, dependency installation, release-candidate resolution, or any\npublish-gate/ref mutation. If the ref already points at a newer SHA, that older\nintent is no longer release authority: the workflow records the requested and\ncurrent SHAs, proves that the current target is ahead of the requested commit,\nand completes as a `target-ref-advanced` superseded no-op. Diverged or behind\ncomparisons are not superseded transactions and still fail closed.\nMissing refs, unreadable repository state, invalid channels, governance\nfailures, and artifact mismatches still fail closed. The promote action repeats\nthe target check at the mutation boundary, so a ref that advances after the\nworkflow preflight cannot receive a second set of publication side effects.\n\n## Version Lines\n\nKungfu uses Python-like version lines where a minor line can represent a\nlong-lived product train. A line such as `v3.0` can produce many production\npatch releases:\n\n```text\nv3.0.0\nv3.0.1\nv3.0.2\n...\nv3.0.1234\n```\n\nThis is why Buildchain maintains both exact and floating refs:\n\n- `v3.0.2` is immutable release evidence;\n- `v3.0` is the latest production release on the `3.0` line;\n- `v3` is the selected stable major-line entrypoint;\n- `v3.0.3-alpha.0` is immutable alpha evidence;\n- `v3.0-alpha` is the latest test channel for the `3.0` line.\n- `v3-alpha` is the latest test channel on the highest published alpha minor in major `3`.\n\nA release does not mean \"minor is complete.\" It means \"this patch on this minor\nline is now production.\"\n\nGitHub repository rules must preserve that distinction. Exact tags such as\n`v3.0.2` and `v3.0.3-alpha.0` should be immutable. Floating channel tags such as\n`v3`, `v3.0`, `v3.0-alpha`, and `v3-alpha` must remain movable by the Buildchain promotion\ntoken after governance checks and publish evidence pass. A tag ruleset that\nprotects every `refs/tags/v*` ref is too broad because it also locks the\nfloating channel tags that Buildchain is required to update. Prefer exact-tag\npatterns such as `refs/tags/v*.*.*` for immutable release evidence, while\nleaving floating channel tags under Buildchain automation control.\n\n## Alpha Semantics\n\nAn alpha merge is:\n\n```text\ndev/vX/vX.Y -> alpha/vX/vX.Y\n```\n\nBuildchain then:\n\n1. Computes the next prerelease for the minor line.\n2. Writes version state such as `vX.Y.Z-alpha.N`.\n3. Verifies the generated version-state tree.\n4. Creates or reuses the exact alpha tag.\n5. Moves `alpha/vX/vX.Y` to the generated alpha commit.\n6. Moves `dev/vX/vX.Y` to the same generated alpha commit when this is a\n fast-forward update.\n7. Moves `vX.Y-alpha` to the same generated alpha commit.\n8. Moves `vX-alpha` only when `X.Y` is the highest minor in major `X` with a published alpha; older minor alpha work records a skip and cannot move the major channel backwards.\n\nThe npm channel follows the same ownership rule. The highest alpha minor publishes\nwith dist-tag `alpha`; maintenance alphas on an older minor publish with the\nline-specific dist-tag `vX.Y-alpha` so they cannot roll the global `alpha`\nchannel backward. Exact prerelease versions remain installable directly.\n\nThis keeps the test channel self-describing. If a consumer checks out\n`v3.0-alpha` or `v3-alpha`, the manifests and exact alpha tag agree. The major\nalpha ref removes routine consumer edits when Buildchain opens a newer minor,\nwhile exact tags and SHAs remain the reproducible audit choice.\n\n### Buildchain Alpha Self-Dogfood\n\nBuildchain continuously consumes its own current major alpha through\n`.github/workflows/buildchain-alpha-self-dogfood.yml`. Both lanes call the\nreleased channel router at `build.yml@v3-alpha`. The auto lane must resolve\n`v3-alpha`; the explicit stable lane must resolve `v3`. Both execute the same\ndeclared install, build, and verify fixture, proving that a single consumer\nsurface routes to distinct released runtimes without duplicating lifecycle\nconfiguration in the consumer.\n\nBuildchain's generic artifact-signing contract seals source-, tree-, runtime-,\nplatform-, and digest-bound requests from ordinary credential-free build jobs.\nProvider-specific authority jobs consume only those sealed payloads. Apple\nDeveloper ID, Windows Authenticode, and detached cryptographic signatures share\nthe request/receipt model, while each profile retains its honest platform\nsemantics and fail-closed verification requirements.\n\nThe authority verifies the complete result set on GitHub-hosted infrastructure\nbefore delivery. The consumer controller also performs final result verification,\nexact-byte import, manifest recomputation, and deterministic-artifact replacement\non a GitHub-hosted lane. Self-hosted build runners do not download authority\nresult payloads, and aggregate/release evidence fails closed until this\nfinalization succeeds.\n\nThe central `buildchain-artifact-signing` environment reuses the established\nmacOS Credential Island names (`BUILDCHAIN_MACOS_CERTIFICATE_*`,\n`BUILDCHAIN_MACOS_NOTARY_API_*`, and\n`BUILDCHAIN_MACOS_EXPECTED_TEAM_ID`). Those authority-only values are never\ndeclared by or forwarded through a consumer repository. Windows and detached\nproviders follow the same central-environment boundary.\n\nThe reusable build trust gate reads `job.workflow_ref`, which identifies the\ncalled workflow and its selected ref. It does not infer the runtime from\n`github.workflow_ref`, because GitHub defines that context as the caller\nworkflow identity during a reusable call.\n\nThe router selects `.buildchain/alpha-contract-lock.json` for alpha and\n`.buildchain/contract-lock.json` for stable. The alpha lock records the exact\nreviewed alpha SHA and compatibility digest; it does not replace the stable\nconsumer lock. A later alpha with only compatible additive drift continues,\nwhile a changed breaking digest fails until the new alpha contract is reviewed.\n\nThe evidence job resolves `v3-alpha` and `v3` through the GitHub refs API,\ncompares those immutable SHAs with the reusable workflow outputs, verifies the\n`alpha` and `stable` classifications, and uploads a JSON evidence artifact.\nThe canary runs after successful Buildchain ref promotion, on a daily fallback\nschedule, and on manual dispatch. It shares the release-promotion concurrency\ngroup, so another promotion cannot move the floating refs between runtime\nresolution and evidence comparison.\n\nThis is a post-publication consumer canary, not a release bootstrap. Source\nverification still runs the current commit, and\n`buildchain-ref-promotion.yml` still passes the verified exact SHA into the\npromotion workflow. Patrol, dev-merge, repair, and promotion defaults remain on\nstable or exact refs so a broken alpha cannot prevent Buildchain from publishing\nits fix. When Buildchain opens a new major, inventory validation requires this\nworkflow's fixed GitHub `uses` refs to move from `vN`/`vN-alpha` to the new\nmajor; GitHub does not allow expressions in a reusable-workflow `uses` ref.\n\nIf `dev/vX/vX.Y` has already advanced before generated alpha version-state\nbookkeeping can sync back, Buildchain records `skipped-non-fast-forward` for the\ndev sync and still completes the exact and floating alpha tags for the reviewed\nalpha commit. Later dev changes must go through their own dev-to-alpha\npromotion instead of rewinding dev. The normal path is direct: after alpha\nmerges, Buildchain applies the generated version-state commit to alpha and then\nfast-forwards dev to the same commit without a human version-state PR.\n\nIf alpha finalization is resumed after generated version-state bookkeeping was\npartially applied, Buildchain accepts the current alpha head as the generated\ncommit, or as a historical merge commit that contains the recorded release\nmaterial. An already-created exact alpha tag may point at the transaction\nrelease/material SHA or at the finalized alpha head; missing floating alpha\ntags are retried before the transaction becomes `complete`.\n\n## Release Semantics\n\nA release merge is:\n\n```text\nalpha/vX/vX.Y -> release/vX/vX.Y\n```\n\nBuildchain then:\n\n1. Finds the same-patch alpha tag that was tested.\n2. Checks that the release source tree matches that alpha tag tree, excluding\n only generated version-state differences.\n3. Writes final release version state such as `vX.Y.Z`.\n4. Verifies the generated release tree.\n5. Creates or reuses the exact release tag `vX.Y.Z`.\n6. Moves `release/vX/vX.Y` to the exact release commit.\n7. Moves `vX.Y` to the exact release commit.\n8. Moves `vX` when this minor line should be the stable major entrypoint.\n9. Prepares the next alpha version-state commit, such as\n `vX.Y.(Z+1)-alpha.0`.\n10. Moves `alpha/vX/vX.Y`, `dev/vX/vX.Y`, and `vX.Y-alpha` to that next alpha\n commit.\n11. Moves `vX-alpha` to that next alpha only when this remains the highest published alpha minor.\n\nThe historical alpha tree comparison remains the default stable source gate.\nA promote-only stable run may accept a broader reviewed release PR only when\nthe downloaded RC passport proves that the PR's exact target tree is the tree\nthat completed the PR-stage build. Buildchain also requires the target commit\nto belong to a merged same-repository PR into the selected release branch and\nrecords the accepted commit, tree, RC source, alpha source, and PR as promotion\nevidence. A stale passport, a different target tree, a generated final release\ncommit, or an unreviewed target commit still falls through to the normal\nalpha-tree and declared version-state checks.\n\nThe production channel and the test channel therefore intentionally diverge\nafter release: production stays on the release commit, while alpha/dev continue\nat the next prerelease commit.\n\n### Stable Release Throttle And Canary Gate\n\nBuildchain's own stable channel has an additional pre-publication gate. It is\nevaluated after the PR-stage release candidate has been resolved and before the\npublish-gate ref, package registry, exact stable tag, or floating stable refs\nare mutated. Train refs and alpha promotion do not execute this gate.\n\nAll alpha and release promotions first run a metadata-only release-candidate\npreflight after queued-intent revalidation. The preflight uses the same resolver\nand exact target SHA as the publication job, but does not download payloads or\ninstall the candidate repository dependencies. Missing channel PRs, stale\nworkflow runs, expired passport pairs, and insufficient payload artifact sets\ntherefore fail before the full promotion job starts. The publication job still\ndownloads and validates the exact evidence again at the trust boundary; the\npreflight moves failure earlier without weakening the final check.\n\nThe policy is versioned in `.buildchain/stable-release-policy.json`. A stable\ncandidate is allowed only when all of these facts are true:\n\n- the candidate resolves to an immutable exact alpha tag and its GitHub\n prerelease timestamp;\n- at least 24 hours have passed since the preceding stable patch on the same\n minor line;\n- the preceding stable-to-alpha comparison contains a product or public\n contract path, not only version, test, evidence, or retrospective changes;\n- the version-bound impact record has a non-empty summary and at least one\n surface impact;\n- the `Build Surface Fixture` release-candidate run succeeded;\n- `site-libkungfu-dev` completed its no-apply `Buildchain Stable Canary` and an allowed\n maintainer attested that successful run on the exact alpha SHA through the\n `buildchain-canary/site-libkungfu-dev` commit-status context;\n- the canary runtime input is exactly the candidate alpha tag or the 40-character\n commit SHA resolved from that tag; a successful status pointing at another\n workflow, repository, tag, floating ref, or SHA is rejected as mismatched;\n- at least one hour has elapsed after the last required canary completed.\n\nThe machine report is written to\n`.buildchain/release-passport/stable-release-gate.json`. A passing report is\nuploaded with the stable release passport. A blocked run writes the same report\nbefore failing, so the missing or stale condition is inspectable without\nopening a publication transaction.\n\nGitHub's Actions run REST object does not expose `workflow_dispatch` inputs.\nBuildchain therefore verifies the run's `workflow_id` against the authoritative\nworkflow metadata, then reads the exact runtime from the workflow-owned\n`<workflow name> / <runtime ref>` run-name when no input field is available.\nAn explicit API input, when present, remains authoritative and cannot be\noverridden by the display name.\n\nThe cooldown is a minimum interval, not an instruction to release every day.\nCompatible work should still be batched until a stable release has a concrete\nconsumer need. Changing the interval, canary set, attestors, product path\nboundary, or soak time is a reviewed policy change.\n\nRepositories that want a predictable scheduled stable window can use\n[`Stable Candidate Patrol`](stable-candidate-patrol.md). It persists each exact\nalpha independently, qualifies it after repository-declared checks and soak,\nand selects the newest qualified non-revoked candidate. A newer soaking alpha\ndoes not invalidate an older qualified candidate. The selected tree enters the\nexisting strict `publish-gate/release/<line>/<version> -> release/<line>` PR\npath, so scheduled selection changes release intent timing without weakening\nsource locks, review, verification, publish transactions, or passports.\n\nIf release finalization is resumed after generated version-state bookkeeping was\npartially applied, Buildchain applies the same recovery rule: the current\nrelease head may be the generated commit, or a historical merge commit that\ncontains the recorded release material, existing exact tags and alpha/dev refs\nare accepted when they match the transaction, and missing floating `vX.Y` or\n`vX` tags are retried idempotently before completion.\n\nOnce the durable release transaction is `complete` and the exact/floating\nstable refs have moved, next-alpha preparation is post-release bookkeeping. A\nfailure there records `deferred-post-release-bookkeeping` and\n`next-anchor-required` instead of retroactively reporting the stable release as\nfailed. Generated next-alpha merges use the current dev tree as their base and\noverlay only declared version-state paths, preserving concurrent dev changes.\n\n## Major Gate Semantics\n\nA major gate merge is:\n\n```text\nrelease/vX/vX.Y -> publish-gate/major\n```\n\n`publish-gate/major` is the explicit replacement for the older ABV `main`\nchannel. The name is intentionally operational: it is a gate for a rare\nadministrator decision, not the active trunk. Keeping this decision in the same\nPR UI as alpha and release promotion keeps the human workflow simple while\navoiding the misleading meaning of `main`. The older `major-gate` branch name is\na compatibility alias only.\n\nBuildchain then:\n\n1. Verifies the source is a merged same-repository PR from a protected release\n line into `publish-gate/major`.\n2. Writes the next major production version state, such as `v(X+1).0.0`.\n3. Creates or reuses the exact release tag `v(X+1).0.0`.\n4. Moves `publish-gate/major` and `release/v(X+1)/v(X+1).0` to that release commit.\n5. Moves `v(X+1).0` and `v(X+1)` to that release commit.\n6. Prepares the next alpha version-state commit, such as\n `v(X+1).0.1-alpha.0`.\n7. Moves `alpha/v(X+1)/v(X+1).0`, `dev/v(X+1)/v(X+1).0`, and\n `v(X+1).0-alpha` to that next alpha commit.\n\nChecking out `publish-gate/major` should therefore look like a frozen release\nstate, not like a branch where day-to-day source work continues. Day-to-day\nsource work continues on `dev/vX/vX.Y`.\n\n## Protected Dev Branches\n\n`dev/vX/vX.Y` is a protected development channel, not a scratch branch. Normal\nsource changes should be made on work branches such as `feature/*`, `fix/*`,\n`chore/*`, `docs/*`, `ci/*`, or `refactor/*`, then reviewed through a pull\nrequest into the target dev line.\n\nThis keeps the earliest development channel audit-friendly:\n\n- the version line being changed is visible in the PR base branch;\n- CI and required checks run before the channel moves;\n- branch protection can prevent direct pushes and stale merges;\n- later `dev -> alpha -> release` promotion inherits a reviewable source\n lineage instead of trying to reconstruct how the dev branch changed.\n\nWhen required checks take longer than the normal dev-channel commit interval,\nclassic strict up-to-date protection can become a non-converging retry loop:\neach base update invalidates a completed check set and rebasing restarts the\nsame slow checks. Buildchain supports GitHub merge queues for that channel\nshape. The queue validates the projected merged result and serializes the final\nref update, so concurrent channel movement no longer invalidates the candidate.\n\nEvery required workflow must handle both `pull_request` and `merge_group`\nbefore the queue is enabled. Queue runs do not provide\n`github.event.pull_request`; required workflows must use the checked-out\n`github.sha` or event-neutral source facts. The governance command is dry-run by\ndefault and refuses to enable a queue when a declared required workflow lacks\neither trigger or still reads the pull-request-only payload directly:\n\n```bash\nbuildchain dev merge-queue \\\n --repository owner/repository \\\n --branch dev/v4/v4.0 \\\n --workflow .github/workflows/source-acceptance.yml \\\n --workflow .github/workflows/affected-native-pr.yml \\\n --bypass-app dedicated-release-app\n```\n\nAfter reviewing the plan, repeat with `--apply`. Buildchain creates or updates\nan exact-branch `merge_queue` ruleset first, then changes only the classic\nrequired-status-check policy from strict to loose. Reviews, administrator\nenforcement, conversation resolution, required check identities, force-push\nprotection, and deletion protection remain owned by the existing branch\nprotection. The ruleset uses the first merge method that the repository itself\nallows, and fails closed when the repository has no enabled merge method.\nRe-running the command is idempotent.\n\nThe repository policy can be declared once instead of repeated as CLI flags:\n\n```toml\n[governance.dev.merge_queue]\nmode = \"inherit\"\nrequired_workflows = [\".github/workflows/verify.yml\"]\n```\n\n`enabled` explicitly requires Buildchain to create or update an exact-branch\nqueue; `inherit` copies queue parameters and bypass actors from the repository's\ncurrent default dev branch; `disabled` prevents automatic queue creation. An\nabsent declaration behaves as `inherit` during release-line bootstrap so a new\nmajor or minor line does not silently lose governance already active on the\nprevious line. Required status-check identities still come from the new\nbranch's own classic protection rather than being copied from the old branch.\n\nMerge-queue rules also reject generated post-publish version-state ref updates.\nWhen the sealed promotion workflow uses a dedicated GitHub App, user, or team\nalready declared by release governance, repeat `--bypass-app`, `--bypass-user`,\nor `--bypass-team` to project that exact actor into the ruleset. Bypass actors\nare never inferred and broad repository or organization roles are not accepted.\nThis keeps ordinary feature PRs on the predecessor-aligned queue path while the\nsealed publication authority can finish its machine-verified bookkeeping. The\ndry-run receipt exposes the exact actor IDs before `--apply` changes GitHub.\n\nBuildchain provides the reusable\n`.github/workflows/dev-pr-auto-merge.yml` workflow for repositories that want a\nscheduled or manual \"merge ready dev PRs\" pass. The consumer repository owns\nthe trigger schedule, but the merge decision is declared through workflow\ninputs: target dev branch, required status/check names, ready and block labels,\nallowed work-branch prefixes, review requirements, maximum merges per run,\nmerge method, and dry-run mode.\n\nThe workflow defaults are conservative. A PR is skipped unless it targets the\nconfigured dev line, is not a draft, has the ready label, has no block label,\ncomes from the same repository, uses an allowed work-branch prefix, has a\ncurrent approval, is mergeable, and has the configured required checks passing.\n`landing-mode: auto` reads the target branch's native merge-queue state. When a\nqueue exists, Buildchain never calls the direct merge endpoint: it admits at\nmost one PR against the observed target-branch SHA and immutable PR head, then\ncalls GraphQL `enqueuePullRequest` with `expectedHeadOid`. GitHub's\n`merge_group` checks remain the final authority for the projected merge.\n\nThe admission receipt records the expected and observed base/head SHAs, policy\nchecks, decision, reason, and active predecessor. Buildchain re-reads the base,\nhead, mergeability, and native queue immediately before enqueueing. Base or\nhead drift fails closed, an active queue entry blocks admission, and a rejected\nready predecessor leaves its PR open while later PRs receive\n`blocked-by-predecessor`. Workflow concurrency serializes Buildchain-owned\nadmission runs; GitHub still owns the atomic queue and protected-ref update.\nRepositories may explicitly select `landing-mode: direct` only when the target\nbranch has no native queue. Queue presence always disables the direct path.\n\nThe canonical consumer required check context is `check / check`, matching the\nreusable workflow call plus its `check` job. Buildchain's own `Verify` workflow\nemits the repository-local context `check`, so Buildchain self-promotion,\nrelease-line bootstrap, and dogfood patrol wrappers pass `check` explicitly.\nRelease governance preserves the exact context emitted by the repository and\nrecords branch-protection policy before/after facts; it does not rewrite one\ncontext shape into the other. Consumer repositories can keep their context\nstable while changing the actual verification command declaratively in\n`buildchain.toml`:\n\n```toml\n[lifecycle.install]\ncommand = \"cargo fetch --locked\"\n\n[lifecycle.verify]\ncommand = \"cargo test --workspace --locked\"\n```\n\nConsumers that want Buildchain to own the check wrapper can call\n`.github/workflows/check.yml@v3`. The wrapper runs the declared\n`lifecycle.install` and `lifecycle.verify` stages and fails the `check` job when\neither declaration is missing or the command exits non-zero.\n\nDevelopment pull requests that need source acceptance without product build or\nartifact verification can opt into `mode: source`. That mode runs only\n`lifecycle.install` and `lifecycle.check` on GitHub-hosted `ubuntu-24.04` while\npreserving the stable `check / check` required-check context. Existing callers\nremain on `mode: verify` by default, and callers may set\n`upload-artifacts: false` without weakening the job conclusion.\n\nTypical consumer wrapper:\n\n```yaml\nname: Merge Ready Dev PRs\n\non:\n schedule:\n - cron: \"17 * * * *\"\n workflow_dispatch:\n inputs:\n dry-run:\n type: boolean\n default: true\n\njobs:\n merge-dev:\n uses: kungfu-systems/buildchain/.github/workflows/dev-pr-auto-merge.yml@v3\n permissions:\n contents: write\n pull-requests: write\n checks: read\n statuses: read\n with:\n target-branch: dev/v3/v3.0\n required-status-checks: check / check\n ready-label: ready\n block-labels: blocked,do-not-merge\n max-merges: 1\n landing-mode: auto\n dry-run: ${{ inputs.dry-run || false }}\n```\n\n## Buildchain Patrol\n\n`dev-pr-auto-merge.yml` remains the focused merge primitive. For repositories\nthat want a stable day-to-day operations contract, Buildchain also exposes a\npatrol workflow family:\n\n| Workflow | Intended cadence | Default intent |\n| --- | --- | --- |\n| `.github/workflows/patrol-daily.yml` | daily | lightweight inspection plus ready dev PR maintenance |\n| `.github/workflows/patrol-weekly.yml` | weekly | release-state, passport, gate, and stale-state health checks as they are added |\n| `.github/workflows/patrol-monthly.yml` | monthly | governance, permission, branch-protection, and workflow drift checks as they are added |\n| `.github/workflows/patrol-observed-evidence.yml` | caller-selected schedule | validated immutable observation plus atomic last-known-good publication; no per-refresh PR |\n| `.github/workflows/stable-candidate-patrol.yml` | repository-selected release window | qualify immutable alpha candidates and open the exact source-lock stable PR |\n\nThe cadence names describe patrol intensity, not release cadence:\n\n- daily patrol can run every day without implying a daily release;\n- weekly patrol is for medium-cost maintenance and audit checks;\n- monthly patrol is for structural drift checks that should not block ordinary\n development velocity.\n\nStable Candidate Patrol is separate from those maintenance cadences because its\ncaller-owned cron is a release-intent window. Its candidate ledger and selection\nremain generic; registry-specific side effects still run through the normal\nrepository `lifecycle.publish` transaction. See\n[`stable-candidate-patrol.md`](stable-candidate-patrol.md).\n\nObserved data that is mechanically regenerated and path-scoped uses the\nseparate [`Observed Evidence Patrol`](observed-evidence-patrol.md) contract.\nIts one-time mechanism changes remain reviewed, while steady-state snapshot\nrefreshes publish directly from trusted default-branch schedule/manual callers.\n\nConsumers should schedule thin callers and keep their YAML declarative. For\nexample:\n\n```yaml\nname: Buildchain Daily Patrol\n\non:\n schedule:\n - cron: \"17 2 * * *\"\n workflow_dispatch:\n\njobs:\n patrol:\n uses: kungfu-systems/buildchain/.github/workflows/patrol-daily.yml@v3\n with:\n dry-run: false\n max-actions: 1\n```\n\nWeekly and monthly callers use the matching wrapper:\n\n```yaml\njobs:\n patrol:\n uses: kungfu-systems/buildchain/.github/workflows/patrol-weekly.yml@v3\n with:\n dry-run: true\n```\n\nAll three wrappers default to the `v3` floating Buildchain runtime. When\n`target-branch` is omitted, the caller's current/default branch selects the\nactive semver dev line, so consumers do not pin patrol to a stale minor branch.\nThe separate workflow names keep consumer schedules readable and stable while\nBuildchain adds new checks behind the cadence wrappers.\n\n## Package-Manager Adapters\n\nOld ABV assumed JavaScript repositories with root version state and often\nLerna. Buildchain keeps the version-state contract but does not assume every\nrepository is yarn/Lerna.\n\nThe promotion action discovers and updates:\n\n- root `package.json`;\n- `lerna.json`;\n- package manifests from `package.json` workspaces;\n- package manifests from `lerna.json` packages;\n- package manifests from `pnpm-workspace.yaml`.\n\nIt then runs the repository's detected package manager semantics where needed:\n\n- pnpm repositories use pnpm-oriented workspace discovery;\n- npm repositories use npm/package-lock semantics where present;\n- yarn repositories use yarn-style metadata where present.\n\nFor Buildchain itself, version state is required. For a consumer repository that\nhas no package manifest, the same action can degrade to ref-only behavior only\nwhen that is explicitly allowed by the caller.\n\n## Lifecycle Configuration\n\n`.buildchain/buildchain.toml` is the v3 user configuration format. It lets a repository\ndeclare version-state files and lifecycle commands without pretending every\nproject is a Node workspace. Supported version files include JSON, TOML, and\nregex-based files such as `CMakeLists.txt` or `conanfile.py`.\n\nThe promotion action consumes `version.files`, optional anchored/manual\n`version.derived_files`, and `lifecycle.verify`.\nThe verify stage runs after generated version-state changes are applied locally\nand before any release refs move. If `verification-command` is passed directly\nto the action, that explicit command overrides `lifecycle.verify`.\n\nAnchored/manual repositories may use `version.derived_files` for committed\nversion witnesses that are regenerated by `lifecycle.version-state`. The\nrelease-candidate build verifies those witnesses before heavy builds and records\ntheir digests with the exact alpha and release tree identities. Promotion then\naccepts only declared version files, the anchor manifest, and those derived\nfiles as differences from the tested alpha tree; release passports preserve the\nsame material binding.\n\nProtected release-line branches keep their normal human review gate. Managed\n`dev/vN/vN.M`, `alpha/vN/vN.M`, and `release/vN/vN.M` branches are configured\nwith one required approving review, required GitHub Actions checks, administrator\nenforcement, conversation resolution, no force pushes, and no deletions. Each\ntarget uses the exact check set, GitHub App identity, and strictness declared by\nthe governance authority descriptor. The\nreusable `release-candidate-promote.yml` wrapper defaults\n`branch-protection-bypass-apps` to `github-actions`, which lets the workflow's\nautomation identity apply generated version-state or post-publish channel\nbookkeeping after the reviewed channel PR has merged. Direct\n`promote-buildchain-ref` callers may opt into that one controlled bypass with\n`branch-protection-bypass-apps: github-actions`; every other App slug and all\nuser or team bypass actors are rejected. Before\npatching a protected generated bookkeeping ref, the action creates the\nfull configured required-check set on the exact generated version-state commit, so strict\nstatus checks are satisfied by machine-verifiable Buildchain evidence rather\nthan a human PR. The protected ref PATCH itself uses the generated ref update\ntoken; the reusable wrapper binds it to the run-scoped `github.token`. If direct generated\nrelease finalization bookkeeping is still rejected, Buildchain creates or\nreuses a same-repository `buildchain/version-state/*` PR and records\n`finalization-needed=true` in the durable transaction output. Strict alpha\nfollows the same provider-enforced PR path for its alpha and dev bookkeeping.\nThe PR remains subject to the declared review, required checks, and merge-queue\npolicy; publication resumes idempotently after that protected transaction\nlands.\n\nFor a stable release, the wrapper also checks out the exact current development\nchannel into `.buildchain/reconciliation/dev`. When the prepared next-alpha\ncommit cannot fast-forward dev because reviewed work landed concurrently, the\npromotion action applies the next version to that checkout, regenerates every\ndeclared derived version-state file, reruns the verification lifecycle, and\nonly then creates the two-parent reconciliation commit. A checkout/current-ref\nSHA mismatch blocks reconciliation instead of committing stale projections.\nBuildchain's own promotion workflow accepts only\n`BUILDCHAIN_PROMOTION_BYPASS_APPS=github-actions`, defaulting to that exact App\nwhen the variable is absent. Buildchain's release-line bootstrap uses the\nadministrator-scoped promotion token only to configure protection; branch\ncreation and generated ref updates use the run-scoped token. New channel\nprotection binds required checks to GitHub Actions App id `15368`, enables Code\nOwner, stale-review, and latest-push review gates, and admits no user or team\nbypass actor.\n\n## What This Guarantees\n\nWhen the loop succeeds, maintainers and consumers can rely on these facts:\n\n- every production release has an exact tag such as `v3.0.2`;\n- every production minor line has a floating tag such as `v3.0`;\n- every selected stable major has a floating tag such as `v3`;\n- every next-major release is driven by a reviewed `release -> publish-gate/major` PR,\n not a hidden manual button;\n- every test channel has an exact alpha tag such as `v3.0.3-alpha.0`;\n- every alpha minor line has a floating tag such as `v3.0-alpha`;\n- every major with a published alpha has a cross-minor floating tag such as `v3-alpha`, owned by its highest published alpha minor;\n- version manifests match the tag visible from the same commit;\n- production releases are derived from the alpha tree that was tested;\n- manual non-dry-run promotion cannot bypass PR review and verification;\n- flow-internal automation bypasses apply only to declared GitHub Apps, users,\n or teams on Buildchain-managed channel branch protection, while one-review\n protection remains enforced for humans;\n- admin users cannot make a channel promotion valid by temporarily bypassing\n branch protection.\n\nThis is the practical meaning of \"governance closed loop\" in Buildchain: the\ndecision, code, version state, and Git refs close over the same evidence chain.\n\n## What This Does Not Do\n\nBuildchain release promotion does not embed registry clients or product-specific\npublish logic. When publish transactions are enabled, `promote-buildchain-ref`\ncan run the consumer's `lifecycle.publish` command and own the transaction,\nevidence validation, durable recovery state, and ref finalization order. The\nconsumer repository still owns registry truth: npm, PyPI, OCI, S3, Conan, CMake\npackaging, download pages, dist-tags, and similar side effects must be\nimplemented by project lifecycle commands that emit Buildchain publish evidence.\n\nDurable transaction recovery is also bound to the exact publication version\nplanned for the current run. An unfinished transaction may be resumed from the\ncurrent source or its history only when its recorded version matches that plan;\nan older failed transaction that happens to be an ancestor cannot reserve its\nold exact tag for a newer package publication.\n\nThe exact tag is also part of the durable transaction identity. If an anchored\npackage publication completed registry side effects under a stale internal tag\nselection, a retry may rebind the unfinished `published` or `finalizing`\ntransaction to the newly planned internal tag only when the package version,\nsource, release material, target, complete artifact set, and evidence all still\nmatch; the stale tag must not point at the transaction, and the requested tag\nmust be absent or already point at accepted release material. This preserves an\nimmutable tag that represents a completed transaction while allowing a tag\ncollision discovered after registry publication to recover without republishing.\n\nEvery Buildchain publish model that can run registry side effects must bind the\npublish entrypoint to an immutable `publish-gate/*` source lock. The reusable\n`release-candidate-promote.yml@v3` wrapper creates or updates that gate ref and\npasses `require-publish-source-lock`, `publish-source-ref`,\n`publish-source-sha`, and `publish-source-locked` to\n`promote-buildchain-ref`. Direct action callers must pass the same four inputs\nfrom the reusable build outputs. Workflows that only collect passports or run\ndry-run package checks do not move publish refs and are not publish-gate\npublication models. A dry-run of `release-candidate-promote.yml` computes and\nreports the exact `publish-gate/*` source lock that a real promotion would use,\nbut does not read, create, or move that ref.\n\nSemver GitHub Release publication is owned by `promote-buildchain-ref`, not by\nconsumer shell glue. Consumers normally use the `release-candidate-promote.yml`\ngenerated channel router, where GitHub Release publication is enabled by default and can be\ndisabled with `github-release: false`; the wrapper passes that declaration to\nthe action. After the publish transaction reaches `complete`, Buildchain creates\nor updates the public GitHub Release and uploads the generated\n`buildchain.release.json`, release-passport assets, and publish evidence. The\nauthoritative publication channel controls GitHub metadata: alpha is marked\n`prerelease=true` and `make_latest=false`; release/stable/major is marked latest.\nSemver tag syntax remains the fallback for ordinary callers without explicit\npublication intent. For anchored/manual package releases, the public\nrelease tag defaults to `v<publishedVersion>` while the internal exact\ntransaction tag remains in the release passport and release-state ref. This is\nthe supported path for downstream\n`release.published` propagation across semver, major, and promote-only release\ncandidate publication models.\n\nPublished GitHub Release assets are immutable evidence. A repeated promotion\npreserves an existing asset when its SHA-256 digest matches the regenerated\nbytes, uploads only missing assets, and fails with an immutable-release\ncollision when a same-name asset has different bytes. It never deletes and\nreplaces an existing asset during retry or duplicate workflow delivery.\n\nProduct payloads are included only through the explicit\n`github-release-payload-patterns` input. Patterns match basenames inside the\ndownloaded PR-stage RC payload bundle; zero matches or duplicate public\nbasenames fail closed. This preserves the exact PR-built bytes instead of\nrebuilding archives during promotion.\n\nConsumers with a signed well-known discovery document can additionally provide\n`publication-commit-command`. The advanced promotion workflow validates its\ntopology before any publish-gate or release mutation, then runs it only after\nthe GitHub Release and its immutable payload/passport assets exist. The command\nmust publicly read back the exact new payload root and emit\n`kungfu-buildchain-publication-commit-evidence/v1`; that evidence is copied\ninto the controller artifact and exposed as workflow outputs. The previous\nauthority must remain valid on every failure. Deferred standalone binary\ndistribution is incompatible with this mode because the discovery authority\nmust be the final product mutation.\n\nBuildchain also does not maintain bare exact tags such as `1.0.0`. The supported\nexact release and alpha refs are v-prefixed:\n\n```text\nv3.0.0\nv3.0.1-alpha.0\n```\n\n## Operational Reading Order\n\nWhen debugging or extending release behavior, read in this order:\n\n1. `docs/release-flow.md`\n2. `.github/workflows/release-verify.yml`\n3. `.github/workflows/buildchain-ref-promotion.yml`\n4. `.github/workflows/release-candidate-promote.yml`\n5. `.github/workflows/.release-candidate-promote.yml`\n6. `actions/promote-buildchain-ref/README.md`\n7. `actions/promote-buildchain-ref/src/`\n8. `docs/migration-inventory.md`\n\nThat path gives the policy first, the workflow trigger second, and the action\nimplementation last."
|
|
3279
|
+
"markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: buildchain-release-governance\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n model_family: GPT-5\n product: Codex\n generated_at: 2026-07-27\n invisible_context: not asserted\n---\n\n# Release Governance\n\nBuildchain v3 preserves the release semantics of the older ABV workflow while\nmoving the implementation into one modern repository.\n\nThe central idea is simple: a reviewed merge into a release channel is the\nrelease intent. Automation must then create the version-state commit, exact tag,\nfloating tag, and next alpha state that make that intent true in Git.\n\n## Design Problem\n\nKungfu release automation has to keep four facts aligned:\n\n1. The source tree that was reviewed.\n2. The package version recorded in manifests such as `package.json` or\n `lerna.json`.\n3. The exact immutable release or prerelease tag.\n4. The floating channel refs that consumers actually use.\n\nIf any one of these facts is updated by hand, the system can split:\n\n- a consumer can fetch `v3.0` and receive a tree whose package version still\n says the previous release;\n- a maintainer can move `v3` without producing an exact `v3.0.N` audit tag;\n- an alpha can be promoted to production even though the release tree is not the\n same tree that was tested;\n- a protected branch merge can succeed while the follow-up version commit is\n missing, or a flow-internal generated `dev`/`alpha`/`release` ref update can\n fail after publish because the automation identity was not declared in the\n branch-protection review bypass allowance.\n\nThe older ABV workflow addressed this by letting GitHub PRs drive release\nstate. Buildchain keeps that choice because it makes release intent reviewable,\nobservable, and recoverable from Git history.\n\n## What ABV Contributed\n\nThe old ABV model was not just \"bump a version number.\" It encoded a governance\nloop:\n\n- release branches are named as channels: `dev`, `alpha`, `release`, and the\n administrative `publish-gate/major`;\n- a PR from one channel to the next is the release request;\n- verify jobs check that the branch pair is valid before merge;\n- a maintainer review is required before the branch moves;\n- after merge, automation writes the version change and moves tags;\n- exact tags and floating refs are aligned with the resulting commit;\n- the next development channel is prepared automatically.\n\nABV also kept the version-state mutation in the repository. For JavaScript\nrepositories that usually meant changing `lerna.json` and/or `package.json`.\nThat commit is important because the tag alone is not enough evidence: the\nsource tree should also declare the version that the tag advertises.\n\nBuildchain v3 treats that as a hard semantic requirement for its own release\nline.\n\n## Buildchain Implementation\n\nBuildchain implements the same governance loop with:\n\n- `.github/workflows/release-verify.yml` for PR verification;\n- `.github/workflows/buildchain-ref-promotion.yml` for post-verify ref\n promotion; this workflow dogfoods the declarative\n `release-candidate-promote.yml` wrapper and does not hand-wire resolver,\n artifact download, publish-gate, or promote action steps;\n- Buildchain self promotion enables `release-passport-buildchain-self-kfd`, so\n the promote action generates KFD-1 witnesses, KFD-2 public claim JSON, and\n KFD-3 collaboration-interface witnesses from the final version-state workspace\n before release passport finalization. The witness hashes therefore bind to the\n exact published package and site facts from\n `packages/core/buildchain-kfd-claims.js` instead of relying on prose release\n notes;\n- `actions/promote-buildchain-ref` for branch, tag, version-state, and\n governance checks;\n- package-manager adapters that can update version state for pnpm, npm, and\n yarn style repositories;\n- `buildchain.toml` lifecycle configuration for repositories whose version\n state or verification commands are not Node package-manager defaults.\n\nThe implementation is intentionally stricter than a local release script:\n\n- manual workflow dispatch can only do dry-run promotion;\n- non-dry-run promotion must be driven by a completed `Verify` workflow;\n- target branch protection details must be readable, and branch protection must\n apply to administrators as well as regular contributors;\n- `alpha/vX/vX.Y` and `release/vX/vX.Y` branch protection must require both the\n general `check` context and the Release Verify aggregate `verify` context, so\n an invalid channel pair cannot merge even when repository checks pass;\n- release targets keep those checks non-strict with respect to source-branch\n ancestry: generated channel bookkeeping intentionally makes the source and\n target histories diverge, while the pair-specific `verify` context validates\n the legal channel transition;\n- alpha promotion must come from a merged same-repository PR from\n `dev/vX/vX.Y` to `alpha/vX/vX.Y`;\n- release promotion must come from a merged same-repository PR from\n `alpha/vX/vX.Y` to `release/vX/vX.Y`;\n- major promotion must come from a merged same-repository PR from\n `release/vX/vX.Y` to `publish-gate/major`;\n- release promotion requires an existing same-patch alpha tag and checks the\n release source tree against that tested alpha tree;\n- generated version-state commits are verified before refs move.\n\n## Reconciling a protected line without rebuilding\n\nThe public `build.yml` channel router ends with a top-level job named\n`Summarize build contract`. Keeping this aggregate at the public router boundary\nprevents its required check context from changing when the internal reusable\nbuild workflow gains another nesting layer.\n\nFor an already-tested pull request whose protected target still requires an\nolder Buildchain aggregate context, inspect the exact candidate SHA first:\n\n```bash\nGH_TOKEN=\"$(gh auth token)\" npx @kungfu-tech/buildchain@latest \\\n release-governance reconcile \\\n --repository kungfu-systems/example \\\n --branch release/v3/v3.0 \\\n --candidate-sha <tested-pr-head-sha> \\\n --json\n```\n\nThe dry run reads the successful checks emitted for that SHA and reports the\nexact expected/actual context pair. It chooses the shallowest successful\n`Summarize build contract` context, so a new top-level router aggregate wins\nover the nested internal build summary. To apply the plan, rerun the same\ncommand with `--apply` using a token that can update branch protection.\n\nReconciliation changes only the required-status-check subresource. It replaces\nstale Buildchain aggregate contexts, preserves unrelated checks and strictness,\nand does not modify review requirements, administrator enforcement,\nconversation resolution, force-push policy, or deletion policy. The candidate\nmust still be the head of a pull request targeting the named managed branch;\nthe command fails closed otherwise. This lets a previously successful candidate\ncontinue from the same SHA without another native build or an administrator\nmerge bypass.\n\nRepositories may also expose a small caller workflow around\n`.github/workflows/release-governance-reconcile.yml@v3`. Pass `branch`,\n`candidate-sha`, and `apply`, and provide `governance-token` through the caller's\nsecrets. The reusable workflow uploads the JSON reconciliation receipt.\n\nExact publication planning installs the checked-out promotion source's declared\ndependencies before version-state verification. This keeps the pre-authority\nversion plan on the same package-manager boundary as the later promotion job,\nincluding repositories whose verification commands import production packages.\nThe planning pass may materialize and verify declared derived files locally,\nbut dry-run never creates Git blobs, trees, commits, refs, or tags.\n\nPromotion intents are serialized globally per caller repository with\n`cancel-in-progress: false`. A queued intent re-reads its protected target ref\nbefore checkout, dependency installation, release-candidate resolution, or any\npublish-gate/ref mutation. If the ref already points at a newer SHA, that older\nintent is no longer release authority: the workflow records the requested and\ncurrent SHAs, proves that the current target is ahead of the requested commit,\nand completes as a `target-ref-advanced` superseded no-op. Diverged or behind\ncomparisons are not superseded transactions and still fail closed.\nMissing refs, unreadable repository state, invalid channels, governance\nfailures, and artifact mismatches still fail closed. The promote action repeats\nthe target check at the mutation boundary, so a ref that advances after the\nworkflow preflight cannot receive a second set of publication side effects.\n\n## Version Lines\n\nKungfu uses Python-like version lines where a minor line can represent a\nlong-lived product train. A line such as `v3.0` can produce many production\npatch releases:\n\n```text\nv3.0.0\nv3.0.1\nv3.0.2\n...\nv3.0.1234\n```\n\nThis is why Buildchain maintains both exact and floating refs:\n\n- `v3.0.2` is immutable release evidence;\n- `v3.0` is the latest production release on the `3.0` line;\n- `v3` is the selected stable major-line entrypoint;\n- `v3.0.3-alpha.0` is immutable alpha evidence;\n- `v3.0-alpha` is the latest test channel for the `3.0` line.\n- `v3-alpha` is the latest test channel on the highest published alpha minor in major `3`.\n\nA release does not mean \"minor is complete.\" It means \"this patch on this minor\nline is now production.\"\n\nGitHub repository rules must preserve that distinction. Exact tags such as\n`v3.0.2` and `v3.0.3-alpha.0` should be immutable. Floating channel tags such as\n`v3`, `v3.0`, `v3.0-alpha`, and `v3-alpha` must remain movable by the Buildchain promotion\ntoken after governance checks and publish evidence pass. A tag ruleset that\nprotects every `refs/tags/v*` ref is too broad because it also locks the\nfloating channel tags that Buildchain is required to update. Prefer exact-tag\npatterns such as `refs/tags/v*.*.*` for immutable release evidence, while\nleaving floating channel tags under Buildchain automation control.\n\n## Alpha Semantics\n\nAn alpha merge is:\n\n```text\ndev/vX/vX.Y -> alpha/vX/vX.Y\n```\n\nBuildchain then:\n\n1. Computes the next prerelease for the minor line.\n2. Writes version state such as `vX.Y.Z-alpha.N`.\n3. Verifies the generated version-state tree.\n4. Creates or reuses the exact alpha tag.\n5. Moves `alpha/vX/vX.Y` to the generated alpha commit.\n6. Moves `dev/vX/vX.Y` to the same generated alpha commit when this is a\n fast-forward update.\n7. Moves `vX.Y-alpha` to the same generated alpha commit.\n8. Moves `vX-alpha` only when `X.Y` is the highest minor in major `X` with a published alpha; older minor alpha work records a skip and cannot move the major channel backwards.\n\nThe npm channel follows the same ownership rule. The highest alpha minor publishes\nwith dist-tag `alpha`; maintenance alphas on an older minor publish with the\nline-specific dist-tag `vX.Y-alpha` so they cannot roll the global `alpha`\nchannel backward. Exact prerelease versions remain installable directly.\n\nThis keeps the test channel self-describing. If a consumer checks out\n`v3.0-alpha` or `v3-alpha`, the manifests and exact alpha tag agree. The major\nalpha ref removes routine consumer edits when Buildchain opens a newer minor,\nwhile exact tags and SHAs remain the reproducible audit choice.\n\n### Buildchain Alpha Self-Dogfood\n\nBuildchain continuously consumes its own current major alpha through\n`.github/workflows/buildchain-alpha-self-dogfood.yml`. Both lanes call the\nreleased channel router at `build.yml@v3-alpha`. The auto lane must resolve\n`v3-alpha`; the explicit stable lane must resolve `v3`. Both execute the same\ndeclared install, build, and verify fixture, proving that a single consumer\nsurface routes to distinct released runtimes without duplicating lifecycle\nconfiguration in the consumer.\n\nBuildchain's generic artifact-signing contract seals source-, tree-, runtime-,\nplatform-, and digest-bound requests from ordinary credential-free build jobs.\nProvider-specific authority jobs consume only those sealed payloads. Apple\nDeveloper ID, Windows Authenticode, and detached cryptographic signatures share\nthe request/receipt model, while each profile retains its honest platform\nsemantics and fail-closed verification requirements.\n\nThe authority verifies the complete result set on GitHub-hosted infrastructure\nbefore delivery. The consumer controller also performs final result verification,\nexact-byte import, manifest recomputation, and deterministic-artifact replacement\non a GitHub-hosted lane. Self-hosted build runners do not download authority\nresult payloads, and aggregate/release evidence fails closed until this\nfinalization succeeds.\n\nThe central `buildchain-artifact-signing` environment reuses the established\nmacOS Credential Island names (`BUILDCHAIN_MACOS_CERTIFICATE_*`,\n`BUILDCHAIN_MACOS_NOTARY_API_*`, and\n`BUILDCHAIN_MACOS_EXPECTED_TEAM_ID`). Those authority-only values are never\ndeclared by or forwarded through a consumer repository. Windows and detached\nproviders follow the same central-environment boundary.\n\nThe reusable build trust gate reads `job.workflow_ref`, which identifies the\ncalled workflow and its selected ref. It does not infer the runtime from\n`github.workflow_ref`, because GitHub defines that context as the caller\nworkflow identity during a reusable call.\n\nThe router selects `.buildchain/alpha-contract-lock.json` for alpha and\n`.buildchain/contract-lock.json` for stable. The alpha lock records the exact\nreviewed alpha SHA and compatibility digest; it does not replace the stable\nconsumer lock. A later alpha with only compatible additive drift continues,\nwhile a changed breaking digest fails until the new alpha contract is reviewed.\n\nThe evidence job resolves `v3-alpha` and `v3` through the GitHub refs API,\ncompares those immutable SHAs with the reusable workflow outputs, verifies the\n`alpha` and `stable` classifications, and uploads a JSON evidence artifact.\nThe canary runs after successful Buildchain ref promotion, on a daily fallback\nschedule, and on manual dispatch. It shares the release-promotion concurrency\ngroup, so another promotion cannot move the floating refs between runtime\nresolution and evidence comparison.\n\nThis is a post-publication consumer canary, not a release bootstrap. Source\nverification still runs the current commit, and\n`buildchain-ref-promotion.yml` still passes the verified exact SHA into the\npromotion workflow. Patrol, dev-merge, repair, and promotion defaults remain on\nstable or exact refs so a broken alpha cannot prevent Buildchain from publishing\nits fix. When Buildchain opens a new major, inventory validation requires this\nworkflow's fixed GitHub `uses` refs to move from `vN`/`vN-alpha` to the new\nmajor; GitHub does not allow expressions in a reusable-workflow `uses` ref.\n\nIf `dev/vX/vX.Y` has already advanced before generated alpha version-state\nbookkeeping can sync back, Buildchain records `skipped-non-fast-forward` for the\ndev sync and still completes the exact and floating alpha tags for the reviewed\nalpha commit. Later dev changes must go through their own dev-to-alpha\npromotion instead of rewinding dev. The normal path is direct: after alpha\nmerges, Buildchain applies the generated version-state commit to alpha and then\nfast-forwards dev to the same commit without a human version-state PR.\n\nIf alpha finalization is resumed after generated version-state bookkeeping was\npartially applied, Buildchain accepts the current alpha head as the generated\ncommit, or as a historical merge commit that contains the recorded release\nmaterial. An already-created exact alpha tag may point at the transaction\nrelease/material SHA or at the finalized alpha head; missing floating alpha\ntags are retried before the transaction becomes `complete`.\n\n## Release Semantics\n\nA release merge is:\n\n```text\nalpha/vX/vX.Y -> release/vX/vX.Y\n```\n\nBuildchain then:\n\n1. Finds the same-patch alpha tag that was tested.\n2. Checks that the release source tree matches that alpha tag tree, excluding\n only generated version-state differences.\n3. Writes final release version state such as `vX.Y.Z`.\n4. Verifies the generated release tree.\n5. Creates or reuses the exact release tag `vX.Y.Z`.\n6. Moves `release/vX/vX.Y` to the exact release commit.\n7. Moves `vX.Y` to the exact release commit.\n8. Moves `vX` when this minor line should be the stable major entrypoint.\n9. Prepares the next alpha version-state commit, such as\n `vX.Y.(Z+1)-alpha.0`.\n10. Moves `alpha/vX/vX.Y`, `dev/vX/vX.Y`, and `vX.Y-alpha` to that next alpha\n commit.\n11. Moves `vX-alpha` to that next alpha only when this remains the highest published alpha minor.\n\nThe historical alpha tree comparison remains the default stable source gate.\nA promote-only stable run may accept a broader reviewed release PR only when\nthe downloaded RC passport proves that the PR's exact target tree is the tree\nthat completed the PR-stage build. Buildchain also requires the target commit\nto belong to a merged same-repository PR into the selected release branch and\nrecords the accepted commit, tree, RC source, alpha source, and PR as promotion\nevidence. A stale passport, a different target tree, a generated final release\ncommit, or an unreviewed target commit still falls through to the normal\nalpha-tree and declared version-state checks.\n\nThe production channel and the test channel therefore intentionally diverge\nafter release: production stays on the release commit, while alpha/dev continue\nat the next prerelease commit.\n\n### Stable Release Throttle And Canary Gate\n\nBuildchain's own stable channel has an additional pre-publication gate. It is\nevaluated after the PR-stage release candidate has been resolved and before the\npublish-gate ref, package registry, exact stable tag, or floating stable refs\nare mutated. Train refs and alpha promotion do not execute this gate.\n\nAll alpha and release promotions first run a metadata-only release-candidate\npreflight after queued-intent revalidation. The preflight uses the same resolver\nand exact target SHA as the publication job, but does not download payloads or\ninstall the candidate repository dependencies. Missing channel PRs, stale\nworkflow runs, expired passport pairs, and insufficient payload artifact sets\ntherefore fail before the full promotion job starts. The publication job still\ndownloads and validates the exact evidence again at the trust boundary; the\npreflight moves failure earlier without weakening the final check.\n\nThe policy is versioned in `.buildchain/stable-release-policy.json`. A stable\ncandidate is allowed only when all of these facts are true:\n\n- the candidate resolves to an immutable exact alpha tag and its GitHub\n prerelease timestamp;\n- at least 24 hours have passed since the preceding stable patch on the same\n minor line;\n- the preceding stable-to-alpha comparison contains a product or public\n contract path, not only version, test, evidence, or retrospective changes;\n- the version-bound impact record has a non-empty summary and at least one\n surface impact;\n- the `Build Surface Fixture` release-candidate run succeeded;\n- `site-libkungfu-dev` completed its no-apply `Buildchain Stable Canary` and an allowed\n maintainer attested that successful run on the exact alpha SHA through the\n `buildchain-canary/site-libkungfu-dev` commit-status context;\n- the canary runtime input is exactly the candidate alpha tag or the 40-character\n commit SHA resolved from that tag; a successful status pointing at another\n workflow, repository, tag, floating ref, or SHA is rejected as mismatched;\n- at least one hour has elapsed after the last required canary completed.\n\nThe machine report is written to\n`.buildchain/release-passport/stable-release-gate.json`. A passing report is\nuploaded with the stable release passport. A blocked run writes the same report\nbefore failing, so the missing or stale condition is inspectable without\nopening a publication transaction.\n\nGitHub's Actions run REST object does not expose `workflow_dispatch` inputs.\nBuildchain therefore verifies the run's `workflow_id` against the authoritative\nworkflow metadata, then reads the exact runtime from the workflow-owned\n`<workflow name> / <runtime ref>` run-name when no input field is available.\nAn explicit API input, when present, remains authoritative and cannot be\noverridden by the display name.\n\nThe cooldown is a minimum interval, not an instruction to release every day.\nCompatible work should still be batched until a stable release has a concrete\nconsumer need. Changing the interval, canary set, attestors, product path\nboundary, or soak time is a reviewed policy change.\n\nRepositories that want a predictable scheduled stable window can use\n[`Stable Candidate Patrol`](stable-candidate-patrol.md). It persists each exact\nalpha independently, qualifies it after repository-declared checks and soak,\nand selects the newest qualified non-revoked candidate. A newer soaking alpha\ndoes not invalidate an older qualified candidate. The selected tree enters the\nexisting strict `publish-gate/release/<line>/<version> -> release/<line>` PR\npath, so scheduled selection changes release intent timing without weakening\nsource locks, review, verification, publish transactions, or passports.\n\nIf release finalization is resumed after generated version-state bookkeeping was\npartially applied, Buildchain applies the same recovery rule: the current\nrelease head may be the generated commit, or a historical merge commit that\ncontains the recorded release material, existing exact tags and alpha/dev refs\nare accepted when they match the transaction, and missing floating `vX.Y` or\n`vX` tags are retried idempotently before completion.\n\nOnce the durable release transaction is `complete` and the exact/floating\nstable refs have moved, next-alpha preparation is post-release bookkeeping. A\nfailure there records `deferred-post-release-bookkeeping` and\n`next-anchor-required` instead of retroactively reporting the stable release as\nfailed. Generated next-alpha merges use the current dev tree as their base and\noverlay only declared version-state paths, preserving concurrent dev changes.\n\n## Major Gate Semantics\n\nA major gate merge is:\n\n```text\nrelease/vX/vX.Y -> publish-gate/major\n```\n\n`publish-gate/major` is the explicit replacement for the older ABV `main`\nchannel. The name is intentionally operational: it is a gate for a rare\nadministrator decision, not the active trunk. Keeping this decision in the same\nPR UI as alpha and release promotion keeps the human workflow simple while\navoiding the misleading meaning of `main`. The older `major-gate` branch name is\na compatibility alias only.\n\nBuildchain then:\n\n1. Verifies the source is a merged same-repository PR from a protected release\n line into `publish-gate/major`.\n2. Writes the next major production version state, such as `v(X+1).0.0`.\n3. Creates or reuses the exact release tag `v(X+1).0.0`.\n4. Moves `publish-gate/major` and `release/v(X+1)/v(X+1).0` to that release commit.\n5. Moves `v(X+1).0` and `v(X+1)` to that release commit.\n6. Prepares the next alpha version-state commit, such as\n `v(X+1).0.1-alpha.0`.\n7. Moves `alpha/v(X+1)/v(X+1).0`, `dev/v(X+1)/v(X+1).0`, and\n `v(X+1).0-alpha` to that next alpha commit.\n\nChecking out `publish-gate/major` should therefore look like a frozen release\nstate, not like a branch where day-to-day source work continues. Day-to-day\nsource work continues on `dev/vX/vX.Y`.\n\n## Protected Dev Branches\n\n`dev/vX/vX.Y` is a protected development channel, not a scratch branch. Normal\nsource changes should be made on work branches such as `feature/*`, `fix/*`,\n`chore/*`, `docs/*`, `ci/*`, or `refactor/*`, then reviewed through a pull\nrequest into the target dev line.\n\nThis keeps the earliest development channel audit-friendly:\n\n- the version line being changed is visible in the PR base branch;\n- CI and required checks run before the channel moves;\n- branch protection can prevent direct pushes and stale merges;\n- later `dev -> alpha -> release` promotion inherits a reviewable source\n lineage instead of trying to reconstruct how the dev branch changed.\n\nWhen required checks take longer than the normal dev-channel commit interval,\nclassic strict up-to-date protection can become a non-converging retry loop:\neach base update invalidates a completed check set and rebasing restarts the\nsame slow checks. Buildchain supports GitHub merge queues for that channel\nshape. The queue validates the projected merged result and serializes the final\nref update, so concurrent channel movement no longer invalidates the candidate.\n\nEvery required workflow must handle both `pull_request` and `merge_group`\nbefore the queue is enabled. Queue runs do not provide\n`github.event.pull_request`; required workflows must use the checked-out\n`github.sha` or event-neutral source facts. The governance command is dry-run by\ndefault and refuses to enable a queue when a declared required workflow lacks\neither trigger or still reads the pull-request-only payload directly:\n\n```bash\nbuildchain dev merge-queue \\\n --repository owner/repository \\\n --branch dev/v4/v4.0 \\\n --workflow .github/workflows/source-acceptance.yml \\\n --workflow .github/workflows/affected-native-pr.yml \\\n --bypass-app dedicated-release-app\n```\n\nAfter reviewing the plan, repeat with `--apply`. Buildchain creates or updates\nan exact-branch `merge_queue` ruleset first, then changes only the classic\nrequired-status-check policy from strict to loose. Reviews, administrator\nenforcement, conversation resolution, required check identities, force-push\nprotection, and deletion protection remain owned by the existing branch\nprotection. The ruleset uses the first merge method that the repository itself\nallows, and fails closed when the repository has no enabled merge method.\nRe-running the command is idempotent.\n\nThe repository policy can be declared once instead of repeated as CLI flags:\n\n```toml\n[governance.dev.merge_queue]\nmode = \"inherit\"\nrequired_workflows = [\".github/workflows/verify.yml\"]\n```\n\n`enabled` explicitly requires Buildchain to create or update an exact-branch\nqueue; `inherit` copies queue parameters and bypass actors from the repository's\ncurrent default dev branch; `disabled` prevents automatic queue creation. An\nabsent declaration behaves as `inherit` during release-line bootstrap so a new\nmajor or minor line does not silently lose governance already active on the\nprevious line. Required status-check identities still come from the new\nbranch's own classic protection rather than being copied from the old branch.\n\nMerge-queue rules also reject generated post-publish version-state ref updates.\nWhen the sealed promotion workflow uses a dedicated GitHub App, user, or team\nalready declared by release governance, repeat `--bypass-app`, `--bypass-user`,\nor `--bypass-team` to project that exact actor into the ruleset. Bypass actors\nare never inferred and broad repository or organization roles are not accepted.\nThis keeps ordinary feature PRs on the predecessor-aligned queue path while the\nsealed publication authority can finish its machine-verified bookkeeping. The\ndry-run receipt exposes the exact actor IDs before `--apply` changes GitHub.\n\nBuildchain provides the reusable\n`.github/workflows/dev-pr-auto-merge.yml` workflow for repositories that want a\nscheduled or manual \"merge ready dev PRs\" pass. The consumer repository owns\nthe trigger schedule, but the merge decision is declared through workflow\ninputs: target dev branch, required status/check names, ready and block labels,\nallowed work-branch prefixes, review requirements, maximum merges per run,\nmerge method, and dry-run mode.\n\nThe workflow defaults are conservative. A PR is skipped unless it targets the\nconfigured dev line, is not a draft, has the ready label, has no block label,\ncomes from the same repository, uses an allowed work-branch prefix, has a\ncurrent approval, is mergeable, and has the configured required checks passing.\n`landing-mode: auto` reads the target branch's native merge-queue state. When a\nqueue exists, Buildchain never calls the direct merge endpoint: it admits at\nmost one PR against the observed target-branch SHA and immutable PR head, then\ncalls GraphQL `enqueuePullRequest` with `expectedHeadOid`. GitHub's\n`merge_group` checks remain the final authority for the projected merge.\n\nThe admission receipt records the expected and observed base/head SHAs, policy\nchecks, decision, reason, and active predecessor. Buildchain re-reads the base,\nhead, mergeability, and native queue immediately before enqueueing. Base or\nhead drift fails closed, an active queue entry blocks admission, and a rejected\nready predecessor leaves its PR open while later PRs receive\n`blocked-by-predecessor`. Workflow concurrency serializes Buildchain-owned\nadmission runs; GitHub still owns the atomic queue and protected-ref update.\nRepositories may explicitly select `landing-mode: direct` only when the target\nbranch has no native queue. Queue presence always disables the direct path.\n\nThe canonical consumer required check context is `check / check`, matching the\nreusable workflow call plus its `check` job. Buildchain's own `Verify` workflow\nemits the repository-local context `check`, so Buildchain self-promotion,\nrelease-line bootstrap, and dogfood patrol wrappers pass `check` explicitly.\nRelease governance preserves the exact context emitted by the repository and\nrecords branch-protection policy before/after facts; it does not rewrite one\ncontext shape into the other. Consumer repositories can keep their context\nstable while changing the actual verification command declaratively in\n`buildchain.toml`:\n\n```toml\n[lifecycle.install]\ncommand = \"cargo fetch --locked\"\n\n[lifecycle.verify]\ncommand = \"cargo test --workspace --locked\"\n```\n\nConsumers that want Buildchain to own the check wrapper can call\n`.github/workflows/check.yml@v3`. The wrapper runs the declared\n`lifecycle.install` and `lifecycle.verify` stages and fails the `check` job when\neither declaration is missing or the command exits non-zero.\n\nDevelopment pull requests that need source acceptance without product build or\nartifact verification can opt into `mode: source`. That mode runs only\n`lifecycle.install` and `lifecycle.check` on GitHub-hosted `ubuntu-24.04` while\npreserving the stable `check / check` required-check context. Existing callers\nremain on `mode: verify` by default, and callers may set\n`upload-artifacts: false` without weakening the job conclusion.\n\nTypical consumer wrapper:\n\n```yaml\nname: Merge Ready Dev PRs\n\non:\n schedule:\n - cron: \"17 * * * *\"\n workflow_dispatch:\n inputs:\n dry-run:\n type: boolean\n default: true\n\njobs:\n merge-dev:\n uses: kungfu-systems/buildchain/.github/workflows/dev-pr-auto-merge.yml@v3\n permissions:\n contents: write\n pull-requests: write\n checks: read\n statuses: read\n with:\n target-branch: dev/v3/v3.0\n required-status-checks: check / check\n ready-label: ready\n block-labels: blocked,do-not-merge\n max-merges: 1\n landing-mode: auto\n dry-run: ${{ inputs.dry-run || false }}\n```\n\n## Buildchain Patrol\n\n`dev-pr-auto-merge.yml` remains the focused merge primitive. For repositories\nthat want a stable day-to-day operations contract, Buildchain also exposes a\npatrol workflow family:\n\n| Workflow | Intended cadence | Default intent |\n| --- | --- | --- |\n| `.github/workflows/patrol-daily.yml` | daily | lightweight inspection plus ready dev PR maintenance |\n| `.github/workflows/patrol-weekly.yml` | weekly | release-state, passport, gate, and stale-state health checks as they are added |\n| `.github/workflows/patrol-monthly.yml` | monthly | governance, permission, branch-protection, and workflow drift checks as they are added |\n| `.github/workflows/patrol-observed-evidence.yml` | caller-selected schedule | validated immutable observation plus atomic last-known-good publication; no per-refresh PR |\n| `.github/workflows/stable-candidate-patrol.yml` | repository-selected release window | qualify immutable alpha candidates and open the exact source-lock stable PR |\n\nThe cadence names describe patrol intensity, not release cadence:\n\n- daily patrol can run every day without implying a daily release;\n- weekly patrol is for medium-cost maintenance and audit checks;\n- monthly patrol is for structural drift checks that should not block ordinary\n development velocity.\n\nStable Candidate Patrol is separate from those maintenance cadences because its\ncaller-owned cron is a release-intent window. Its candidate ledger and selection\nremain generic; registry-specific side effects still run through the normal\nrepository `lifecycle.publish` transaction. See\n[`stable-candidate-patrol.md`](stable-candidate-patrol.md).\n\nObserved data that is mechanically regenerated and path-scoped uses the\nseparate [`Observed Evidence Patrol`](observed-evidence-patrol.md) contract.\nIts one-time mechanism changes remain reviewed, while steady-state snapshot\nrefreshes publish directly from trusted default-branch schedule/manual callers.\n\nConsumers should schedule thin callers and keep their YAML declarative. For\nexample:\n\n```yaml\nname: Buildchain Daily Patrol\n\non:\n schedule:\n - cron: \"17 2 * * *\"\n workflow_dispatch:\n\njobs:\n patrol:\n uses: kungfu-systems/buildchain/.github/workflows/patrol-daily.yml@v3\n with:\n dry-run: false\n max-actions: 1\n```\n\nWeekly and monthly callers use the matching wrapper:\n\n```yaml\njobs:\n patrol:\n uses: kungfu-systems/buildchain/.github/workflows/patrol-weekly.yml@v3\n with:\n dry-run: true\n```\n\nAll three wrappers default to the `v3` floating Buildchain runtime. When\n`target-branch` is omitted, the caller's current/default branch selects the\nactive semver dev line, so consumers do not pin patrol to a stale minor branch.\nThe separate workflow names keep consumer schedules readable and stable while\nBuildchain adds new checks behind the cadence wrappers.\n\n## Package-Manager Adapters\n\nOld ABV assumed JavaScript repositories with root version state and often\nLerna. Buildchain keeps the version-state contract but does not assume every\nrepository is yarn/Lerna.\n\nThe promotion action discovers and updates:\n\n- root `package.json`;\n- `lerna.json`;\n- package manifests from `package.json` workspaces;\n- package manifests from `lerna.json` packages;\n- package manifests from `pnpm-workspace.yaml`.\n\nIt then runs the repository's detected package manager semantics where needed:\n\n- pnpm repositories use pnpm-oriented workspace discovery;\n- npm repositories use npm/package-lock semantics where present;\n- yarn repositories use yarn-style metadata where present.\n\nFor Buildchain itself, version state is required. For a consumer repository that\nhas no package manifest, the same action can degrade to ref-only behavior only\nwhen that is explicitly allowed by the caller.\n\n## Lifecycle Configuration\n\n`.buildchain/buildchain.toml` is the v3 user configuration format. It lets a repository\ndeclare version-state files and lifecycle commands without pretending every\nproject is a Node workspace. Supported version files include JSON, TOML, and\nregex-based files such as `CMakeLists.txt` or `conanfile.py`.\n\nThe promotion action consumes `version.files`, optional anchored/manual\n`version.derived_files`, and `lifecycle.verify`.\nThe verify stage runs after generated version-state changes are applied locally\nand before any release refs move. If `verification-command` is passed directly\nto the action, that explicit command overrides `lifecycle.verify`.\n\nAnchored/manual repositories may use `version.derived_files` for committed\nversion witnesses that are regenerated by `lifecycle.version-state`. The\nrelease-candidate build verifies those witnesses before heavy builds and records\ntheir digests with the exact alpha and release tree identities. Promotion then\naccepts only declared version files, the anchor manifest, and those derived\nfiles as differences from the tested alpha tree; release passports preserve the\nsame material binding.\n\nProtected release-line branches keep their normal human review gate. Managed\n`dev/vN/vN.M`, `alpha/vN/vN.M`, and `release/vN/vN.M` branches are configured\nwith one required approving review, required GitHub Actions checks, administrator\nenforcement, conversation resolution, no force pushes, and no deletions. Each\ntarget uses the exact check set, GitHub App identity, and strictness declared by\nthe governance authority descriptor. The\nreusable `release-candidate-promote.yml` wrapper defaults\n`branch-protection-bypass-apps` to `github-actions`, which lets the workflow's\nautomation identity apply generated version-state or post-publish channel\nbookkeeping after the reviewed channel PR has merged. Direct\n`promote-buildchain-ref` callers may opt into that one controlled bypass with\n`branch-protection-bypass-apps: github-actions`; every other App slug and all\nuser or team bypass actors are rejected. Before\npatching a protected generated bookkeeping ref, the action creates the\nfull configured required-check set on the exact generated version-state commit, so strict\nstatus checks are satisfied by machine-verifiable Buildchain evidence rather\nthan a human PR. The protected ref PATCH itself uses the generated ref update\ntoken; the reusable wrapper binds it to the run-scoped `github.token`. If direct generated\nrelease finalization bookkeeping is still rejected, Buildchain creates or\nreuses a same-repository `buildchain/version-state/*` PR and records\n`finalization-needed=true` in the durable transaction output. Strict alpha\nfollows the same provider-enforced PR path for its alpha and dev bookkeeping.\nThe PR remains subject to the declared review, required checks, and merge-queue\npolicy; publication resumes idempotently after that protected transaction\nlands.\n\nFor a stable release, the wrapper also checks out the exact current development\nchannel into `.buildchain/reconciliation/dev`. When the prepared next-alpha\ncommit cannot fast-forward dev because reviewed work landed concurrently, the\npromotion action applies the next version to that checkout, regenerates every\ndeclared derived version-state file, reruns the verification lifecycle, and\nonly then creates the two-parent reconciliation commit. A checkout/current-ref\nSHA mismatch blocks reconciliation instead of committing stale projections.\nBuildchain's own promotion workflow accepts only\n`BUILDCHAIN_PROMOTION_BYPASS_APPS=github-actions`, defaulting to that exact App\nwhen the variable is absent. Buildchain's release-line bootstrap uses the\nadministrator-scoped promotion token only to configure protection; branch\ncreation and generated ref updates use the run-scoped token. New channel\nprotection binds required checks to GitHub Actions App id `15368`, enables Code\nOwner, stale-review, and latest-push review gates, and admits no user or team\nbypass actor.\n\n## What This Guarantees\n\nWhen the loop succeeds, maintainers and consumers can rely on these facts:\n\n- every production release has an exact tag such as `v3.0.2`;\n- every production minor line has a floating tag such as `v3.0`;\n- every selected stable major has a floating tag such as `v3`;\n- every next-major release is driven by a reviewed `release -> publish-gate/major` PR,\n not a hidden manual button;\n- every test channel has an exact alpha tag such as `v3.0.3-alpha.0`;\n- every alpha minor line has a floating tag such as `v3.0-alpha`;\n- every major with a published alpha has a cross-minor floating tag such as `v3-alpha`, owned by its highest published alpha minor;\n- version manifests match the tag visible from the same commit;\n- production releases are derived from the alpha tree that was tested;\n- manual non-dry-run promotion cannot bypass PR review and verification;\n- flow-internal automation bypasses apply only to declared GitHub Apps, users,\n or teams on Buildchain-managed channel branch protection, while one-review\n protection remains enforced for humans;\n- admin users cannot make a channel promotion valid by temporarily bypassing\n branch protection.\n\nThis is the practical meaning of \"governance closed loop\" in Buildchain: the\ndecision, code, version state, and Git refs close over the same evidence chain.\n\n## What This Does Not Do\n\nBuildchain release promotion does not embed registry clients or product-specific\npublish logic. When publish transactions are enabled, `promote-buildchain-ref`\ncan run the consumer's `lifecycle.publish` command and own the transaction,\nevidence validation, durable recovery state, and ref finalization order. The\nconsumer repository still owns registry truth: npm, PyPI, OCI, S3, Conan, CMake\npackaging, download pages, dist-tags, and similar side effects must be\nimplemented by project lifecycle commands that emit Buildchain publish evidence.\n\nDurable transaction recovery is also bound to the exact publication version\nplanned for the current run. An unfinished transaction may be resumed from the\ncurrent source or its history only when its recorded version matches that plan;\nan older failed transaction that happens to be an ancestor cannot reserve its\nold exact tag for a newer package publication.\n\nThe exact tag is also part of the durable transaction identity. If an anchored\npackage publication completed registry side effects under a stale internal tag\nselection, a retry may rebind the unfinished `published` or `finalizing`\ntransaction to the newly planned internal tag only when the package version,\nsource, release material, target, complete artifact set, and evidence all still\nmatch; the stale tag must not point at the transaction, and the requested tag\nmust be absent or already point at accepted release material. This preserves an\nimmutable tag that represents a completed transaction while allowing a tag\ncollision discovered after registry publication to recover without republishing.\n\nFor package publish transactions, the immutable public version tag points to\nthe transaction `source_sha`, so registry source metadata such as npm `gitHead`\nand the Git tag identify the same source commit. Protected branches and mutable\nchannel tags continue to point to the generated `release_sha`. Recovery accepts\nolder completed transactions whose exact tags already point to recorded release\nor release-material SHAs, but new tags are source-bound.\n\nEvery Buildchain publish model that can run registry side effects must bind the\npublish entrypoint to an immutable `publish-gate/*` source lock. The reusable\n`release-candidate-promote.yml@v3` wrapper creates or updates that gate ref and\npasses `require-publish-source-lock`, `publish-source-ref`,\n`publish-source-sha`, and `publish-source-locked` to\n`promote-buildchain-ref`. Direct action callers must pass the same four inputs\nfrom the reusable build outputs. Workflows that only collect passports or run\ndry-run package checks do not move publish refs and are not publish-gate\npublication models. A dry-run of `release-candidate-promote.yml` computes and\nreports the exact `publish-gate/*` source lock that a real promotion would use,\nbut does not read, create, or move that ref.\n\nSemver GitHub Release publication is owned by `promote-buildchain-ref`, not by\nconsumer shell glue. Consumers normally use the `release-candidate-promote.yml`\ngenerated channel router, where GitHub Release publication is enabled by default and can be\ndisabled with `github-release: false`; the wrapper passes that declaration to\nthe action. After the publish transaction reaches `complete`, Buildchain creates\nor updates the public GitHub Release and uploads the generated\n`buildchain.release.json`, release-passport assets, and publish evidence. The\nauthoritative publication channel controls GitHub metadata: alpha is marked\n`prerelease=true` and `make_latest=false`; release/stable/major is marked latest.\nSemver tag syntax remains the fallback for ordinary callers without explicit\npublication intent. For anchored/manual package releases, the public\nrelease tag defaults to `v<publishedVersion>` while the internal exact\ntransaction tag remains in the release passport and release-state ref. This is\nthe supported path for downstream\n`release.published` propagation across semver, major, and promote-only release\ncandidate publication models.\n\nPublished GitHub Release assets are immutable evidence. A repeated promotion\npreserves an existing asset when its SHA-256 digest matches the regenerated\nbytes, uploads only missing assets, and fails with an immutable-release\ncollision when a same-name asset has different bytes. It never deletes and\nreplaces an existing asset during retry or duplicate workflow delivery.\n\nProduct payloads are included only through the explicit\n`github-release-payload-patterns` input. Patterns match basenames inside the\ndownloaded PR-stage RC payload bundle; zero matches or duplicate public\nbasenames fail closed. This preserves the exact PR-built bytes instead of\nrebuilding archives during promotion.\n\nConsumers with a signed well-known discovery document can additionally provide\n`publication-commit-command`. The advanced promotion workflow validates its\ntopology before any publish-gate or release mutation, then runs it only after\nthe GitHub Release and its immutable payload/passport assets exist. The command\nmust publicly read back the exact new payload root and emit\n`kungfu-buildchain-publication-commit-evidence/v1`; that evidence is copied\ninto the controller artifact and exposed as workflow outputs. The previous\nauthority must remain valid on every failure. Deferred standalone binary\ndistribution is incompatible with this mode because the discovery authority\nmust be the final product mutation.\n\nBuildchain also does not maintain bare exact tags such as `1.0.0`. The supported\nexact release and alpha refs are v-prefixed:\n\n```text\nv3.0.0\nv3.0.1-alpha.0\n```\n\n## Operational Reading Order\n\nWhen debugging or extending release behavior, read in this order:\n\n1. `docs/release-flow.md`\n2. `.github/workflows/release-verify.yml`\n3. `.github/workflows/buildchain-ref-promotion.yml`\n4. `.github/workflows/release-candidate-promote.yml`\n5. `.github/workflows/.release-candidate-promote.yml`\n6. `actions/promote-buildchain-ref/README.md`\n7. `actions/promote-buildchain-ref/src/`\n8. `docs/migration-inventory.md`\n\nThat path gives the policy first, the workflow trigger second, and the action\nimplementation last."
|
|
3275
3280
|
},
|
|
3276
3281
|
{
|
|
3277
3282
|
"id": "manual:release-passport",
|
|
@@ -3352,7 +3357,7 @@
|
|
|
3352
3357
|
],
|
|
3353
3358
|
"maturity": "preview",
|
|
3354
3359
|
"sourcePath": "docs/release-propagation.md",
|
|
3355
|
-
"digest": "sha256:
|
|
3360
|
+
"digest": "sha256:3b7a2a0437f8a3a4e5cff7e05a2a8c427be597d85e93d49d5e35ba2a2b089afc",
|
|
3356
3361
|
"headings": [
|
|
3357
3362
|
{
|
|
3358
3363
|
"level": 1,
|
|
@@ -3390,7 +3395,7 @@
|
|
|
3390
3395
|
"anchor": "kfd-to-site-libkungfu-dev"
|
|
3391
3396
|
}
|
|
3392
3397
|
],
|
|
3393
|
-
"markdown": "# Release Propagation\n\nRelease propagation lets a finalized upstream release open a downstream update\nPR using the upstream release passport as the audit source. It is for product\nchains such as:\n\n```text\nkfd -> site-libkungfu-dev\nA -> B -> C\n```\n\nThe downstream repository receives an exact lock, not a floating dist-tag. A\nsite or app can then consume the upstream package, site bundle, or release\npassport as its single source of truth without hand-copying release facts.\n\n## Contract\n\nThe propagation graph is declarative JSON:\n\n```json\n{\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n \"nodes\": [\n {\n \"id\": \"kfd\",\n \"repository\": \"kungfu-systems/kfd\",\n \"package\": \"@kungfu-tech/kfd\"\n },\n {\n \"id\": \"site-libkungfu-dev\",\n \"repository\": \"kungfu-systems/site-libkungfu-dev\",\n \"lockPath\": \"buildchain.upstreams/kfd.release.json\",\n \"baseRef\": \"dev/v2/v2.7\"\n }\n ],\n \"edges\": [\n {\n \"id\": \"kfd-to-site\",\n \"from\": \"kfd\",\n \"to\": \"site-libkungfu-dev\",\n \"channelPolicy\": \"preserve\"\n }\n ]\n}\n```\n\n`channelPolicy: \"preserve\"` is the default and maps:\n\n```text\nalpha -> alpha\nrelease -> release\n```\n\nCross-channel mapping is allowed only when an edge declares\n`channelPolicy: \"explicit\"` and a `channelMap`. Buildchain rejects cycles so a\nchain can fan out or continue as `A -> B -> C`, but cannot loop back into an\nalready visited release line.\n\n## Upstream Release Envelope\n\nThe upstream release envelope is the post-finalization fact set:\n\n```json\n{\n \"repository\": \"kungfu-systems/kfd\",\n \"channel\": \"alpha\",\n \"tag\": \"v1.4.0-alpha.3\",\n \"sourceSha\": \"1111111111111111111111111111111111111111\",\n \"tagTargetSha\": \"1111111111111111111111111111111111111111\",\n \"package\": {\n \"name\": \"@kungfu-tech/kfd\",\n \"version\": \"1.4.0-alpha.3\",\n \"integrity\": \"sha512-...\",\n \"gitHead\": \"1111111111111111111111111111111111111111\"\n },\n \"releasePassport\": {\n \"url\": \"https://github.com/kungfu-systems/kfd/releases/download/v1.4.0-alpha.3/buildchain.release.json\",\n \"sha256\": \"2222222222222222222222222222222222222222222222222222222222222222\"\n },\n \"siteBundle\": {\n \"manifestSha256\": \"3333333333333333333333333333333333333333333333333333333333333333\"\n }\n}\n```\n\nThe package version, integrity, and npm `gitHead` must be exact. The exact tag\nmust be `v<version>`, and `gitHead`, tag target, and `sourceSha` must describe\nthe same source commit before propagation is admitted. Downstream build logic\ninstalls that version directly and never resolves `alpha` or `latest` again.\n\nPublication repositories can propagate immutable publication archive evidence\nwithout npm package facts. The upstream envelope then includes\n`publicationArtifact`:\n\n```json\n{\n \"repository\": \"kungfu-systems/paper-observer-declared-timelines\",\n \"channel\": \"alpha\",\n \"tag\": \"v0.1.0-alpha.1\",\n \"sourceSha\": \"4444444444444444444444444444444444444444\",\n \"tagTargetSha\": \"4444444444444444444444444444444444444444\",\n \"releasePassport\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/buildchain.release.json\",\n \"sha256\": \"5555555555555555555555555555555555555555555555555555555555555555\"\n },\n \"publicationArtifact\": {\n \"id\": \"observer-declared-timelines\",\n \"kind\": \"paper\",\n \"version\": \"0.1.0-alpha.1\",\n \"canonicalUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/\",\n \"latestUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/\",\n \"latestEvidenceUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/buildchain.release.json\",\n \"immutableVersionUrl\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/\",\n \"registry\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-registry.json\",\n \"sha256\": \"6666666666666666666666666666666666666666666666666666666666666666\"\n },\n \"manifest\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact.json\",\n \"sha256\": \"7777777777777777777777777777777777777777777777777777777777777777\"\n },\n \"passport\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact-passport.json\",\n \"sha256\": \"8888888888888888888888888888888888888888888888888888888888888888\"\n },\n \"primaryArtifact\": {\n \"path\": \"_build/main.pdf\",\n \"url\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/main.pdf\",\n \"sha256\": \"9999999999999999999999999999999999999999999999999999999999999999\"\n }\n }\n}\n```\n\nThis lets a site repository render the latest reader page and historical\nversion index from release facts while keeping old PDFs, source bundles,\nmanifests, and passports immutable.\n\nWhen the downstream consumer is expected to update an exact npm paper pin, the\nupstream envelope must carry both `package` and `publicationArtifact`. The\nconsumer can then prove that package name, version, sha512 integrity,\npublication URLs, and immutable artifact digests all describe the same release.\n`publicationArtifact` without `package` remains valid for evidence-only\npropagation, but it cannot qualify a package-pin fast path.\n\n## CLI\n\nGenerate a propagation plan:\n\n```bash\nbuildchain release-propagation plan \\\n --graph buildchain.release-propagation.json \\\n --upstream-release .buildchain/upstream-release.json \\\n --output .buildchain/release-propagation-plan.json \\\n --json\n```\n\nWrite the downstream lock:\n\n```bash\nbuildchain release-propagation write-lock \\\n --plan .buildchain/release-propagation-plan.json \\\n --target site-libkungfu-dev \\\n --cwd downstream-checkout \\\n --json\n```\n\nThe written lock has contract\n`kungfu-buildchain-release-propagation-lock` and records:\n\n- upstream repository, channel, exact tag, source SHA;\n- optional npm package name, exact version, and sha512 integrity;\n- optional publication artifact canonical/latest/immutable URLs, registry,\n manifest, passport, source bundle, and primary artifact digests;\n- release passport URL and SHA-256;\n- optional site bundle manifest SHA-256;\n- downstream repository, channel, base ref, lock path;\n- edge id and channel policy;\n- a deterministic propagation key and branch derived from the exact upstream\n repository/version/channel plus downstream repository.\n\nRepeated runs for the same release identity reuse that branch and lock. A\ndifferent release version or channel receives a different branch, so concurrent\nreleases cannot collapse into one mutable propagation PR.\n\nCreate the exact propagation receipt after the lock/PR outcome is known:\n\n```bash\nbuildchain release-propagation receipt \\\n --plan .buildchain/release-propagation-plan.json \\\n --lock-result .buildchain/release-propagation-write-lock.json \\\n --pr-outcome .buildchain/release-propagation-pr-outcome.json \\\n --target site-libkungfu-dev \\\n --output .buildchain/release-propagation-receipt.json \\\n --json\n```\n\nThe receipt keeps four machine states separate:\n\n- `package-published`: exact npm name/version/integrity exists;\n- `alpha-complete`: the upstream alpha passport/tag is complete;\n- `staging-visible`: the downstream staging surface is actually visible;\n- `production-visible`: the production surface is actually visible.\n\nPackage publication or alpha completion never implies either visibility state.\n\n## Agent-native work envelope\n\nSetting `agent-work-mode: capture-only` makes a finalized release emit a\nresumable delivery handoff without mutating the downstream repository. Passing\nan exact `agent-work-context-json` instead emits an already-authorized unit.\nBuildchain emits one\n`kungfu-buildchain-release-propagation-work` v1 envelope per exact release and\ndownstream target. This is a Buildchain domain execution contract, not another\nWork Control database or authority.\n\nThe envelope binds:\n\n- the exact normalized upstream release and release-lock roots;\n- the downstream repository, channel, base ref, expected base SHA, managed\n branch, lock path, and propagation key;\n- exact parent and child `kungfu.assignment-graph.work-ref/v1` values derived\n from the immutable release and downstream plan;\n- either a pending Family binding or one exact\n `kungfu.work-control.initiative-family-state/v2` coordinate;\n- capture-only or end-to-end execution authority, including an active typed\n execution-Warrant reference for execution;\n- explicit publish-to-production intent, deterministic commands, canonical\n ordered stages, a recovery cursor, stage receipts, supersession policy, and\n a content root.\n\nThe ordered stages are:\n\n```text\nmaterialize -> verify-release -> push-branch -> pull-request -> preview\n-> independent-review -> protected-merge -> staging -> production-release\n-> production-deploy -> online-readback -> complete\n```\n\n`pull-request` and `protected-merge` are intermediate states. Only exact online\nreadback followed by an accepted Work Control Decision can record `complete`.\nEvery state transition uses expected-old fencing against the current work\ncontent root. An identical initial envelope has the same work id and root;\nnewer releases receive distinct propagation keys and must name an explicit\nsuperseded work root when they replace unfinished work.\n\nThe context has this shape (roots abbreviated here only for readability):\n\n```json\n{\n \"parentWorkRef\": {\n \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n \"workspace_identity_root\": \"sha256:<64 hex>\",\n \"object_kind\": \"initiative\",\n \"subject\": \"paper-publication\",\n \"version_root\": \"sha256:<64 hex>\",\n \"cut_root\": \"sha256:<64 hex>\"\n },\n \"childWorkRef\": {\n \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n \"workspace_identity_root\": \"sha256:<64 hex>\",\n \"object_kind\": \"assignment\",\n \"subject\": \"site-propagation\",\n \"version_root\": \"sha256:<64 hex>\",\n \"cut_root\": \"sha256:<64 hex>\"\n },\n \"familyState\": {\n \"schema\": \"kungfu.work-control.initiative-family-state/v2\",\n \"stateRoot\": \"sha256:<64 hex>\",\n \"v1ProjectionRoot\": \"sha256:<64 hex>\",\n \"typedBindingRoot\": \"sha256:<64 hex>\",\n \"factWorld\": \"<owning fact world>\",\n \"cutRoot\": \"sha256:<64 hex>\"\n },\n \"authority\": {\n \"mode\": \"capture-only\",\n \"publishToProduction\": false,\n \"allowedActions\": [],\n \"executionPrincipal\": null,\n \"sourceControlPrincipal\": null,\n \"executionWarrant\": null\n },\n \"supersedesWorkRoot\": \"\"\n}\n```\n\nAutomatic capture emits deterministic Buildchain-owned release and propagation\nWorkRefs, leaves `workControl.bindingState` as `pending`, emits no Family State\nor Warrant, and performs no downstream write. Claiming that unit supplies the\nexact Family State v2 coordinate and active Warrant while preserving the work\nidentity. An executing input must carry an active Warrant at the same Family\nState fact world and cut, explicit production intent, and the complete supported\naction set. It also binds the acting Agent principal and the source-control\nprincipal that authors the PR. Buildchain never invents external Work Control\nauthority.\n\nA managed Paper opts into automatic capture with a thin, source-controlled\n`.buildchain/release-propagation.json`. The sealed release workflow reads that\nexact file from the released Paper SHA only after npm, tag, Passport, and\npublication evidence agree. It emits one paused work artifact per declared\ntarget; publication itself does not open a Site PR.\n\n```json\n{\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-paper-release-propagation\",\n \"sourceNode\": \"paper-example\",\n \"graph\": {\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n \"nodes\": [],\n \"edges\": []\n },\n \"targets\": [\"site-libkungfu-dev\"]\n}\n```\n\nEach graph target owns an exact GitHub web-surface execution profile: workflow,\nbase and managed branch, lock path, consumer commands, production status URL,\nand production artifact readback URLs. The sealed workflow rejects extra config\nfields, unknown targets, or a target whose base revision cannot be resolved.\n\nThe reusable workflow keeps its prior behavior when `agent-work-mode` is\n`legacy` (the default). Managed Paper callers set `capture-only`; an Agent later\nclaims the emitted artifact and resumes from its machine-readable `next_action`.\n\nAgent entrypoints are machine-readable and restart-safe:\n\n```bash\nbuildchain release-propagation work create ... --output work.json --json\nbuildchain release-propagation work status --work work.json --json\nbuildchain release-propagation work resume --work work.json --json\nbuildchain release-propagation work claim ... --output successor.json --json\nbuildchain release-propagation work receipt ... --output receipt.json --json\nbuildchain release-propagation work record ... --output successor.json --json\nbuildchain release-propagation work repair ... --output successor.json --json\nbuildchain release-propagation work complete ... --output successor.json --json\n```\n\nKnown operational races (`stale-branch`, `expected-old-mismatch`,\n`lockfile-drift`, `failed-check`, `interrupted-execution`, and `ci-delay`) return\na retryable repair action. Semantic ambiguity, missing credentials, policy\nexpansion, and unknown failures stop at `needs-decision`. Release-contract\nmismatch, immutable-artifact conflict, and destructive recovery stop at a hard\nsafety gate. Evidence locators containing signed or credential parameters are\nrejected.\n\nSuccessful stage receipts are typed, not generic progress notes. In particular,\nthe pushed-branch receipt hashes the full expected-old branch reconciliation;\nreview binds an approved GitHub review and must come from an identity distinct\nfrom both the acting Agent and PR author; production deployment carries release,\nlock, deployed artifact, expected readback digest, and rollback coordinates; and\nonline readback must cover the exact execution-profile URLs with HTTP 200,\nobserved non-zero bytes, exact deployed Git revision, and matching release and\nartifact digests. The final receipt binds the accepted Work Control Decision\nroot.\n\n## Reusable Workflow\n\nUpstream repositories can call\n`.github/workflows/release-propagation.yml@v3` after release finalization:\n\n```yaml\njobs:\n propagate-site:\n uses: kungfu-systems/buildchain/.github/workflows/release-propagation.yml@v3\n with:\n buildchain-ref: v3\n graph-json: ${{ needs.release.outputs.propagation-graph-json }}\n upstream-release-json: ${{ needs.release.outputs.upstream-release-json }}\n downstream-target: site-libkungfu-dev\n downstream-repository: kungfu-systems/site-libkungfu-dev\n downstream-base-ref: dev/v2/v2.7\n downstream-update-command: >-\n node scripts/paper-propagation.cjs consume\n --lock \"$BUILDCHAIN_PROPAGATION_LOCK_PATH\"\n && corepack pnpm install --lockfile-only --ignore-scripts\n downstream-prepare-command: pnpm install --frozen-lockfile --ignore-scripts\n downstream-verify-command: pnpm run check\n dry-run: false\n secrets:\n propagation-token: ${{ secrets.BUILDCHAIN_PROMOTION_TOKEN }}\n```\n\nThe downstream branch name may be reused across upstream releases. Before\nreplacing an existing managed branch, the workflow reads its exact remote SHA\nand pushes with an explicit `--force-with-lease=<ref>:<sha>`. A surviving branch\nfrom a merged PR is therefore reconciled without manual deletion, while a\nconcurrent writer makes the lease fail closed. The controller receipt includes a\n`propagation-branch-reconciliation` evidence file recording the branch, observed\nremote SHA, pushed SHA, lease mode, and the deterministically created or updated\nopen PR.\n\nThe workflow checks out the Buildchain runtime selected by\n`buildchain-repository` and `buildchain-ref` into `.buildchain/runtime`, invokes\nthat runtime for the propagation plan and lock write, then checks out the\ndownstream repository and writes the exact lock. If\n`downstream-update-command` is set, Buildchain runs that consumer-owned command\nafter writing the lock and exposes the exact lock path, lock SHA-256,\npropagation key, branch, and upstream release JSON as\n`BUILDCHAIN_PROPAGATION_*` environment variables. The command is part of the\ndownstream PR diff; it is not a deployment hook.\n\nA consumer that must perform further deterministic preparation can declare\n`downstream-prepare-command`. The command receives\n`BUILDCHAIN_UPSTREAM_PACKAGE_NAME`, `BUILDCHAIN_UPSTREAM_PACKAGE_VERSION`, and\n`BUILDCHAIN_UPSTREAM_RELEASE_LOCK`. After preparation, Buildchain refreshes an\nexisting `<!-- buildchain:badges:start -->` README block by default. Consumers\ncan disable that step with `refresh-managed-readme-badges: false`.\n\n`downstream-verify-command` runs against the final tree before any commit or\npush, so consumers can use the same check as their PR workflow. Update,\npreparation, badge refresh, and verification failures all fail closed. The\nworkflow stages the complete deterministic result, signs the propagation\ncommit with DCO, and then opens or updates the PR. With no agent work context,\nthe reusable workflow retains this backward-compatible PR boundary. With an\nexecuting work context, it records materialization, verification, branch, and\nPR receipts and returns `preview` as the next action; the authorized Agent then\ncontinues through the downstream repository's normal protected review,\npublication, deployment, and readback entrypoints. A byte-identical rerun is an\nexplicit successful no-op, never a synthetic completion.\n\nFor unreleased runtime validation, keep the caller's reusable workflow reference\non `@v3` and pass a temporary train ref through `buildchain-ref`.\n\n## kfd to site-libkungfu-dev\n\nFor `kfd -> site-libkungfu-dev`, the graph should preserve channels:\n\n- a `kfd` alpha release produces a downstream alpha lock and downstream alpha\n publication consumes the exact `@kungfu-tech/kfd@...-alpha.N` package;\n- a `kfd` stable release produces a downstream release lock and downstream\n stable publication consumes the exact stable package.\n\nThis keeps the site synchronized to the package truth without allowing the site\nto drift onto a floating npm dist-tag."
|
|
3398
|
+
"markdown": "# Release Propagation\n\nRelease propagation lets a finalized upstream release open a downstream update\nPR using the upstream release passport as the audit source. It is for product\nchains such as:\n\n```text\nkfd -> site-libkungfu-dev\nA -> B -> C\n```\n\nThe downstream repository receives an exact lock, not a floating dist-tag. A\nsite or app can then consume the upstream package, site bundle, or release\npassport as its single source of truth without hand-copying release facts.\n\n## Contract\n\nThe propagation graph is declarative JSON:\n\n```json\n{\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n \"nodes\": [\n {\n \"id\": \"kfd\",\n \"repository\": \"kungfu-systems/kfd\",\n \"package\": \"@kungfu-tech/kfd\"\n },\n {\n \"id\": \"site-libkungfu-dev\",\n \"repository\": \"kungfu-systems/site-libkungfu-dev\",\n \"lockPath\": \"buildchain.upstreams/kfd.release.json\",\n \"baseRef\": \"dev/v2/v2.7\"\n }\n ],\n \"edges\": [\n {\n \"id\": \"kfd-to-site\",\n \"from\": \"kfd\",\n \"to\": \"site-libkungfu-dev\",\n \"channelPolicy\": \"preserve\"\n }\n ]\n}\n```\n\n`channelPolicy: \"preserve\"` is the default and maps:\n\n```text\nalpha -> alpha\nrelease -> release\n```\n\nCross-channel mapping is allowed only when an edge declares\n`channelPolicy: \"explicit\"` and a `channelMap`. Buildchain rejects cycles so a\nchain can fan out or continue as `A -> B -> C`, but cannot loop back into an\nalready visited release line.\n\n## Upstream Release Envelope\n\nThe upstream release envelope is the post-finalization fact set:\n\n```json\n{\n \"repository\": \"kungfu-systems/kfd\",\n \"channel\": \"alpha\",\n \"tag\": \"v1.4.0-alpha.3\",\n \"sourceSha\": \"1111111111111111111111111111111111111111\",\n \"tagTargetSha\": \"1111111111111111111111111111111111111111\",\n \"package\": {\n \"name\": \"@kungfu-tech/kfd\",\n \"version\": \"1.4.0-alpha.3\",\n \"integrity\": \"sha512-...\",\n \"gitHead\": \"1111111111111111111111111111111111111111\"\n },\n \"releasePassport\": {\n \"url\": \"https://github.com/kungfu-systems/kfd/releases/download/v1.4.0-alpha.3/buildchain.release.json\",\n \"sha256\": \"2222222222222222222222222222222222222222222222222222222222222222\"\n },\n \"siteBundle\": {\n \"manifestSha256\": \"3333333333333333333333333333333333333333333333333333333333333333\"\n }\n}\n```\n\nThe package version, integrity, and npm `gitHead` must be exact. The exact tag\nmust be `v<version>`, and `gitHead`, tag target, and `sourceSha` must describe\nthe same source commit before propagation is admitted. Downstream build logic\ninstalls that version directly and never resolves `alpha` or `latest` again.\n\nPublication repositories can propagate immutable publication archive evidence\nwithout npm package facts. The upstream envelope then includes\n`publicationArtifact`:\n\n```json\n{\n \"repository\": \"kungfu-systems/paper-observer-declared-timelines\",\n \"channel\": \"alpha\",\n \"tag\": \"v0.1.0-alpha.1\",\n \"sourceSha\": \"4444444444444444444444444444444444444444\",\n \"tagTargetSha\": \"4444444444444444444444444444444444444444\",\n \"releasePassport\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/buildchain.release.json\",\n \"sha256\": \"5555555555555555555555555555555555555555555555555555555555555555\"\n },\n \"publicationArtifact\": {\n \"id\": \"observer-declared-timelines\",\n \"kind\": \"paper\",\n \"version\": \"0.1.0-alpha.1\",\n \"canonicalUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/\",\n \"latestUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/\",\n \"latestEvidenceUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/buildchain.release.json\",\n \"immutableVersionUrl\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/\",\n \"registry\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-registry.json\",\n \"sha256\": \"6666666666666666666666666666666666666666666666666666666666666666\"\n },\n \"manifest\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact.json\",\n \"sha256\": \"7777777777777777777777777777777777777777777777777777777777777777\"\n },\n \"passport\": {\n \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact-passport.json\",\n \"sha256\": \"8888888888888888888888888888888888888888888888888888888888888888\"\n },\n \"primaryArtifact\": {\n \"path\": \"_build/main.pdf\",\n \"url\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/main.pdf\",\n \"sha256\": \"9999999999999999999999999999999999999999999999999999999999999999\"\n }\n }\n}\n```\n\nThis lets a site repository render the latest reader page and historical\nversion index from release facts while keeping old PDFs, source bundles,\nmanifests, and passports immutable.\n\nWhen the downstream consumer is expected to update an exact npm paper pin, the\nupstream envelope must carry both `package` and `publicationArtifact`. The\nconsumer can then prove that package name, version, sha512 integrity,\npublication URLs, and immutable artifact digests all describe the same release.\n`publicationArtifact` without `package` remains valid for evidence-only\npropagation, but it cannot qualify a package-pin fast path.\n\n## CLI\n\nGenerate a propagation plan:\n\n```bash\nbuildchain release-propagation plan \\\n --graph buildchain.release-propagation.json \\\n --upstream-release .buildchain/upstream-release.json \\\n --output .buildchain/release-propagation-plan.json \\\n --json\n```\n\nWrite the downstream lock:\n\n```bash\nbuildchain release-propagation write-lock \\\n --plan .buildchain/release-propagation-plan.json \\\n --target site-libkungfu-dev \\\n --cwd downstream-checkout \\\n --json\n```\n\nThe written lock has contract\n`kungfu-buildchain-release-propagation-lock` and records:\n\n- upstream repository, channel, exact tag, source SHA;\n- optional npm package name, exact version, and sha512 integrity;\n- optional publication artifact canonical/latest/immutable URLs, registry,\n manifest, passport, source bundle, and primary artifact digests;\n- release passport URL and SHA-256;\n- optional site bundle manifest SHA-256;\n- downstream repository, channel, base ref, lock path;\n- edge id and channel policy;\n- a deterministic propagation key and branch derived from the exact upstream\n repository/version/channel plus downstream repository.\n\nRepeated runs for the same release identity reuse that branch and lock. A\ndifferent release version or channel receives a different branch, so concurrent\nreleases cannot collapse into one mutable propagation PR.\n\nCreate the exact propagation receipt after the lock/PR outcome is known:\n\n```bash\nbuildchain release-propagation receipt \\\n --plan .buildchain/release-propagation-plan.json \\\n --lock-result .buildchain/release-propagation-write-lock.json \\\n --pr-outcome .buildchain/release-propagation-pr-outcome.json \\\n --target site-libkungfu-dev \\\n --output .buildchain/release-propagation-receipt.json \\\n --json\n```\n\nThe receipt keeps four machine states separate:\n\n- `package-published`: exact npm name/version/integrity exists;\n- `alpha-complete`: the upstream alpha passport/tag is complete;\n- `staging-visible`: the downstream staging surface is actually visible;\n- `production-visible`: the production surface is actually visible.\n\nPackage publication or alpha completion never implies either visibility state.\n\n## Agent-native work envelope\n\nSetting `agent-work-mode: capture-only` makes a finalized release emit a\nresumable delivery handoff without mutating the downstream repository. Passing\nan exact `agent-work-context-json` instead emits an already-authorized unit.\nBuildchain emits one\n`kungfu-buildchain-release-propagation-work` v1 envelope per exact release and\ndownstream target. This is a Buildchain domain execution contract, not another\nWork Control database or authority.\n\nThe envelope binds:\n\n- the exact normalized upstream release and release-lock roots;\n- the downstream repository, channel, base ref, expected base SHA, managed\n branch, lock path, and propagation key;\n- exact parent and child `kungfu.assignment-graph.work-ref/v1` values derived\n from the immutable release and downstream plan;\n- either a pending Family binding or one exact\n `kungfu.work-control.initiative-family-state/v2` coordinate;\n- capture-only or end-to-end execution authority, including an active typed\n execution-Warrant reference for execution;\n- explicit publish-to-production intent, deterministic commands, canonical\n ordered stages, a recovery cursor, stage receipts, supersession policy, and\n a content root.\n\nThe ordered stages are:\n\n```text\nmaterialize -> verify-release -> push-branch -> pull-request -> preview\n-> independent-review -> protected-merge -> staging -> production-release\n-> production-deploy -> online-readback -> complete\n```\n\n`pull-request` and `protected-merge` are intermediate states. Only exact online\nreadback followed by an accepted Work Control Decision can record `complete`.\nEvery state transition uses expected-old fencing against the current work\ncontent root. An identical initial envelope has the same work id and root;\nnewer releases receive distinct propagation keys and must name an explicit\nsuperseded work root when they replace unfinished work.\n\nThe context has this shape (roots abbreviated here only for readability):\n\n```json\n{\n \"parentWorkRef\": {\n \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n \"workspace_identity_root\": \"sha256:<64 hex>\",\n \"object_kind\": \"initiative\",\n \"subject\": \"paper-publication\",\n \"version_root\": \"sha256:<64 hex>\",\n \"cut_root\": \"sha256:<64 hex>\"\n },\n \"childWorkRef\": {\n \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n \"workspace_identity_root\": \"sha256:<64 hex>\",\n \"object_kind\": \"assignment\",\n \"subject\": \"site-propagation\",\n \"version_root\": \"sha256:<64 hex>\",\n \"cut_root\": \"sha256:<64 hex>\"\n },\n \"familyState\": {\n \"schema\": \"kungfu.work-control.initiative-family-state/v2\",\n \"stateRoot\": \"sha256:<64 hex>\",\n \"v1ProjectionRoot\": \"sha256:<64 hex>\",\n \"typedBindingRoot\": \"sha256:<64 hex>\",\n \"factWorld\": \"<owning fact world>\",\n \"cutRoot\": \"sha256:<64 hex>\"\n },\n \"authority\": {\n \"mode\": \"capture-only\",\n \"publishToProduction\": false,\n \"allowedActions\": [],\n \"executionPrincipal\": null,\n \"sourceControlPrincipal\": null,\n \"executionWarrant\": null\n },\n \"supersedesWorkRoot\": \"\"\n}\n```\n\nAutomatic capture emits deterministic Buildchain-owned release and propagation\nWorkRefs, leaves `workControl.bindingState` as `pending`, emits no Family State\nor Warrant, and performs no downstream write. Claiming that unit supplies the\nexact Family State v2 coordinate and active Warrant while preserving the work\nidentity. An executing input must carry an active Warrant at the same Family\nState fact world and cut, explicit production intent, and the complete supported\naction set. It also binds the acting Agent principal and the source-control\nprincipal that authors the PR. Buildchain never invents external Work Control\nauthority.\n\nA managed Paper opts into automatic capture with a thin, source-controlled\n`.buildchain/release-propagation.json`. The sealed release workflow reads that\nexact file from the released Paper SHA only after npm, tag, Passport, and\npublication evidence agree. It emits one paused work artifact per declared\ntarget; publication itself does not open a Site PR.\n\n```json\n{\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-paper-release-propagation\",\n \"sourceNode\": \"paper-example\",\n \"graph\": {\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n \"nodes\": [],\n \"edges\": []\n },\n \"targets\": [\"site-libkungfu-dev\"]\n}\n```\n\nA managed npm package uses the parallel generic contract and passes its path to\nthe release-candidate promotion workflow:\n\n```json\n{\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-package-release-propagation\",\n \"sourceNode\": \"kfd\",\n \"graph\": {\n \"schemaVersion\": 1,\n \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n \"nodes\": [],\n \"edges\": []\n },\n \"targets\": [\"site-libkungfu-dev\"]\n}\n```\n\n```yaml\nwith:\n release-propagation-config-path: .buildchain/release-propagation.json\n```\n\nThe config is read with `git show` from the exact finalized release SHA. Its\nroot fields, graph fields, nodes, edges, targets, and execution profiles reject\nunknown fields. After npm publication and the public GitHub Release are\ncomplete, Buildchain independently reads npm `version`, `dist.integrity`, and\n`gitHead`, resolves annotated Git tags to their commit, downloads the public\n`buildchain.release.json` asset, and compares its bytes with the finalized\nPassport. Only an exact source SHA, tag target, npm `gitHead`, package version,\nintegrity, and Passport digest can produce the capture artifact. The promotion\noutput `release-propagation-work-artifact` names the restart-safe artifact set.\nNo downstream checkout, branch, or pull request is created by this step.\n\nEach graph target owns an exact GitHub web-surface execution profile: workflow,\nbase and managed branch, lock path, consumer commands, production status URL,\nand production artifact readback URLs. The sealed workflow rejects extra config\nfields, unknown targets, or a target whose base revision cannot be resolved.\n\nThe reusable workflow keeps its prior behavior when `agent-work-mode` is\n`legacy` (the default). Managed Paper callers set `capture-only`; an Agent later\nclaims the emitted artifact and resumes from its machine-readable `next_action`.\n\nAgent entrypoints are machine-readable and restart-safe:\n\n```bash\nbuildchain release-propagation work create ... --output work.json --json\nbuildchain release-propagation work status --work work.json --json\nbuildchain release-propagation work resume --work work.json --json\nbuildchain release-propagation work claim ... --output successor.json --json\nbuildchain release-propagation work receipt ... --output receipt.json --json\nbuildchain release-propagation work record ... --output successor.json --json\nbuildchain release-propagation work repair ... --output successor.json --json\nbuildchain release-propagation work complete ... --output successor.json --json\n```\n\nKnown operational races (`stale-branch`, `expected-old-mismatch`,\n`lockfile-drift`, `failed-check`, `interrupted-execution`, and `ci-delay`) return\na retryable repair action. Semantic ambiguity, missing credentials, policy\nexpansion, and unknown failures stop at `needs-decision`. Release-contract\nmismatch, immutable-artifact conflict, and destructive recovery stop at a hard\nsafety gate. Evidence locators containing signed or credential parameters are\nrejected.\n\nSuccessful stage receipts are typed, not generic progress notes. In particular,\nthe pushed-branch receipt hashes the full expected-old branch reconciliation;\nreview binds an approved GitHub review and must come from an identity distinct\nfrom both the acting Agent and PR author; production deployment carries release,\nlock, deployed artifact, expected readback digest, and rollback coordinates; and\nonline readback must cover the exact execution-profile URLs with HTTP 200,\nobserved non-zero bytes, exact deployed Git revision, and matching release and\nartifact digests. The final receipt binds the accepted Work Control Decision\nroot.\n\n## Reusable Workflow\n\nUpstream repositories can call\n`.github/workflows/release-propagation.yml@v3` after release finalization:\n\n```yaml\njobs:\n propagate-site:\n uses: kungfu-systems/buildchain/.github/workflows/release-propagation.yml@v3\n with:\n buildchain-ref: v3\n graph-json: ${{ needs.release.outputs.propagation-graph-json }}\n upstream-release-json: ${{ needs.release.outputs.upstream-release-json }}\n downstream-target: site-libkungfu-dev\n downstream-repository: kungfu-systems/site-libkungfu-dev\n downstream-base-ref: dev/v2/v2.7\n downstream-update-command: >-\n node scripts/paper-propagation.cjs consume\n --lock \"$BUILDCHAIN_PROPAGATION_LOCK_PATH\"\n && corepack pnpm install --lockfile-only --ignore-scripts\n downstream-prepare-command: pnpm install --frozen-lockfile --ignore-scripts\n downstream-verify-command: pnpm run check\n dry-run: false\n secrets:\n propagation-token: ${{ secrets.BUILDCHAIN_PROMOTION_TOKEN }}\n```\n\nThe downstream branch name may be reused across upstream releases. Before\nreplacing an existing managed branch, the workflow reads its exact remote SHA\nand pushes with an explicit `--force-with-lease=<ref>:<sha>`. A surviving branch\nfrom a merged PR is therefore reconciled without manual deletion, while a\nconcurrent writer makes the lease fail closed. The controller receipt includes a\n`propagation-branch-reconciliation` evidence file recording the branch, observed\nremote SHA, pushed SHA, lease mode, and the deterministically created or updated\nopen PR.\n\nThe workflow checks out the Buildchain runtime selected by\n`buildchain-repository` and `buildchain-ref` into `.buildchain/runtime`, invokes\nthat runtime for the propagation plan and lock write, then checks out the\ndownstream repository and writes the exact lock. If\n`downstream-update-command` is set, Buildchain runs that consumer-owned command\nafter writing the lock and exposes the exact lock path, lock SHA-256,\npropagation key, branch, and upstream release JSON as\n`BUILDCHAIN_PROPAGATION_*` environment variables. The command is part of the\ndownstream PR diff; it is not a deployment hook.\n\nA consumer that must perform further deterministic preparation can declare\n`downstream-prepare-command`. The command receives\n`BUILDCHAIN_UPSTREAM_PACKAGE_NAME`, `BUILDCHAIN_UPSTREAM_PACKAGE_VERSION`, and\n`BUILDCHAIN_UPSTREAM_RELEASE_LOCK`. After preparation, Buildchain refreshes an\nexisting `<!-- buildchain:badges:start -->` README block by default. Consumers\ncan disable that step with `refresh-managed-readme-badges: false`.\n\n`downstream-verify-command` runs against the final tree before any commit or\npush, so consumers can use the same check as their PR workflow. Update,\npreparation, badge refresh, and verification failures all fail closed. The\nworkflow stages the complete deterministic result, signs the propagation\ncommit with DCO, and then opens or updates the PR. With no agent work context,\nthe reusable workflow retains this backward-compatible PR boundary. With an\nexecuting work context, it records materialization, verification, branch, and\nPR receipts and returns `preview` as the next action; the authorized Agent then\ncontinues through the downstream repository's normal protected review,\npublication, deployment, and readback entrypoints. A byte-identical rerun is an\nexplicit successful no-op, never a synthetic completion.\n\nFor unreleased runtime validation, keep the caller's reusable workflow reference\non `@v3` and pass a temporary train ref through `buildchain-ref`.\n\n## kfd to site-libkungfu-dev\n\nFor `kfd -> site-libkungfu-dev`, the graph should preserve channels:\n\n- a `kfd` alpha release produces a downstream alpha lock and downstream alpha\n publication consumes the exact `@kungfu-tech/kfd@...-alpha.N` package;\n- a `kfd` stable release produces a downstream release lock and downstream\n stable publication consumes the exact stable package.\n\nThis keeps the site synchronized to the package truth without allowing the site\nto drift onto a floating npm dist-tag."
|
|
3394
3399
|
},
|
|
3395
3400
|
{
|
|
3396
3401
|
"id": "manual:reusable-build-surface",
|
|
@@ -4343,7 +4348,7 @@
|
|
|
4343
4348
|
"path": "docs/auditable-demo.md",
|
|
4344
4349
|
"plane": "verify",
|
|
4345
4350
|
"exists": true,
|
|
4346
|
-
"digest": "sha256:
|
|
4351
|
+
"digest": "sha256:4d32c82b652decfbb26b441c203fe34e70daa86022bb4baed9da02a5d6cf5831"
|
|
4347
4352
|
},
|
|
4348
4353
|
{
|
|
4349
4354
|
"id": "install",
|
|
@@ -4407,7 +4412,7 @@
|
|
|
4407
4412
|
"path": "docs/release-propagation.md",
|
|
4408
4413
|
"plane": "use",
|
|
4409
4414
|
"exists": true,
|
|
4410
|
-
"digest": "sha256:
|
|
4415
|
+
"digest": "sha256:3b7a2a0437f8a3a4e5cff7e05a2a8c427be597d85e93d49d5e35ba2a2b089afc"
|
|
4411
4416
|
},
|
|
4412
4417
|
{
|
|
4413
4418
|
"id": "readme-badges",
|
|
@@ -4511,7 +4516,7 @@
|
|
|
4511
4516
|
"path": "docs/node-api-reference.md",
|
|
4512
4517
|
"plane": "use",
|
|
4513
4518
|
"exists": true,
|
|
4514
|
-
"digest": "sha256:
|
|
4519
|
+
"digest": "sha256:38f051f579fb93dc7d8b4f2c70acd622c020e867394344b5e932568cd8d2ad83"
|
|
4515
4520
|
},
|
|
4516
4521
|
{
|
|
4517
4522
|
"id": "build-facts",
|
|
@@ -4559,7 +4564,7 @@
|
|
|
4559
4564
|
"path": "docs/publish-transaction.md",
|
|
4560
4565
|
"plane": "verify",
|
|
4561
4566
|
"exists": true,
|
|
4562
|
-
"digest": "sha256:
|
|
4567
|
+
"digest": "sha256:3a9ef099d5d93d9b558c7b6a0aa4403dfcce1479ce5d6fc36ecb3e34cdd5bb6d"
|
|
4563
4568
|
},
|
|
4564
4569
|
{
|
|
4565
4570
|
"id": "release-governance",
|
|
@@ -4567,7 +4572,7 @@
|
|
|
4567
4572
|
"path": "docs/release-governance.md",
|
|
4568
4573
|
"plane": "why",
|
|
4569
4574
|
"exists": true,
|
|
4570
|
-
"digest": "sha256:
|
|
4575
|
+
"digest": "sha256:96d78f800cd7d43d3a47a11863d4813711e360418ba33a4284688389c7e4b70c"
|
|
4571
4576
|
},
|
|
4572
4577
|
{
|
|
4573
4578
|
"id": "release-flow",
|
|
@@ -4575,7 +4580,7 @@
|
|
|
4575
4580
|
"path": "docs/release-flow.md",
|
|
4576
4581
|
"plane": "verify",
|
|
4577
4582
|
"exists": true,
|
|
4578
|
-
"digest": "sha256:
|
|
4583
|
+
"digest": "sha256:dc54b8a264489341984ca6157b07d1956e934366f937b7412a21df7f025d2d8d"
|
|
4579
4584
|
},
|
|
4580
4585
|
{
|
|
4581
4586
|
"id": "runtime-train-validation",
|